Privacy Policy
oke3 Online Casino Philippines

1.1 oke3 is committed to protecting the privacy and personal data of all individuals who use its platform, including registered players, applicants, and visitors. This Policy applies to all personal information processed in connection with the oke3 platform, including information collected through the oke3.app website, browser-based gaming interface, customer support channels, and payment processing interactions.

1.2 The oke3 platform is designed for Filipino players and primarily serves users residing in or accessing the platform from the Republic of the Philippines. As such, Philippine data protection law — in particular Republic Act No. 10173 and the National Privacy Commission's implementing issuances — forms the primary legal framework for this Policy.

1.3 This Policy should be read together with the oke3 Terms and Conditions. In the event of any conflict between this Policy and the Terms and Conditions with respect to data privacy matters, this Policy shall prevail.

2.1 Data Controller. oke3 acts as the Personal Information Controller (PIC) in respect of personal data processed through the platform. As PIC, oke3 determines the purposes and means by which your personal data is processed.

2.2 Data Privacy Officer. oke3 has designated a Data Privacy Officer (DPO) to oversee compliance with the Data Privacy Act of 2012 and this Policy. The DPO can be contacted at:

2.3 Where oke3 engages third-party service providers (e.g. game providers, payment processors) who process personal data on its behalf, such providers act as Personal Information Processors (PIPs) under binding data processing agreements that impose equivalent privacy obligations to those described in this Policy.

3.1 oke3 collects the following categories of personal data in connection with the operation of the platform:

3.2 oke3 does not collect sensitive personal information as defined under the Data Privacy Act (e.g. health data, political affiliations, religious beliefs) except where strictly required by law, such as documentation of gambling addiction for self-exclusion processing, which is handled with heightened security controls.

4.1 Directly from You. The majority of personal data oke3 holds about you is provided directly by you in the course of registering an account, completing KYC verification, depositing funds, contacting support, or setting responsible gaming preferences on your account.

4.2 Automatically Through Platform Use. Technical data — including IP address, device information, and session metadata — is collected automatically when you access the oke3 platform. This data is collected through server logs, cookies, and similar tracking technologies as described in Section 10.

4.3 From Payment Processors. When you make a deposit or request a withdrawal, oke3 receives transaction confirmation data from payment processors such as GCash (G-Xchange, Inc.) and Maya (PayMaya Philippines, Inc.). oke3 does not store your full e-wallet credentials — only masked identifiers necessary to match transactions to your account.

4.4 From Game Providers. Certified game providers integrated into the oke3 platform transmit gameplay logs and RNG certification data to oke3 servers for record-keeping, dispute resolution, and responsible gaming monitoring purposes.

4.5 From Third-Party Identity Verification Services. Where oke3 uses a third-party KYC service to verify government-issued ID documents, that provider processes identity data on oke3's behalf under a data processing agreement as a Personal Information Processor.

5.1 oke3 uses personal data collected from you for the following purposes:

• Account Management: Creating and maintaining your oke3 account, verifying your identity, and managing your account settings and preferences.
• Platform Service Delivery: Enabling access to and the operation of all games, sports betting markets, payment services, and other features of the oke3 platform.
• Payment Processing: Processing deposits and withdrawals via GCash, Maya, BPI, BDO, and other accepted payment methods; reconciling transaction records; managing your oke3 wallet balance.
• KYC and AML Compliance: Verifying your age (21+ requirement), identity, and source of funds in accordance with PAGCOR requirements and the Philippine Anti-Money Laundering Act (AMLA).
• Fraud and Security: Detecting, investigating, and preventing unauthorised account access, payment fraud, bonus abuse, money laundering, and other prohibited conduct described in the oke3 Terms and Conditions.
• Responsible Gaming: Monitoring gaming patterns for indicators of problem gambling; administering deposit limits, self-exclusion elections, and other responsible gaming tools; fulfilling obligations under PAGCOR's responsible gaming guidelines.
• Customer Support: Responding to your queries, resolving disputes, processing complaints, and maintaining support quality records.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve platform design, game selection, and user experience. Individual player data is not used for marketing analytics without your consent.
• Legal and Regulatory Compliance: Meeting record-keeping obligations under Philippine law, including AMLA transaction record retention and PAGCOR reporting requirements.
• Marketing (with Consent Only): Sending promotional communications — such as bonus offers, new game announcements, and oke3 platform updates — only where you have provided explicit consent. You may withdraw this consent at any time.

6.1 Under the Philippine Data Privacy Act of 2012, oke3 processes personal data on the following legal bases:

• Contract Performance: Processing necessary to fulfil oke3's contractual obligations to you under the Terms and Conditions — including account operation, game access, and payment processing.
• Legal Obligation: Processing required to comply with applicable Philippine law, including AMLA record-keeping, PAGCOR regulatory requirements, and age verification obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional marketing communications and, where applicable, enhanced analytics. Consent is sought explicitly and separately, and may be withdrawn at any time without affecting other processing.

7.1 oke3 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Personal data is shared with third parties only in the following circumstances:

7.2 Service Providers (Personal Information Processors)

oke3 engages carefully selected third-party service providers who process data solely on oke3's instructions under binding data processing agreements, including:

• Payment processors: GCash (G-Xchange, Inc.), Maya (PayMaya Philippines, Inc.), BPI, BDO, and other approved payment partners — for transaction processing and fraud prevention.
• Game providers: Licensed game studios such as PG Soft, Pragmatic Play, Jili, and others — for gameplay log transmission and RNG certification data.
• KYC / Identity Verification: Third-party identity verification services used to verify government-issued ID documents during the KYC process.
• Cloud Infrastructure: Hosting and data storage providers operating servers used by the oke3 platform, subject to equivalent data protection standards.
• Customer Support Technology: Live chat platform providers used to deliver 24/7 player support.

7.3 Regulatory Authorities

oke3 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement, or other competent Philippine government authorities where required by law, court order, or in response to a lawful regulatory request.

7.4 Business Transfers

In the event of a merger, acquisition, or transfer of all or substantially all of oke3's business assets, personal data held by oke3 may be transferred to the successor entity. Players will be notified of such a transfer in advance where practicable, and the successor entity will be bound by obligations equivalent to those in this Policy.

8.1 Where personal data is transferred to service providers operating servers or processing facilities outside the Philippines — such as internationally based game providers or cloud infrastructure partners — oke3 ensures that such transfers are subject to appropriate data protection safeguards.

8.2 Safeguards for international transfers include: binding contractual clauses requiring the recipient to implement data protection standards equivalent to those of the Philippine Data Privacy Act; verification that the recipient country's data protection regime provides adequate protection; or the explicit consent of the data subject where permitted.

8.3 oke3 maintains a register of international data transfers and the safeguards applied. Players may request information about specific international transfers by contacting the Data Privacy Officer.

9.1 oke3 retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to applicable legal minimum retention periods. The following retention periods apply:

• Account and identity data: For the duration of the account relationship and five (5) years following account closure, in compliance with AMLA requirements.
• Financial transaction records: A minimum of five (5) years following the date of each transaction, as required under the Anti-Money Laundering Act and its implementing regulations.
• Gaming session logs: Two (2) years from the date of the session, for dispute resolution and regulatory audit purposes.
• Customer support records: Two (2) years from the date of the interaction.
• Marketing consent records: For the duration of the consent and two (2) years following withdrawal of consent.
• Technical / log data: Ninety (90) days, unless extended where relevant to an active security investigation.

9.2 Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised such that it can no longer be linked to an identifiable individual.

10.1 The oke3 platform uses cookies and similar tracking technologies to enable core platform functionality and to improve the user experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function. These include session cookies that maintain your logged-in state and security tokens that protect against cross-site request forgery (CSRF). These cookies cannot be disabled without rendering the platform non-functional.
• Functional Cookies: Remember your preferences such as display language, responsible gaming settings you have configured, and game lobby view preferences.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the platform — which games are most visited, where players encounter friction in the cashier, etc. This data is used solely for platform improvement. Analytics cookies are only placed where you have provided consent.

10.2 oke3 does not use third-party advertising cookies or cross-site behavioural tracking cookies. Your gaming behaviour on oke3 is not shared with advertising networks.

10.3 You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using the platform.

11.1 oke3 implements appropriate technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• SSL/TLS encryption for all data in transit between players' devices and oke3 servers;
• AES-256 encryption for sensitive data at rest, including identity document data and financial identifiers;
• Salted cryptographic hashing of passwords — plain-text passwords are never stored;
• Multi-factor authentication requirements for privileged platform administration access;
• Regular security vulnerability assessments and penetration testing;
• Access controls restricting employee access to personal data to those with a demonstrated operational need;
• Real-time server monitoring for anomalous access patterns indicative of a data breach or intrusion attempt;
• Incident response procedures aligned with the NPC's mandatory breach notification requirements.

11.2 Notwithstanding the security measures described above, no data transmission over the internet or electronic storage system can be guaranteed as completely secure. oke3 cannot warrant absolute security of data but commits to applying industry-standard best practices and responding promptly to any identified security incident.

12.1 As a Data Subject under Republic Act No. 10173, you have the following rights in respect of your personal data held by oke3:

• Right to be Informed: You have the right to be informed of how your personal data is being processed, including the purposes, the data categories collected, and the parties with whom your data is shared — as set out in this Policy.
• Right to Access: You may request a copy of the personal data oke3 holds about you, along with information about how it is being used. oke3 will respond to access requests within fifteen (15) business days.
• Right to Correction: You may request correction of inaccurate, incomplete, or outdated personal data. You may update certain account details directly through your account settings.
• Right to Erasure or Blocking: You may request the deletion or blocking of personal data where the data is no longer necessary for the purpose for which it was collected, where consent has been withdrawn and there is no other legal basis, or where the data was unlawfully obtained. Note that oke3 may be required to retain certain data under Philippine law (e.g. AMLA records) notwithstanding an erasure request.
• Right to Object: You may object to the processing of your personal data where that processing is based on legitimate interests. oke3 will assess whether its legitimate interests override your rights in the specific circumstances.
• Right to Data Portability: Where processing is based on consent or contract, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Damages: You have the right to be indemnified for any damages suffered as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data.
• Right to File a Complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph) if you believe oke3 has violated your data privacy rights.

12.2 To exercise any of the rights described above, contact the oke3 Data Privacy Officer at [email protected]. Please include your registered mobile number and a clear description of your request. oke3 may request identity verification before processing the request, to protect against fraudulent data access requests.

13.1 oke3 applies age verification as part of its registration and KYC process. Where oke3 discovers or has reasonable grounds to believe that a registered user is under 21 years of age, the account will be immediately suspended, all personal data will be deleted in accordance with applicable law, and the matter will be reported to the relevant regulatory authority.

13.2 If you believe a person under 21 years of age has created an account on the oke3 platform, please contact the Data Privacy Officer immediately at [email protected]. oke3 will investigate the report promptly and take appropriate action.

14.1 The oke3 platform may from time to time contain references to third-party services, such as payment provider interfaces. When you interact with a third-party payment service (e.g. the GCash or Maya payment interface), you are subject to that third party's privacy policy and terms of service in addition to this Policy. oke3 is not responsible for the privacy practices of third-party service providers.

14.2 oke3 recommends that you review the privacy policies of any third-party services you use in connection with the oke3 platform — particularly your GCash or Maya account privacy policies — to understand how those providers handle your personal data.

15.1 oke3 reserves the right to update or modify this Privacy Policy at any time. Material changes — such as changes to the categories of data collected, new purposes for processing, or changes to data sharing practices — will be communicated to registered Players by posting a notice on the oke3 platform and, where practicable, by sending a notification to the registered mobile number.

15.2 Minor or clarificatory changes may be made without specific notification but will be reflected in the "Last updated" date at the top of this Policy. We encourage Players to review this Policy periodically to stay informed about how oke3 protects their personal data.

15.3 Continued use of the oke3 platform following the publication of an updated Policy constitutes acceptance of the revised terms. If you do not agree with a material change to this Policy, you may close your account as described in the oke3 Terms and Conditions.

16.1 For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by oke3, please contact our Data Privacy Officer through the following channels:

16.2 If you are not satisfied with oke3's response to a data privacy concern, you may file a complaint with the National Privacy Commission of the Philippines. For further details about the NPC's complaint process, visit the NPC's official website at privacy.gov.ph (external site, not operated by oke3).