oke2 Privacy Policy

oke2 is committed to protecting the privacy and personal data of all users in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its implementing rules and regulations issued by the National Privacy Commission of the Philippines.

This Privacy Policy explains:

• What personal data oke2 collects from you;
• How we collect, use, and process your personal data;
• The legal basis for processing your data;
• Who we share your data with and under what circumstances;
• How we protect your data from unauthorized access;
• Your rights under Philippine data protection law;
• How long we retain your personal data;
• How to exercise your privacy rights or make a complaint.

This Privacy Policy should be read in conjunction with oke2's Terms & Conditions. Where there is any conflict between these two documents, the Privacy Policy shall prevail with respect to matters of data protection.

For the purposes of the Data Privacy Act of 2012, the data controller responsible for your personal data is oke2, operating under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR).

oke2 is the entity that determines the purposes and means of processing your personal data. Where oke2 engages third-party service providers to process personal data on its behalf (such as payment processors or identity verification services), those entities act as data processors under the instruction and oversight of oke2.

For any privacy-related inquiries, complaints, or requests to exercise your data protection rights, please contact oke2's Data Protection Officer using the contact details provided in Section 14 of this Privacy Policy.

oke2 collects the following categories of personal data from players during registration, account verification, and ongoing use of the platform:

3.1 Registration Data

When you create an oke2 account, you provide:

• Full name (as it appears on your government-issued ID);
• Date of birth;
• Philippine mobile number;
• Email address;
• Username and password (password is stored in hashed, encrypted form);
• Province or city of residence.

3.2 Identity Verification Data (KYC)

To comply with PAGCOR licensing requirements and Philippine anti-money laundering regulations, oke2 collects:

• Copies of government-issued photo identification (Philippine Passport, UMID, Driver's License, SSS ID, PhilSys National ID, or PRC ID);
• Proof of address (if requested for additional verification);
• Selfie photograph for identity matching (in certain cases).

3.3 Financial Transaction Data

• Deposit and withdrawal transaction records;
• Payment method details (GCash mobile number, Maya account number, bank account details for withdrawals);
• Transaction amounts, dates, and times;
• Wagering history and game play records.

3.4 Technical Data

• IP address and approximate geographic location;
• Device type, operating system, and browser type;
• Login timestamps and session duration;
• Cookies and similar tracking technologies (see Section 10).

3.5 Communications Data

• Records of customer support interactions via live chat or email;
• Feedback, complaints, or inquiries submitted through oke2's communication channels.

oke2 uses your personal data for the following purposes:

4.1 Account Management

To create and maintain your oke2 account, authenticate your identity during login, and provide access to gaming services.

4.2 Regulatory Compliance

To verify that you meet the PAGCOR-mandated 21+ age requirement; to comply with Know Your Customer (KYC) and anti-money laundering (AML) obligations under Philippine law; and to report suspicious transactions to the Anti-Money Laundering Council (AMLC) or PAGCOR when required.

4.3 Payment Processing

To process deposits, withdrawals, and refunds; to verify that payment accounts belong to you; and to maintain accurate financial transaction records for accounting and audit purposes.

4.4 Fraud Prevention and Security

To detect and prevent fraudulent activity, money laundering, collusion, multi-accounting, and other prohibited conduct; to protect oke2's systems and services from unauthorized access; and to safeguard other players from harm.

4.5 Customer Support

To respond to your inquiries, troubleshoot technical issues, resolve disputes, and provide assistance with account-related matters.

4.6 Game Operations

To record your wagers, calculate winnings, apply bonus terms, and maintain accurate records of all game outcomes for fairness auditing and dispute resolution.

4.7 Responsible Gaming

To monitor for signs of problem gambling behavior; to enforce deposit limits, session time reminders, and self-exclusion requests; and to comply with oke2's responsible gaming obligations under PAGCOR regulations.

4.8 Marketing Communications (With Consent)

To send promotional offers, bonus notifications, and personalized game recommendations to players who have explicitly opted in to receiving marketing communications from oke2. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account settings or by contacting our support team.

oke2 processes your personal data under one or more of the following lawful bases as recognised under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform the contract between you and oke2 — specifically, to provide gaming services, process transactions, and manage your account.
• Legal Obligation: Processing is required to comply with PAGCOR licensing conditions, anti-money laundering legislation, tax obligations, and other applicable Philippine laws.
• Legitimate Interest: Processing is necessary for oke2's legitimate interests in preventing fraud, ensuring platform security, and protecting other players — provided these interests are not overridden by your data protection rights.
• Consent: For marketing communications and non-essential cookies, oke2 relies on your freely given, specific, and informed consent. You have the right to withdraw this consent at any time.

oke2 does not sell, rent, or trade your personal data to any third party for commercial purposes. However, we may share your personal data with the following categories of recipients under strictly defined circumstances:

6.1 Regulatory Authorities

oke2 is required by law to share personal data and transaction records with PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other Philippine government bodies when legally required to do so. This sharing is non-negotiable and forms part of our regulatory obligations as a PAGCOR-licensed operator.

6.2 Payment Service Providers

When you make a deposit or withdrawal, your transaction details are shared with the relevant payment processor — such as GCash (G-Xchange, Inc.), Maya (Voyager Innovations), BPI, BDO, Metrobank, or other payment partners. These providers process your payment data under their own privacy policies and applicable Philippine financial regulations.

6.3 Identity Verification Services

To fulfill KYC obligations, oke2 may share your identification documents and personal details with accredited identity verification service providers. These providers are contractually obligated to process your data only for the specific purpose of verifying your identity on oke2's behalf.

6.4 Technology and Infrastructure Partners

oke2 uses third-party service providers for cloud hosting, cybersecurity, customer support software, and game content delivery. These partners act as data processors under written data processing agreements that require them to maintain confidentiality and apply appropriate security measures.

6.5 Law Enforcement

oke2 may disclose personal data to law enforcement authorities where required by a lawful court order, subpoena, or other legal process, or where we have a good-faith belief that disclosure is necessary to prevent imminent harm, fraud, or criminal activity.

oke2 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security framework includes:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and oke2's servers is encrypted using 256-bit TLS/SSL encryption;
• Password Hashing: Passwords are stored using industry-standard one-way hashing algorithms — oke2 staff cannot view your plaintext password under any circumstances;
• Access Controls: Personal data is accessible only to oke2 staff who require it for their specific job function, governed by role-based access controls;
• Two-Factor Authentication: OTP-based verification protects account login and withdrawal requests;
• Regular Security Audits: oke2's systems are subject to regular internal and third-party security assessments;
• Intrusion Detection: Real-time monitoring systems are in place to detect and respond to unauthorized access attempts.

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, oke2 will notify the National Privacy Commission within 72 hours of discovery, as required by the Data Privacy Act of 2012. Affected individuals will be notified promptly where the breach poses a high risk to their rights.

oke2 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account Data: Retained for the duration of your active account, plus a minimum of five (5) years following account closure, in accordance with PAGCOR requirements and Philippine AML legislation;
• KYC Documents: Retained for a minimum of five (5) years after the end of the customer relationship, as required by the Anti-Money Laundering Act;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction;
• Customer Support Records: Retained for three (3) years from the date of the support interaction;
• Marketing Consent Records: Retained until you withdraw consent, plus three (3) years thereafter to demonstrate prior consent;
• Technical Logs: Retained for a maximum of twelve (12) months unless required longer for active security investigations.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with oke2's data disposal procedures.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by oke2:

• Right to Be Informed: You have the right to be informed about how your personal data is collected and processed. This Privacy Policy fulfils this obligation.
• Right of Access: You may request a copy of the personal data oke2 holds about you, along with information about how it is being used.
• Right to Correction: You may request that inaccurate or incomplete personal data be corrected. You can update most of your profile information directly through your oke2 account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our regulatory retention obligations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to oke2, where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Lodge a Complaint: You have the right to file a complaint with the National Privacy Commission (NPC) if you believe oke2 has violated your data protection rights.

To exercise any of the above rights, please submit a written request to oke2's Data Protection Officer at [email protected] with the subject line "Privacy Rights Request." We will respond within fifteen (15) business days of receiving your request, as required by NPC regulations.

oke2 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain your login session, and gather aggregate analytics data. The following types of cookies are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the oke2 platform to function correctly. They maintain your login session, remember your preferences, and ensure security features work properly. These cookies cannot be disabled as they are necessary to provide the service you have requested.

10.2 Functional Cookies

These cookies remember your language preference, display settings, and other account customizations. Disabling functional cookies may affect the quality of your experience on oke2.

10.3 Analytics Cookies

With your consent, oke2 uses analytics cookies to understand how players interact with the platform — which features are most used, where players encounter difficulty, and how the platform can be improved. Analytics data is collected in aggregate and does not identify individual players.

10.4 Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings. Most modern browsers allow you to refuse cookies, clear existing cookies, or be notified when new cookies are set. Please note that disabling cookies may affect certain features of the oke2 platform.

oke2's services are strictly intended for individuals who are 21 years of age or older in accordance with PAGCOR regulations. oke2 does not knowingly collect personal data from individuals under the age of 21.

If oke2 discovers or has reasonable grounds to believe that personal data has been collected from a person under 21 years of age, we will immediately take steps to delete that data and close the associated account. Any funds held in an underage account will be handled in accordance with PAGCOR's requirements for underage gambling incidents.

If you believe that oke2 may have inadvertently collected data from a person under 21, please notify us immediately at [email protected] so that we can take prompt corrective action.

oke2 primarily processes and stores personal data within the Philippines. However, certain third-party service providers engaged by oke2 — such as cloud infrastructure providers, cybersecurity firms, or game content providers — may be located outside the Philippines.

Where personal data is transferred to entities located outside the Philippines, oke2 ensures that appropriate safeguards are in place, including:

• Contractual data transfer agreements that impose data protection standards equivalent to those required by the Data Privacy Act of 2012;
• Transfers only to jurisdictions with adequate data protection frameworks as recognised by the National Privacy Commission;
• Additional technical safeguards, such as data encryption at rest and in transit, for all cross-border transfers of sensitive personal data.

By using the oke2 platform, you consent to the transfer of your personal data in the manner described in this section, subject to the safeguards above.

oke2 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. Any material changes to this Privacy Policy will be communicated to registered players via the email address on file, or through a prominent notice on the oke2 platform, at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how oke2 protects your data.

Continued use of the oke2 platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you should cease using the platform and may request closure of your account.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way oke2 handles your personal data, please contact our Data Protection Officer through the following channels:

• Email: [email protected] (subject line: "Privacy Rights Request")
• Live Chat: Available 24/7 through the oke2 platform
• Response Time: We will acknowledge your request within 3 business days and provide a full response within 15 business days

If you are not satisfied with oke2's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC handles complaints from data subjects about potential violations of the Data Privacy Act of 2012.

oke2 takes all privacy complaints seriously. Our Data Protection Officer is a designated, qualified individual responsible for overseeing data protection strategy and implementation across the oke2 platform, and for ensuring compliance with the Data Privacy Act and its implementing regulations.