Privacy Policy

This Privacy Policy describes how okeslot ("okeslot," "we," "us," or "our"), the online casino and gaming platform accessible at okeslot.bio, collects, uses, stores, discloses, and protects the personal data of individuals ("you," "your," or "Player") who register for an Account or otherwise access the okeslot platform.

okeslot is committed to protecting the privacy and personal data of all Filipino players and processing personal information only in accordance with applicable Philippine data protection law, principally Republic Act No. 10173 (the Data Privacy Act of 2012, or "DPA") and its Implementing Rules and Regulations ("IRR"), as administered by the National Privacy Commission of the Philippines ("NPC").

By registering an Account with okeslot or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Privacy Policy should be read alongside the okeslot Terms & Conditions, which govern the overall use of the Platform.

For the purposes of the Philippine Data Privacy Act of 2012, okeslot acts as the Personal Information Controller ("PIC") with respect to the personal data collected from registered Players and visitors to the Platform.

As Personal Information Controller, okeslot determines the purposes for which personal data is collected and the manner in which it is processed. okeslot has designated a Data Protection Officer ("DPO") responsible for ensuring ongoing compliance with the DPA and for responding to data subject rights requests. Contact details for the DPO are provided in Section 14 of this Policy.

Where okeslot engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, and cloud infrastructure operators — those parties act as Personal Information Processors and are bound by data processing agreements that require them to process personal data only on okeslot's documented instructions and in compliance with the DPA.

okeslot collects the following categories of personal data in connection with the operation of the Platform:

• Full legal name (as it appears on a government-issued ID);
• Date of birth (for age verification — players must be 21 or older);
• Philippine mobile number;
• Email address;
• Residential address in the Philippines;
• Username and encrypted password;
• Copies of government-issued identification documents submitted during KYC verification (e.g., Philippine passport, driver's license, SSS card, PhilHealth ID, national ID).

• GCash or PayMaya account identifiers (partial, masked where possible);
• Bank account details where bank transfer is used as a payment method;
• Deposit and withdrawal history, including amounts, dates, and payment method used;
• Account balance and transaction logs.

• Game session logs, including games played, wagers placed, and outcomes;
• Bonus usage history and wagering requirement progress;
• Responsible gaming settings and limit history;
• Support interactions, chat logs, and complaint records.

• IP address and approximate geolocation at login;
• Device type, operating system, and browser information;
• Session timestamps and duration;
• Cookies and similar tracking technologies (see Section 8).

okeslot collects personal data through the following channels:

• Directly from you — when you register an Account, complete KYC verification, initiate a deposit or withdrawal, contact customer support, or update your Account settings;
• Automatically — through server logs, session tracking, and cookies when you access the Platform, regardless of whether you are logged in;
• From third-party service providers — identity verification results from KYC providers, fraud risk scores from anti-fraud systems, and transaction confirmations from GCash and PayMaya;
• From regulatory or law enforcement sources — where okeslot is required by Philippine law to obtain information about a Player in connection with an investigation or compliance obligation.

okeslot processes personal data for the following specific, legitimate purposes:

• Account creation and management — to register, maintain, and manage your okeslot Account;
• Identity and age verification — to confirm that you are at least twenty-one (21) years of age and to verify your identity as required under applicable regulations;
• Payment processing — to process deposits and withdrawals via GCash, PayMaya, and other supported Philippine payment methods;
• Anti-money laundering (AML) and fraud prevention — to monitor transactions for suspicious activity, comply with AMLA obligations, and protect the Platform from fraudulent use;
• Platform operation and game delivery — to provide access to casino games, record game outcomes, and maintain the integrity of the Platform;
• Customer support — to respond to inquiries, investigate complaints, and resolve disputes;
• Responsible gaming — to implement and enforce deposit limits, session tracking, and self-exclusion measures where requested or required;
• Legal compliance — to satisfy obligations under Philippine law, including the DPA, AMLA, and applicable gaming regulations;
• Security and fraud prevention — to detect unauthorized Account access, prevent multiple account creation, and protect Players' funds and data;
• Service improvement — to analyze aggregate and anonymized gameplay and usage data for the purpose of improving the Platform's performance and content.

okeslot does not use personal data for profiling or automated decision-making that produces legal or similarly significant effects on Players without human review.

Under the Philippine Data Privacy Act of 2012, processing of personal data must be based on at least one of the following lawful criteria. okeslot relies on the following bases for its data processing activities:

• Consent — you have provided freely given, specific, informed, and unambiguous consent to the processing of your personal data when registering an Account and accepting this Privacy Policy;
• Performance of a contract — processing is necessary to perform our obligations under the okeslot Terms & Conditions, including Account management and payment processing;
• Compliance with a legal obligation — processing is necessary to comply with applicable Philippine law, including AMLA reporting obligations, regulatory record-keeping requirements, and lawful orders from Philippine authorities;
• Legitimate interests — processing is necessary for okeslot's legitimate business interests, including fraud prevention, platform security, and responsible gaming enforcement, provided those interests are not overridden by your privacy rights.

For processing of sensitive personal information (such as government ID documents), okeslot relies on your explicit consent, provided at the time of KYC verification, or on processing that is necessary to comply with a legal obligation.

okeslot does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data may be shared with the following categories of recipients only to the extent necessary for the stated purpose:

GCash (G-Xchange Inc.), PayMaya (Maya Philippines Inc.), and other authorized Philippine payment processors receive transaction data necessary to execute deposits and withdrawals. These providers process data under their own privacy policies and applicable financial services regulations.

Licensed identity verification service providers receive copies of identity documents and biographic data submitted during KYC verification for the purpose of validating your identity and age in accordance with our compliance obligations.

Transaction monitoring and anti-fraud platforms receive transaction metadata and risk signals to identify potentially fraudulent activity or transactions that may require reporting under the Anti-Money Laundering Act of 2001 (as amended).

okeslot may be required to disclose personal data to the National Privacy Commission, the Anti-Money Laundering Council (AMLC), Philippine law enforcement agencies, or courts of competent jurisdiction in response to lawful orders, regulatory inquiries, or legal proceedings.

okeslot uses enterprise-grade cloud hosting infrastructure to store and process Platform data. Infrastructure providers operate as Personal Information Processors under data processing agreements that prohibit independent use of okeslot data and require compliance with the DPA.

okeslot uses cookies and similar tracking technologies to operate the Platform, maintain session security, and analyze aggregate usage patterns. The following categories of cookies are used:

• Strictly necessary cookies — required for Platform functionality, including maintaining your login session, enforcing security controls, and load balancing. These cannot be disabled without breaking the Platform;
• Functional cookies — used to remember your preferences, such as your preferred language, responsible gaming settings, and interface configuration;
• Analytics cookies — used to collect aggregate, anonymized data on Platform usage patterns, page performance, and game load times for the purpose of improving the Platform. Individual player behavior is not linked to identifiable profiles for advertising purposes;
• Security cookies — used to detect and prevent fraudulent login attempts, multi-account creation, and unauthorized access.

okeslot does not use advertising or retargeting cookies that track you across third-party websites. You may configure your browser to block non-essential cookies; however, doing so may affect some Platform functionality. Strictly necessary and security cookies cannot be disabled.

okeslot retains personal data for the minimum period necessary to fulfill the purpose for which it was collected, comply with applicable legal obligations, and resolve any pending disputes or complaints. The following general retention periods apply:

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Where data must be retained beyond these periods due to an ongoing legal proceeding or regulatory investigation, it will be retained only until that matter is fully resolved.

okeslot implements a layered set of technical and organizational security measures to protect personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and okeslot servers;
• Encryption at rest for sensitive data categories including identity documents and financial information;
• Access controls — personnel access to personal data is restricted to those with a documented need to access it for their role, enforced through role-based access control systems;
• Two-factor authentication requirements for all internal systems that store or process personal data;
• Regular security assessments including vulnerability scanning and penetration testing of the Platform infrastructure;
• Incident response procedures — okeslot maintains a documented personal data breach response procedure. In the event of a breach that poses a risk to Player rights, okeslot will notify the National Privacy Commission within 72 hours and affected Players without undue delay, in accordance with the DPA;
• Staff training — all okeslot personnel who handle personal data receive regular data protection training.

While okeslot takes all reasonable steps to protect your personal data, no online system can guarantee absolute security. You are responsible for maintaining the security of your Account credentials. If you suspect that your Account has been compromised, please contact okeslot support immediately via the Support page.

As a data subject under the Philippine Data Privacy Act of 2012, you hold the following rights with respect to your personal data held by okeslot:

To exercise any of these rights, please submit a written request to okeslot's Data Protection Officer using the contact details in Section 14. We will respond to data subject rights requests within fifteen (15) business days of receipt. We may request proof of identity before processing your request to protect against unauthorized access to your data.

okeslot does not knowingly collect personal data from persons under the age of twenty-one. Age verification is performed during Account registration and, where necessary, through documentary KYC verification. Any Account discovered to belong to a person under 21 will be immediately suspended, all balances (including any winnings) will be withheld pending investigation, and the matter may be reported to relevant Philippine regulatory or law enforcement authorities.

If a parent or guardian believes that a minor may have accessed the okeslot Platform using their Account or by creating an Account of their own, they should contact okeslot support immediately via the Support page. okeslot will investigate and take appropriate action without delay.

okeslot may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or regulatory guidance from the National Privacy Commission. The date of the most recent update is displayed at the top of this document.

Where material changes are made to this Policy — changes that significantly affect the scope of data collection, the purposes of processing, or your rights as a data subject — okeslot will notify registered Players via email and/or a prominent notice on the Platform no fewer than fourteen (14) days prior to the change taking effect. For non-material updates, the revised Policy will be published on this page with an updated effective date.

Your continued use of the okeslot Platform after the effective date of any Policy update constitutes your acceptance of the revised Privacy Policy. If you do not agree to the updated terms, you should close your Account before the effective date by contacting our support team.

For all data privacy inquiries, data subject rights requests, concerns about this Privacy Policy, or to report a suspected data breach, please contact okeslot's designated Data Protection Officer through the following channels:

• Live Chat Support: Available 24/7 via the Support page — mark your message as "Data Privacy Request" so it is directed to the DPO queue;
• Email (DPO): [email protected] — please use the subject line "Data Privacy Request" and include your registered Account username and a description of your request. Written requests receive a formal written response within fifteen (15) business days.

Players who are not satisfied with okeslot's response to a data privacy concern may escalate their complaint to the National Privacy Commission of the Philippines (NPC). The NPC oversees compliance with the Data Privacy Act of 2012 and accepts complaints from Philippine data subjects. Information on how to file a complaint with the NPC is published on the Commission's official website.

okeslot takes all data privacy inquiries and complaints seriously and is committed to resolving them in good faith and within the timeframes prescribed by the DPA and its IRR.