oke3 Privacy Policy

oke3 ("oke3," "we," "us," "our") operates the online gaming platform accessible at oke3.org (the "Platform"). We are committed to protecting the privacy and personal data of every player, visitor, and user who interacts with the oke3 platform, in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations issued by the National Privacy Commission ("NPC").

This Privacy Policy ("Policy") explains what personal data oke3 collects about you, why we collect it, how we use and protect it, with whom we share it, how long we keep it, and what rights you have over it. This Policy applies to all personal data collected through the oke3 website, mobile-optimised Platform, live chat support, email correspondence, and any other interaction you have with oke3.

By registering an account, accessing the oke3 Platform, or otherwise providing your personal data to oke3, you acknowledge that you have read and understood this Policy. This Privacy Policy should be read alongside the oke3 Terms & Conditions and Responsible Gaming Policy, both of which form part of the complete agreement governing your use of the Platform.

For the purposes of the Data Privacy Act of 2012 and this Policy, the data controller responsible for the personal data of oke3 players and Platform users is:

oke3 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with the DPA and this Policy. Players wishing to exercise their data rights or raise privacy concerns should direct their requests to the DPO using the contact details provided in Section 18 of this Policy.

oke3 collects the following categories of personal data about you depending on how you interact with the Platform:

• Full legal name as it appears on a government-issued Philippine ID;
• Date of birth (for age verification purposes — must be 21+ under PAGCOR rules);
• Email address;
• Philippine mobile number (used for account verification, OTP, and optional SMS communications);
• Username and encrypted password hash;
• Residential address in the Philippines.

• Copies of government-issued Philippine identification documents (UMID, SSS ID, PhilHealth ID, Driver's License, or Passport);
• Proof of address documents (utility bills, bank statements dated within three months);
• Selfie or facial photograph where required for enhanced identity verification;
• Payment method verification documents (e.g., GCash account screenshot).

• Deposit and withdrawal transaction records, amounts, and timestamps;
• Payment method identifiers (e.g., masked GCash number, bank account last digits — full account numbers are not stored by oke3);
• Bonus credits, wagering activity, and promotional redemption records;
• Account balance history.

• Game session records, including games played, bet amounts, outcomes, and session duration;
• Responsible gaming tool settings (deposit limits, session timers, self-exclusion status);
• Bonus and promotion participation history.

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser information;
• Session logs, access timestamps, and navigation data within the Platform;
• Cookie identifiers and similar tracking technology data (see Section 9).

• Records of live chat conversations with oke3 support agents;
• Email correspondence with oke3;
• Records of promotional communications sent to you and your interaction with them (open rates, click-throughs).

oke3 collects personal data through the following means:

Under the Data Privacy Act of 2012, oke3 processes your personal data on the following legal bases:

1. Performance of a Contract: Processing necessary to register your account, process deposits and withdrawals, provide gaming services, and administer your oke3 account as described in the Terms & Conditions.
2. Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing obligations, the Anti-Money Laundering Act (AMLA) as amended, the Data Privacy Act, and related regulations. This includes KYC identity verification, transaction monitoring, and record retention obligations.
3. Legitimate Interests: Processing carried out for oke3's legitimate business interests where those interests are not overridden by your rights. This includes fraud prevention, platform security, technical operations, responsible gaming monitoring, and improving Platform features based on aggregated usage analytics.
4. Consent: Processing of personal data for optional purposes where you have given your explicit, informed consent — primarily for marketing communications. You may withdraw consent for marketing at any time without affecting your ability to use the oke3 Platform.

oke3 uses the personal data we collect for the following purposes:

oke3 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances and with the following categories of recipients:

oke3 engages carefully selected third-party service providers who process personal data on our behalf and under our documented instructions. These include:

• Payment processors: GCash (Mynt), Maya (Voyager Innovations), GrabPay, BPI, BDO, Metrobank, and InstaPay infrastructure providers — for processing deposits and withdrawals;
• KYC and identity verification providers: For automated or assisted identity document verification and age confirmation;
• Fraud detection and AML screening services: For transaction monitoring and financial crime risk assessment;
• Game software providers: Game providers whose titles are available in the oke3 lobby may receive certain session data (e.g., Player ID, bet amounts) necessary to operate their games;
• Cloud infrastructure and hosting providers: For Platform hosting, data storage, and backup services;
• Customer support technology providers: Live chat platform operators who facilitate our support operations.

oke3 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, courts, and other competent Philippine authorities where required to do so by applicable law, court order, regulatory direction, or binding legal process. oke3 will, where legally permitted, notify the affected player of such disclosure.

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of oke3's business assets, personal data held by oke3 may be transferred to the acquiring entity as part of the transaction, subject to the acquiring entity being bound by equivalent data protection obligations. Players will be notified of any such transfer affecting their personal data.

The oke3 Platform is operated primarily for players in the Philippines. Some of the third-party service providers described in Section 7 may be located in jurisdictions outside the Philippines. Where personal data is transferred internationally, oke3 ensures that:

• The transfer is made only to countries or organisations that provide an adequate level of data protection as recognised by the National Privacy Commission, or where oke3 has implemented appropriate contractual safeguards (such as standard contractual clauses) with the receiving party;
• The receiving party is bound by contractual data processing obligations that are at least as protective as those required by the Data Privacy Act of 2012;
• The transfer is limited to the minimum data necessary for the specific processing purpose.

oke3 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and improve your experience. The following categories of cookies are used:

You can manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using the core oke3 Platform. Note that disabling strictly necessary or security cookies may impair Platform functionality.

oke3 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, as set out in this Policy, or as required by applicable Philippine law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with oke3's internal data destruction procedures. Where data is required for ongoing legal proceedings or regulatory investigations, retention is extended for the duration of those proceedings.

oke3 implements technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and oke3 servers is encrypted using TLS/SSL with a minimum of 256-bit encryption;
• Encryption at rest: Sensitive personal data stored in oke3 databases is encrypted at rest using industry-standard encryption algorithms;
• Password security: Account passwords are stored as salted cryptographic hashes — oke3 cannot retrieve your plaintext password;
• Access controls: Access to personal data within oke3 is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control systems;
• Two-factor authentication: oke3 offers and encourages optional two-factor authentication (2FA) for all player accounts to reduce the risk of unauthorised login;
• Penetration testing and security audits: oke3 conducts periodic security assessments of its Platform and infrastructure;
• Data breach response: oke3 maintains a documented data breach response procedure. In the event of a breach affecting personal data, oke3 will notify the National Privacy Commission and affected players within the legally required timeframes.

Under Republic Act No. 10173 and its Implementing Rules and Regulations, you have the following rights in relation to the personal data oke3 holds about you:

To exercise any of the above rights, submit a written request to the oke3 Data Protection Officer as described in Section 18. oke3 will respond to all data rights requests within fifteen (15) business days of receipt.

If oke3 becomes aware that personal data has been collected from an individual under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that oke3 may have inadvertently collected personal data from an underage individual, please contact the DPO immediately using the details in Section 18.

The oke3 Platform may contain references to game providers, payment methods, or other third-party services. oke3 does not control the privacy practices of those third parties and is not responsible for their privacy policies or data handling procedures. If you access any third-party service through or in connection with oke3, you should review the applicable third-party privacy policy independently.

oke3 game providers who supply games available in the oke3 lobby operate under their own data processing agreements with oke3 and are bound by data protection obligations consistent with their processing role as described in Section 7.1.

With your consent, oke3 may use your contact details to send you promotional communications about oke3 bonuses, new game launches, tournaments, and platform updates. You may opt in to marketing communications during account registration or at any time from your account notification settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your notification preferences in your oke3 account settings;
• Clicking the unsubscribe link contained in any marketing email sent by oke3;
• Contacting the oke3 support team or DPO with a written opt-out request.

Withdrawal of marketing consent does not affect your ability to use the oke3 Platform or receive transactional communications related to your account (e.g., deposit confirmations, withdrawal notifications, security alerts).

oke3 uses automated processes in the following limited circumstances that may produce decisions affecting your account:

• Fraud and risk scoring: Automated systems analyse deposit patterns, login behaviour, and device data to flag potentially fraudulent activity. Accounts flagged by automated systems are reviewed by a human compliance officer before any significant action (such as account suspension) is taken.
• Responsible gaming monitoring: Automated systems monitor gaming patterns and compare them against responsible gaming risk indicators. Where patterns suggest potential problem gambling, automated alerts are generated for review by the oke3 responsible gaming team.
• KYC document verification: oke3 may use automated document verification tools that analyse submitted ID documents and return a verification result. Borderline or rejected verifications are reviewed by a human KYC agent.

Where an automated decision has a significant effect on your oke3 account, you have the right to request human review of that decision. Contact the oke3 support team or DPO to make such a request.

oke3 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform functionality. Material changes will be notified to registered players via email to their registered address and/or via a prominent notice on the oke3 Platform, at least seven (7) days prior to the changes taking effect.

The effective date at the top of this Policy indicates when the current version became operative. We encourage all oke3 players to review this Policy periodically. Your continued use of the oke3 Platform following the effective date of any updated version constitutes your acceptance of the revised Policy.

For all privacy-related inquiries, data rights requests, complaints, or DPO correspondence, players may contact oke3 through the following channels:

Formal complaints regarding oke3's compliance with the Data Privacy Act of 2012 may also be directed to the National Privacy Commission of the Philippines. Information on how to file a complaint is available on the NPC's official website.