okeslot Privacy Policy

Scope & Data Controller

This Privacy Policy applies to all personal data processed by okeslot ("the Company," "We," "Us," or "Our") in connection with the online gaming platform accessible at okeslot.asia and any related services, customer support channels, or promotional communications.

okeslot is the Personal Information Controller (PIC) as defined under Republic Act No. 10173 — the Data Privacy Act of 2012 — with respect to personal data collected from registered players and visitors to the Platform. As a PAGCOR-licensed operator, okeslot is also subject to PAGCOR's data governance requirements, which supplement the obligations under the DPA.

Personal Data We Collect

2.1 Registration Data

When you create an Account with okeslot, we collect the personal information you provide, which includes:

• Full legal name as it appears on your government-issued identification;
• Date of birth (to verify that you meet the 21+ age requirement);
• Residential address including province, city, and postal code;
• Email address and mobile phone number;
• Username and encrypted password.

2.2 KYC Verification Data

To comply with PAGCOR's licensing requirements and the Philippine Anti-Money Laundering Act (AMLA), okeslot collects identity verification documents, which may include:

• Government-issued photo identification (UMID, PhilSys National ID, Philippine passport, or driver's licence);
• Proof of address (utility bill, bank statement, or barangay certification);
• Proof of payment method ownership (GCash account screenshot, bank account confirmation);
• Source of funds documentation where required by AMLA thresholds.

2.3 Transaction Data

okeslot records all financial transactions conducted through your Account, including deposit amounts, deposit channels, withdrawal requests, withdrawal processing details, bonus credits awarded and used, and game wager and winnings history.

2.4 Technical and Usage Data

When you access the Platform, we automatically collect technical data including IP address, device type and operating system, browser type and version, session timestamps, pages visited, and game activity logs. This data is collected through server logs and cookies as described in Section 7.

2.5 Communications Data

We retain records of communications between you and okeslot's support team — including live chat transcripts and email correspondence — for quality assurance, dispute resolution, and regulatory compliance purposes.

How We Collect Your Data

okeslot collects your personal data through the following channels:

Legal Basis for Processing

okeslot processes your personal data on the following legal bases as established under the Philippine Data Privacy Act:

• Contractual Necessity: Processing your registration data, transaction data, and KYC documents is necessary to perform the gaming services agreement (the Terms and Conditions) to which you are a party as a registered player.
• Legal Obligation: Processing for KYC verification, AMLA transaction monitoring, PAGCOR reporting, and tax record maintenance is required by Philippine law. okeslot cannot waive or reduce this processing.
• Legitimate Interest: Processing for fraud detection, security monitoring, and responsible gaming compliance is conducted on the basis of okeslot's legitimate interest in maintaining a safe, fair, and legally compliant gaming environment.
• Consent: Processing for marketing communications and non-essential cookies is conducted on the basis of your explicit consent, which may be withdrawn at any time as described in Sections 7 and 13.

How We Use Your Personal Data

okeslot uses the personal data we collect for the following purposes:

• Account Management: Creating, maintaining, and securing your Account; processing deposits and withdrawals; providing customer support;
• Identity Verification & Fraud Prevention: Verifying your age (21+ requirement), identity, and payment method ownership; detecting and preventing fraud, money laundering, and account abuse;
• Regulatory Compliance: Meeting PAGCOR licensing obligations; complying with AMLA transaction monitoring and reporting requirements; maintaining records required by Philippine tax regulations;
• Responsible Gaming: Monitoring gaming behaviour to identify problem gambling indicators; administering self-exclusion, deposit limits, and other responsible gaming tools;
• Platform Improvement: Analysing usage patterns to improve game performance, interface design, and user experience (using anonymised or aggregated data where possible);
• Security: Monitoring login activity, detecting unauthorised access, and responding to security incidents;
• Marketing: Sending promotional offers, bonus notifications, and platform updates to players who have consented to marketing communications.

Data Sharing & Third Parties

okeslot does not sell your personal data. We share personal data only with the following categories of third parties, under contractual data processing terms that require them to maintain data confidentiality and security standards equivalent to those described in this Policy:

• Payment Service Providers: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, Metrobank, UnionBank, and InstaPay/PESONet network operators — to process your deposit and withdrawal transactions;
• KYC & Identity Verification Services: Third-party identity verification providers contracted to process document authentication and biometric checks where applicable;
• Game Content Providers: Pragmatic Play, PG Soft, Evolution Gaming, and other licensed game studios — game logs and session data may be shared to the extent necessary for game integrity and RNG audit compliance;
• PAGCOR: As our licensing authority, PAGCOR may require access to player data, transaction records, and game logs as part of regulatory oversight activities;
• Philippine Law Enforcement and Courts: Where required by a valid legal order, warrant, or mandatory reporting obligation under AMLA or other Philippine law;
• Cloud Infrastructure and IT Service Providers: Contracted technology providers who host and maintain the Platform infrastructure, operating under strict data processing agreements.

Cookies & Tracking Technologies

okeslot uses cookies and similar tracking technologies to operate the Platform and improve your experience. The following types of cookies are used:

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent the Platform from functioning correctly. Consent-based cookies may be withdrawn by adjusting your browser settings or contacting okeslot Support — this will not affect your Account or gameplay functionality.

Data Retention

okeslot retains personal data only for as long as required to fulfil the purposes for which it was collected and to meet applicable legal and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where regulatory retention obligations conflict with a deletion request under Section 10, the regulatory obligation takes precedence for the duration of the mandatory retention period.

Data Security Measures

okeslot implements the following technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in Transit: 256-bit SSL/TLS encryption on all data transmitted between your device and okeslot's servers;
• Encryption at Rest: Personal data and KYC documents stored in encrypted format on access-controlled server infrastructure;
• Access Controls: Role-based access controls limiting staff access to personal data to the minimum necessary for their job function;
• Two-Factor Authentication: Mandatory 2FA for all okeslot staff accessing systems containing personal data;
• Security Monitoring: Continuous monitoring of Platform infrastructure for intrusion attempts, anomalous access patterns, and security incidents;
• Penetration Testing: Regular third-party security assessments and vulnerability testing of Platform systems;
• Staff Training: Mandatory data protection training for all employees handling personal data, covering the Philippine DPA requirements and okeslot's internal privacy procedures.

Despite these measures, no online system is entirely free from risk. Players are encouraged to maintain the security of their own Account credentials as described in the Terms and Conditions.

Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okeslot. To exercise any of these rights, contact okeslot's Data Protection Officer as described in Section 16.

Children's Privacy

The okeslot Platform is strictly for adult players aged 21 years and above. okeslot does not knowingly collect personal data from individuals under the age of 21. Age verification is performed as part of the KYC process, and Accounts where the holder is found to be under 21 are immediately closed and referred to PAGCOR as required by licensing conditions.

If you are a parent or guardian and believe that a minor has registered an Account with okeslot using false age information, please contact okeslot's Support team or Data Protection Officer immediately at the contact details provided in Section 16. okeslot will investigate and close the Account, deleting any associated personal data of the minor to the extent permitted by applicable reporting obligations.

Cross-Border Data Transfers

Certain third-party service providers engaged by okeslot — including cloud infrastructure providers, KYC verification services, and game content providers — may process personal data in jurisdictions outside the Philippines. Where such cross-border transfers occur, okeslot ensures that adequate safeguards are in place as required by Section 21 of the Philippine Data Privacy Act, which may include:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under the Philippine DPA;
• Transfer to recipients located in countries with adequate personal data protection laws as determined by the National Privacy Commission;
• Binding corporate rules where the recipient is part of the same corporate group as okeslot.

A list of countries to which data may be transferred is available upon written request to the Data Protection Officer.

Marketing Communications

okeslot sends promotional emails, SMS notifications, and in-platform messages to players who have consented to marketing communications at the time of registration or subsequently through Account settings.

You may withdraw your consent to marketing communications at any time by:

• Clicking the "Unsubscribe" link in any okeslot marketing email;
• Updating your communication preferences in Account Settings;
• Contacting okeslot Support and requesting removal from marketing lists.

Withdrawal of marketing consent does not affect your ability to receive service-related communications — such as transaction confirmations, security alerts, account status notifications, and regulatory notices — which are sent as a necessary part of the gaming services contract and do not require your consent.

Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, okeslot will:

1. Notify the National Privacy Commission within 72 hours of becoming aware of the breach, as required by the Data Privacy Act's implementing regulations;
2. Notify affected players without undue delay where the breach is likely to result in high risk to their rights — including identity theft, financial loss, or reputational harm;
3. Contain the breach through immediate technical and operational response, including isolating affected systems and revoking compromised credentials;
4. Conduct a full post-incident investigation and implement remedial measures to prevent recurrence;
5. Document the breach, its effects, and the remedial actions taken in okeslot's breach register.

Player notifications will describe the nature of the breach, the categories of data involved, the likely consequences, and the measures taken or proposed to address the breach.

Amendments to This Policy

okeslot may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or operational procedures. When material changes are made, we will provide notice via email to your registered address and post a prominent notice on the Platform not less than fourteen (14) days before the amended Policy takes effect.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. The current version is always accessible at okeslot.asia/privacy-policy. Continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy.

Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the exercise of your data subject rights, you may contact okeslot's Data Protection Officer through the following channels:

okeslot will respond to all data subject requests within the timeframes required by the Philippine Data Privacy Act. Where identity verification is required before processing a request, okeslot will request the minimum necessary documentation and process verification within 5 business days.