okbeat Privacy Policy

This Privacy Policy is issued by the operator of the okbeat Platform accessible at okbeat.org ("okbeat," "we," "us," "our"). okbeat is a PAGCOR-licensed online gaming and sports betting operator providing services to eligible Filipino players across the Philippines, from Metro Manila to Cebu, Davao, and the wider archipelago.

For the purposes of Republic Act No. 10173 (the Data Privacy Act of 2012) and its implementing rules and regulations, okbeat is the personal information controller in respect of all personal data collected from registered players and visitors to the okbeat Platform.

okbeat collects the following categories of personal data, depending on the nature of your interaction with the Platform:

okbeat does not collect sensitive personal information as defined under the Data Privacy Act (such as health or genetic data, sexual orientation, or religious beliefs) except where specifically required for responsible gaming assessments, in which case explicit consent will be obtained.

okbeat collects personal data through the following mechanisms:

• Directly from You — when you complete the registration form, submit KYC documents, use the cashier, contact support, complete surveys or promotional entry forms, or update your account settings.
• Automatically — when you visit or interact with the okbeat Platform, our servers and analytics tools automatically collect Technical Data including IP address, device information, session duration, pages visited, and click-path data via cookies and similar technologies.
• From Payment Processors — when you make a deposit or withdrawal via GCash, PayMaya, BPI, BDO, or Metrobank, our payment processing partners share transaction confirmation data and account reference identifiers necessary to reconcile your cashier balance.
• From KYC Verification Partners — where okbeat uses third-party identity verification services to process and validate your submitted government-issued ID documents, those partners share the verification outcome and extracted identity data fields with okbeat.
• From Regulatory Authorities — PAGCOR and other competent Philippine authorities may share information with okbeat that is relevant to compliance, fraud prevention, or responsible gaming obligations.

Under the Data Privacy Act of 2012, okbeat processes your personal data on one or more of the following lawful bases:

• Contract Performance — processing necessary to register your account, deliver gaming services, process deposits and withdrawals, and fulfil our obligations to you under the okbeat Terms and Conditions.
• Legal Obligation — processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine law, including mandatory KYC, transaction monitoring, and suspicious activity reporting.
• Legitimate Interest — processing for fraud prevention, platform security, responsible gaming monitoring, product improvement analytics, and customer service quality assurance, where these interests are not overridden by your data protection rights.
• Consent — processing for direct marketing communications and non-essential cookies, where you have given freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

okbeat uses the personal data we collect for the following specific purposes:

• Account Management: Creating and maintaining your okbeat account, authenticating your identity at login, processing account updates, and managing account security settings including two-factor authentication.
• Service Delivery: Providing access to games, live dealer tables, sports betting markets, bingo rooms, fishing games, and all other okbeat Platform features you have accessed or requested.
• Payment Processing: Processing deposits via GCash, PayMaya, BPI, BDO, and Metrobank; verifying payment ownership; processing withdrawal requests to your verified payment account; and maintaining transaction audit logs.
• KYC and Compliance: Verifying your identity and age as required by PAGCOR; conducting Anti-Money Laundering Act due diligence; filing Suspicious Transaction Reports (STRs) with the AMLC where legally required; and maintaining compliance documentation.
• Responsible Gaming: Monitoring gameplay patterns for indicators of problem gambling; administering deposit limits, session alerts, cooling-off periods, and self-exclusion requests; and providing mandatory responsible gaming interventions where triggered.
• Customer Support: Responding to your enquiries and complaints; resolving account disputes; processing bonus claims; and maintaining records of support interactions for quality assurance and dispute resolution purposes.
• Fraud and Security: Detecting, investigating, and preventing fraud, money laundering, account takeover attempts, and Terms violations; conducting security monitoring; and sharing relevant data with PAGCOR, the AMLC, or law enforcement where legally required or authorised.
• Personalisation and Analytics: Improving the okbeat Platform based on aggregated usage data; personalising game recommendations and promotional offers to your activity profile; and conducting internal research to enhance the player experience.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates via email or SMS — only where you have opted in to marketing communications. You may opt out at any time via your account settings.

okbeat does not sell your personal data. We share personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• PAGCOR and Philippine Regulatory Authorities — okbeat shares player account data, gaming records, and transaction information with PAGCOR as required under our operating licence. Sharing with other regulators (e.g., NPC, BSP, AMLC) occurs where legally mandated.
• Payment Processors — GCash (GXI), PayMaya (PLDT Group), BPI, BDO, and Metrobank receive the minimum personal data necessary to process your deposit and withdrawal transactions. These providers are contractually bound to process your data only for payment purposes.
• Game and Technology Providers — Certified game studios and platform technology partners receive account session data necessary to deliver game services, authenticate your session, and maintain game-level audit logs. Game providers are bound by confidentiality and data processing agreements with okbeat.
• Identity Verification Services — Third-party KYC providers receive copies of your government-issued ID and other identity documents solely for the purpose of verification. All KYC partners comply with the Data Privacy Act and are subject to data processing agreements with okbeat.
• Customer Support Platform Providers — Live chat and support ticketing software providers may process communication data on behalf of okbeat as data processors under written data processing agreements.
• Law Enforcement and Courts — Where required by a valid court order, law enforcement request, or other legally binding demand issued under Philippine law, okbeat will disclose personal data to the extent required and will notify affected players where permitted by law.

The okbeat Platform uses cookies and similar tracking technologies to deliver and improve the service. Cookies are small text files stored on your device when you visit the Platform. The following categories of cookies are used:

You may manage your cookie preferences via the cookie consent panel accessible from the Platform footer. Note that disabling strictly necessary cookies will prevent core Platform functionality including login, cashier access, and game sessions. Disabling other cookie categories will not affect your ability to play or transact.

okbeat implements a comprehensive suite of technical and organisational security measures proportionate to the sensitivity of the personal data processed and the risks to your privacy:

• 256-bit SSL/TLS encryption on all data in transit between your device and okbeat's servers
• AES-256 encryption at rest for stored personal data, including KYC documents and financial records
• Role-based access controls limiting internal data access to authorised personnel who have a documented need to process the data
• Two-factor authentication enforced for all okbeat internal administrative systems and available to players on their accounts
• Penetration testing and vulnerability assessments conducted on a scheduled basis by independent security professionals
• Intrusion detection and 24/7 security monitoring of all production systems and network infrastructure
• Data minimisation practices ensuring only the minimum data necessary is collected, stored, and accessible at each processing layer

okbeat retains your personal data for the periods set out below, after which data is securely deleted or anonymised in a manner that prevents re-identification:

Certain technology providers and game studios used by okbeat operate data processing infrastructure outside the Philippines. Where your personal data is transferred internationally, okbeat ensures that appropriate safeguards are in place in accordance with the Data Privacy Act and NPC guidelines on cross-border data flows, including:

• Data processing agreements incorporating standard contractual clauses that bind the receiving party to privacy and security obligations equivalent to those under Philippine law.
• Transfers only to processors that have been assessed as providing adequate data protection through their own compliance certifications, regulatory frameworks, or contractual commitments.
• Minimisation of the personal data shared in cross-border transfers to only the data strictly necessary for the specific processing purpose.

Under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights in relation to your personal data held by okbeat. These rights are exercisable by contacting okbeat's Data Protection Officer as described in Section 15:

• Right to Be Informed — You have the right to receive clear, accurate information about how okbeat collects and processes your personal data, as set out in this Privacy Policy.
• Right of Access — You may request a copy of the personal data okbeat holds about you, together with information about how it is being used. Requests will be fulfilled within 30 days.
• Right to Rectification — You may request correction of inaccurate or incomplete personal data. For account-registered data, many fields can be updated directly in your account settings.
• Right to Erasure — You may request deletion of your personal data where it is no longer necessary for the purpose collected, where you have withdrawn consent, or where processing is unlawful — subject to overriding legal retention obligations under AMLA and PAGCOR requirements.
• Right to Object — You may object to specific processing activities, including profiling for marketing purposes. Where marketing is involved, objection will result in immediate cessation of direct marketing communications.
• Right to Data Portability — You may request your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract and carried out by automated means.
• Right to Lodge a Complaint — If you believe okbeat has breached its data privacy obligations, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.

The okbeat Platform is strictly intended for persons aged 21 years and older, in accordance with PAGCOR's minimum age requirements for online gambling in the Philippines. okbeat does not knowingly collect personal data from persons under the age of 21.

If okbeat becomes aware that personal data has been collected from an individual under the age of 21 — whether through registration with a false date of birth or any other means — the relevant account will be immediately suspended, all balances forfeited in accordance with the Terms and Conditions, and all associated personal data deleted from our systems within 30 days of identification, except where retention is required by law.

If you have reason to believe that a person under 21 has registered on the okbeat Platform, please notify our support team immediately at [email protected] with relevant details so we can investigate promptly.

The okbeat Platform may contain links to third-party websites, including payment provider portals and game publisher pages. This Privacy Policy applies solely to the okbeat Platform at okbeat.org. okbeat is not responsible for the privacy practices, data processing activities, or content of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit directly.

okbeat reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or Platform features. All updates will be published on this page with a revised Effective Date.

Where changes are material — such as introducing a new purpose for processing your data, adding a new category of recipient, or modifying your data subject rights — okbeat will provide advance notice via email to your registered address or via a prominent Platform notification before the changes take effect. Your continued use of the okbeat Platform after the effective date of any updated Privacy Policy constitutes acceptance of the revised terms.

We recommend reviewing this Privacy Policy periodically to stay informed of how okbeat protects your information. The date of the most recent update is always displayed at the top of this page.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by okbeat, please contact us through the following channels:

If you are not satisfied with okbeat's response to your privacy complaint, you have the right to escalate your concern to the National Privacy Commission of the Philippines at privacy.gov.ph. okbeat will cooperate fully with any NPC investigation.