okttt Casino Privacy Policy

1. Introduction

okttt Casino ("okttt," "we," "us," or "our") operates the online gaming platform accessible at https://okttt.club (the "Platform"). We are committed to protecting the privacy and personal data of all players and visitors who interact with the Platform. This Privacy Policy ("Policy") describes our practices regarding the collection, use, storage, disclosure, and protection of personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, the regulations of the National Privacy Commission ("NPC") of the Philippines, and applicable PAGCOR licensing requirements.

By registering an account on the Platform or otherwise using our services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal information as described herein. If you do not agree with any aspect of this Policy, you must discontinue use of the Platform.

This Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy, all of which form part of the agreement governing your use of the okttt Platform.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, okttt Casino is the personal information controller in respect of personal data processed in connection with the Platform. Our designated Data Protection Officer ("DPO") may be contacted at the details set out in Section 13 of this Policy.

3. Information We Collect

3.1 Information You Provide Directly

When you register for an account, complete identity verification, make transactions, or communicate with our support team, we collect the following categories of personal information:

• Identity Data: Full legal name, date of birth, nationality, gender, and government-issued identification numbers (e.g., PhilSys ID number, UMID number, passport number, or driver's license number);
• Contact Data: Email address, mobile phone number, and residential address including city and province (e.g., addresses in Metro Manila, Cebu, Davao, or elsewhere in the Philippines);
• Identity Verification Documents: Copies or photographs of government-issued identification documents submitted during KYC verification (e.g., PhilSys National ID, UMID, passport, or driver's license);
• Financial Data: GCash account references, Maya (PayMaya) account references, bank account details (BPI, BDO, Metrobank) used for deposits and withdrawals, and transaction records;
• Account Credentials: Email address and hashed password used to access your okttt account. We do not store passwords in plain text.

3.2 Information Collected Automatically

When you access the Platform, we automatically collect the following technical and usage information:

• Device & Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and language settings;
• Usage Data: Pages visited, games accessed, session duration, login timestamps, clickstream data, and navigation paths within the Platform;
• Gaming Data: Wager amounts, game selections, bet history, outcomes, bonus usage, and session records — retained for regulatory compliance and dispute resolution purposes;
• Cookies and Similar Technologies: Session cookies, persistent cookies, and similar tracking technologies as described in Section 10 of this Policy.

3.3 Information from Third Parties

We may receive personal information about you from third parties in the following circumstances:

• Identity verification service providers who assist in validating the authenticity of your government-issued identification documents;
• Payment processors (GCash, Maya, BPI, BDO, Metrobank) who provide transaction confirmation and fraud screening data;
• PAGCOR and other Philippine regulatory or law enforcement authorities, where required by applicable law.

4. How We Use Your Personal Information

okttt processes your personal information for the following specific purposes:

• Account Management: To create, maintain, and administer your okttt player account, including authentication, account recovery, and account security;
• Identity Verification (KYC): To verify your identity and age (21+ requirement) in compliance with PAGCOR licensing conditions and the Anti-Money Laundering Act (RA 9160, as amended);
• Processing Transactions: To process deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and other approved Philippine payment channels;
• Game and Platform Operation: To provide, maintain, and improve the games and services available on the Platform, including resolving technical issues and disputes;
• Regulatory Compliance: To fulfil our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act of 2012, and other applicable Philippine laws, including the filing of required reports to PAGCOR and AMLC;
• Responsible Gaming: To monitor gaming patterns for signs of problem gambling and to administer responsible gaming tools (deposit limits, self-exclusion, session reminders) in accordance with our Responsible Gaming Policy;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, money laundering, and other prohibited activities;
• Customer Support: To respond to your inquiries, complaints, and support requests submitted via live chat or email;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent. You may withdraw marketing consent at any time via account settings or by contacting support.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, okttt processes your personal information on the following legal bases:

• Contractual Necessity: Processing necessary to perform our obligations under the Terms and Conditions, including account management and transaction processing;
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, AMLC reporting obligations, NPC requirements, and other applicable Philippine laws;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement, where these interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications, where we have obtained your prior consent. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

6. Sharing Your Personal Information

okttt does not sell, rent, or trade your personal information to third parties for commercial purposes. We may share your personal information in the following limited circumstances:

• Service Providers: Third-party vendors who assist in operating the Platform, including KYC verification providers, payment processors, cloud infrastructure providers, and customer support platforms. All service providers are contractually bound to process personal data only in accordance with our instructions and applicable data protection law;
• Regulatory & Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where disclosure is required by law or regulatory obligation;
• Professional Advisers: Legal counsel, auditors, and compliance consultants where necessary for the conduct of our business, subject to professional confidentiality obligations;
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of okttt's business assets, your personal information may be transferred as part of that transaction, subject to the same privacy protections set out in this Policy.

7. Data Retention

okttt retains your personal information for as long as your account remains active and for such additional period as required to fulfil legal, regulatory, and compliance obligations. Specifically:

• Account and identity records are retained for a minimum of five (5) years following account closure, as required by PAGCOR and AMLC regulations;
• Financial transaction records (deposits, withdrawals, wagers) are retained for a minimum of five (5) years;
• Gaming data (bet history, game logs) is retained for a minimum of three (3) years;
• Support correspondence is retained for a minimum of two (2) years;
• Marketing consent records are retained for the period during which consent is active and for two (2) years following withdrawal of consent.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with our data disposal procedures.

8. Data Security

okttt implements industry-standard technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption at rest for stored sensitive personal data, including identity documents and financial records;
• Cryptographic hashing of account passwords — no okttt system stores passwords in plain text;
• Access controls limiting personal data access to authorized personnel with a legitimate need;
• Regular security assessments and penetration testing of Platform systems;
• Incident response procedures for detecting, containing, and notifying affected parties of personal data breaches, in accordance with NPC notification requirements.

Notwithstanding these measures, no data transmission over the internet is completely secure. You are responsible for maintaining the confidentiality of your own account credentials.

9. Your Rights Under the Data Privacy Act

As a data subject under the Data Privacy Act of 2012, you have the following rights in respect of your personal information held by okttt:

• Right to Be Informed: To be notified about how your personal information is collected and processed;
• Right of Access: To request a copy of the personal information okttt holds about you;
• Right to Rectification: To request correction of inaccurate or incomplete personal information;
• Right to Erasure: To request deletion of your personal information where processing is no longer necessary and no legal retention obligation applies;
• Right to Object: To object to the processing of your personal information for marketing purposes at any time;
• Right to Data Portability: To request a structured, machine-readable copy of your personal data in certain circumstances;
• Right to File a Complaint: To lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer using the contact details in Section 13. We will respond to verified requests within 15 business days, as required by the DPA and its Implementing Rules.

10. Cookies & Tracking Technologies

okttt uses cookies and similar tracking technologies to operate the Platform, maintain your session, and analyse platform usage. Categories of cookies used include:

• Strictly Necessary Cookies: Required for the Platform to function, including session management and authentication. These cannot be disabled;
• Analytics Cookies: Used to understand how players interact with the Platform, enabling us to identify and fix issues and improve the user experience. Analytics data is aggregated and does not identify individual players;
• Preference Cookies: Used to remember your settings and preferences (e.g., language, game lobby view) across sessions.

You may manage non-essential cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality. Continued use of the Platform constitutes acceptance of our cookie usage as described in this Policy.

11. Minors

The Platform is strictly prohibited to persons under 21 years of age, as required by PAGCOR regulations. okttt does not knowingly collect personal information from persons under 21. If we become aware that personal information has been collected from a person under 21, that account will be immediately closed and the data will be securely deleted. If you believe a minor has registered on the Platform, please contact us immediately using the details in Section 13.

12. Changes to This Policy

okttt reserves the right to update this Privacy Policy at any time. Where changes are material, we will notify you via the Platform (e.g., a notification upon next login) prior to the changes taking effect. The "Effective Date" at the top of this Policy reflects the date of the most recent revision. Your continued use of the Platform after notification of changes constitutes acceptance of the revised Policy.

13. Contact & Complaints

For questions, requests to exercise your data privacy rights, or complaints regarding this Privacy Policy or okttt's data processing practices, please contact our Data Protection Officer: