Privacy Policy — okttt

01 Introduction

okttt ("we," "us," or "our") is committed to protecting the privacy and personal data of all users of the okttt platform. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you access or use any part of the okttt website and its associated services.

This policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). Where applicable, we also observe internationally recognized data protection principles.

As the personal information controller, okttt determines the purposes and means of processing your personal data. We take this responsibility seriously and have implemented appropriate technical and organizational measures to safeguard your information at every stage of its lifecycle on our platform.

02 Data We Collect

Depending on how you interact with the okttt platform, we may collect the following categories of personal data:

2.1 Identity & Contact Information

• Full legal name as it appears on your government-issued ID;
• Date of birth (used to verify the 21+ age requirement);
• Valid Philippine mobile number or email address;
• Residential address (for KYC verification purposes);
• Government-issued ID details (e.g., PhilSys National ID, passport, driver's license, UMID card).

2.2 Financial Information

• GCash or PayMaya mobile wallet number;
• BPI, BDO, or Metrobank account details used for deposits or withdrawals;
• Transaction history, including deposit amounts, withdrawal requests, and wagering activity;
• Source of funds documentation where required for AML compliance.

2.3 Technical & Usage Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Session duration, pages visited, and features used;
• Login timestamps and access logs;
• Game history, bet amounts, and wagering patterns.

2.4 Communications Data

• Records of live chat conversations with our support team;
• Email correspondence with okttt;
• Feedback, survey responses, and promotional opt-in preferences.

03 How We Collect Data

okttt collects personal data through the following means:

• Directly from you — when you register for an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in promotions;
• Automatically — through cookies, web beacons, and similar tracking technologies when you browse or use the okttt platform;
• From third-party payment providers — such as GCash, PayMaya, BPI, BDO, and Metrobank, when you initiate a financial transaction through their services;
• From identity verification partners — when we use third-party KYC service providers to verify the authenticity of documents you submit;
• From fraud prevention and analytics services — to detect suspicious activity and improve platform performance.

04 How We Use Your Data

okttt uses your personal data for the following purposes:

We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or where you have given explicit consent.

05 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, okttt processes your personal data on the following legal bases:

• Contractual necessity — processing required to fulfill our obligations under the Terms & Conditions you agreed to upon registration, including account management, payment processing, and game provision;
• Legal obligation — processing required to comply with applicable Philippine laws, including the Anti-Money Laundering Act (RA 9160), PAGCOR regulations, and NPC directives;
• Legitimate interests — processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights;
• Consent — processing for optional purposes such as marketing communications, where we have obtained your explicit opt-in consent. You may withdraw this consent at any time through your account settings.

06 Data Sharing & Disclosure

okttt does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment service providers — GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors, to facilitate deposits and withdrawals;
• KYC and identity verification partners — third-party services used to verify the authenticity of identity documents submitted during account verification;
• Fraud prevention and security services — providers that help us detect and prevent fraudulent activity on the platform;
• Regulatory and law enforcement authorities — including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and Philippine law enforcement agencies, where required by law or court order;
• IT and infrastructure providers — cloud hosting, database, and platform infrastructure providers who process data on our behalf under strict data processing agreements;
• Professional advisers — lawyers, auditors, and compliance consultants, where necessary and subject to professional confidentiality obligations.

All third parties with whom we share personal data are required to handle it in accordance with applicable data protection laws and our contractual requirements. We do not permit third-party service providers to use your data for their own marketing purposes.

07 Cookies & Tracking Technologies

The okttt platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain your session, and collect usage analytics. The types of cookies we use include:

• Essential cookies — required for the platform to function correctly, including session management and security features. These cannot be disabled;
• Functional cookies — used to remember your preferences, such as language settings and display options;
• Analytics cookies — used to collect aggregated, anonymized data about how users interact with the platform, helping us identify areas for improvement;
• Security cookies — used to detect and prevent fraudulent activity, including bot detection and login anomaly monitoring.

You can manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the okttt platform. okttt does not use third-party advertising or retargeting cookies.

08 Data Retention

okttt retains your personal data for as long as your account is active and for a period thereafter as required by applicable law or legitimate business need. Specific retention periods include:

• Account and identity data — retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with AML and PAGCOR record-keeping requirements;
• Transaction records — retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act;
• Support communications — retained for two (2) years from the date of the interaction, unless a longer period is required for dispute resolution;
• Technical and usage logs — retained for up to twelve (12) months, after which they are aggregated or deleted;
• Marketing consent records — retained for the duration of your consent and for one (1) year after withdrawal, as evidence of compliance.

When personal data is no longer required, it is securely deleted or anonymized in accordance with our data disposal procedures.

09 Data Security

okttt implements a range of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data at rest, including financial account details and government ID information;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security audits and vulnerability assessments of our platform infrastructure;
• Two-factor authentication (2FA) available for all registered user accounts;
• Continuous monitoring for suspicious login activity and unauthorized access attempts.

10 Your Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okttt:

To exercise any of these rights, please contact our Data Protection Officer via live chat or the email address listed in Section 14 of this policy. We will respond to all verified requests within thirty (30) days. In complex cases, we may extend this period by a further thirty (30) days, with prior notice to you.

11 Minors & Age Restriction

If you are a parent or guardian and believe that a minor has registered on the okttt platform using your payment details or personal information, please contact our support team immediately via live chat so we can investigate and take appropriate action.

12 International Data Transfers

Some of the third-party service providers used by okttt — including cloud infrastructure, KYC verification, and fraud prevention partners — may process personal data outside of the Philippines. Where such transfers occur, okttt ensures that appropriate safeguards are in place to protect your data, including contractual data processing agreements that require the recipient to apply data protection standards equivalent to those required under Philippine law.

By using the okttt platform, you acknowledge and consent to the transfer of your personal data to countries outside the Philippines where necessary for the provision of our services, subject to the safeguards described above.

13 Changes to This Policy

okttt reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When we make material changes, we will notify registered users via email or an in-platform notification at least seven (7) days before the changes take effect, where reasonably practicable.

The updated policy will be posted on this page with a revised effective date. We encourage you to review this page periodically to stay informed about how okttt protects your personal data. Your continued use of the platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

14 Contact & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the way okttt handles your personal data, please contact our Data Protection Officer through any of the following channels:

• Live Chat — available 24/7 inside the okttt platform after logging in;
• Email — privacy@okttt.net (plain text — not a clickable link).

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC is the government body responsible for administering and implementing the Data Privacy Act of 2012.

We take all privacy complaints seriously and will investigate and respond to every verified complaint in a timely and transparent manner.