oke7 Privacy Policy

1. Scope and Data Controller Identity

This Privacy Policy applies to all personal information collected by oke7 through: (a) the oke7 website at oke7.club; (b) any related mobile web interfaces; (c) communications between you and oke7 support; and (d) any other interaction through which oke7 collects personal data in the course of providing its services.

oke7 acts as the Personal Information Controller (as defined under the Philippine Data Privacy Act of 2012, RA 10173) in respect of all personal data collected through the Platform. Third-party service providers engaged by oke7 who process data on our behalf act as Personal Information Processors and are bound by data processing agreements consistent with RA 10173.

By registering an account on oke7 or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2. Categories of Personal Data We Collect

oke7 collects the following categories of personal information depending on your interactions with the Platform:

3. How We Collect Personal Data

oke7 collects personal data through the following means:

• Directly from you: During account registration, KYC verification, payment transactions, support interactions, and completion of any forms on the Platform.
• Automatically: Through cookies, web beacons, server logs, and similar tracking technologies when you access and navigate the Platform.
• From third parties: From identity verification service providers, payment processors (including GCash and partner banks), fraud detection services, and, where applicable, from PAGCOR or other regulatory bodies in the course of compliance activities.

4. Purposes of Processing

oke7 processes your personal data for the following purposes:

• Account creation and management: To register, verify, and maintain your oke7 account, including enforcement of the 21+ age restriction and one-account-per-person rule required by PAGCOR.
• Service delivery: To provide access to games, process deposits and withdrawals, manage promotional offers, and deliver customer support.
• Regulatory compliance: To fulfil oke7's obligations under PAGCOR's licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), the Data Privacy Act (RA 10173), and other applicable Philippine laws and regulations.
• Fraud prevention and security: To detect, investigate, and prevent unauthorized access, fraudulent transactions, collusive behaviour, and other security incidents.
• Responsible gaming: To monitor gameplay patterns for indicators of problem gambling and to administer responsible gaming tools (deposit limits, self-exclusion, session reminders) in accordance with PAGCOR's responsible gaming framework.
• Platform improvement: To analyse usage patterns, troubleshoot technical issues, and improve the functionality and user experience of the Platform.
• Communications: To send transactional notifications (deposit confirmations, withdrawal updates, security alerts, OTPs) and, where you have opted in, promotional communications about oke7 offers.

oke7 does not use your personal data for profiling or automated decision-making that produces significant legal effects, except where required by PAGCOR's AML/CTF monitoring obligations.

5. Legal Bases for Processing

oke7 processes personal data under the following legal bases as recognized by the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the contract between oke7 and the registered player (i.e., to provide gaming services, process payments, and manage the account).
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AMLA obligations, tax regulations, and other mandatory Philippine legal requirements.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform analytics, where such interests are not overridden by your rights and freedoms.
• Consent: For optional communications (e.g., promotional SMS or email marketing), where you have provided explicit opt-in consent. You may withdraw marketing consent at any time via your account settings or by contacting support.

6. Data Sharing and Disclosure

oke7 does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. We share personal data only in the following circumstances:

• Service providers: With identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank, InstaPay), IT infrastructure providers, and customer support platforms, all of whom are contractually bound to process data only on oke7's instructions and in compliance with RA 10173.
• Regulatory authorities: With PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where disclosure is required by law, court order, or regulatory directive.
• Fraud and security: With industry fraud-prevention networks and law enforcement agencies where necessary to investigate suspected illegal activity, protect oke7 or its players, or enforce our Terms and Conditions.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or substantially all of oke7's assets, your personal data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

7. Data Retention

oke7 retains personal data for as long as necessary to fulfil the purposes set out in this Policy, subject to the following minimum retention periods mandated by Philippine law:

• KYC and identity records: A minimum of five (5) years after account closure, as required by PAGCOR and the AMLA implementing rules.
• Financial transaction records: A minimum of five (5) years from the date of each transaction, in compliance with AMLA and BIR record-keeping requirements.
• Game session logs: A minimum of three (3) years, for dispute resolution and regulatory audit purposes.
• Support communications: A minimum of two (2) years from the date of the communication.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized, unless oke7 is required by law to retain it for a longer period or it is necessary for the establishment, exercise, or defence of legal claims.

8. Security Measures

oke7 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• Encryption: All data transmitted between your device and oke7's servers is encrypted using TLS 1.3 / 256-bit SSL. Sensitive data at rest (including payment details and ID document images) is encrypted using AES-256.
• Access controls: Access to personal data is restricted on a need-to-know basis. oke7 employees with data access are subject to confidentiality obligations and undergo data privacy training.
• Infrastructure security: oke7's platform infrastructure is hosted on enterprise-grade servers with firewall protection, intrusion detection systems, and regular security vulnerability assessments.
• Incident response: In the event of a personal data breach, oke7 will notify the National Privacy Commission (NPC) and affected data subjects within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular 16-03.

9. Cookies and Tracking Technologies

oke7 uses cookies and similar technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function, including session management, login authentication, and security tokens. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Store your preferences (e.g., language, game lobby layout) to personalize your experience across sessions.
• Analytics cookies: Collect anonymized data about how players interact with the Platform (pages visited, session duration, error events) to help us improve performance and usability. Data processed through analytics is aggregated and does not identify individual players.

You may manage non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the oke7 Platform. oke7 does not use third-party advertising cookies or share cookie data with advertising networks.

10. Your Data Subject Rights

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by oke7:

• Right to be informed: To know what personal data oke7 collects about you and how it is processed.
• Right of access: To request a copy of the personal data oke7 holds about you.
• Right to rectification: To request correction of inaccurate or incomplete personal data.
• Right to erasure or blocking: To request deletion or blocking of personal data where processing is no longer necessary, where consent has been withdrawn, or where data was collected unlawfully — subject to oke7's legal retention obligations.
• Right to object: To object to processing based on legitimate interests, including direct marketing.
• Right to data portability: To receive your personal data in a structured, commonly used format.
• Right to lodge a complaint: To file a complaint with the National Privacy Commission (NPC) if you believe your rights under RA 10173 have been violated.

To exercise any of these rights, please contact oke7's Data Protection Officer via the channels described in Section 13. We will respond to verifiable requests within thirty (30) days. Some requests may be subject to identity verification before we can act on them.

11. Children's Privacy

The oke7 Platform is strictly prohibited for use by persons under twenty-one (21) years of age, as required by PAGCOR and Philippine gaming law. oke7 does not knowingly collect personal information from minors. If oke7 discovers that a registered account belongs to a person under 21, the account will be immediately suspended, all associated data reviewed, and the matter escalated in accordance with our regulatory obligations.

If you are a parent or guardian and believe that a minor in your care has created an oke7 account, please contact support immediately via live chat so we can investigate and take appropriate action.

12. Amendments to This Policy

oke7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or PAGCOR requirements. Material changes will be communicated to registered players via email or SMS notification with reasonable advance notice. The "Last updated" date at the top of this Policy indicates when the most recent revision was made.

Your continued use of the oke7 Platform after the effective date of any amendment constitutes your acknowledgement of and agreement to the revised Policy. If you do not agree with the revised Policy, you should close your account as described in the oke7 Terms and Conditions.

13. Contact and Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by oke7, please contact us through the following official channels:

• Live Chat: Available 24/7 directly on the oke7 Platform — the fastest way to reach us.
• Email (Data Privacy): [email protected] — please include "Data Privacy Request" in the subject line. (Plain text — not a clickable link.)
• Response Time: oke7 targets a response to data privacy requests within fifteen (15) business days of receipt, and within thirty (30) calendar days for formal data subject rights requests.

oke7 has designated a Data Protection Officer (DPO) as required under RA 10173. Contact details for the DPO are available on request through the support channels above. You also have the right to escalate unresolved privacy concerns to the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph (not a clickable link — visit directly via your browser).