Privacy Policy

This Privacy Policy is issued by oktt Casino ("oktt", "we", "us", "our"), the operator of the online gaming platform accessible at oktt.app. oktt acts as the data controller in respect of the personal data of registered players and visitors to the platform.

This Privacy Policy applies to all personal data collected through the oktt website, mobile platform, customer support channels, and any other touchpoint through which you interact with oktt. It should be read alongside our Terms & Conditions, which govern your use of the platform as a whole.

oktt collects personal data from you in several ways — directly when you register or interact with the platform, automatically through your use of the site, and occasionally from third-party sources for verification purposes. The categories of data we collect include:

2.1 Registration and Identity Data

When you create an oktt account, we collect your full legal name, date of birth, nationality, residential address (including city — whether you are based in Manila, Cebu, Davao, Quezon City, Makati, or elsewhere in the Philippines), email address, and mobile number. This information is required to create and maintain your account and to comply with our Know Your Customer (KYC) obligations.

2.2 Financial Data

To process deposits and withdrawals in Philippine Peso (PHP), we collect payment method details including GCash account references, PayMaya identifiers, and bank account information for BPI, BDO, and Metrobank transactions. We do not store full card numbers or full bank account numbers on our servers — payment processing is handled by certified payment service providers.

2.3 Gaming Activity Data

We record your gaming history on the oktt platform, including games played, wagers placed, wins and losses, bonus usage, and session durations. This data is used for account management, responsible gaming monitoring, dispute resolution, and regulatory reporting.

2.4 Technical and Usage Data

When you access the oktt platform, we automatically collect technical data including your IP address, device type, operating system, browser type and version, referring URLs, pages visited, and session timestamps. This data helps us maintain platform security, diagnose technical issues, and improve the user experience.

2.5 Communications Data

We retain records of communications between you and the oktt support team, including live chat transcripts, email correspondence, and any documents you submit for verification purposes. These records are kept for quality assurance, dispute resolution, and regulatory compliance.

oktt uses the personal data it collects for the following purposes:

• Account Registration and Management: To create, verify, and maintain your oktt account, including processing your login credentials and keeping your account details up to date.
• Identity Verification (KYC): To verify your identity and age (minimum 21 years) in compliance with applicable regulations, and to prevent the use of the platform by ineligible individuals.
• Transaction Processing: To process deposits and withdrawals in PHP via your chosen payment method, and to maintain accurate financial records of all transactions.
• Platform Delivery: To provide you with access to oktt's games, promotions, and features, and to personalise your experience on the platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance through our support channels.
• Responsible Gaming: To monitor your gaming activity for signs of problem gambling behaviour and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, and other illegal activity on the platform.
• Legal and Regulatory Compliance: To comply with applicable laws, regulations, and regulatory requests, including anti-money laundering (AML) obligations and reporting requirements.
• Marketing Communications: To send you promotional offers, newsletters, and updates about oktt — but only where you have given your consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the functionality, security, and content of the oktt platform.

oktt processes your personal data on one or more of the following legal bases, as applicable to each processing activity:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your oktt account, process transactions, and deliver the gaming services you have requested.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and responsible gaming obligations.
• Legitimate Interests: Processing carried out for oktt's legitimate business interests, such as fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

oktt does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors, to facilitate deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and age verification services used to confirm your identity and eligibility to use the platform.
• Technology and Infrastructure Providers: Cloud hosting, data storage, and platform infrastructure providers who process data on our behalf under strict contractual data processing agreements.
• Game Software Providers: Licensed game developers and studios whose games are available on the oktt platform, to the extent necessary for game delivery and fairness auditing.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory request, including PAGCOR and the National Privacy Commission.
• Professional Advisers: Legal, accounting, and auditing firms engaged by oktt, subject to professional confidentiality obligations.

The oktt platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and gather analytics data. Cookies are small text files stored on your device when you visit the platform.

6.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function correctly. These include session authentication cookies and security tokens. They cannot be disabled without affecting platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised data about how players use the oktt platform, helping us identify areas for improvement. This data does not identify you personally.
• Functional Cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalised experience.
• Marketing Cookies: Used to deliver relevant promotional content. These are only set with your consent and can be disabled through your browser settings or our cookie preference centre.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the oktt platform.

oktt retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML and regulatory record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial regulations.
• Gaming Activity Data: Retained for the duration of your account and for three (3) years following account closure.
• Customer Support Communications: Retained for three (3) years from the date of the last communication, or longer if the communication relates to an unresolved dispute.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of the consent given.

When personal data is no longer required, oktt will securely delete or anonymise it in accordance with our data disposal procedures.

oktt implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the oktt platform.
• Encryption of sensitive data at rest, including payment information and identity documents.
• Multi-factor authentication options for player accounts.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Strict access controls ensuring that only authorised personnel can access personal data, on a need-to-know basis.
• Comprehensive staff training on data protection and information security practices.
• A documented incident response plan for managing personal data breaches.

The oktt platform is strictly restricted to individuals who are 21 years of age or older, in accordance with Philippine regulations governing casino-style gaming. oktt does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an individual under the minimum age, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered on the oktt platform or provided personal data to us, please contact our support team immediately so that we can investigate and take appropriate action.

To exercise any of your data rights as described in this Privacy Policy and under the Philippine Data Privacy Act of 2012, please contact the oktt Data Protection Officer (DPO) using the contact details provided in Section 13 of this Policy. Your request will be acknowledged within 72 hours and resolved within 30 calendar days, or within such other timeframe as required by applicable law.

Please note that certain rights are subject to limitations. For example, oktt may be required to retain certain data to comply with legal obligations even if you request its deletion. Where we are unable to fulfil a request in full, we will explain the reason in our response.

oktt will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. We reserve the right to request proof of identity before processing any data rights request to protect against unauthorised access to your personal data.

The oktt platform is primarily operated for and directed at players in the Philippines. However, some of our third-party service providers — including cloud infrastructure and technology partners — may process personal data in countries outside the Philippines. Where such transfers occur, oktt ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under Philippine law.

These safeguards may include contractual clauses that impose data protection obligations on the recipient, or reliance on the recipient's certification under a recognised data protection framework. If you would like further information about the safeguards applicable to a specific international transfer, please contact our Data Protection Officer.

oktt reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The effective date of the current version is stated at the top of this page. Where changes are material, we will notify registered players by email or via an in-platform notification prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically to stay informed about how oktt protects your personal data. Your continued use of the oktt platform following the publication of any amendment constitutes your acknowledgement of the updated Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way oktt handles your personal data, please contact our Data Protection Officer. You can reach the oktt support and compliance team via live chat within your account, available 24 hours a day, 7 days a week.

For written data protection enquiries, the oktt DPO can be contacted by email. The contact address is [email protected] — please note this is a plain text reference and is not a clickable link. Written enquiries are typically acknowledged within 72 hours and resolved within 30 calendar days.