oke7 Privacy Policy — How We Handle Your Personal Data

1 Who We Are

This Privacy Policy applies to oke7 ("we," "us," "our"), the operator of the online gaming and sports betting platform accessible at oke7.click. oke7 is the data controller responsible for the personal information you provide when using our platform and services.

For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173), oke7 acts as the personal information controller for data collected through the oke7 platform. If you have any questions about this Privacy Policy or how your data is handled, you can contact oke7 directly using the details provided in Section 14 of this policy.

This policy covers all data processing activities related to the oke7 platform — including account registration, sports betting, casino gameplay, payment processing, customer support interactions, and marketing communications where you have opted in.

2 Data We Collect

oke7 collects personal information through different points of interaction with the platform. Below is a breakdown of the categories of data we collect and the circumstances under which each is gathered.

2.1 Registration and Account Data

When you register an account at oke7, we collect the following information:

• Full legal name
• Date of birth
• Residential address
• Email address
• Mobile phone number
• Username and password (password stored in encrypted form only)
• Preferred currency and language settings

2.2 Identity Verification (KYC) Data

To comply with our gaming license obligations and anti-money laundering requirements, oke7 may request the following documents during the Know Your Customer (KYC) verification process:

• Copy of a valid Philippine government-issued photo ID (PhilSys ID, passport, driver's license, UMID, SSS/GSIS ID, or voter's ID)
• Proof of residential address (utility bill, bank statement, or similar document not older than three months)
• Selfie photograph or video verification in some cases
• Proof of payment method ownership for certain withdrawal methods

2.3 Financial Transaction Data

When you deposit or withdraw funds at oke7, we collect transaction data including deposit amounts, payment method details (such as GCash account reference numbers or masked bank card details), transaction timestamps, and withdrawal history. Full card numbers are never stored on oke7 systems — only tokenised or masked references provided by payment processors.

2.4 Gaming Activity Data

oke7 records all gaming and betting activity on your account for security, settlement, and responsible gaming purposes. This includes sports bet details, casino game history, wager amounts, outcomes, and session timestamps.

2.5 Technical and Device Data

When you access the oke7 platform, we automatically collect certain technical information including IP address, device type and operating system, browser type and version, referring URLs, and platform access timestamps. This data is used for security monitoring, fraud detection, and platform optimisation.

3 How We Use Your Data

oke7 uses the personal information we collect for the following purposes:

3.1 Account Management and Service Delivery

Your registration data is used to create and maintain your oke7 account, process deposits and withdrawals, settle bets and casino game outcomes, and provide the full range of products and services available on the platform.

3.2 Identity Verification and Anti-Money Laundering Compliance

KYC data is used to verify that you are who you say you are and that you meet the eligibility requirements to hold an oke7 account. This verification process is required by our gaming license and by Philippine anti-money laundering regulations applicable to online gaming operators.

3.3 Fraud Detection and Security

Technical and behavioural data collected during your sessions on oke7 is analysed to detect suspicious activity, prevent fraudulent transactions, identify bonus abuse patterns, and protect both individual accounts and the overall platform from security threats.

3.4 Responsible Gaming Monitoring

oke7 analyses gaming activity data to identify patterns that may be consistent with problematic gambling behaviour — such as rapidly escalating deposit amounts, unusually long uninterrupted sessions, or repeated attempts to reverse self-exclusion decisions. Where such patterns are identified, oke7 may take proactive steps including contacting the player and suggesting responsible gaming tools.

3.5 Customer Support

Communications data from support interactions is retained so that oke7 agents can provide context-aware assistance, track the history of an issue, and ensure consistency in how disputes or queries are handled over time.

3.6 Legal and Regulatory Compliance

oke7 is required to retain certain categories of data under Philippine gaming regulations and anti-money laundering laws. Transaction records, KYC documents, and gaming activity logs are retained for the periods mandated by applicable law, regardless of whether an account remains active.

4 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, oke7 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the Terms and Conditions you agreed to when registering — including account creation, payment processing, and bet settlement.
• Legal obligation: Processing required to comply with the obligations imposed by our gaming license, Philippine AML laws, tax regulations, and other applicable legal requirements.
• Legitimate interests: Processing for fraud detection, security monitoring, and platform improvement, where these interests do not override your rights and freedoms as a data subject.
• Consent: Processing for optional communications such as marketing emails and promotional SMS messages, where you have explicitly opted in. You may withdraw this consent at any time without affecting the lawfulness of processing that took place before withdrawal.

5 Data Sharing and Third Parties

oke7 does not sell your personal data to third parties. We share data only in the following limited circumstances:

5.1 Service Providers

oke7 works with trusted third-party service providers to operate the platform — including payment processors (such as GCash, Maya, and banking partners), identity verification providers, gaming software suppliers, fraud detection services, and customer support tools. These providers access only the data necessary to perform their specific function and are contractually bound to handle it in accordance with applicable privacy law.

5.2 Regulatory and Law Enforcement Authorities

oke7 may disclose personal data to Philippine gaming regulators, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or law enforcement agencies where required to do so by law, court order, or regulatory directive. In such cases, oke7 discloses only the minimum information required to comply with the applicable obligation.

5.3 Business Transfers

In the event of a merger, acquisition, or transfer of oke7's business operations, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified via your registered email address before your data is transferred to a new controller as a result of such a transaction.

6 Cookies and Tracking Technologies

The oke7 platform uses cookies and similar tracking technologies to deliver a functional and personalised experience. Cookies are small text files stored on your device by your browser when you visit oke7.

6.1 Types of Cookies Used

• Strictly necessary cookies: Required for core platform functionality — session management, login state, and security tokens. These cannot be disabled without breaking platform functionality.
• Functional cookies: Remember your preferences such as language setting, odds format, and display preferences to personalise your oke7 experience across sessions.
• Analytics cookies: Used to understand how players use the oke7 platform — which pages are most visited, where players drop off during registration, and how different features perform. This data helps oke7 improve the platform over time.
• Security cookies: Used to detect fraudulent logins, bot activity, and other suspicious behaviour patterns by analysing device fingerprint data across sessions.

6.2 Managing Cookies

You can manage cookies through your browser settings. Most browsers allow you to block or delete cookies, though disabling strictly necessary cookies will affect your ability to log in and use the oke7 platform normally. Detailed instructions for managing cookies in popular browsers are available through your browser's help documentation.

7 Data Retention

oke7 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Active account data: Retained for the duration of your account's active status plus a post-closure retention period required by gaming regulations.
• KYC and identity documents: Retained for a minimum of five years following account closure, as required by Philippine AML regulations.
• Transaction and gaming records: Retained for a minimum of five years for regulatory compliance purposes.
• Customer support communications: Retained for three years from the date of the most recent interaction, to support dispute resolution and quality assurance.
• Marketing consent records: Retained for as long as needed to demonstrate that valid consent was obtained, in accordance with data protection law.

After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

8 Data Security

oke7 implements a layered approach to data security designed to protect your personal information from unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• SSL/TLS encryption for all data transmitted between your device and the oke7 platform
• Encrypted storage of sensitive personal data and credentials on oke7 servers
• Access controls restricting internal access to personal data on a need-to-know basis
• Regular security assessments and vulnerability testing of the oke7 platform infrastructure
• Multi-factor authentication options available to players for additional account security
• 24/7 monitoring for unusual access patterns or potential security incidents

While oke7 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You also play a role in keeping your account safe — use a strong, unique password for your oke7 account and never share your login credentials with anyone.

9 Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by oke7. To exercise any of these rights, contact us using the details in Section 14.

oke7 will respond to data subject requests within 30 days of receipt. In some cases — particularly for complex or high-volume requests — this period may be extended by a further 30 days, and you will be notified of the extension. We may request proof of identity before fulfilling a data subject request to ensure we are responding to the correct individual.

10 Children's Privacy

The oke7 platform is strictly for individuals aged 21 years and above. oke7 does not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been provided by or on behalf of an individual under the minimum age, we will immediately close the associated account and delete all personal data collected in connection with it.

If you have reason to believe that a minor has registered an account at oke7 or that personal data relating to a minor has been submitted to oke7, please contact us immediately using the details in Section 14 so we can investigate and take appropriate action.

11 Marketing Communications

oke7 may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, and platform updates. These communications are sent only where you have given explicit consent — either during registration or subsequently through your account communication preferences settings.

You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any oke7 marketing email
• Updating your communication preferences in your oke7 account settings
• Contacting oke7 support and requesting removal from marketing lists

Opting out of marketing communications does not affect transactional communications — oke7 will continue to send account-related messages such as deposit confirmations, withdrawal processing updates, and security notifications regardless of your marketing preferences.

12 Third-Party Links

The oke7 platform may contain links to third-party websites or services that are not operated by oke7. When you click on a third-party link, you leave the oke7 platform and are subject to that third party's own privacy policy and terms of use.

oke7 has no control over the content, privacy practices, or data handling of third-party sites. We strongly recommend that you review the privacy policy of any third-party site you visit through a link from oke7. The inclusion of a link to a third-party site on the oke7 platform does not imply oke7's endorsement of that site's privacy practices.

13 Changes to This Privacy Policy

oke7 reviews this Privacy Policy regularly and will update it as needed to reflect changes in data processing practices, legal requirements, or platform functionality. When material changes are made, oke7 will notify you by email to the address registered on your account at least 14 days before the changes take effect.

The current version of this Privacy Policy is always accessible at oke7.click/privacy-policy. The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the oke7 platform after a revised policy takes effect constitutes acceptance of the updated terms.

If you do not agree with the revised Privacy Policy, you should stop using oke7 and contact support to request account closure before the effective date of the changes.

14 Contact Us and Data Privacy Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or want to report a privacy concern, you can reach the oke7 data privacy team through the following channel:

• Email: support@oke7.click
• Subject line: Use "Privacy Request" for data subject requests to ensure faster routing

oke7 aims to respond to all privacy-related queries within five business days for general questions, and within 30 calendar days for formal data subject rights requests.

If you are not satisfied with how oke7 has handled your privacy concern, you have the right to lodge a complaint with the Philippine National Privacy Commission (NPC). Information about how to do this is available at the NPC's official website.