ocbet Privacy Policy

1. Introduction

ocbet ("ocbet," "we," "us," or "our") operates the online gaming platform accessible at ocbet.one and is committed to protecting the privacy and personal data of all users ("you," "Player," or "Data Subject"). This Privacy Policy describes how ocbet collects, uses, stores, shares, and protects your personal information when you access or use the ocbet platform, including our website, mobile applications, and related services.

This Privacy Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC"). By registering for or using the ocbet platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Privacy Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, which are incorporated by reference.

2. Personal Data We Collect

ocbet collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is collected. The categories of personal data we collect include:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued ID numbers (e.g., PhilSys ID, passport number, driver's license number, SSS/GSIS number).
• Contact Data: Email address, mobile number, and residential address (including barangay, city/municipality, province, and postal code).
• Financial Data: GCash account details, Maya account details, bank account information (account name, account number, bank name), and transaction history on the ocbet platform.
• KYC Verification Data: Copies of government-issued IDs, proof of address documents, selfies or live photos submitted for identity verification, and source of funds declarations where required.
• Technical Data: IP address, device identifiers, browser type and version, operating system, time zone, and login timestamps.
• Usage Data: Pages visited, games played, session duration, betting history, deposit and withdrawal records, and platform interaction logs.
• Communications Data: Records of your correspondence with ocbet customer support, including live chat transcripts and email exchanges.
• Responsible Gaming Data: Self-exclusion requests, deposit limit settings, cooling-off period activations, and session time limit preferences.

ocbet does not intentionally collect sensitive personal information beyond what is strictly required for KYC compliance and regulatory reporting obligations. Where sensitive personal information is collected, it is processed with heightened security measures and only for the specific purpose for which it was obtained.

3. How We Use Your Personal Data

ocbet processes your personal data for the following purposes:

1. Account Registration & Management: To create, verify, and maintain your ocbet account, including KYC identity verification as required by PAGCOR and Philippine anti-money laundering regulations.
2. Service Delivery: To provide access to games, process deposits and withdrawals, credit bonuses, and deliver the core functionality of the ocbet platform.
3. Regulatory Compliance: To comply with obligations under the Anti-Money Laundering Act (AMLA), PAGCOR licensing requirements, and other applicable Philippine laws and regulations, including mandatory reporting of suspicious transactions.
4. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other prohibited conduct on the ocbet platform.
5. Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
6. Responsible Gaming: To administer self-exclusion requests, deposit limits, and other responsible gaming tools, and to identify players who may be exhibiting signs of problem gambling.
7. Platform Improvement: To analyze usage patterns, conduct internal research, and improve the features, performance, and user experience of the ocbet platform.
8. Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent or where permitted by applicable law. You may opt out of marketing communications at any time.

4. Legal Basis for Processing

ocbet processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Consent: Where you have given your explicit consent to the processing of your personal data for a specific purpose, such as receiving marketing communications.
• Contractual Necessity: Where processing is necessary for the performance of the contract between you and ocbet (i.e., the Terms & Conditions), including account management, game access, and financial transactions.
• Legal Obligation: Where processing is required to comply with a legal obligation applicable to ocbet, including AMLA reporting, PAGCOR compliance, and NPC requirements.
• Legitimate Interests: Where processing is necessary for the legitimate interests of ocbet, such as fraud prevention, platform security, and service improvement, provided that such interests are not overridden by your rights and freedoms.

5. Data Sharing & Disclosure

ocbet does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where required by law or regulatory directive.
• KYC & Identity Verification Providers: Third-party service providers engaged to perform identity verification and document authentication as part of the KYC process.
• Payment Processors: GCash, Maya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for the processing of deposits and withdrawals.
• Game Content Providers: Licensed game studios and software providers whose games are available on the ocbet platform, to the extent necessary for game delivery and fairness auditing.
• IT & Cloud Service Providers: Hosting, database, and infrastructure providers engaged to operate the ocbet platform, subject to strict data processing agreements.
• Professional Advisers: Legal counsel, auditors, and compliance consultants, where necessary for the conduct of ocbet's business and legal obligations.

In all cases where personal data is shared with third parties, ocbet requires those parties to maintain appropriate technical and organizational security measures and to process personal data only for the specified purpose.

6. Cookies & Tracking Technologies

ocbet uses cookies and similar tracking technologies (such as web beacons and local storage) on the ocbet platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how you use the platform.

The types of cookies used by ocbet include:

• Strictly Necessary Cookies: Essential for the operation of the ocbet platform, including session management, authentication, and security. These cannot be disabled.
• Analytics Cookies: Used to collect aggregated, anonymized data about how players use the platform, helping us identify areas for improvement. No personally identifiable information is shared with analytics providers.
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming tool configurations.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity verification.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the ocbet platform. ocbet does not use cookies for cross-site advertising or behavioral profiling for third-party marketing purposes.

7. Data Retention

ocbet retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and Philippine anti-money laundering regulations.
• KYC Documents: Retained for a minimum of five (5) years from the date of the last transaction, in compliance with the Anti-Money Laundering Act.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer Support Records: Retained for three (3) years from the date of the last interaction.
• Marketing Consent Records: Retained until you withdraw consent or for three (3) years from the date of last engagement, whichever is earlier.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with ocbet's data disposal procedures.

8. Data Security

ocbet implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• TLS encryption for all data in transit between your device and the ocbet platform;
• AES-256 encryption for sensitive data stored at rest;
• Multi-factor authentication options for player accounts;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing;
• Intrusion detection and prevention systems monitoring the ocbet infrastructure 24/7;
• Staff training on data privacy obligations and information security best practices.

While ocbet takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. You are responsible for maintaining the confidentiality of your ocbet login credentials and for notifying us immediately if you suspect any unauthorized access to your account.

9. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ocbet:

• Right to be Informed: The right to be informed of how your personal data is being collected and processed, as set out in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data ocbet holds about you and information about how it is processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data held by ocbet.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to ocbet's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the contact details in Section 13. ocbet will respond to all verified data subject requests within fifteen (15) business days, as required by the DPA IRR.

10. Children's Privacy

The ocbet platform is strictly intended for adults aged 21 years and above, as required under Philippine law and PAGCOR regulations. ocbet does not knowingly collect personal data from individuals under the age of 21. If ocbet becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended and the personal data will be deleted in accordance with our data disposal procedures.

If you are a parent or guardian and believe that your child has registered on the ocbet platform, please contact us immediately at the details provided in Section 13 so that we can take appropriate action.

11. International Data Transfers

ocbet primarily stores and processes personal data within the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines (for example, cloud infrastructure providers or game content studios), ocbet ensures that such transfers are conducted in compliance with the Data Privacy Act of 2012 and NPC guidelines on cross-border data transfers.

Specifically, ocbet will only transfer personal data internationally where: (a) the recipient country provides an adequate level of data protection as recognized by the NPC; or (b) appropriate safeguards are in place, such as data processing agreements incorporating standard contractual clauses approved by the NPC; or (c) the transfer is necessary for the performance of your contract with ocbet.

12. Changes to This Privacy Policy

ocbet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, ocbet will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect.

The "Effective Date" at the top of this Privacy Policy indicates when the current version was last updated. Your continued use of the ocbet platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how ocbet protects your personal data.

13. Contact & Data Protection Officer

ocbet has appointed a Data Protection Officer ("DPO") in accordance with the requirements of the Data Privacy Act of 2012. If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our DPO:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated. Information on how to file a complaint is available on the NPC's official website.