okber Privacy Policy

This Privacy Policy ("Policy") is issued by okber Casino ("okber," "we," "us," "our") and applies to all personal information collected, processed, stored, or disclosed through the okber website located at okber.club and any associated services, features, or communications (collectively, the "Platform").

The purpose of this Policy is to inform you — as a registered Player, prospective Player, or visitor — of okber's data practices in a clear, honest, and complete manner. We believe that privacy transparency is not a bureaucratic formality; it is an obligation that goes with operating a platform that holds your financial and identity information.

This Policy is drafted in compliance with the Republic of the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued from time to time by the National Privacy Commission (NPC). Where PAGCOR regulatory requirements impose additional data handling obligations, those obligations are reflected in this Policy and take precedence to the extent of any inconsistency.

This Policy should be read together with okber's Terms and Conditions and Responsible Gaming Policy, which together form the complete framework governing your relationship with the Platform.

For the purposes of the Data Privacy Act of 2012, okber acts as the Personal Information Controller (PIC) in respect of all personal data collected and processed through the Platform. This means okber determines the purpose and means by which your personal data is processed.

okber has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Policy. The DPO can be reached through the contact channel described in Section 16 of this Policy.

Where okber engages third-party service providers (such as payment processors, game providers, or KYC verification services) to process your data on its behalf, those providers act as Personal Information Processors (PIPs) and are bound by data processing agreements that impose obligations consistent with the Data Privacy Act of 2012.

okber collects the following categories of personal data in the course of operating the Platform and providing services to registered Players:

okber does not collect or store complete payment card numbers, CVV codes, or full bank account credentials. Payment data collected is limited to what is necessary for payment verification and withdrawal routing, and is handled in accordance with applicable payment industry security standards.

okber collects personal data through the following methods:

• Direct provision by you: Information you voluntarily submit during account registration, KYC verification, payment setup, support interactions, and promotional participation. This is the primary source of personal data on the Platform.
• Automated collection during Platform use: Technical and activity data collected automatically when you interact with the Platform, including log data, device identifiers, IP addresses, and cookie-based session data. See Section 8 for full details on cookies and tracking.
• Third-party verification providers: Identity and age verification data obtained from third-party KYC service providers engaged by okber to fulfill PAGCOR-mandated verification requirements. These providers are contractually bound to process data only for the stated verification purpose.
• Payment service providers: Transaction confirmation data received from GCash, PayMaya, and banking partners when you initiate deposits or withdrawals. okber receives transaction status and reference data — not raw payment credentials.
• Game providers: Game session data generated when you play games supplied by third-party providers (such as JILI, PG Soft, Pragmatic Play) on the okber Platform. Game round data is logged server-side for integrity, audit, and dispute resolution purposes.

Under the Data Privacy Act of 2012, okber's processing of your personal data is lawful on one or more of the following grounds, depending on the specific processing activity:

• Contractual necessity: Processing necessary to perform the contract between you and okber — including operating your account, processing deposits and withdrawals, providing access to games, and honoring bonuses.
• Legal obligation: Processing required to comply with applicable Philippine law — including PAGCOR licensing conditions, anti-money laundering obligations under Republic Act No. 9160 (as amended), age verification requirements, and tax reporting obligations.
• Legitimate interests: Processing carried out for okber's legitimate business interests where those interests are not overridden by your data protection rights — including fraud prevention, account security monitoring, platform analytics, and responsible gaming monitoring.
• Consent: Where you have provided explicit consent to specific processing activities — such as receiving marketing communications or participating in optional personalization features. Consent-based processing is clearly flagged and may be withdrawn at any time as described in Section 11.

okber processes your personal data for the following specific purposes:

• Account management: Creating, maintaining, and administering your registered Account, including authentication, session management, and account history.
• Identity and age verification: Confirming that you are at least 21 years of age and that the identity information you provided is accurate, as required by PAGCOR and anti-money laundering legislation.
• Payment processing: Facilitating deposits from and withdrawals to your registered GCash, PayMaya, or bank accounts; verifying transaction integrity; and maintaining financial records.
• Game delivery and integrity: Providing access to casino games, recording game outcomes for audit and dispute resolution purposes, and maintaining the integrity of the gaming environment.
• Bonus and promotion administration: Verifying eligibility for and administering bonuses, free spins, cashback offers, and VIP tier benefits.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, account takeover attempts, multi-accounting, and other security threats to the Platform and its users.
• Responsible gaming compliance: Monitoring gaming activity for indicators of problem gambling behavior; administering self-exclusion, deposit limit, and session time tools; and fulfilling PAGCOR responsible gaming obligations.
• Customer support: Responding to inquiries, resolving complaints, and providing technical assistance through live chat, email, and other support channels.
• Legal and regulatory compliance: Fulfilling reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other regulatory bodies as required by Philippine law.
• Service improvement: Analyzing anonymized or aggregated Platform usage data to improve the user experience, identify technical issues, and develop new features — in a manner that does not single out individual users.
• Marketing communications (consent-based only): Sending promotional information about okber's offers, new games, and VIP program updates to Players who have opted in to receive such communications. This processing is strictly consent-based and subject to opt-out at any time.

okber does not share your personal data with third parties except in the following circumstances:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and card payment processors receive transaction data necessary to execute deposits and withdrawals. These providers operate under their own privacy policies and are independently regulated.
• KYC and identity verification providers: Third-party services engaged by okber to perform identity, age, and document verification as required by PAGCOR. These providers are classified as Personal Information Processors and process data only on okber's instructions.
• Game software providers: JILI Games, PG Soft, Pragmatic Play, and other certified game studios receive the minimum session data necessary to deliver game content and record round outcomes. These providers are subject to PAGCOR certification requirements and their own data processing terms.
• Technology service providers: Cloud hosting, cybersecurity, analytics, and customer support platform vendors that process data on okber's behalf under binding data processing agreements and are prohibited from using your data for their own purposes.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council, the Bureau of Internal Revenue, the National Privacy Commission, the National Bureau of Investigation, and other competent Philippine authorities where disclosure is required by law, court order, or regulatory direction.
• Law enforcement: Where disclosure is required by a valid legal demand from Philippine law enforcement agencies in connection with a criminal investigation or legal proceeding.

In all cases of third-party data sharing, okber applies data minimization principles — sharing only the minimum data necessary for the stated purpose. okber maintains records of all third-party data sharing arrangements.

okber uses cookies and similar browser-based technologies to operate the Platform and improve the user experience. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function — including authentication session tokens, security cookies, and game session state management. These cannot be disabled without breaking Platform functionality.
• Functional cookies: Store your preferences such as language settings, game history display preferences, and lobby layout choices. These enhance your experience but are not required for core functionality.
• Analytics cookies: Anonymized data on how users navigate the Platform — page load times, feature usage frequency, error rates. This data is aggregated and not linked to individual accounts. Used to improve Platform performance.
• Security cookies: Short-lived cookies used to detect fraudulent sessions, cross-site request forgery (CSRF) protection, and bot detection. These are a security requirement, not a tracking mechanism.

okber does not use third-party advertising cookies or behavioral tracking cookies for cross-site advertising purposes. The Platform does not participate in advertising networks that profile users across multiple websites.

okber retains personal data only for as long as necessary to fulfill the purposes described in this Policy, or as required by applicable Philippine law and PAGCOR regulatory requirements. The following general retention periods apply:

• Active account data: Retained for the duration of the Account's active status plus a minimum period following account closure, as required by PAGCOR record-keeping obligations and anti-money laundering regulations.
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure, consistent with Anti-Money Laundering Council record-keeping requirements under Republic Act No. 9160 as amended.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by BIR and AMLC regulations.
• Gaming activity logs: Retained for a minimum of three (3) years for audit and dispute resolution purposes, subject to longer retention where required by PAGCOR licensing conditions.
• Customer support records: Retained for two (2) years following resolution of the relevant inquiry or complaint.
• Marketing consent records: Retained for the duration of the consent relationship plus one (1) year following withdrawal of consent, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents reconstruction of the original data. Where anonymization is applied, the resulting data may be retained indefinitely for statistical and analytical purposes.

okber implements technical, organizational, and physical security measures designed to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

• Encryption in transit: All data exchanged between your browser and okber's servers is encrypted using TLS 1.2 or higher. The Platform enforces HTTPS throughout — plain HTTP connections are not accepted.
• Encryption at rest: Sensitive personal data — including identity documents, financial data, and passwords — is encrypted at rest using industry-standard encryption algorithms.
• Password security: User passwords are stored using a one-way cryptographic hashing function with salting. okber never stores or transmits passwords in plain text under any circumstances.
• Access controls: Internal access to personal data is restricted on a need-to-know basis. okber staff access to player data is logged, monitored, and subject to role-based access control policies.
• Two-factor authentication: okber offers OTP-based two-factor authentication for all accounts. Players in high-risk scenarios (new device login, large withdrawal requests) may be required to complete 2FA as a condition of access.
• Regular security assessments: The Platform undergoes periodic security assessments including vulnerability scans and penetration testing conducted by qualified security professionals.
• Incident response: okber maintains a documented data breach response plan in compliance with NPC Circular 16-03 and the Data Privacy Act of 2012's breach notification requirements. In the event of a qualifying personal data breach, affected data subjects and the NPC will be notified within the timeframes prescribed by law.

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by okber. These rights are real and actionable — not token provisions:

To exercise any of the above rights, submit your request in writing to okber's Data Protection Officer using the contact details in Section 16. Requests will be acknowledged within 5 business days and resolved within 30 calendar days, unless complexity requires an extension (in which case you will be notified).

If you are not satisfied with okber's response to a data subject rights request, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines, which is the competent supervisory authority for data privacy matters under Philippine law.

The okber Platform is strictly intended for individuals aged 21 years and above. okber does not knowingly collect, process, or retain personal data from individuals under the age of 21. The Platform's age verification process is designed to identify and reject registration attempts by underage individuals.

If okber becomes aware that personal data has been collected from an individual under 21 years of age — whether through a failure of age verification controls or through misrepresentation — that Account will be immediately suspended, all related transactions voided, any funds returned to their source where possible, and all associated personal data deleted from okber's systems.

If you believe that an individual under the age of 21 has registered an Account on okber using false information, please report this immediately to our support team. We take underage access to gambling platforms seriously and will act promptly on credible reports.

Some of okber's third-party service providers — including game software providers and cloud infrastructure vendors — may be located outside the Philippines or may process data on servers located outside the Philippines. Where such cross-border data transfers occur, okber applies the following safeguards:

• Transfer is permitted only to countries, territories, or organizations that provide an adequate level of data protection as determined by the National Privacy Commission, or
• Where adequate protection is not independently confirmed, transfers are conducted under standard contractual clauses or binding corporate rules that impose data protection obligations equivalent to those under Philippine law, or
• Transfer is necessary for the performance of a contract to which you are a party (e.g., delivery of a game session from a provider's servers).

In all cross-border transfer scenarios, okber retains full responsibility for ensuring that your personal data is protected to the standards required by the Data Privacy Act of 2012, regardless of where processing physically occurs.

The okber Platform may contain references to third-party services, including game providers' own websites, payment provider portals, and regulatory bodies. If you navigate away from the okber Platform to a third-party website, this Privacy Policy no longer applies. okber has no control over, and is not responsible for, the data practices of third-party websites.

The inclusion of a reference to a third-party service on the okber Platform does not constitute an endorsement of that third party's data practices. You should review the relevant third party's privacy policy before providing any personal information to that third party.

okber reserves the right to update or amend this Privacy Policy at any time. The "Effective Date" displayed at the top of this page will be updated whenever a new version is published. okber will notify registered Players of material changes to this Policy through Account notifications or, where a registered email address is on file, by email, prior to the changes taking effect.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgment of and agreement to the updated Policy. If you object to a Privacy Policy amendment, you may close your Account as described in the Terms and Conditions before the updated Policy takes effect.

Non-material changes — such as clarifications, corrections of typographical errors, or reorganization of content without substantive change — may be made without prior notice and will not alter the substance of okber's data processing commitments.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by okber, you may contact our Data Protection Officer through the following channels:

• Email: support@okber.club — Please write "Privacy / DPO Request" in the subject line for efficient routing to the privacy team.
• Live Chat: Available 24/7 through the support widget on the Platform. Agents can create a formal DPO referral from a live chat interaction if needed.

okber will acknowledge data subject rights requests and privacy inquiries within 5 business days and will resolve them within 30 calendar days of acknowledgment.

Related policies: Terms & Conditions  ·  Responsible Gaming Policy