Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") applies to all personal data and information collected by okttt ("Company," "we," "us," or "our") through our online gaming platform accessible at https://okttt.cam (the "Platform" or "Website"), mobile applications, and any related services we provide. By creating an account, accessing the Platform, or using our services, you ("User," "Player," "you," or "your") acknowledge that you have read, understood, and consent to the collection, use, processing, and disclosure of your personal information as described in this Policy.

okttt operates under the regulatory authority of the Philippine Amusement and Gaming Corporation (PAGCOR) and is committed to full compliance with the Data Privacy Act of 2012, its Implementing Rules and Regulations, and all relevant circulars issued by the National Privacy Commission of the Philippines. We recognize the importance of privacy in the digital age and have implemented comprehensive technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction.

2. Data Controller Information

For the purposes of data protection law, okttt is the data controller responsible for your personal information. Our designated Data Protection Officer (DPO) oversees all data protection matters and can be contacted regarding any questions, concerns, or requests related to this Privacy Policy.

Data Protection Officer Contact:
Email: [email protected]
Mailing Address: [Company registered address would be listed here]
Response Time: We aim to respond to all data protection inquiries within fourteen (14) business days.

3. Information We Collect

okttt collects various types of personal information necessary to provide gaming services, comply with legal and regulatory obligations, prevent fraud, and enhance user experience. The categories of information we collect include:

3.1 Information You Provide Directly

When you register for an account or use our services, you provide information including but not limited to:

• Registration Information: Full legal name, date of birth, gender, email address, mobile phone number, residential address, nationality, and chosen username and password.
• Identity Verification Documents: Government-issued identification (passport, driver's license, national ID, UMID, voter's ID), proof of address documents (utility bills, bank statements, government correspondence), selfie photographs, and any other documentation required for Know Your Customer (KYC) compliance.
• Financial Information: Payment method details including GCash account information, PayMaya account information, bank account numbers, credit/debit card information (card number, expiration date, CVV), cryptocurrency wallet addresses, and transaction history.
• Communication Data: Content of messages sent through live chat, email correspondence, customer support tickets, survey responses, and any other communications with okttt staff.
• Preference Settings: Gaming preferences, language preferences, notification settings, responsible gaming limits, and marketing communication preferences.

3.2 Information Collected Automatically

When you access or use the okttt Platform, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, device identifiers (IMEI, MAC address, advertising ID), screen resolution, and installed software.
• Connection Data: IP address, internet service provider, geographic location (country, region, city derived from IP address), connection timestamps, and network information.
• Usage Information: Pages visited, features used, games played, bet amounts, win/loss records, session duration, click patterns, navigation paths, referring URLs, and exit pages.
• Cookies and Similar Technologies: Data collected through cookies, web beacons, pixel tags, local storage, and similar tracking technologies as described in our Cookie Policy.
• Log Files: Server logs containing access times, error messages, system activity, and technical diagnostics.

3.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment Processors: Transaction verification data, payment confirmation, and fraud detection information from GCash, PayMaya, banks, and other payment service providers.
• Identity Verification Services: Age verification, identity authentication, and fraud prevention data from third-party verification providers.
• Game Providers: Gameplay statistics, game outcomes, and technical data from our licensed game content partners.
• Public Databases: Information from publicly accessible databases used to verify identity, prevent fraud, or comply with regulatory obligations.
• Marketing Partners: Attribution data and campaign performance metrics from advertising platforms (subject to your consent where required).

4. How We Use Your Information

okttt processes your personal information for specific, explicit, and legitimate purposes in accordance with Philippine data protection law. We use your information for the following purposes:

4.1 Service Provision and Account Management

• Creating and maintaining your gaming account
• Processing deposits, withdrawals, and financial transactions
• Enabling participation in games, tournaments, and promotions
• Managing bonuses, loyalty rewards, and promotional offers
• Providing customer support and responding to inquiries
• Personalizing your gaming experience and preferences
• Facilitating social features and player interactions where applicable

4.2 Legal and Regulatory Compliance

• Verifying your identity and age to prevent underage gambling
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks
• Complying with PAGCOR regulations and reporting requirements
• Maintaining responsible gaming practices and self-exclusion programs
• Responding to lawful requests from government authorities and regulatory bodies
• Complying with tax obligations and financial reporting requirements
• Preserving records for audit and regulatory inspection purposes

4.3 Security, Fraud Prevention, and Risk Management

• Detecting and preventing fraud, money laundering, and other illegal activities
• Identifying and blocking prohibited users and duplicate accounts
• Monitoring for collusion, bonus abuse, and unfair gaming practices
• Protecting the security and integrity of our Platform and systems
• Investigating suspicious transactions and gaming patterns
• Enforcing our Terms and Conditions and other policies
• Protecting against unauthorized access and cyber threats

4.4 Marketing and Communications (Subject to Consent)

• Sending promotional offers, bonuses, and special deals via email, SMS, or push notifications
• Providing personalized marketing based on your gaming preferences and behavior
• Conducting market research and customer satisfaction surveys
• Informing you about new games, features, and platform updates
• Managing your participation in competitions and prize draws

You may opt out of marketing communications at any time by clicking the unsubscribe link in emails, adjusting your account notification settings, or contacting customer support. Note that you cannot opt out of transactional or service-related communications necessary for account operation.

4.5 Platform Improvement and Analytics

• Analyzing usage patterns to improve user experience and interface design
• Testing new features, games, and functionality
• Generating aggregated statistics and reports for business intelligence
• Optimizing platform performance, speed, and reliability
• Understanding player preferences and behavior for product development
• Conducting A/B testing and conversion optimization

5. Legal Basis for Processing

Under the Philippine Data Privacy Act and international data protection standards, we rely on the following legal bases for processing your personal information:

Processing Purpose	Legal Basis
Account creation and service provision	Performance of contract
Age and identity verification	Legal obligation / Legitimate interest
Financial transactions and payment processing	Performance of contract
KYC/AML compliance and regulatory reporting	Legal obligation
Fraud prevention and security	Legitimate interest
Marketing communications	Consent (where required by law)
Platform analytics and improvement	Legitimate interest
Customer support and dispute resolution	Performance of contract / Legitimate interest

Where we rely on legitimate interest as a legal basis, we have conducted a balancing test to ensure that our interests do not override your fundamental rights and freedoms. You have the right to object to processing based on legitimate interest.

6. Data Sharing and Disclosure

okttt does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with selected third parties under the following circumstances:

6.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: GCash, PayMaya, banks, and other financial institutions for processing deposits and withdrawals
• Identity Verification Services: Third-party KYC providers for age and identity verification
• Game Providers: Licensed software providers who supply gaming content and platforms
• Cloud Hosting Services: Infrastructure providers who host our servers and databases
• Customer Support Platforms: Live chat and helpdesk software providers
• Marketing and Analytics Services: Email service providers, analytics platforms, and advertising networks (subject to your consent)
• Security and Fraud Prevention Services: Providers of fraud detection, bot prevention, and cybersecurity solutions

These service providers are contractually bound to protect your information, use it only for specified purposes, and comply with applicable data protection laws. They are not permitted to use your personal data for their own purposes.

6.2 Regulatory and Legal Requirements

We may disclose your personal information when required or permitted by law, including:

• To PAGCOR and other gaming regulatory authorities for licensing and compliance purposes
• To law enforcement agencies, courts, and government authorities in response to valid legal requests
• To tax authorities for tax reporting and compliance obligations
• To financial intelligence units for anti-money laundering investigations
• To the National Privacy Commission in response to data protection inquiries
• When necessary to establish, exercise, or defend legal claims
• To comply with court orders, subpoenas, or other legal processes

6.3 Corporate Transactions

In the event of a merger, acquisition, sale of assets, reorganization, bankruptcy, or similar corporate transaction involving okttt, your personal information may be transferred to the successor entity or acquiring party, subject to the same privacy protections outlined in this Policy. You will be notified of any such change in ownership or control.

6.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with business partners, advertisers, researchers, and other third parties for analytical, marketing, and business purposes. This data does not constitute personal information under data protection law.

7. International Data Transfers

While okttt primarily operates within the Philippines and stores data on servers located within Philippine territory or in jurisdictions with adequate data protection standards, some of our third-party service providers may be located outside the Philippines. When we transfer your personal information internationally, we ensure appropriate safeguards are in place, including:

• Transfers only to countries recognized by the National Privacy Commission as providing adequate data protection
• Implementation of Standard Contractual Clauses approved by data protection authorities
• Binding Corporate Rules for transfers within multinational corporate groups
• Adherence to international data protection frameworks and certifications
• Explicit consent for transfers where legally required

You may request information about the specific safeguards applied to international transfers of your data by contacting our Data Protection Officer.

8. Data Retention

okttt retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, enforce agreements, and maintain business records. Specific retention periods include:

• Active Account Data: Retained for the duration of your account's active status and for a reasonable period after account closure to accommodate potential reactivation requests
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of transaction to comply with tax, anti-money laundering, and financial reporting requirements
• Identity Verification Documents: Retained for seven (7) years after account closure or as required by PAGCOR regulations
• Gaming Activity Logs: Retained for seven (7) years to comply with gaming regulations and enable dispute resolution
• Communication Records: Customer support correspondence retained for three (3) years; marketing communications records retained for two (2) years after opt-out
• Security and Fraud Prevention Data: Retained for up to ten (10) years or as long as necessary for fraud prevention and legal defense purposes

Upon expiration of the applicable retention period, personal information is securely deleted or anonymized in accordance with our data retention and disposal procedures. Anonymized data may be retained indefinitely for analytical and research purposes.

9. Data Security Measures

okttt implements comprehensive technical, physical, and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security framework includes:

9.1 Technical Security

• 256-bit SSL/TLS encryption for all data transmissions between your device and our servers
• Advanced encryption standards (AES-256) for data at rest in databases and storage systems
• Multi-factor authentication for administrative access to systems and databases
• Regular security patches and updates to all systems and software
• Intrusion detection and prevention systems (IDS/IPS)
• Web application firewalls (WAF) to protect against common attacks
• DDoS protection and rate limiting to prevent service disruption
• Secure password hashing using industry-standard algorithms (bcrypt, Argon2)

9.2 Organizational Security

• Strict access controls limiting employee access to personal data on a need-to-know basis
• Comprehensive data protection training for all staff handling personal information
• Confidentiality agreements and non-disclosure obligations for all employees and contractors
• Regular security audits and vulnerability assessments by independent third parties
• Incident response plan and procedures for data breach notification
• Background checks for employees with access to sensitive systems

9.3 Physical Security

• Secure data centers with 24/7 surveillance and restricted physical access
• Environmental controls (fire suppression, cooling, power redundancy) to protect hardware
• Secure disposal procedures for physical media containing personal data

While we implement robust security measures, no system can guarantee absolute security. You also play a critical role in protecting your account by choosing a strong password, enabling two-factor authentication, keeping your login credentials confidential, and promptly notifying us of any suspected unauthorized access.

10. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal information:

10.1 Right to Be Informed

You have the right to be informed about the collection and processing of your personal data, including the purposes of processing, recipients of data, and retention periods. This Privacy Policy serves to fulfill that obligation.

10.2 Right to Access

You have the right to obtain confirmation of whether okttt is processing your personal data and, if so, to access that data and receive information about how it is being processed. You may request a copy of your personal data in a commonly used electronic format.

10.3 Right to Rectification

You have the right to correct inaccurate or incomplete personal data. You may update most account information directly through your account settings. For changes requiring verification, contact our customer support team.

10.4 Right to Erasure (Right to Be Forgotten)

You have the right to request deletion of your personal data when:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent and no other legal basis exists for processing
• You object to processing and no overriding legitimate grounds exist
• The data has been unlawfully processed
• Deletion is required to comply with legal obligations

Note that this right is not absolute. We may be legally required to retain certain information for compliance with regulatory obligations, dispute resolution, or legal defense purposes.

10.5 Right to Object

You have the right to object to processing of your personal data when processing is based on legitimate interest or for direct marketing purposes. Upon receiving an objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests or the processing is necessary for legal claims.

10.6 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller when technically feasible. This right applies to data you provided to us and that we process based on consent or contract performance.

10.7 Right to File a Complaint

If you believe your data protection rights have been violated, you have the right to file a complaint with the National Privacy Commission of the Philippines:

National Privacy Commission
5th Floor, Philippine International Convention Center, Vicente Sotto Street, Pasay City 1308, Philippines
Email: [email protected]
Website: https://www.privacy.gov.ph
Hotline: (+632) 8234-2228

10.8 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer using the contact information provided in Section 2. We will respond to your request within fifteen (15) days and provide a substantive response within thirty (30) days. If additional time is needed, we will inform you of the extension and the reasons for the delay.

We may require verification of your identity before processing requests to protect against fraudulent or unauthorized requests. No fee will be charged for reasonable requests, though we reserve the right to charge a reasonable administrative fee for manifestly unfounded, excessive, or repetitive requests.

11. Cookies and Tracking Technologies

okttt uses cookies, web beacons, pixel tags, local storage, and similar technologies to enhance user experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that enable us to recognize you and remember your preferences.

We use the following types of cookies:

• Essential Cookies: Necessary for platform functionality, security, and basic operations. These cannot be disabled.
• Performance Cookies: Collect anonymous information about how you use our Platform to help us improve performance and user experience.
• Functionality Cookies: Remember your preferences and settings to provide personalized features.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising (subject to your consent).

You can manage your cookie preferences through your browser settings or our Cookie Consent Manager. Note that disabling certain cookies may impact platform functionality and user experience. For detailed information, please review our separate Cookie Policy.

12. Third-Party Links and Services

The okttt Platform may contain links to third-party websites, services, or applications that are not operated or controlled by us. This Privacy Policy does not apply to third-party sites, and we are not responsible for their privacy practices or content. We encourage you to review the privacy policies of any third-party sites you visit.

When you use third-party payment services (GCash, PayMaya, banks) or social media platforms through our Platform, those services may collect information about you in accordance with their own privacy policies. okttt does not control and is not responsible for third-party data collection practices.

13. Children's Privacy

The okttt Platform is intended exclusively for users aged 21 years and older. We do not knowingly collect, use, or solicit personal information from individuals under the age of 21. If we become aware that we have collected personal information from a person under 21 without proper age verification, we will immediately delete that information and terminate the associated account.

If you believe that a person under 21 has provided personal information to okttt, please contact us immediately at [email protected] so that we can take appropriate action.

14. Changes to This Privacy Policy

okttt reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Updating the "Last Reviewed" date at the top of this Policy
• Displaying a prominent notice on the Platform
• Sending an email notification to your registered email address (for significant changes)
• Requiring your acknowledgment or renewed consent where legally required

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Platform after changes become effective constitutes acceptance of the revised Policy.

15. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

Data Protection Officer
Email: [email protected]
Subject Line: "Privacy Inquiry" or "Data Subject Request"

Customer Support
Email: [email protected]
Live Chat: Available 24/7 through your account dashboard
Response Time: 24-48 hours for general inquiries; 15-30 days for formal data subject requests