okttt Privacy Policy

Overview

This Privacy Policy ("Policy") describes how okttt ("we," "us," or "our") collects, uses, stores, shares, and protects the personal information of players and visitors who access the okttt platform at okttt.app and any associated mobile interfaces or subdomains (collectively, the "Platform").

okttt is committed to protecting the privacy and personal data of all users in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). By registering an account or using the Platform, you acknowledge that you have read, understood, and agreed to the practices described in this Policy.

This Policy should be read together with our Terms & Conditions, which govern your use of the Platform. Capitalised terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

Data We Collect

okttt collects the following categories of personal data, depending on how you interact with the Platform:

We do not collect sensitive personal information (as defined under RA 10173) such as health data, religious beliefs, or political affiliations, unless specifically required by law or regulation and with your explicit consent.

How We Collect Data

okttt collects personal data through the following means:

• Direct interactions — Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies — Data collected automatically when you access the Platform, including cookies, web beacons, server logs, and similar tracking technologies. See Section 9 for details.
• Third-party sources — Data received from KYC verification providers, payment processors (GCash, Maya, banks), fraud prevention services, and game providers, where necessary to operate the Platform and comply with legal obligations.

Purpose of Processing

okttt processes your personal data for the following purposes:

• Account management — Creating, maintaining, and securing your player account.
• Identity verification (KYC) — Verifying your age (21+), identity, and eligibility to use the Platform in compliance with Philippine gaming regulations.
• Payment processing — Processing deposits and withdrawals via G Cash, Maya, and bank transfer in Philippine Peso.
• Regulatory compliance — Meeting obligations under Philippine anti-money laundering (AML) laws, gaming regulations, and NPC requirements.
• Fraud prevention and security — Detecting, investigating, and preventing fraudulent activity, cheating, and unauthorised account access.
• Customer support — Responding to your inquiries, complaints, and support requests.
• Responsible gaming — Monitoring gameplay patterns to identify problem gambling indicators and administering self-exclusion and limit tools.
• Platform improvement — Analysing usage data to improve game offerings, platform performance, and user experience.
• Marketing communications — Sending promotional offers and updates where you have opted in. You may opt out at any time via account settings or by contacting support.

Legal Basis

Under the Philippine Data Privacy Act of 2012, okttt processes your personal data on the following legal bases:

• Contractual necessity — Processing required to perform our contract with you, including account management, payment processing, and KYC verification.
• Legal obligation — Processing required to comply with applicable Philippine laws, including AML regulations, gaming licensing requirements, and NPC directives.
• Legitimate interests — Processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your privacy rights.
• Consent — Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing

okttt does not sell, rent, or trade your personal data to any third party. We may share your data only in the following limited circumstances:

• Payment processors — GCash, Maya, and partner banks receive the minimum data necessary to process your transactions securely.
• KYC and identity verification providers — Third-party verification services receive identity documents and data solely for the purpose of age and identity verification.
• Game providers — Licensed game studios may receive anonymised or pseudonymised session data necessary to deliver and audit game outcomes.
• Fraud prevention and AML services — Specialist providers assist in detecting suspicious activity. Data shared is limited to what is necessary for this purpose.
• Regulatory and law enforcement authorities — We will disclose personal data to the NPC, PAGCOR, AMLC, or other competent Philippine authorities when required by law, court order, or regulatory directive.
• Professional advisers — Lawyers, auditors, and insurers may access data under strict confidentiality obligations where necessary for their professional services.

Data Retention

okttt retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

Data Security

okttt implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption — All data transmitted between your device and the Platform is encrypted using TLS (Transport Layer Security). Stored personal and financial data is encrypted at rest using AES-256 or equivalent standards.
• Access controls — Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All staff with data access undergo privacy and security training.
• Two-factor authentication — Player accounts support two-factor authentication (2FA) to reduce the risk of unauthorised access.
• Regular security audits — The Platform undergoes periodic penetration testing and security assessments by independent third parties.
• Incident response — In the event of a personal data breach, okttt will notify affected players and the National Privacy Commission within the timeframes prescribed by RA 10173 and NPC regulations.

While we take all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorised access to your account.

Cookies & Tracking

The okttt Platform uses cookies and similar tracking technologies to ensure proper functionality, enhance security, and understand how players use the Platform. The following types of cookies may be used:

• Strictly necessary cookies — Essential for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without affecting Platform functionality.
• Functional cookies — Remember your preferences such as language settings, game display options, and responsible gaming limits you have set.
• Analytics cookies — Collect anonymised data about how players navigate the Platform, which pages are visited most, and where errors occur. This data helps us improve the Platform experience.
• Security cookies — Used to detect and prevent fraudulent activity, bot access, and account takeover attempts.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. We do not use cookies to serve third-party advertising or to track your activity on other websites.

Your Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okttt:

• Right to be informed — You have the right to know what personal data we collect, why we collect it, and how it is used. This Policy fulfils that obligation.
• Right of access — You may request a copy of the personal data we hold about you, including information on how it has been processed.
• Right to rectification — You may request correction of any inaccurate or incomplete personal data. You can update most account information directly through your account settings.
• Right to erasure — You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to data portability — You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object — You may object to processing based on legitimate interests or for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds.
• Right to withdraw consent — Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time without affecting prior processing.
• Right to lodge a complaint — You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. We will respond to all verified requests within thirty (30) days, as required by RA 10173.

Minors

The okttt Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from persons under 21 years of age. Age verification is conducted as part of the KYC process for all registered accounts.

If we become aware that personal data has been collected from a person under 21 years of age, we will immediately close the account, delete the associated personal data (subject to any legal retention obligations), and return any deposited funds to the source payment method where technically possible.

If you believe a minor has registered on the Platform, please contact our support team immediately via live chat so that we can investigate and take appropriate action.

International Transfers

Some of okttt's third-party service providers — including game providers and technical infrastructure partners — may be located outside the Philippines. Where personal data is transferred to a country that does not provide an equivalent level of data protection to the Philippines, okttt will ensure that appropriate safeguards are in place, such as contractual clauses approved by the National Privacy Commission or equivalent data protection agreements.

By using the Platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines, subject to the safeguards described above.

Policy Changes

okttt reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect, where practicable.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically. Your continued use of the Platform after any amendment takes effect constitutes your acceptance of the revised Policy.

Contact & DPO

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer (DPO). Our DPO is available 24 hours a day, 7 days a week via live chat within the Platform.

For written privacy requests or complaints, you may reach our DPO at the following address. This is provided as plain text only and is not a clickable link:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe your data privacy rights have been violated. Information on how to file a complaint is available on the NPC's official website.