Plain Language Notice: oke5 is committed to writing privacy policies in clear, straightforward language. If any section of this document is unclear, please contact our Data Protection Officer at privacy@oke5.app and we will explain it in plain Filipino English. Your understanding of how your data is handled matters to us.
Who We Are
oke5 is an online gaming platform operated at oke5.app, offering sports betting, live casino, poker, bingo, and related gaming services to players in the Philippines. oke5 is the data controller responsible for all personal information collected from players on this platform.
This Privacy Policy applies to all personal data collected through the oke5 website, mobile web experience, and any related oke5 communication channels including email, live chat, and telephone support. It does not apply to third-party websites or services that may be linked from oke5 — those have their own privacy policies that you should review separately.
oke5 operates in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. Our Data Protection Officer oversees all privacy compliance activities and can be contacted at privacy@oke5.app.
Personal Data We Collect
oke5 only collects personal data that is necessary for the purposes described in this policy. We do not collect information "just in case" — every data point we hold about you has a specific, legitimate purpose. The table below summarises the categories of personal data oke5 collects.
oke5 serves Filipino players from Iloilo to Manila — your data stays protected wherever you play
How We Collect Your Data
3.1 Data You Give Us Directly
Most of the personal data oke5 holds about you comes directly from you. This includes information you enter during registration (name, date of birth, email, mobile number), documents you submit during KYC verification (government ID, selfie), payment details you provide in the cashier, and communications you send to our support team. You are in control of this data at the point of collection — oke5 only receives what you choose to provide.
3.2 Data Collected Automatically
When you access the oke5 platform, certain technical data is collected automatically by our servers and analytics tools. This includes your IP address, device identifiers, browser version, operating system, and the actions you take within the platform (pages viewed, buttons clicked, session duration). This data is collected using standard web technologies including server logs, session tokens, and analytics cookies.
3.3 Data from Third Parties
In limited circumstances, oke5 receives data about you from third-party sources. These include:
- KYC verification providers — who confirm the authenticity of documents you submit and run identity checks against public records.
- Payment processors — such as GCash and Maya, who provide transaction confirmation and, where required by AML regulations, additional identity information.
- Fraud prevention services — which may share signals about known fraudulent activity patterns associated with certain device fingerprints or IP addresses.
Social Login Note: If a future version of the oke5 platform introduces social login (e.g., via a Philippine digital identity service), this policy will be updated accordingly and you will be notified before that feature goes live. At present, oke5 does not use social login and does not receive data from social media platforms.
Why We Use Your Data
oke5 uses your personal data for the following purposes. Alongside each purpose, we've noted the legal basis that justifies our use of your data under the Philippine Data Privacy Act of 2012.
Account Registration & Identity Verification: To create and maintain your oke5 account, verify your age (21+), and confirm your identity as required by Philippine gaming regulations. Legal basis: Contractual necessity + Legal obligation.
Payments Processing: To process your GCash, Maya, InstaPay, and bank transfer deposits and withdrawals accurately and securely, and to reconcile your wallet balance. Legal basis: Contractual necessity.
Fraud Prevention & AML Compliance: To detect and prevent fraudulent activity, money laundering, and match-fixing. oke5 is required by Philippine law to conduct ongoing transaction monitoring and report suspicious activity to relevant authorities. Legal basis: Legal obligation.
Responsible Gaming: To monitor gaming patterns and identify players who may be showing signs of problem gambling, enabling oke5 to offer appropriate responsible gaming interventions. Legal basis: Legal obligation + Legitimate interests.
Platform Improvement: To analyse how Filipino players use the oke5 platform and identify areas for improvement in usability, performance, and product offerings. Data used for this purpose is aggregated and anonymised where possible. Legal basis: Legitimate interests.
Marketing & Promotions: To send you relevant offers, bonus notifications, and PBA or NBA game-day promotions — but only if you have opted in to receive marketing communications. You can opt out at any time through your account settings. Legal basis: Consent.
oke5 basketball betting for every Filipino fan — your personal data protected at every step
Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012 (RA 10173), oke5 is required to have a lawful basis for every category of personal data processing. The main legal bases oke5 relies on are:
- Contractual Necessity: Processing required to fulfil our agreement with you — running your account, processing bets, and paying out winnings.
- Legal Obligation: Processing required by Philippine law — KYC/AML compliance, age verification, regulatory reporting to gaming authorities, and tax reporting obligations.
- Legitimate Interests: Processing in oke5's legitimate business interests where those interests are not overridden by your privacy rights — fraud detection, platform security, analytics.
- Consent: Processing based on your explicit opt-in agreement — marketing communications and optional personalisation features. You may withdraw consent at any time.
Your Right to Object: Where oke5 processes your data on the basis of legitimate interests, you have the right to object to that processing. We will assess your objection and restrict or stop the processing unless we can demonstrate compelling legitimate grounds that override your interests. Contact privacy@oke5.app to raise an objection.
Who We Share Your Data With
oke5 does not sell your personal data to any third party, ever. We share your data only with carefully selected service providers who support the operation of the oke5 platform, and only to the extent necessary for their specific function. All third parties who receive oke5 player data are contractually required to maintain appropriate security standards and to use the data only for the purpose it was shared.
Categories of Data Recipients
- Payment Processors: GCash, Maya (PayMaya), GrabPay, Coins.ph, and Philippine banking partners — to execute your deposits and withdrawals. These processors receive only the minimum data necessary to process your specific transaction.
- KYC / Identity Verification Providers: Licensed third-party identity verification services that check the authenticity of your government ID documents. These providers are bound by strict data handling agreements.
- Fraud Prevention and AML Services: Providers who help oke5 identify fraudulent account activity and ensure compliance with anti-money-laundering regulations.
- Cloud Infrastructure Providers: Secure cloud hosting services where oke5 platform data is stored and processed. All infrastructure providers used by oke5 maintain ISO 27001 certification or equivalent security standards.
- Philippine Gaming Regulatory Authorities: oke5 is legally required to share certain player data with Philippine gaming regulators upon request. This is a non-negotiable legal obligation and does not require your additional consent.
- Law Enforcement: oke5 may disclose personal data to law enforcement agencies when required by a valid court order or when oke5 reasonably believes disclosure is necessary to prevent serious harm or criminal activity.
Business Transfers: In the event of a merger, acquisition, or sale of all or part of the oke5 business, player data may be transferred as part of that transaction. In such cases, oke5 will notify affected players in advance and ensure that the receiving entity is bound by privacy obligations at least equivalent to those in this policy.
Data Retention
oke5 does not keep your personal data longer than necessary. Retention periods are set based on the purpose for which data was collected and the legal obligations that apply to it.
- Account and identity data: Retained for the duration of your oke5 account plus 5 years after account closure, as required by Philippine AML regulations.
- Financial transaction records: Retained for 7 years from the date of each transaction, as required by Philippine financial regulations and AMLC requirements.
- Gaming history: Retained for 3 years from the date of each bet, for dispute resolution and regulatory reporting purposes.
- Support communications: Retained for 2 years from the date of the last communication in a support thread.
- Marketing consent records: Retained for the duration of your account. If you withdraw consent, the consent withdrawal record is retained for 5 years as evidence of compliance.
- Technical and usage data: Anonymised and retained in aggregate form indefinitely for analytics purposes. Identifiable technical data (e.g., IP logs) is deleted after 12 months.
When data reaches the end of its retention period, oke5 deletes it securely or anonymises it so that it can no longer be associated with you as an individual.
Security Measures
oke5 takes the security of your personal data seriously. We implement a layered approach to data security covering technical, organisational, and procedural controls.
256-bit SSL Encryption: All data transmitted between your device and the oke5 platform is encrypted using TLS 1.3 with 256-bit encryption — the same standard used by Philippine banks.
Encrypted Data at Rest: All databases storing personal and financial data are encrypted at rest. Encryption keys are managed in dedicated hardware security modules (HSMs).
Access Controls: Only authorised oke5 personnel whose role requires access to player data can access it. Access is role-based, logged, and reviewed regularly.
Intrusion Detection: oke5 operates 24/7 security monitoring including automated intrusion detection and regular third-party penetration testing of the platform.
Two-Factor Authentication: oke5 supports and encourages 2FA for all player accounts, adding an additional verification step that significantly reduces the risk of unauthorised access.
Secure Backups: Player data is backed up regularly to geographically separated secure locations to ensure availability and recovery capability in the event of an incident.
Data Breach Response
In the event of a personal data breach that poses a risk to players, oke5 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required by the DPA. Affected players will be notified directly without undue delay when the breach is likely to result in a high risk to their rights and freedoms.
From El Nido to BGC — oke5 protects your data no matter where in the Philippines you play
Cookies & Tracking Technologies
oke5 uses cookies and similar technologies on its platform to keep you logged in, make the platform work correctly, and understand how it is being used. Here is a plain breakdown of what we use and why.
You can manage your cookie preferences at any time through your browser settings or through the oke5 cookie preference centre accessible from the platform footer. Blocking essential cookies will affect the functionality of the oke5 platform.
Your Data Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by oke5. These rights are yours unconditionally as a Filipino data subject — oke5 will not charge you a fee to exercise them, and will respond to all data requests within 30 calendar days.
Request a copy of all personal data oke5 holds about you, including your gaming history, transaction records, and account information. We will provide this in a structured, readable format.
Request correction of any inaccurate personal data oke5 holds about you. Where data accuracy affects your account (e.g., name on payment records), we will update records promptly.
Request deletion of your personal data in certain circumstances — for example, after your account has been closed and the mandatory retention period has passed. This right is subject to legal retention obligations.
Request your personal data in a machine-readable format (JSON or CSV) so you can transfer it to another platform. Applies to data processed on the basis of your consent or a contract with you.
Object to processing based on oke5's legitimate interests. We will assess your objection and restrict processing unless we have compelling legitimate grounds that override your interests.
Withdraw consent to marketing communications at any time by clicking "Unsubscribe" in any oke5 email or updating your notification settings in your account dashboard. Withdrawal does not affect prior lawful processing.
How to Exercise Your Rights: Submit a data subject request by emailing privacy@oke5.app with the subject line "Data Subject Request" and the specific right you wish to exercise. We will acknowledge receipt within 2 business days and respond fully within 30 calendar days. Identity verification may be required before we can process your request.
Minors
oke5 is strictly for adults aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21. If oke5 discovers that a minor has registered an account, we will immediately close the account, forfeit any balance or winnings, delete all associated personal data, and flag the case to our compliance team.
If you are a parent or guardian and believe your child may have registered an account on oke5, please contact us immediately at privacy@oke5.app with the subject line "Minor Account Report." We will investigate and act without delay. Protecting minors from online gambling is a shared responsibility and oke5 takes it seriously.
International Data Transfers
In limited circumstances, oke5 may transfer personal data to service providers operating outside the Philippines — for example, cloud infrastructure providers with data centres in other Asian jurisdictions, or internationally-based fraud prevention services. When this occurs, oke5 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to Philippine DPA requirements.
These safeguards include contractual data protection clauses in all agreements with international service providers, restricting the transfer to only the minimum data necessary for the service in question, and conducting due diligence assessments of each international provider's security and privacy practices before engagement. oke5 does not transfer data to jurisdictions with materially inadequate data protection frameworks without implementing compensating safeguards.
Changes to This Privacy Policy
oke5 may update this Privacy Policy from time to time to reflect changes in our data practices, new platform features, or updated Philippine legal requirements. When we make material changes — meaning changes that significantly affect how we use your data or your rights — we will notify you by email and via an in-platform notification at least 14 days before the updated policy takes effect.
Minor changes (such as clarifications of existing practices that don't substantively affect your rights) may be made without prior notice but will always be reflected in the "Last Updated" date at the top of this page. We encourage you to review this page periodically. The most current version of the oke5 Privacy Policy is always the version published at oke5.app/privacy-policy.
Contact Us & Data Protection Officer
oke5 has appointed a Data Protection Officer (DPO) as required by the Philippine Data Privacy Act. The DPO is responsible for overseeing oke5's compliance with data privacy obligations and is your primary point of contact for any privacy-related concerns.
Data Protection Officer
oke5 Philippines
Email: privacy@oke5.app
Response within 2 business days
General Support
For account and platform queries
Email: support@oke5.app
Live chat 24/7 inside the platform
If you are not satisfied with oke5's response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available on the NPC's official website.