0ktt Privacy Policy —
How We Collect, Use, and Protect Your Data

This Privacy Policy (hereinafter referred to as "the Policy") is issued by 0ktt (hereinafter referred to as "the Company," "0ktt," "we," "our," or "us") and governs the collection, processing, storage, use, and disclosure of personal data relating to individuals who access or use the 0ktt platform at 0ktt.cam, including all associated services, games, financial products, and customer support channels (collectively, the "Platform").

This Policy applies to all persons who interact with the Platform in any capacity, including registered Players, prospective Players who browse the Platform without registering, and individuals who contact 0ktt via live chat or other support channels. It applies regardless of whether you access the Platform from Metro Manila, Cebu, Davao, or anywhere else in the Philippines — or from outside the Philippines.

By accessing the Platform and creating an account, you acknowledge that you have read, understood, and agreed to the terms of this Policy. This Policy is incorporated by reference into the 0ktt Terms and Conditions and should be read alongside those Terms.

For the purposes of the Data Privacy Act of 2012 and this Policy, 0ktt is the personal information controller in respect of the personal data processed under this Policy. As personal information controller, 0ktt determines the purposes and means of the processing of personal data collected through the Platform.

0ktt has designated a Data Protection Officer (DPO) who is responsible for overseeing the Company's data protection practices and ensuring compliance with applicable Philippine data privacy law. The DPO can be contacted through the support channels described in Section 15 of this Policy.

0ktt collects the following categories of personal data, depending on how you interact with the Platform:

0ktt does not collect special categories of personal data (as defined under the Data Privacy Act) such as health information, religious beliefs, or political opinions, except where voluntarily provided by a Player in the context of a responsible gaming self-disclosure or support interaction. Such data is treated with heightened protection.

0ktt collects personal data through the following means:

• Directly from you — when you create an account, complete the KYC verification process, make a deposit or withdrawal, contact customer support, or update your account settings.
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you access or use the Platform. See Section 8 for full details on our cookie practices.
• From third-party payment processors — GCash, PayMaya, BPI, BDO, Metrobank, and other payment partners may transmit transaction confirmation data to 0ktt in connection with deposit and withdrawal processing.
• From identity verification providers — 0ktt may use third-party KYC and AML screening services to verify the authenticity of identity documents and to screen against sanctions lists and politically exposed persons (PEP) databases.
• From analytics providers — anonymized or aggregated usage and performance data may be received from analytics platforms used to monitor Platform performance and improve user experience.

Under the Data Privacy Act of 2012, 0ktt processes your personal data on the following legal bases, as applicable to each processing activity:

• Contractual necessity: Processing required to perform the contract between you and 0ktt — including account creation, game access, and payment processing — is carried out on the basis that it is necessary to fulfil the terms of our agreement with you.
• Legal obligation: Processing required to comply with applicable Philippine law — including the Anti-Money Laundering Act (Republic Act No. 9160 as amended), PAGCOR regulatory requirements, and the Data Privacy Act itself — is carried out on the basis of legal compliance.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is carried out on the basis of 0ktt's legitimate business interests, provided those interests do not override your fundamental rights.
• Consent: Processing for direct marketing communications — including promotional emails and bonus notifications — is carried out on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without detriment, as described in Section 13.

0ktt uses the personal data we collect for the following purposes:

• To create, maintain, and administer your Player account on the 0ktt Platform.
• To verify your identity and age in compliance with PAGCOR regulations and the Data Privacy Act (KYC process).
• To process your deposits and withdrawals in Philippine Peso via GCash, PayMaya, BPI, BDO, Metrobank, and USDT.
• To screen transactions for money laundering, fraud, and other financial crimes in compliance with the Anti-Money Laundering Act.
• To monitor gaming activity for responsible gaming purposes, including detecting patterns indicative of problem gambling behavior.
• To respond to your support inquiries submitted via live chat or other channels.
• To send you transactional communications, including deposit confirmations, withdrawal notifications, and account security alerts.
• To send you promotional communications, including bonus offers and event notifications — where you have provided consent, and have not subsequently withdrawn it or self-excluded.
• To enforce the 0ktt Terms and Conditions and this Privacy Policy, including investigating suspected breaches.
• To improve the Platform through anonymized analytics and performance monitoring.
• To comply with applicable legal and regulatory obligations, including requests from PAGCOR, the AMLC, the NPC, and other competent Philippine authorities.

0ktt does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, solely to the extent necessary for the purposes described in this Policy:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors receive the personal and financial data necessary to process your transactions. These providers operate under their own privacy policies and applicable Philippine financial services regulations.
• KYC and AML verification providers: Third-party identity verification and anti-money laundering screening services receive identity document data to fulfil legal verification obligations.
• Game providers: Licensed third-party game studios (such as Evolution Gaming, Pragmatic Play, PG Soft, and others) may receive your Player ID and gaming session data to the extent necessary to deliver their games within the 0ktt platform.
• IT infrastructure and cloud providers: Trusted technology partners providing hosting, data storage, security, and platform infrastructure services may process personal data as sub-processors under data processing agreements that impose data protection obligations consistent with this Policy.
• Regulatory and law enforcement authorities: 0ktt may be required to disclose personal data to PAGCOR, the AMLC, the NPC, the Bureau of Internal Revenue (BIR), or other competent Philippine government authorities in connection with legal compliance, regulatory audits, or law enforcement requests. 0ktt will disclose only the minimum data required by law.
• Professional advisers: Lawyers, auditors, and other professional advisers engaged by 0ktt may have access to personal data on a need-to-know basis, subject to confidentiality obligations.

In all cases where 0ktt engages third-party processors, we ensure that appropriate contractual safeguards are in place to protect your personal data in accordance with the Data Privacy Act.

0ktt uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain personally identifiable information on their own, but may be linked to personal data we hold about you.

We use the following categories of cookies:

• Strictly necessary cookies: These are essential to the operation of the Platform and cannot be disabled. They include session management cookies that keep you logged in to your 0ktt account during an active session, and security cookies used to detect and prevent fraudulent activity.
• Functional cookies: These remember your preferences — such as language settings, preferred payment method, and game display options — to personalize your experience on return visits.
• Performance and analytics cookies: These collect anonymized information about how visitors use the Platform — which pages are visited most frequently, how long sessions last, and where errors occur — helping 0ktt optimize Platform performance.
• Marketing cookies: These track your engagement with promotional content and may be used to deliver relevant bonus offers. They are only activated where you have provided consent.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use the Platform, including logging in to your 0ktt account.

0ktt implements organizational, technical, and physical security measures designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 0ktt Platform.
• Encryption of sensitive data at rest, including payment details and government ID documentation.
• Role-based access controls ensuring that only authorized personnel access personal data on a need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing conducted by independent security professionals.
• Multi-factor authentication requirements for internal system access.
• Secure, redundant data storage infrastructure with regular automated backups.
• Mandatory data privacy and security training for all 0ktt personnel who handle personal data.

In the event of a personal data breach that is likely to result in harm to your rights and freedoms as a data subject, 0ktt will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required under the Data Privacy Act and its implementing regulations. Affected Players will be individually notified where the breach poses a high risk to their rights.

0ktt retains your personal data for the period necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by applicable Philippine law:

• Transaction and financial records: A minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act of 2001 (Republic Act No. 9160 as amended by Republic Act No. 10365) and AMLC regulations.
• Account and identity records: For the duration of the Player's active account, plus a minimum of five (5) years following account closure, to support any post-closure compliance, dispute resolution, or regulatory audit requirements.
• KYC documentation: For the duration of the account relationship and for a minimum of five (5) years thereafter, in compliance with PAGCOR and AMLC requirements.
• Customer support records: For a period of three (3) years from the date of the support interaction, or longer where the content of the interaction is relevant to an ongoing dispute or investigation.
• Marketing preference records: For the duration of the Player's account plus a reasonable period to demonstrate compliance with consent management obligations.

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. 0ktt does not retain personal data in identifiable form beyond the periods outlined above unless required to do so by law or court order.

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by 0ktt. To exercise any of these rights, contact the 0ktt Data Protection Officer through the channels described in Section 15.

The 0ktt Platform is strictly intended for use by adults who are at least 21 years of age, in accordance with PAGCOR regulations governing online gambling in the Philippines. 0ktt does not knowingly collect personal data from any person under the age of 21.

During the registration process, 0ktt requires users to confirm their date of birth. Age verification is subsequently enforced through the KYC process prior to the first withdrawal. Where 0ktt becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted promptly and the account closed. Any winnings accrued through an underage account will be forfeited in accordance with the 0ktt Terms and Conditions.

With your consent, 0ktt may send you promotional communications relating to bonuses, new game launches, sports betting promotions (including events tied to UFC, PBA Finals, and other sporting events popular in the Philippines), and other 0ktt offers. Consent is obtained at the point of registration and can be withdrawn at any time.

You may opt out of marketing communications at any time through any of the following methods:

• Clicking the "Unsubscribe" link included in every marketing email sent by 0ktt.
• Updating your communication preferences directly from your 0ktt account settings.
• Contacting 0ktt customer support via live chat and requesting removal from all marketing lists.

Opt-out requests will be processed within five (5) business days. After opting out, you will continue to receive transactional and account-related communications (such as deposit confirmations and withdrawal notifications), which are necessary for the operation of your account and cannot be disabled.

As stated in Section 6, Players who have activated self-exclusion are immediately removed from all marketing lists and will not receive any promotional communications for the duration of the exclusion period. This is applied automatically — no separate opt-out request is required.

0ktt reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable Philippine law, regulatory guidance from the NPC or PAGCOR, or changes to the Company's data processing practices.

Material changes to this Policy will be communicated to registered Players via email notification or a prominent notice on the Platform no less than seven (7) calendar days before the revised Policy takes effect, except where immediate amendment is required by law or regulation.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Continued use of the Platform after the effective date of a revised Policy constitutes acceptance of the updated terms. If you do not agree with the revised Policy, you should close your account and cease using the Platform.

We encourage all 0ktt Players to review this Policy periodically to stay informed of how we are protecting and using your personal data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or 0ktt's handling of your personal data, please contact our Data Protection Officer through the following channels:

• Live Chat: Available 24/7 via the chat widget on the 0ktt website. Please state that your inquiry is a "Data Privacy" matter so that it is directed to the appropriate team.
• Email (plain text — not a clickable link): support[at]0ktt.cam — include "Data Privacy" in the subject line.

0ktt will acknowledge your privacy-related inquiry within three (3) business days and will endeavor to resolve it within fifteen (15) business days of receipt. Where a matter is complex or requires further investigation, we will inform you of the expected resolution timeline.

If you are not satisfied with 0ktt's response to your privacy complaint, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines, which is the competent supervisory authority for data privacy matters in the country.