oobet Privacy Policy

1. Introduction

1.1   oobet is committed to protecting the privacy and personal data of every Filipino player who uses our platform. We understand that trust is foundational to any online gaming relationship — and that trust starts with being transparent about how we handle your information.

1.2   This Policy explains, in plain and legal terms, what personal data oobet collects, why it is collected, how it is processed and stored, who it may be shared with, and what rights you hold as a data subject under Philippine law. We have written this Policy to be as clear and accessible as possible while meeting the legal requirements imposed by the National Privacy Commission.

1.3   The oobet platform is intended exclusively for players who are 21 years of age or older. oobet does not knowingly collect personal data from individuals under 21. If you believe a person under 21 has provided personal data to oobet, please contact our Data Protection Officer (DPO) immediately at the contact details provided in Section 16.

2. Data Controller

2.1   For the purposes of the Philippine Data Privacy Act of 2012, oobet acts as the Personal Information Controller (PIC) with respect to the personal data of players and visitors to the oobet platform. As PIC, oobet determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data privacy law.

2.2   oobet has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and with RA 10173. The DPO may be contacted via the details provided in Section 16 of this Policy.

3. Personal Data We Collect

3.1   oobet collects personal data through the following means: direct submission by you during registration or account management; automated collection during your use of the platform (including device and session data); and from third-party sources such as payment processors and identity verification providers where necessary for KYC compliance.

3.2   The categories of personal data oobet collects include:

3.3   oobet does not collect sensitive personal information as defined under RA 10173 (such as biometric data, health records, political affiliations, or sexual life) except where expressly required for regulatory identity verification purposes and with your informed consent.

4. Purposes of Processing

4.1   oobet processes your personal data for the following purposes:

• Account creation and management: To register and maintain your oobet account, authenticate your login sessions, and manage your account settings and preferences.
• Payment processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, and other listed payment channels in Philippine Peso.
• Identity verification (KYC): To verify your identity and age (21+) in compliance with PAGCOR licensing requirements and Philippine anti-money laundering laws.
• Fraud and security prevention: To detect, investigate, and prevent unauthorized access, account fraud, money laundering, and other prohibited activities on the oobet platform.
• Regulatory compliance: To fulfill oobet's obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC).
• Customer support: To respond to your inquiries, complaints, and requests through oobet's live chat and support channels.
• Responsible gaming: To monitor gaming activity for signs of potential problem gambling and to enforce self-exclusion and responsible gaming measures where applicable.
• Platform improvement: To analyze usage patterns and improve oobet's games, features, and user experience for Filipino players.
• Marketing (opt-in only): To send you promotional offers, bonus notifications, and platform updates — only where you have provided explicit consent and subject to your right to withdraw consent at any time.

5. Legal Basis for Processing

5.1   oobet processes your personal data on the following legal bases under Republic Act 10173:

6. Data Sharing & Disclosure

6.1   oobet does not sell, rent, trade, or otherwise transfer your personal data to third parties for their own independent marketing or commercial purposes.

6.2   oobet shares personal data with the following categories of third parties, strictly on a need-to-know basis and under contractual data processing arrangements:

• Payment Processors: GCash (Mynt), Maya (PayMaya Philippines Inc.), BPI, BDO, Metrobank, GrabPay, and other approved Philippine payment channels — solely for processing deposits and withdrawals.
• Identity Verification Providers: Third-party KYC service providers used to verify identity documents, age, and AML screening, operating under strict data processing agreements.
• Game Content Providers: oobet's licensed game software providers may receive limited gameplay data necessary to operate certified games within the platform. These providers do not receive financial or full identity data.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies — when required by law, court order, or regulatory directive.
• Professional Advisors: Lawyers, accountants, auditors, and insurers operating under professional confidentiality obligations, where necessary for oobet's business operations.

7. Cross-Border Data Transfers

7.1   Some of oobet's third-party service providers — including international game software providers — may be located outside the Philippines. Where personal data is transferred outside Philippine territory, oobet ensures that such transfers are made only to recipients who provide an adequate level of data protection, consistent with the standards required under RA 10173 and the NPC's cross-border transfer rules.

7.2   oobet implements contractual safeguards (including Standard Contractual Clauses or equivalent data transfer agreements) with all international data processors to ensure your data remains protected to Philippine legal standards regardless of where it is processed.

8. Data Retention

8.1   oobet retains your personal data for as long as your account remains active and for such additional periods as are required to meet oobet's legal and regulatory obligations, resolve disputes, and enforce its agreements with you. As a general guide:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five (5) years after account closure, as required by PAGCOR and AMLC record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years as required under the Anti-Money Laundering Act; potentially longer where an investigation or regulatory proceeding is ongoing.
• Communications and support records: Retained for three (3) years from the date of the last interaction, unless a longer retention period is required for regulatory or dispute resolution purposes.
• Marketing preference records: Retained for the duration of your account to enable accurate management of your communication preferences.

8.2   Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized using industry-standard methods such that the data can no longer be attributed to an identifiable individual.

9. Security Measures

9.1   oobet implements technical, organizational, and physical security measures designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and oobet's servers.
• AES-256 encryption for sensitive data stored at rest, including financial and identity records.
• Role-based access controls ensuring that only authorized oobet personnel can access personal data on a need-to-know basis.
• Multi-factor authentication (MFA) for all internal system access by oobet staff.
• Regular security audits, vulnerability assessments, and penetration testing conducted by qualified cybersecurity professionals.
• Automatic session timeout and anomalous login detection for player accounts.
• Incident response procedures enabling rapid containment and notification in the event of a data breach.

9.2   In the event of a personal data breach that is likely to give rise to a real risk of serious harm, oobet will notify affected players and the National Privacy Commission within seventy-two (72) hours of discovering the breach, as required by NPC Circular 16-03.

10. Cookies & Tracking Technologies

10.1   oobet uses cookies and similar tracking technologies (such as pixel tags and local storage) on its platform to enable essential functionality, enhance your experience, and gather analytical data on platform usage. The categories of cookies oobet uses are:

• Essential Cookies: Required for the oobet platform to function. These enable login sessions, account authentication, security measures, and payment processing. These cannot be disabled without impairing platform functionality.
• Analytical Cookies: Used to collect aggregated, anonymized data on how players use oobet — including pages visited, features used, and error reports. This data is used to improve the platform. No personally identifying information is shared with analytics providers.
• Preference Cookies: Store your personal platform preferences such as language settings, game lobby filters, and notification preferences across sessions.

10.2   You may manage your cookie preferences through your browser settings. Disabling essential cookies will prevent access to core oobet functionality including login and game play. oobet does not use third-party advertising or retargeting cookies.

11. Your Data Subject Rights

11.1   Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by oobet:

11.2   To exercise any of the above rights, please contact oobet's Data Protection Officer at the details provided in Section 16. oobet will respond to all valid data subject requests within fifteen (15) business days of receipt, as required by NPC regulations. oobet may request proof of identity before processing a data subject request to prevent unauthorized disclosure.

12. Minors — 21+ Age Policy

12.1   The oobet platform is restricted to individuals who are 21 years of age or older, as required by PAGCOR's licensing conditions applicable to Philippine online gaming operators. oobet does not knowingly collect, process, or retain the personal data of individuals under 21 years of age.

12.2   Where oobet discovers or is notified that an account has been registered by an individual under 21, the account will be immediately suspended, all transactions will be reviewed for reversal, and any personal data held in respect of the underage individual will be deleted as soon as legally permissible, consistent with oobet's regulatory record-keeping obligations.

13. Marketing Communications

13.1   oobet will only send you promotional emails, SMS messages, or push notifications about bonuses, new games, or platform offers where you have provided your explicit consent during registration or through your account marketing preferences. Marketing communications from oobet will always clearly identify oobet as the sender and will include an easy opt-out mechanism.

13.2   You may withdraw your marketing consent at any time by updating your communication preferences in your oobet account settings or by contacting customer support. Withdrawal of marketing consent does not affect your ability to use oobet's gaming services or your entitlement to receive service-related communications (such as transaction confirmations, security alerts, and regulatory notices).

13.3   oobet does not share your contact details with third parties for their own marketing purposes.

14. Complaints & Regulatory Escalation

14.1   If you believe that oobet has mishandled your personal data or has not honored your data subject rights, please contact oobet's Data Protection Officer (see Section 16) in the first instance. oobet will investigate all privacy complaints thoroughly and respond within fifteen (15) business days.

14.2   If you are not satisfied with oobet's response, or if you believe that oobet's processing of your personal data violates the Philippine Data Privacy Act, you have the right to file a complaint with the National Privacy Commission (NPC) at the following address:

15. Amendments to This Policy

15.1   oobet may update this Privacy Policy from time to time to reflect changes in applicable Philippine law, NPC regulations, PAGCOR requirements, or oobet's data processing practices. The most current version of this Policy will always be available at https://oobet.cam/privacy-policy.

15.2   Where amendments are material — meaning they meaningfully affect your privacy rights or how oobet processes your data — oobet will notify registered players via their registered email address before the changes take effect. Your continued use of oobet after such notification constitutes acceptance of the revised Policy.

15.3   The date of the most recent revision is indicated at the top of this document. oobet recommends that you review this Policy periodically and maintain a copy for your personal records.

16. Contact — Data Protection Officer

16.1   For all privacy-related inquiries, data subject right requests, or complaints regarding oobet's handling of your personal data, please contact oobet's Data Protection Officer through the following channels:

16.2   When submitting a data subject request, please include your registered oobet mobile number or email address and a brief description of your request. oobet may require proof of identity before acting on a data access, rectification, or erasure request to prevent unauthorized data disclosure.