OKpusta Privacy Policy – Your Data, Protected Always

1. Introduction

OKpusta ("we," "us," "our") is committed to protecting the privacy and personal data of every player who uses our platform at https://okpusta.net. This Privacy Policy explains how we collect, use, store, and protect your personal information when you create an account, place bets, make deposits or withdrawals, or otherwise interact with our services.

This policy is prepared in compliance with the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC). OKpusta is registered as a Personal Information Controller (PIC) with the NPC.

By accessing or using OKpusta, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to request account closure.

2. What Data We Collect

OKpusta collects the following categories of personal data from its users:

We do not collect sensitive personal information such as health records, political opinions, religious beliefs, or biometric data unless explicitly required by law and with your separate written consent.

3. How We Collect Your Data

OKpusta collects your personal data through the following means:

• Direct collection: When you register an account, complete identity verification (KYC), make a deposit or withdrawal, contact customer support, or respond to a survey.
• Automated collection: Through cookies, pixel tags, session logs, and other tracking technologies as you browse and use the OKpusta platform.
• Third-party sources: From payment processors (e.g., GCash, Maya, BDO) for transaction verification; from identity verification providers to confirm your ID documents; and from PAGCOR for regulatory compliance checks.

We will always inform you at the point of collection what data we are gathering and why — walang nakatagong hakbang dito.

4. Why We Use Your Data

OKpusta processes your personal data only for legitimate, lawful purposes. The main reasons we use your data include:

• Account management: To create and maintain your OKpusta account, verify your identity, and provide access to our games and services.
• Payment processing: To handle deposits and withdrawals via GCash, Maya, GrabPay, InstaPay, PESONet, BDO, BPI, UnionBank, and Visa/Mastercard.
• Regulatory compliance: To meet our obligations under PAGCOR's operating license, Philippine AML laws (RA 9160 as amended), and the Data Privacy Act of 2012.
• Fraud prevention and security: To detect and prevent unauthorized access, fraudulent transactions, money laundering, and other illegal activities.
• Responsible gaming: To monitor gaming behavior, enforce self-exclusion requests, and apply deposit limits set by you or required by regulators.
• Customer support: To respond to your queries, complaints, and requests efficiently.
• Service improvement: To analyze aggregated, anonymized usage data to improve game offerings, website performance, and user experience.
• Marketing (with your consent): To send you promotional offers, bonus notifications, and updates about new games — only if you have opted in.

We process your data based on at least one of the following legal bases: (a) performance of a contract with you; (b) compliance with a legal obligation; (c) your freely given, specific, and informed consent; or (d) legitimate interests that do not override your rights and freedoms.

5. Who We Share Data With

OKpusta does not sell or trade your personal data. We share data only where necessary, with the following categories of recipients:

• Payment service providers: GCash, Maya, GrabPay, Coins.ph, InstaPay/PESONet-connected banks, and card processors to facilitate deposits and withdrawals.
• Identity verification providers: Accredited third parties that assist with KYC document checks, solely for compliance purposes.
• Game content providers: Slot and live casino software suppliers may receive anonymized session data to maintain game integrity.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies as required by law.
• IT and security providers: Cloud hosting, cybersecurity, and fraud detection vendors operating under strict data processing agreements.

All third parties that handle your data on our behalf are bound by confidentiality agreements and are required to implement data protection measures consistent with the DPA 2012.

6. Data Retention

OKpusta retains your personal data for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law. Specific retention periods include:

• Account data: Retained for the lifetime of your active account and for a minimum of 5 years after account closure, as required by PAGCOR and Philippine AML regulations.
• Financial transaction records: Retained for a minimum of 10 years in compliance with AML reporting requirements.
• Support communications: Retained for 3 years following the resolution of your inquiry.
• Marketing data: Retained until you withdraw consent, after which it is deleted within 30 days.
• Technical/log data: Typically retained for 12 months for security and audit purposes.

After retention periods expire, data is securely deleted or anonymized so it can no longer be linked to you personally.

7. How We Protect Your Data

OKpusta implements robust technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or disclosure. Key security measures include:

• TLS 1.3 encryption for all data transmitted between your device and our servers.
• AES-256 encryption for data stored in our databases.
• Multi-factor authentication (MFA) available for all player accounts.
• 24/7 automated intrusion detection and real-time fraud monitoring.
• Regular independent penetration testing and security audits.
• Strict access controls limiting employee access to personal data on a need-to-know basis.
• Mandatory data privacy and security training for all OKpusta staff.

While we take every reasonable precaution, no system is 100% immune to breaches. In the unlikely event of a data breach affecting your rights, OKpusta will notify affected players and the NPC within 72 hours of discovery, as required by the DPA 2012 IRR.

8. Cookies & Tracking

OKpusta uses cookies and similar tracking technologies to operate the platform effectively and improve your experience. Here's a breakdown of the types of cookies we use:

• Essential cookies: Required for core functionality — logging in, maintaining your session, and processing payments. These cannot be disabled without breaking the site.
• Analytics cookies: Help us understand how players navigate the site so we can make improvements. Data is aggregated and anonymized.
• Preference cookies: Remember your settings, such as language preferences and notification choices.
• Security cookies: Used to detect fraud, bot activity, and suspicious login attempts.

When you first visit OKpusta, you will be presented with a cookie consent notice. You can manage non-essential cookie preferences through your browser settings at any time. Disabling essential cookies may affect platform functionality.

9. Your Rights Under the DPA

Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal data held by OKpusta:

To exercise any of these rights, please email our Data Protection Officer at dpo@okpusta.net. We will respond within 15 business days as required by Philippine law. If you feel your rights have not been respected, you have the right to lodge a complaint with the National Privacy Commission (NPC).

10. Children's Privacy

OKpusta is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. If you are a parent or guardian and believe that a minor has registered on OKpusta without your consent, please contact us immediately at support@okpusta.net. We will promptly close the account and delete all associated data upon verification.

As part of our age verification process, all new registrants are required to submit a valid, government-issued Philippine ID (e.g., PhilSys ID, driver's license, passport) confirming they are at least 21 years old. This is non-negotiable and is part of our PAGCOR licensing obligations.

11. Changes to This Policy

OKpusta may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or business operations. When material changes are made, we will:

• Post the updated policy on this page with a revised "Last Updated" date at the top.
• Send a notification to your registered email address summarizing key changes.
• In some cases, display a prominent in-platform notice for 30 days following the update.

Your continued use of OKpusta after changes are posted constitutes acceptance of the revised Privacy Policy. If you disagree with the changes, you may close your account and request withdrawal of your eligible balance.

12. Contact Our DPO

If you have any questions, concerns, or requests related to this Privacy Policy or how OKpusta handles your personal data, please contact our Data Protection Officer:

• Email: dpo@okpusta.net
• General Support: support@okpusta.net
• Live Chat: Available 24/7 on the OKpusta platform

We take privacy concerns seriously. Whether it's a question about what data we hold or a formal request to exercise your DPA rights, our team is here to help — fast, transparent, and professional. Hindi ka namin pababayaan pagdating sa privacy mo.