olebet Privacy Policy

1 Definitions

In this Privacy Policy, the following terms shall have the meanings assigned below:

• "olebet", "we", "us", or "our" refers to the operator of the olebet platform accessible at olebet.cam.
• "Platform" means the olebet website, mobile-optimised interface, gaming lobby, and all associated digital services.
• "Player", "you", or "your" means any individual who registers for, accesses, or uses the Platform.
• "Personal Data" means any information that identifies or could reasonably identify a natural person, directly or indirectly, including but not limited to name, date of birth, mobile number, email address, financial data, IP address, and device identifiers.
• "Sensitive Personal Information" has the meaning ascribed to it under Section 3(l) of the Data Privacy Act of 2012, and includes government-issued identification numbers, financial account details, and health information.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, erasure, or destruction.
• "DPA 2012" means the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, together with its implementing rules and regulations.
• "NPC" means the National Privacy Commission of the Philippines.
• "PAGCOR" means the Philippine Amusement and Gaming Corporation.
• "DPO" means the Data Privacy Officer appointed by olebet in accordance with the DPA 2012.

2 Scope and Application

This Privacy Policy applies to all Personal Data collected, processed, and stored by olebet in connection with your registration, access to, and use of the Platform, including any communications you initiate with olebet's customer support team.

This Privacy Policy does not apply to the websites, platforms, or services of third parties that may be linked from the olebet Platform or whose services are used to facilitate payments — such as GCash, Maya, BPI, or BDO. olebet is not responsible for the privacy practices of third-party entities, and you are encouraged to review their respective privacy policies before transacting with them.

3 Data Controller

olebet acts as the Data Controller in respect of Personal Data collected through the Platform. As Data Controller, olebet determines the purposes for which and the manner in which Personal Data is processed.

olebet has appointed a Data Privacy Officer (DPO) in accordance with the requirements of the DPA 2012 and the NPC's implementing rules. The DPO is responsible for overseeing olebet's data protection compliance programme, handling data subject requests, and acting as the point of contact for the NPC. Contact details for the DPO are provided in Section 16 of this Privacy Policy.

4 Categories of Data We Collect

olebet collects the following categories of Personal Data from Players in the ordinary course of operating the Platform:

5 How We Collect Your Data

olebet collects Personal Data through the following methods:

Direct Collection

When you register an Account on olebet, complete the KYC verification process, make a deposit or withdrawal, contact our customer support team, respond to a survey, or otherwise interact with the Platform, you directly provide Personal Data to olebet. All mandatory data fields are identified as such during the relevant process.

Automated Collection

When you access and navigate the olebet Platform, Technical Data is collected automatically through cookies, web beacons, server logs, and similar tracking technologies. This data is used to ensure the Platform functions correctly, to detect fraud, and to improve the overall user experience. See Section 8 for further detail on cookies and tracking technologies.

Third-Party Sources

olebet may receive limited Personal Data from third-party sources including payment processors (for transaction confirmation), identity verification service providers engaged to assist with KYC processing, and fraud prevention partners. Data received from third-party sources is handled in accordance with this Privacy Policy and the applicable data processing agreements in place between olebet and those third parties.

6 Purposes of Processing

olebet processes your Personal Data for the following specific and legitimate purposes:

• Account Management: To create, maintain, verify, and administer your olebet Account;
• Identity and Age Verification (KYC): To verify your identity, age (21+ requirement), and eligibility to use the Platform in compliance with PAGCOR regulatory requirements and the Anti-Money Laundering Act (AMLA) of the Philippines;
• Payment Processing: To facilitate deposits to and withdrawals from your Account via GCash, Maya, and Philippine bank accounts;
• Platform Delivery: To provide access to the games, live casino, sportsbook, bingo, and all other features available on the olebet Platform;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, multi-account abuse, and other prohibited conduct;
• Responsible Gaming: To monitor gaming behaviour, deliver responsible gaming interventions where applicable, and administer self-exclusion programmes;
• Customer Support: To respond to your enquiries, resolve complaints, and provide technical assistance;
• Legal and Regulatory Compliance: To meet olebet's obligations under the DPA 2012, PAGCOR regulations, AMLA, and other applicable Philippine laws;
• Service Improvement: To analyse aggregated and anonymised usage data for the purpose of improving Platform performance and user experience;
• Direct Marketing: To send you promotional offers, bonus notifications, and event announcements, where you have given specific consent and in accordance with your marketing preferences.

7 Legal Basis for Processing

Under the DPA 2012, olebet relies on the following legal bases for processing Personal Data:

• Performance of a Contract: Processing is necessary to provide the services set out in olebet's Terms & Conditions — including account management, gaming access, and payment processing;
• Compliance with a Legal Obligation: Processing is required to meet olebet's obligations under PAGCOR regulations, AMLA, the DPA 2012, and other applicable Philippine laws;
• Legitimate Interests: Processing is necessary for olebet's legitimate interests in fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights and freedoms;
• Consent: For direct marketing communications and for the processing of certain Sensitive Personal Information where no other legal basis applies. You may withdraw consent at any time.

8 Cookies and Tracking Technologies

The olebet Platform uses cookies — small text files stored on your device — and similar tracking technologies including web beacons, pixel tags, and local storage objects. These technologies serve the following purposes:

• Essential Cookies: Strictly necessary for the Platform to function. These cookies enable secure login sessions, maintain your Account state, and ensure proper routing of transactions. They cannot be disabled without impairing Platform functionality;
• Performance Cookies: Collect anonymised data on how Players navigate the Platform — pages visited, session duration, error encounters. This data is used solely to improve Platform performance;
• Functional Cookies: Remember your language preference, region settings, and customisation choices to provide a more personalised experience;
• Security Cookies: Assist in detecting fraudulent login attempts, bot activity, and suspicious access patterns.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from accessing your olebet Account. olebet does not use third-party advertising cookies or cross-site tracking cookies for the purpose of serving targeted advertising on external platforms.

9 Sharing Your Personal Data

olebet shares Personal Data with third parties only where necessary and only under the following circumstances:

Payment Service Providers

To process deposits and withdrawals, olebet shares necessary transaction and identity data with payment service providers including GCash, Maya, and Philippine banking institutions. These providers are contractually required to process data solely for payment facilitation purposes and in compliance with their own regulatory obligations.

Identity Verification Partners

olebet engages accredited third-party KYC and anti-money laundering service providers to assist in identity verification. Data shared with these providers is limited to what is strictly necessary for verification purposes and is processed under data processing agreements compliant with the DPA 2012.

Regulatory Authorities

olebet is legally obligated to share certain Personal Data with PAGCOR, the Anti-Money Laundering Council (AMLC), the NPC, and other competent Philippine government authorities where required by law, court order, or regulatory directive. olebet will not disclose more data than is legally required in any such disclosure.

Group Companies and Service Providers

olebet may share Personal Data with affiliated group entities and contracted service providers — including IT infrastructure providers, cloud hosting services, and customer support platform operators — strictly for the operational purposes described in this Privacy Policy. All such entities are contractually bound to maintain the confidentiality and security of the data shared with them.

10 International Data Transfers

The olebet Platform and certain of its contracted service providers may process or store Personal Data outside the Philippines. Where Personal Data is transferred to a country that does not provide an equivalent level of data protection to that afforded under the DPA 2012, olebet will ensure that appropriate safeguards are in place — including contractual clauses approved by the NPC or equivalent mechanisms — to protect the transferred data in accordance with Philippine data protection standards.

Players who have concerns about international data transfers may contact the olebet DPO for further information regarding the specific safeguards in place.

11 Data Retention

olebet retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, and in compliance with applicable retention requirements under Philippine law:

• Active Account Data: Retained for the duration of your Account's active status plus a minimum of five years following Account closure, in accordance with PAGCOR record-keeping requirements and AMLA obligations;
• KYC and Identity Documents: Retained for a minimum of five years from the date of Account closure or the last transaction, whichever is later, as required by anti-money laundering regulations;
• Transaction Records: Retained for a minimum of five years in accordance with AMLC requirements;
• Customer Support Communications: Retained for three years from the date of the communication, unless a longer retention period is required in connection with an ongoing dispute or regulatory investigation;
• Technical and Log Data: Retained for twelve months from collection, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that prevents reconstruction of the original data.

12 Security Measures

olebet implements a comprehensive set of technical and organisational security measures designed to protect Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between Players and the Platform;
• Encryption at rest for all databases containing Personal Data or Sensitive Personal Information;
• Multi-factor authentication requirements for administrative access to systems containing Personal Data;
• Role-based access controls limiting staff access to Personal Data on a strictly need-to-know basis;
• Continuous monitoring and intrusion detection systems to identify and respond to suspicious access patterns;
• Regular security audits and penetration testing conducted by independent third-party specialists;
• Staff data privacy and security training conducted on a regular basis;
• Incident response and data breach notification procedures aligned with NPC requirements.

13 Your Data Subject Rights

As a data subject under the DPA 2012, you hold the following rights in respect of your Personal Data held by olebet. You may exercise any of these rights by contacting the olebet DPO as described in Section 16:

Right to Access

You have the right to request confirmation of whether olebet holds Personal Data about you, and to receive a copy of that data together with information about how it is processed. olebet will respond to access requests within 30 days of receipt.

Right to Rectification

You have the right to request correction of inaccurate or incomplete Personal Data held about you. You may update certain data directly via your Account profile; for data that cannot be self-corrected, please contact the DPO.

Right to Erasure

You have the right to request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where consent has been withdrawn, or where processing is unlawful. This right is subject to olebet's obligation to retain certain data under PAGCOR regulations and AMLA as described in Section 11.

Right to Object

You have the right to object to processing based on legitimate interests or to processing for direct marketing purposes. Where an objection to direct marketing is received, olebet will cease such processing immediately.

Right to Data Portability

Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, and machine-readable format for the purpose of transferring it to another data controller.

Filing a Complaint

If you believe that olebet has violated your rights under the DPA 2012, you have the right to file a complaint with the National Privacy Commission. olebet encourages Players to raise concerns with the DPO in the first instance, as most issues can be resolved without formal regulatory proceedings.

14 Children's Privacy and Age Restriction

If olebet discovers or is notified that it has collected Personal Data from an individual under the age of 21, it will take immediate steps to delete that data and permanently close the associated Account. If you believe that olebet may hold data relating to an underage individual, please contact the DPO immediately using the details in Section 16.

15 Changes to This Privacy Policy

olebet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or olebet's data processing practices. The "Effective Date" displayed at the top of this document will be updated each time a material revision is published.

Where changes are material, olebet will notify registered Players via the email address associated with their Account prior to the changes taking effect. Continued use of the Platform following the effective date of any revised Privacy Policy constitutes acceptance of the updated terms. You are encouraged to review this Privacy Policy periodically.

16 Contact and Data Privacy Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by olebet — including requests to exercise your rights as described in Section 13 — please contact the olebet Data Privacy Officer:

• Email: [email protected]
• Subject Line: Please include "Data Privacy Request" in the subject of your email to ensure your message is routed to the DPO promptly.
• Response Time: olebet aims to acknowledge all data privacy requests within five business days and to provide a substantive response within 30 days of receipt. Complex requests may require additional time, in which case you will be notified.
• Identity Verification: To protect the security of your Personal Data, olebet may ask you to verify your identity before processing a data subject request.