Summary: olbet is committed to protecting your personal information. We collect only what we need, use it only for the purposes described in this Policy, keep it only as long as required by law or legitimate business need, and never sell it to third parties for commercial purposes. By registering an Account with olbet, you acknowledge that you have read and understood this Privacy Policy.
01 Introduction
This Privacy Policy ("Policy") applies to all personal data processed by olbet ("the Company," "we," "us," "our") in connection with the online gaming platform operated at olbet.cam and any associated mobile-optimized interfaces (collectively, the "Platform"). It governs the collection, use, storage, disclosure, and protection of personal information relating to registered Players, prospective Players, and all other visitors to the Platform.
olbet operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR) and is committed to full compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), and the Implementing Rules and Regulations (IRR) issued by the National Privacy Commission (NPC) of the Philippines. This Policy also reflects olbet's obligations under Republic Act No. 9160 (Anti-Money Laundering Act) and related AMLC regulations that impose mandatory data collection and reporting requirements on licensed gaming operators.
This Policy should be read together with the olbet Terms & Conditions, which form the overall legal framework governing your relationship with the Platform. In cases of conflict between this Policy and the Terms & Conditions on a data-related matter, this Policy shall prevail.
02 Data Controller Identity
For the purposes of the Data Privacy Act of 2012, olbet is the Personal Information Controller (PIC) in respect of all personal data processed through the Platform. As PIC, olbet determines the purposes and means of processing your personal data and bears primary accountability for its lawful handling.
Where olbet engages third-party service providers — such as payment processors, game providers, identity verification services, and cloud infrastructure providers — those entities act as Personal Information Processors (PIPs) acting strictly on olbet's documented instructions and subject to written data processing agreements that impose equivalent data protection obligations.
olbet has designated a Data Protection Officer (DPO) in accordance with Section 21 of the DPA. The DPO is responsible for ensuring compliance with data protection obligations, responding to data subject requests, and serving as the point of contact with the National Privacy Commission. Contact details for the DPO are provided in Section 14 of this Policy.
03 Personal Data We Collect
olbet collects personal data through multiple channels: directly from you during registration and platform use, automatically through technical systems during your interactions with the Platform, and from third-party verification and payment services where necessary for compliance purposes. The categories of data collected are set out below.
3.1 Registration & Identity Data
- Full legal name as it appears on a Philippine government-issued identification document;
- Date of birth (for age verification — players must be 21 or older);
- Philippine mobile number (primary account identifier and OTP delivery channel);
- Residential address (province, city/municipality);
- Government-issued ID type and document number (collected at KYC stage);
- Selfie photograph or scanned copy of government ID (for identity document verification);
- Account password (stored in irreversibly hashed form — never readable by olbet staff).
3.2 Financial & Transaction Data
- GCash or Maya mobile number linked to your account for payment processing;
- Philippine bank account details where bank transfer payment methods are used (BPI, BDO, Metrobank);
- Cryptocurrency wallet addresses where cryptocurrency deposit or withdrawal methods are used;
- Complete transaction history including deposit amounts, withdrawal amounts, timestamps, and payment method references;
- Wagering history including game titles, stake amounts, outcomes, and timestamps (retained for regulatory compliance and dispute resolution).
3.3 Technical & Usage Data
- IP address and approximate geographic location at the time of each login and transaction;
- Device identifiers, operating system, browser type and version;
- Session timestamps, session duration, and Platform navigation patterns;
- Game interaction logs generated by game providers in connection with RNG certification and technical audit requirements.
3.4 Communications Data
- Records of customer support interactions via live chat and any other support channels;
- Content of written complaints submitted through formal dispute resolution channels;
- Records of SMS communications sent by olbet to your registered mobile number.
Note on Sensitive Personal Information: Under the DPA, certain data categories are classified as "sensitive personal information" and subject to heightened protection. olbet collects government ID document numbers and biometric data (facial photographs for KYC) in this category. Such data is processed exclusively for identity verification and regulatory compliance purposes and is subject to stricter access controls and retention limits than standard personal data.
04 How We Use Your Personal Data
olbet processes your personal data only for the purposes set out in this Section. We apply the principle of purpose limitation: data collected for a specific purpose is not repurposed for incompatible uses without your knowledge and, where required by law, your consent.
| Purpose | Data Categories Used |
|---|---|
| Account registration and identity verification (KYC) | Registration data, government ID, selfie photograph |
| Age verification (21+ compliance) | Date of birth, government ID |
| Processing deposits and withdrawals | Financial data, transaction data, identity data |
| Providing gaming services and settling wagers | Account data, wagering history, technical data |
| Anti-money laundering (AML) compliance and AMLC reporting | Identity data, transaction data, IP address |
| Fraud detection and prevention | Technical data, transaction data, device identifiers |
| Responsible gaming monitoring and intervention | Wagering history, deposit history, session data |
| Customer support and dispute resolution | Communications data, account data, transaction data |
| Platform security and technical operations | Technical data, session logs |
| Regulatory reporting to PAGCOR and NPC | Identity data, transaction data |
| Sending service-related communications (OTPs, account alerts) | Mobile number, account data |
| Promotional communications (with consent) | Mobile number, account status, gaming preferences |
olbet does not use your personal data for the following purposes and will not do so without separate and explicit consent: building or selling audience profiles for third-party advertising; sharing your data with other gaming operators for marketing purposes; or automated decision-making that produces legal or similarly significant effects without human review.
05 Legal Bases for Processing
Under Section 12 of the Data Privacy Act of 2012, the processing of personal data is lawful only where at least one of the following legal bases applies. olbet relies on the following bases for the processing activities described in this Policy:
- Contractual necessity: Processing necessary for the performance of the gaming services contract between olbet and the Player, including account management, game provision, and payment processing (DPA Section 12(b)).
- Legal obligation: Processing required to comply with olbet's obligations under Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160), and mandatory reporting requirements (DPA Section 12(c)).
- Legitimate interests: Processing necessary for olbet's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by the data subject's rights (DPA Section 12(f)).
- Consent: For promotional communications and any processing not covered by the above bases, olbet relies on the Player's freely given, specific, and informed consent (DPA Section 12(a)). Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
06 Data Sharing & Third-Party Disclosure
olbet does not sell your personal data to third parties. Disclosure of personal data to third parties occurs only in the circumstances described below, and in each case is governed by a written agreement that restricts the recipient's use of the data to the specified purpose.
6.1 Service Providers (Personal Information Processors)
olbet shares personal data with the following categories of service providers acting as Personal Information Processors under the DPA:
- Payment processors: GCash (Mynt), Maya (Voyager Innovations), Philippine banks and their Instapay/PESONet operators, and cryptocurrency exchange partners — for the sole purpose of processing Player deposits and withdrawals;
- KYC and identity verification providers: third-party document verification services used to authenticate government-issued IDs and perform liveness checks;
- Game content providers: licensed game studios and live dealer studios that provide certified game content available on the Platform, who receive session identifiers and wagering data necessary to operate their games;
- Cloud infrastructure providers: data center and cloud storage operators hosting Platform data in facilities with appropriate physical and technical security controls;
- Customer support platform providers: live chat and ticketing system vendors who process communications data on olbet's behalf.
6.2 Regulatory and Law Enforcement Disclosure
olbet discloses personal data to regulatory authorities and law enforcement agencies where required by Philippine law, including:
- The Philippine Amusement and Gaming Corporation (PAGCOR) pursuant to olbet's licensing obligations;
- The Anti-Money Laundering Council (AMLC) pursuant to mandatory Suspicious Transaction Report (STR) and Covered Transaction Report (CTR) filing obligations under RA 9160;
- The National Privacy Commission (NPC) in connection with personal data breach notifications and regulatory inquiries;
- Philippine law enforcement authorities pursuant to valid court orders or subpoenas issued under Philippine law.
No Sale of Data: olbet has not and will not sell, rent, or otherwise commercially transfer your personal data to third parties for their own marketing or commercial purposes. Any sharing arrangement that falls outside the categories described above requires your separate explicit consent.
07 Cross-Border Data Transfers
Some of olbet's service providers — particularly game content providers, cloud infrastructure partners, and KYC technology providers — may process personal data in countries outside the Philippines. Where such transfers occur, olbet ensures that appropriate safeguards are in place in accordance with Section 21 of the DPA and NPC guidelines on cross-border data transfers.
These safeguards include: the execution of standard contractual clauses approved by the NPC; confirmation that recipient jurisdictions provide an adequate level of data protection equivalent to Philippine standards; and where required, registration of the data transfer arrangement with the NPC. olbet will not transfer personal data to a jurisdiction that does not provide adequate protection without implementing contractual or other measures sufficient to protect your rights.
08 Data Retention Periods
olbet retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by Philippine law. The following retention schedule applies:
| Data Category | Retention Period | Basis |
|---|---|---|
| KYC identity documents | 5 years from account closure | RA 9160 (AMLA), PAGCOR regulations |
| Transaction and wagering records | 5 years from each transaction date | RA 9160 (AMLA), PAGCOR regulations |
| Account registration data | 5 years from account closure | Contractual obligation, regulatory compliance |
| Customer support records | 3 years from last interaction | Dispute resolution, legal claims |
| Technical and session logs | 12 months from generation | Security and fraud prevention |
| Promotional consent records | Until consent is withdrawn plus 1 year | Evidence of lawful marketing |
| Cookie and analytics data | 13 months from collection | Platform optimization |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that renders re-identification impossible. Where legal proceedings or regulatory investigations are ongoing, retention is extended until their conclusion.
09 Security Measures
olbet implements a layered set of technical and organizational security measures designed to protect personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:
- Transport layer encryption: All data transmitted between your device and the Platform is encrypted using TLS 1.3;
- Encryption at rest: Personal data and financial records stored on olbet infrastructure are encrypted using AES-256;
- Password hashing: Account passwords are stored exclusively in hashed form using bcrypt or an equivalent one-way hashing algorithm. olbet staff cannot read your password;
- Access controls: Access to personal data by olbet staff is restricted on a strict need-to-know basis, governed by role-based access controls and multi-factor authentication for internal systems;
- Network security: The Platform is protected by web application firewalls, intrusion detection systems, and regular penetration testing by qualified third-party security assessors;
- Data breach response: olbet maintains a documented personal data breach response procedure. In the event of a breach that is likely to result in harm to data subjects, olbet will notify the National Privacy Commission within 72 hours of discovery and notify affected Players without undue delay, in accordance with NPC Circular 16-03.
Notwithstanding the above measures, no data transmission over the internet is completely secure. Players are responsible for maintaining the security of their own Account credentials and devices used to access the Platform.
10 Cookies & Tracking Technologies
olbet uses cookies and similar tracking technologies on the Platform for the purposes described below. A cookie is a small text file stored on your device by your browser. Cookies do not contain your name or financial information in readable form.
10.1 Types of Cookies Used
- Strictly necessary cookies: Required for Platform functionality, including session authentication and account security. These cannot be disabled without preventing Platform access.
- Performance and analytics cookies: Used to collect aggregated, anonymized information about how Players navigate the Platform, enabling olbet to improve user experience. These are activated only with your consent.
- Functional cookies: Used to remember your Platform preferences (language, display settings). Activated with your consent on first visit.
10.2 Managing Cookies
You may configure your browser to refuse non-essential cookies or to alert you when cookies are being placed. Disabling strictly necessary cookies will prevent you from accessing the Platform. Disabling performance or functional cookies will not prevent Platform access but may result in reduced functionality. olbet does not use third-party advertising cookies or cross-site tracking technologies for advertising purposes.
11 Your Data Subject Rights
Under Chapter III of the Data Privacy Act of 2012, you have the following rights with respect to your personal data processed by olbet. These rights may be exercised by submitting a written request to olbet's Data Protection Officer at the contact details provided in Section 14.
olbet will respond to verified data subject requests within fifteen (15) business days of receipt. Where a request is complex or involves a large volume of data, olbet may extend this period by a further fifteen (15) business days, with written notice to the requestor. Identity verification is required before any data access, correction, or deletion request is processed.
12 Protection of Minors
The olbet Platform is strictly prohibited for individuals under the age of 21 years, in accordance with PAGCOR regulations and Philippine law. olbet does not knowingly collect personal data from individuals below this age threshold. Where olbet discovers that personal data has been collected from an individual below the age of 21, that Account will be immediately closed, all associated data will be handled in accordance with mandatory regulatory retention requirements, and a report may be made to relevant authorities where required by law.
Parents and guardians who believe that a minor in their care has registered an Account with olbet should contact our Data Protection Officer immediately. olbet will prioritize the investigation and closure of any Account suspected of being held by an underage individual.
13 Changes to This Privacy Policy
olbet may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material changes — those that significantly affect your rights or the way olbet processes your personal data — will be communicated via an in-Platform notification and, where practicable, by SMS to your registered Philippine mobile number at least fourteen (14) days prior to the effective date of the change.
The version of this Policy bearing the most recent "Effective" date shown in the Table of Contents is the operative version governing olbet's data processing. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any update constitutes your acknowledgment of the revised Policy.
All prior versions of this Policy are archived and available upon written request to the Data Protection Officer.
14 Contact & Data Protection Officer
For all inquiries, requests, or concerns relating to this Privacy Policy or the processing of your personal data by olbet, please contact our Data Protection Officer through the following channels:
- In-Platform Live Chat: Available 24/7 through the support interface within the olbet Platform. For data-related requests, please indicate "Data Privacy Request" at the start of your message.
- Written Request: Data subject rights requests submitted in writing will be acknowledged within two (2) business days. Written requests should include your full name as registered on your Account, your registered Philippine mobile number (last four digits only for initial contact), and a clear description of your request.
- Email: Data privacy queries may be directed to the email address displayed in the footer of this website. Please include "DPO — Privacy Request" in the subject line.
If you are not satisfied with olbet's response to a data protection concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the independent government authority responsible for enforcing the Data Privacy Act of 2012. The NPC's contact details and complaint procedures are published on the official NPC website.
Response Timeline: olbet is committed to acknowledging all data subject requests within two (2) business days and providing a substantive response within fifteen (15) business days. For complex requests, the response period may be extended by up to fifteen (15) additional business days, with written notice to you explaining the reason for the extension.
Six Ways olbet Protects Your Personal Data
Beyond the legal requirements, here are the practical data protection commitments every olbet Player benefits from by default.
End-to-End Encryption
Every data exchange between your device and olbet is protected with TLS 1.3. Your credentials, transaction data, and session information are encrypted in transit and at rest using AES-256 — the same standard used by financial institutions and government agencies.
No Data Sales — Ever
olbet has not and will not sell your personal data to third parties for advertising, profiling, or commercial purposes. Data shared with service providers is governed by written agreements restricting use to the specific service purpose only.
RA 10173 Compliance
olbet is fully compliant with Republic Act No. 10173 (Data Privacy Act of 2012) and NPC regulations. A registered Data Protection Officer oversees compliance, handles data subject requests, and coordinates with the National Privacy Commission on regulatory matters.
Your Rights Are Real
The eight data subject rights under the DPA — access, correction, erasure, portability, object, and more — are fully honored by olbet. Submit a request to our DPO and receive a substantive response within 15 business days. No runaround, no unexplained refusals.
Minimum Retention Only
olbet keeps your data only as long as legally required — primarily the five-year window mandated by the Anti-Money Laundering Act for transaction and identity records. Data beyond its retention period is securely and irreversibly deleted on a scheduled basis.
Breach Notification Within 72 Hours
In the unlikely event of a personal data breach that may cause harm to Players, olbet will notify the National Privacy Commission within 72 hours and affected Players without undue delay — giving you the information you need to protect yourself immediately.
Your Data Is Safe at olbet — Now Explore the Platform
olbet is a PAGCOR-regulated online casino where your personal information is protected under Philippine law and your funds are held in segregated accounts. Over 500,000 Filipino players trust olbet with both their data and their money. See why — explore 1,200+ certified games, GCash payouts, and live dealer action available right now.