olybet Privacy Policy

1 Who We Are

This Privacy Policy is issued by olybet ("olybet," "we," "us," or "our"), the operator of the online gaming platform accessible at olybet.one. olybet operates under applicable PAGCOR regulations and is committed to protecting the personal data of all users of the platform in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations.

For the purposes of the DPA, olybet acts as the Personal Information Controller in respect of the personal data of registered players and site visitors. This means olybet determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

2 Personal Data We Collect

olybet collects personal data that is necessary for the operation of the platform, the provision of gaming services, and compliance with our legal and regulatory obligations. The categories of personal data we collect are set out in the table below.

We do not collect special categories of personal data (such as health data, biometric data, or political opinions) except where strictly required by law or with your explicit consent.

3 How We Collect Your Data

olybet collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access and use the olybet platform, including through cookies, web beacons, and server logs. See Section 7 for more detail on cookies.
• Third-party sources: Identity and fraud-check data received from KYC verification service providers, payment processors, and fraud prevention agencies where necessary to verify your identity or protect the platform from abuse.
• Regulatory sources: Information received from PAGCOR or other regulatory authorities in connection with our licensing obligations or in response to regulatory enquiries.

Where we collect personal data from third-party sources, we ensure that such collection is lawful and that the third party has the appropriate authority to share the data with us.

4 How We Use Your Personal Data

olybet uses your personal data only for the purposes for which it was collected or for compatible purposes that you would reasonably expect. The primary purposes for which we process your personal data are:

• To create and manage your olybet account and provide you with access to our gaming services.
• To verify your identity and age (21+) in compliance with PAGCOR regulations and Philippine law.
• To process deposits, withdrawals, and other financial transactions on your account.
• To detect, investigate, and prevent fraud, money laundering, and other illegal activity in compliance with the Anti-Money Laundering Act (AMLA) and its amendments.
• To monitor your gaming activity for responsible gaming purposes and to apply responsible gaming tools where appropriate.
• To communicate with you about your account, including security alerts, transaction confirmations, and important policy updates.
• To send you promotional communications and personalised offers, where you have consented to receive such communications.
• To improve the olybet platform through analytics and user research.
• To comply with our legal and regulatory obligations, including reporting obligations to PAGCOR and other Philippine authorities.
• To resolve disputes and enforce our Terms & Conditions.

We will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

5 Legal Basis for Processing

Under the Data Privacy Act of 2012, olybet processes your personal data on the following legal bases:

• Contractual necessity: Processing that is necessary to perform our contract with you — i.e., to provide the olybet gaming services you have registered for, including account management, payment processing, and customer support.
• Legal obligation: Processing that is required to comply with our legal and regulatory obligations under Philippine law, including KYC verification, AML reporting, PAGCOR regulatory requirements, and tax obligations.
• Legitimate interests: Processing that is necessary for olybet's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided that such interests are not overridden by your rights and interests.
• Consent: Processing for purposes such as direct marketing communications, where we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Personal Data

olybet does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors and e-wallet providers: GCash, PayMaya, and Philippine banking partners, for the purpose of processing your deposits and withdrawals.
• KYC and identity verification providers: Third-party service providers who assist us in verifying your identity and age in compliance with PAGCOR requirements.
• Fraud prevention and AML service providers: Agencies that help us detect and prevent fraud, money laundering, and other financial crime.
• IT and platform service providers: Cloud hosting, data storage, and platform infrastructure providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities, where we are required by law to disclose your personal data or where disclosure is necessary to protect the rights, property, or safety of olybet, our players, or the public.
• Professional advisers: Lawyers, auditors, and accountants who provide professional services to olybet, subject to strict confidentiality obligations.

Where we engage third-party service providers to process personal data on our behalf, we ensure that appropriate data processing agreements are in place that require those providers to process data only on our instructions and in accordance with applicable Philippine data protection law.

7 Cookies & Tracking Technologies

olybet uses cookies and similar tracking technologies to operate and improve the platform, to remember your preferences, and to analyse how the platform is used. A cookie is a small text file placed on your device when you visit the olybet website.

The types of cookies we use are as follows:

• Strictly necessary cookies: These cookies are essential for the olybet platform to function. They enable core features such as account login, session management, and security. These cookies cannot be disabled.
• Functional cookies: These cookies remember your preferences and settings (such as language and display preferences) to provide a more personalised experience on the platform.
• Analytics cookies: These cookies collect anonymised information about how visitors use the olybet platform, including which pages are visited most frequently and how users navigate the site. This data helps us improve the platform experience.
• Security cookies: These cookies help us detect and prevent fraudulent activity, protect your account, and maintain the integrity of the platform.

You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the olybet platform. Most browsers allow you to refuse cookies or to alert you when cookies are being sent. Refer to your browser's help documentation for instructions on managing cookie settings.

olybet does not use third-party advertising cookies or tracking pixels for the purpose of serving targeted advertisements on external websites.

8 Data Retention

olybet retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR regulatory requirements and the Anti-Money Laundering Act.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, in compliance with AMLA and tax record-keeping requirements.
• KYC verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the communication, or longer where the communication relates to an unresolved dispute or legal claim.
• Technical and usage data: Retained for up to twelve (12) months from collection, unless required for longer for security or fraud investigation purposes.
• Marketing consent records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, as evidence of the consent given.

Where personal data is no longer required for any lawful purpose, olybet will securely delete or anonymise it in accordance with our data disposal procedures.

9 Data Security

olybet takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect your data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the olybet platform.
• AES-256 encryption for sensitive personal data stored on olybet servers.
• Multi-factor authentication options for player accounts to prevent unauthorised access.
• Role-based access controls ensuring that olybet staff can only access personal data that is necessary for their specific job function.
• Regular security audits, vulnerability assessments, and penetration testing of the olybet platform.
• Comprehensive staff training on data protection and information security obligations.
• Incident response procedures to detect, contain, and report personal data breaches in accordance with NPC notification requirements.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, olybet will notify the National Privacy Commission and, where required, affected individuals in accordance with the timeframes prescribed by the DPA and NPC regulations.

While olybet implements robust security measures, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying olybet immediately if you suspect any unauthorised access to your account.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by olybet. We are committed to facilitating the exercise of these rights promptly and without undue burden.

To exercise any of the above rights, please contact our Data Protection Officer using the details provided in Section 14. We will respond to all verified data subject requests within fifteen (15) calendar days of receipt, in accordance with NPC guidelines. We may need to verify your identity before processing your request.

If you are not satisfied with our response to a data subject request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

11 Children's Privacy and Age Restriction

The olybet platform is strictly intended for adults aged 21 years and above. olybet does not knowingly collect personal data from individuals under the age of 21. The minimum age for casino-style gambling in the Philippines is 21 years, as prescribed by applicable Philippine law and PAGCOR regulations.

Age verification is a mandatory step in the olybet registration and KYC process. Where olybet discovers that personal data has been collected from an individual under the age of 21, we will immediately suspend the relevant account, delete the personal data collected, and report the matter to the appropriate authorities where required.

If you are a parent or guardian and believe that your child has registered with olybet or provided personal data to the platform, please contact us immediately using the details in Section 14 so that we can take appropriate action.

12 Cross-Border Data Transfers

olybet primarily stores and processes personal data within the Republic of the Philippines. In certain circumstances, personal data may be transferred to or accessed from locations outside the Philippines — for example, where we use cloud infrastructure providers or KYC verification services that operate internationally.

Where personal data is transferred outside the Philippines, olybet ensures that appropriate safeguards are in place to protect your data in accordance with the DPA and NPC regulations. These safeguards may include:

• Contractual clauses approved by the National Privacy Commission requiring the recipient to protect personal data to the same standard as required under Philippine law.
• Transfers to countries or organisations that the NPC has determined provide an adequate level of data protection.
• Other legally recognised transfer mechanisms as permitted under the DPA and its Implementing Rules.

You may request further information about the safeguards applicable to any specific cross-border transfer by contacting our Data Protection Officer.

13 Updates to This Privacy Policy

olybet may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The effective date of the current version is displayed at the top of this page.

Where changes to this Privacy Policy are material, olybet will notify registered players by email or through a prominent notice on the platform prior to the changes taking effect. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

Your continued use of the olybet platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any update to this Privacy Policy, you may close your account in accordance with the process described in our Terms & Conditions.

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by olybet, please contact our Data Protection Officer:

When contacting our DPO, please include your full name, registered email address, and a clear description of your request or concern. This will help us process your request as efficiently as possible.

If you are not satisfied with our response, you have the right to file a complaint with the National Privacy Commission of the Philippines. The NPC can be reached through their official government channels.