0kada Privacy Policy

1. Introduction

0kada ("we," "us," "our," or the "Platform") is committed to protecting the privacy and personal data of all individuals who interact with our services. This Privacy Policy sets out how 0kada collects, uses, stores, shares, and protects personal data in connection with the operation of the 0kada online gaming platform available at 0kada.club.

This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA 2012) of the Philippines, and the implementing rules and regulations issued by the National Privacy Commission (NPC). 0kada also observes applicable international data protection standards where relevant to cross-border data flows.

Please read this Privacy Policy carefully. By registering for an account, accessing the Platform, or otherwise providing your personal data to 0kada, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2. Data Controller

For the purposes of the DPA 2012 and applicable data protection legislation, 0kada is the data controller responsible for personal data collected through the 0kada.club platform. Questions, requests, and complaints regarding the processing of your personal data may be directed to 0kada's Data Protection Officer (DPO) at the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

Depending on how you interact with the 0kada Platform, we may collect the following categories of personal data:

3.1 Identity Data

• Full legal name as it appears on your government-issued ID;
• Date of birth and age verification information;
• Gender (where provided);
• Government-issued identification documents (PhilSys National ID, UMID, passport, driver's license, or equivalent) submitted as part of KYC verification.

3.2 Contact Data

• Email address;
• Mobile phone number (Globe, Smart, or DITO subscriber numbers);
• Residential address (province, city/municipality, barangay, and postal code).

3.3 Account Data

• Username and encrypted password hash;
• Account registration date and last login timestamp;
• Account status and any account restrictions or notes.

3.4 Financial Data

• GCash or Maya mobile wallet numbers used for transactions;
• Bank account details (BPI, BDO, UnionBank, Metrobank) where used for deposits or withdrawals;
• Cryptocurrency wallet addresses for USDT TRC20 transactions;
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method used.

3.5 Gaming Data

• Bet history, game results, and win/loss records;
• Bonus usage and wagering progress;
• Game preferences and session durations;
• Responsible gaming tool usage (deposit limits set, self-exclusion requests).

3.6 Technical Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser type;
• Session logs, login timestamps, and navigation data within the Platform;
• Cookies and similar tracking technology data (see Section 11).

3.7 Communications Data

• Records of communications with 0kada's customer support team, including live chat transcripts and email correspondence;
• Survey responses and feedback submissions.

4. How We Collect Your Data

0kada collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to promotions;
• Automated collection: Technical and usage data collected automatically when you access the Platform through cookies, server logs, and analytics tools;
• Third-party sources: Identity verification data from KYC service providers; payment confirmation data from GCash, Maya, and other payment processors; fraud detection signals from security partners.

5. Purposes of Processing

0kada processes your personal data for the following purposes:

• To create, maintain, and manage your 0kada account;
• To verify your identity and age in compliance with PAGCOR-aligned regulations and AMLA requirements;
• To process deposits, withdrawals, and financial transactions securely;
• To provide and improve our gaming services, including personalising game recommendations;
• To administer bonuses, promotions, and loyalty programs;
• To detect and prevent fraud, money laundering, collusion, and other prohibited conduct;
• To comply with legal and regulatory obligations, including mandatory reporting requirements under AMLA;
• To provide customer support and resolve disputes;
• To send transactional communications (account notifications, payment confirmations, security alerts);
• To send marketing and promotional communications where you have opted in to receive them;
• To conduct analytics and improve Platform performance and user experience;
• To enforce our Terms & Conditions and other Platform policies.

6. Legal Basis for Processing

Under the DPA 2012, 0kada processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the terms of your account agreement, including account management, payment processing, and service delivery;
• Legal obligation: Processing required to comply with applicable Philippine law, including AMLA, PAGCOR regulations, tax obligations, and NPC requirements;
• Legitimate interests: Processing for fraud prevention, security monitoring, platform analytics, and responsible gaming compliance, where such interests are not overridden by your rights;
• Consent: Processing for optional marketing communications, where you have provided explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Sharing Your Personal Data

0kada does not sell your personal data. We may share your data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors: GCash (Mynt), Maya (PayMaya Philippines), BancNet, and other payment service providers necessary to process your financial transactions;
• KYC / identity verification providers: Third-party services used to verify your identity documents and assess fraud risk as part of the onboarding and withdrawal process;
• Game software providers: Providers of RNG game engines and live dealer studio technology that deliver games on the 0kada Platform. These providers may receive anonymised session data for game integrity purposes;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government authorities where disclosure is required by law or official order;
• IT and security service providers: Cloud hosting providers, cybersecurity vendors, and fraud detection services engaged under data processing agreements that require compliance with the DPA 2012;
• Professional advisers: Lawyers, auditors, and accountants subject to professional confidentiality obligations, where reasonably necessary for 0kada's legitimate business and legal interests.

All third parties with whom 0kada shares personal data are required to maintain appropriate data protection standards and may only use your data for the specific purposes for which it was shared.

8. International Data Transfers

Some of 0kada's service providers and technology partners are located outside the Philippines. Where personal data is transferred to recipients in other countries, 0kada takes steps to ensure that such transfers are subject to appropriate safeguards consistent with the requirements of the DPA 2012, including data processing agreements, contractual data protection clauses, and assessments of the recipient country's data protection standards.

By using the 0kada Platform, you acknowledge and consent to the transfer of your personal data to recipients outside the Philippines where necessary for the purposes described in this Policy, subject to the safeguards described above.

9. Data Retention

0kada retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying regulatory retention requirements. Specific retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with AMLA and PAGCOR record-keeping requirements;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required under the Revised Implementing Rules and Regulations of AMLA;
• Gaming and session data: Retained for a minimum of two (2) years for dispute resolution and regulatory compliance purposes;
• Support communications: Retained for a minimum of two (2) years from the date of the communication;
• Marketing consent records: Retained until consent is withdrawn and for a period of one (1) year thereafter as evidence of consent management.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with 0kada's internal data disposal procedures.

10. Security Measures

0kada implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and 0kada's servers;
• Encryption of sensitive fields in 0kada's databases, including passwords (stored as one-way cryptographic hashes) and financial credentials;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Multi-factor authentication for all internal system access by 0kada personnel;
• Regular penetration testing and vulnerability assessments by qualified security professionals;
• Automated anomaly detection and fraud monitoring systems operating in real time;
• Incident response procedures and breach notification protocols aligned with NPC requirements under the DPA 2012.

Notwithstanding the above, no data transmission over the internet or method of electronic storage is completely secure. While 0kada takes reasonable precautions, we cannot guarantee absolute security of your personal data.

11. Cookies & Tracking Technologies

0kada uses cookies and similar tracking technologies (including web beacons and local storage objects) on the Platform. Cookies are small data files placed on your device that help us operate the Platform efficiently and improve your experience. The types of cookies 0kada uses include:

• Strictly necessary cookies: Required for the Platform to function, including maintaining your logged-in session, remembering your preferences, and enabling secure transactions. These cannot be disabled.
• Performance and analytics cookies: Used to collect anonymised information about how players use the Platform, including page visit frequency, navigation paths, and error occurrences. This data helps 0kada improve Platform performance.
• Functionality cookies: Allow the Platform to remember your preferences (such as language settings and game display options) to provide a more personalised experience.
• Security cookies: Used for fraud detection, bot prevention, and session integrity verification.

You may control non-essential cookies through your browser settings. However, disabling strictly necessary cookies may impair the functionality of the 0kada Platform. Continued use of the Platform constitutes consent to our use of cookies as described above.

12. Your Rights Under the DPA 2012

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 0kada:

• Right to be informed: To be notified of how your personal data is collected and processed (fulfilled by this Privacy Policy);
• Right of access: To request a copy of the personal data 0kada holds about you;
• Right to rectification: To request correction of inaccurate or incomplete personal data;
• Right to erasure or blocking: To request deletion or restriction of processing of your personal data, subject to applicable legal retention requirements;
• Right to object: To object to the processing of your personal data for direct marketing purposes or other processing based on legitimate interests;
• Right to data portability: To receive your personal data in a structured, commonly used format where technically feasible;
• Right to lodge a complaint: To file a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of the above rights, please contact 0kada's Data Protection Officer using the details in Section 15. We will respond to valid requests within the timeframes specified under the DPA 2012 and its implementing rules.

13. Children and Minors

The 0kada Platform is strictly prohibited to individuals under the age of 21 years. 0kada does not knowingly collect personal data from individuals under 21. If we become aware that personal data has been collected from an individual who is under 21, that account will be immediately suspended, the personal data will be deleted, and any funds in the account will be handled in accordance with applicable regulatory requirements.

14. Changes to This Privacy Policy

0kada reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will post the updated Policy on the Platform with a revised "Last Updated" date. Where required by law or where the change materially affects your rights, we will provide advance notice via email or a prominent notification on the Platform.

Your continued use of the 0kada Platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes and your continued consent to the processing of your personal data as described in the revised Policy.

15. Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 0kada, please contact us through the following channels:

• Email (Data Privacy): [email protected] — subject line: "Data Privacy Request"
• Live Chat: Available 24/7 on the 0kada Platform — identify your query as a data privacy matter for routing to the appropriate team

0kada's Data Protection Officer will acknowledge receipt of your request and provide a substantive response within the timeframes required by the NPC. Requests for data access, rectification, or erasure will be handled in accordance with the DPA 2012 and may require identity verification before processing.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.