PRIVACY POLICY.

INTRODUCTION

This Privacy Policy explains how okbet labs, s.a. (“okbet,” “we,” “us,” or “our”) collects, uses, stores, and shares information when you use our websites (okehbet.com and app.okehbet.com), our applications, and related services (collectively, the “Service”).

okbet is a private social challenge app where friends create, join, and settle group bets together. Stakes are held in smart contract escrow on the Base blockchain and settled with USDC. okbet is not a sportsbook, casino, exchange, or public prediction market.

We wrote this policy in plain English because we think you should actually understand it. If something is unclear, email us at hello@okehbet.com.

WHAT WE COLLECT

We collect different information depending on how you interact with okbet.

INFORMATION YOU PROVIDE DIRECTLY

INFORMATION COLLECTED WHEN YOU USE THE APP

INFORMATION WE DO NOT COLLECT

• Social Security numbers or government-issued IDs
• Bank account or credit card numbers
• KYC (Know Your Customer) identity verification data
• Biometric data
• Precise geolocation
• Phone numbers (unless you provide one voluntarily via email)

BLOCKCHAIN DATA: THE WEB3 REALITY

HOW WE USE YOUR INFORMATION

We use the information we collect to:

• Operate the Service: Process waitlist signups, send transactional emails, create and manage bets, verify on-chain transactions, display bet status and history
• Communicate with you: Send waitlist confirmations, beta invitations, and service-related notifications (via Resend, our transactional email provider)
• Maintain and improve the Service: Debug issues, measure product usage with cookieless analytics, monitor for abuse, and improve the product
• Protect the Service and our users: Detect fraud, enforce our terms, and maintain the security and integrity of the platform
• Comply with legal obligations: Respond to lawful requests from authorities where required

We do NOT use your information to:

• Sell it to third parties
• Build advertising profiles
• Target you with behavioral advertising
• Train machine learning models on your personal data

HOW WE STORE YOUR INFORMATION

OFF-CHAIN DATA

Your email address, group size preference, bet metadata, wallet address associations, and participation records are stored in a PostgreSQL database hosted by Supabase (supabase.com). Supabase provides managed database hosting with:

• Encryption at rest
• Encryption in transit (TLS)
• Row-level security (RLS) policies that restrict data access
• Infrastructure hosted in the cloud region(s) we configure with the provider

ON-CHAIN DATA

Transaction data, smart contract state, and wallet interactions are stored on the Base blockchain (an Ethereum Layer 2 network). This data is distributed across a decentralized network of nodes and is not controlled by okbet.

TRANSACTIONAL EMAIL

Emails are sent via Resend (resend.com), which processes your email address solely to deliver messages on our behalf. Resend acts as a data processor.

WHO WE SHARE YOUR INFORMATION WITH

We do not sell your personal information. We share data only in these limited circumstances:

SERVICE PROVIDERS (DATA PROCESSORS)

OTHER DISCLOSURES

We may share information:

• With your consent: If you explicitly ask us to share data with a third party
• For legal compliance: In response to a lawful subpoena, court order, or regulatory request
• To protect rights and safety: If we believe disclosure is necessary to protect the rights, property, or safety of okbet, our users, or the public
• In a business transfer: If okbet is acquired, merged, or sells assets, your information may be transferred to the successor entity. We will notify you before your data is subject to a different privacy policy

PUBLIC BLOCKCHAIN DISCLOSURE

As described in the “Blockchain Data” section, on-chain transaction data is inherently public. This is not a “sharing” decision by okbet—it is a fundamental property of blockchain technology. By using the app and submitting transactions, you acknowledge that this data will be publicly visible.

COOKIES AND TRACKING

WHAT WE USE

okbet currently uses only essential cookies required for the Service to function:

• Session/framework cookies set by Next.js for basic site functionality
• Wallet connection state stored in local storage by WalletConnect/RainbowKit to remember your connected wallet

ANALYTICS (COOKIELESS)

We use cookieless, privacy-friendly analytics to understand how the Service is used and to improve it — for example, which pages and features people use, and basic performance. This measurement sets no cookies, builds no advertising profiles, and does not track you across other websites. Where a wallet address is recorded for product metrics, it is hashed, never stored in the clear. The providers are listed in the service-providers table above.

WHAT WE DO NOT USE

• No advertising or cross-site tracking analytics (no Google Analytics, no Meta Pixel)
• No advertising pixels or trackers (no Meta Pixel, no Google Ads)
• No cross-site tracking cookies
• No fingerprinting

The analytics described above are cookieless and set no non-essential cookies. If we ever introduce non-essential cookies or cross-site tracking, we will update this policy and, where required by law, obtain your consent first.

YOUR RIGHTS

FOR ALL USERS

Regardless of where you live, you can:

• Access your data: Request a copy of the personal information we hold about you
• Correct your data: Ask us to fix inaccurate information
• Delete your data: Ask us to delete your personal information from our systems (subject to the blockchain limitation described above)
• Withdraw consent: Where we rely on consent, you can withdraw it at any time

To exercise any of these rights, email hello@okehbet.com. We will respond within 30 days.

FOR EUROPEAN ECONOMIC AREA (EEA) AND UK RESIDENTS (GDPR)

Under the General Data Protection Regulation (GDPR), you have additional rights:

• Legal bases for processing: We process your data based on:
  • Contract performance (Article 6(1)(b)): To provide the Service you signed up for (waitlist, bet creation, settlement)
  • Legitimate interests (Article 6(1)(f)): To maintain security, prevent fraud, measure product usage with cookieless analytics, and improve the Service, where these interests are not overridden by your rights
  • Consent (Article 6(1)(a)): Where we specifically ask for your consent (e.g., marketing communications beyond transactional emails, if applicable)
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to restrict processing: Ask us to limit how we use your data in certain circumstances
• Right to object: Object to processing based on legitimate interests
• Right to lodge a complaint: File a complaint with your local data protection authority

Data controller: okbet labs, s.a., Republic of Panama

CHILDREN'S PRIVACY

okbet is not directed at anyone under the age of 18. We do not knowingly collect personal information from children. If you are under 18, do not use the Service or provide any information to us.

If we learn that we have collected personal information from a child under 18, we will delete that information promptly. If you believe a child has provided us with personal information, contact us at hello@okehbet.com.

DATA RETENTION

We retain your information only as long as necessary for the purposes described in this policy:

When you request deletion, we will remove your personal information from our active databases. Some data may persist in encrypted backups for a limited period before being overwritten.

BETA NOTICE

okbet is live on Base mainnet with real USDC, in open beta. During this period:

• Transactions use real USDC on Base; stakes are real and non-reversible
• We may change or migrate off-chain data (cached display data, profiles, waitlist entries) as we develop the product
• On-chain records are governed by the smart contracts and cannot be wiped or reversed by okbet
• The product is under active development; features and availability may change

If we make material changes to how we handle data, we will update this policy and, where appropriate, notify you.

SECURITY

We take reasonable measures to protect your information, including:

• Encryption in transit (TLS/HTTPS for all connections)
• Encryption at rest for database storage
• Row-level security policies restricting database access
• Environment-based secrets management (API keys and credentials are never hardcoded)
• Server-side validation and on-chain verification of all bet transactions
• Service role separation between public-facing and administrative database access

No system is perfectly secure. If you discover a security vulnerability, please report it responsibly to security@okehbet.com. Do not publicly disclose vulnerabilities before we have had a chance to address them.

INTERNATIONAL DATA TRANSFERS

okbet operates internationally. Our service providers process data in the regions where they operate, which may be inside or outside the country you use the Service from.

When you use the Service, your information may be transferred to and processed in countries other than your own. By using the Service, you consent to this transfer.

For users in the EEA/UK, we rely on Standard Contractual Clauses (SCCs) or other legally approved transfer mechanisms to ensure adequate protection for international transfers.

THIRD-PARTY LINKS AND SERVICES

The Service may contain links to third-party websites or services (e.g., block explorers like Basescan, wallet providers). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

When you connect a wallet through WalletConnect or RainbowKit, your interaction with those services is governed by their respective privacy policies, not ours.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the “Last updated” date at the top of this page
• Notify waitlist subscribers and app users by email if the changes are significant
• Post a notice on the Service

Your continued use of the Service after changes are posted constitutes acceptance of the updated policy. If you disagree with the changes, you should stop using the Service and request deletion of your data.

CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data:

okbet labs, s.a.
Republic of Panama

• General inquiries: hello@okehbet.com
• Security issues: security@okehbet.com
• Privacy / data requests: hello@okehbet.com