okiplay Privacy Policy

01 Introduction

okiplay ("okiplay," "we," "us," or "our") is committed to protecting the privacy and personal data of all players and visitors who use the okiplay website and platform (collectively, the "Platform"). This Privacy Policy ("Policy") describes how we collect, use, store, share, and protect your personal information in connection with your use of the Platform.

This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the applicable regulations of the National Privacy Commission (NPC). It should be read together with our Terms and Conditions and Responsible Gaming Policy.

By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please discontinue use of the Platform immediately.

02 Personal Data We Collect

okiplay collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

2.1 Registration and Identity Data

• Full legal name;
• Date of birth (to verify the 21+ age requirement);
• Email address and mobile number;
• Residential address (city, province, postal code);
• Government-issued identification number (e.g., PhilSys ID, passport, driver's licence).

2.2 Financial and Transaction Data

• Deposit and withdrawal history;
• Payment method details (e.g., GCash mobile number, PayMaya account, BPI or BDO account number — stored in tokenised form only);
• Transaction amounts and timestamps;
• Bonus and promotional activity records.

2.3 Technical and Usage Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Session duration, pages visited, and features used;
• Login timestamps and access logs.

2.4 Communications Data

• Records of your communications with our customer support team;
• Feedback, survey responses, and complaint records;
• Email and in-platform notification preferences.

2.5 Responsible Gaming Data

• Self-exclusion requests and status;
• Deposit limit settings and modification history;
• Responsible gaming assessment responses, where provided voluntarily.

03 How We Use Your Personal Data

okiplay processes your personal data on the following legal bases and for the following purposes:

Purpose	Legal Basis
Account registration and identity verification (KYC)	Contractual necessity; legal obligation
Processing deposits, withdrawals, and transactions	Contractual necessity
Providing customer support and resolving disputes	Contractual necessity; legitimate interest
Fraud prevention, AML compliance, and security monitoring	Legal obligation; legitimate interest
Responsible gaming monitoring and intervention	Legal obligation; legitimate interest
Sending transactional notifications (e.g., deposit confirmations)	Contractual necessity
Sending promotional communications (with your consent)	Consent
Platform analytics and performance improvement	Legitimate interest
Compliance with PAGCOR regulatory reporting requirements	Legal obligation

okiplay will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

04 Cookies and Tracking Technologies

4.1 What Are Cookies

Cookies are small text files placed on your device when you visit the Platform. They allow us to recognise your device, maintain your session, and remember your preferences. okiplay uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled. They include session authentication tokens and security cookies.
• Performance Cookies: Used to collect anonymised data about how players use the Platform, helping us identify and fix issues and improve overall performance.
• Functional Cookies: Used to remember your preferences, such as language settings and display options, to personalise your experience.
• Analytics Cookies: Used to understand aggregate usage patterns on the Platform. Data collected is anonymised and not linked to individual players.

4.2 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from logging in or completing transactions. Disabling other cookie categories will not affect your ability to use core Platform features.

05 Sharing Your Personal Data

okiplay does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely to process your transactions;
• Identity Verification Providers: Third-party KYC service providers engaged to verify your identity and age in compliance with PAGCOR requirements;
• Game Content Providers: Licensed game studios and platform providers (e.g., Evolution, Pragmatic Play) who supply the games available on the Platform, to the extent necessary to deliver those games;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where required by law;
• Law Enforcement: Philippine law enforcement agencies, where required by a valid legal order or where disclosure is necessary to prevent or investigate fraud or criminal activity;
• Professional Advisers: Legal counsel, auditors, and other professional advisers engaged by okiplay, subject to strict confidentiality obligations.

All third parties with whom okiplay shares personal data are required to process that data in accordance with applicable Philippine data protection law and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

06 Data Retention

okiplay retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulatory obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR and AMLC record-keeping requirements;
• Transaction and Financial Data: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations;
• Customer Support Records: Retained for three (3) years from the date of the last interaction;
• Technical and Usage Logs: Retained for twelve (12) months from the date of collection, unless required for longer periods for security or fraud investigation purposes;
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of compliance.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in accordance with our internal data disposal procedures.

07 Data Security

okiplay implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data at rest, including payment method tokens and identity documents;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing;
• Multi-factor authentication for all administrative access to systems containing personal data;
• Continuous monitoring for suspicious activity and automated threat detection systems.

While okiplay takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, okiplay will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012.

08 Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okiplay:

• Right to be Informed: You have the right to be informed of how your personal data is being collected and processed, as set out in this Policy;
• Right of Access: You have the right to request a copy of the personal data okiplay holds about you, along with information about how it is being processed;
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you;
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time;
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to all verified requests within fifteen (15) business days, in accordance with NPC guidelines.

09 Children's Privacy

The okiplay Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gambling regulations. okiplay does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the associated account and delete the data in question.

If you believe that a minor has registered on the Platform or provided personal data to okiplay, please contact us immediately at [email protected] so that we can take appropriate action.

10 Marketing Communications

With your consent, okiplay may send you promotional communications about new games, bonuses, special offers, and platform updates via email or in-platform notifications. You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email;
• Updating your communication preferences in your account settings; or
• Contacting our support team at [email protected].

Withdrawal of consent for marketing communications will not affect your ability to use the Platform or receive transactional notifications that are necessary for the operation of your account (such as deposit confirmations, withdrawal notifications, and security alerts).

11 Cross-Border Data Transfers

okiplay primarily processes and stores your personal data within the Philippines. In certain circumstances, your personal data may be transferred to or processed by service providers located outside the Philippines — for example, where we use internationally hosted cloud infrastructure or engage global game content providers.

Where such transfers occur, okiplay ensures that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses that meet the standards required by the National Privacy Commission. By using the Platform, you consent to such transfers where they are necessary to provide you with the services you have requested.

12 Changes to This Privacy Policy

okiplay reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will update the "Last Updated" date at the top of this page and, where required, notify you by email or in-platform notification.

Your continued use of the Platform after the posting of an updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed about how okiplay protects your personal data.

13 Contact and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or the way okiplay handles your personal data, please contact our Data Protection Officer:

• Email: [email protected]
• Response Time: Within 15 business days for formal data subject requests; within 24 hours for general privacy inquiries via live chat

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) through their official channels. okiplay cooperates fully with NPC investigations and takes all privacy complaints seriously.