Privacy Policy
okpllay Platform

This Privacy Policy ("Policy") applies to all personal data collected and processed by okpllay ("we", "us", "our") in connection with your use of the okpllay website, mobile application, and any related services (collectively, the "Platform"). It governs how okpllay handles personally identifiable information in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations, as overseen by the National Privacy Commission (NPC) of the Philippines.

By registering an account, accessing the okpllay platform, or otherwise interacting with our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please discontinue use of the okpllay platform and contact our support team at [email protected] to request account closure.

okpllay is a PAGCOR-regulated online casino and sports betting platform serving Filipino players across the Philippines. We offer a wide range of gaming services including slots, live dealer games, bingo, sabong, and sports betting. For the purposes of the Data Privacy Act of 2012, okpllay acts as the Personal Information Controller (PIC) in respect of your personal data — meaning we determine the purposes and means by which your personal data is processed.

Our designated Data Protection Officer (DPO) is responsible for overseeing okpllay's compliance with the Data Privacy Act and this Policy. You may contact our DPO directly through the support email address provided in Section 13 of this Policy.

okpllay collects personal data through several channels, including direct registration inputs, transaction records, gameplay activity, device and browser data, and communications with our support team. The categories of personal data we collect are described below.

We collect only the minimum personal data necessary to provide our services, fulfill regulatory obligations, and protect the integrity of the okpllay platform. We do not collect personal data beyond what is described in this Policy without your explicit consent.

okpllay uses the personal data we collect for specific, declared, and legitimate purposes. We do not use your data for purposes incompatible with those stated at the time of collection. The primary purposes for which we process your personal data are as follows:

• Account Creation & Management: To register your okpllay account, verify your identity, maintain your account settings, and ensure only one account exists per player in accordance with platform rules.
• Age & Identity Verification (KYC): To confirm that you meet the minimum age requirement of 21 years as required under PAGCOR regulations, and to conduct Know Your Customer checks required under Philippine AML law.
• Payment Processing: To facilitate deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels, and to maintain accurate transaction records.
• Service Delivery: To provide access to games, live dealer services, sports betting markets, bingo, and all other features of the okpllay platform.
• Customer Support: To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance through our 24/7 live chat and email support channels.
• Responsible Gaming Compliance: To monitor gameplay patterns for signs of problem gambling behavior, enforce deposit limits and self-exclusion orders, and send responsible gaming communications where appropriate.
• Fraud Prevention & AML Compliance: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, and other prohibited conduct on the platform, in compliance with the Anti-Money Laundering Act of 2001 (AMLA) and its amendments.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent or where we have a legitimate interest to do so. You may withdraw consent at any time through your account settings.
• Platform Improvement: To analyze usage patterns, identify technical issues, and improve the performance, security, and user experience of the okpllay platform.
• Legal & Regulatory Obligations: To comply with requests from PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine regulatory authorities, including mandatory reporting obligations.

Under the Data Privacy Act of 2012, okpllay relies on one or more of the following legal bases to process your personal data:

• Consent: Where you have given clear, specific, and informed consent to the processing of your personal data for a stated purpose, such as receiving marketing communications or enabling location-based features. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Contractual Necessity: Where processing is necessary for the performance of our contract with you — specifically, the Terms & Conditions you accepted upon registration — including processing payments, providing game access, and managing your account.
• Legal Obligation: Where processing is necessary for okpllay to comply with a legal or regulatory obligation, including PAGCOR licensing requirements, AMLA reporting duties, and tax obligations under Philippine law.
• Legitimate Interests: Where processing is necessary for okpllay's legitimate business interests, provided such interests are not overridden by your data protection rights. This includes fraud prevention, platform security, abuse detection, and internal analytics for service improvement.
• Vital Interests: In exceptional circumstances, where processing is necessary to protect a vital interest of the data subject or another natural person — for example, where a player has indicated a potential self-harm risk in connection with problem gambling.

okpllay does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following limited, controlled circumstances:

• Payment Service Providers: We share the minimum financial data necessary with GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors to facilitate deposits and withdrawals. These providers act as Personal Information Processors (PIPs) on our behalf and are bound by strict data processing agreements.
• Game Content Providers: Third-party game studios and live dealer providers integrated into the okpllay platform may receive session data and player identifiers necessary for game delivery, fairness certification, and responsible gaming monitoring. No payment or ID data is shared with game providers.
• Regulatory Authorities: PAGCOR, the AMLC, the NPC, the Bureau of Internal Revenue (BIR), and other Philippine government agencies may receive player data where required by law, court order, or valid regulatory demand. okpllay will notify affected players of any such disclosure where legally permitted to do so.
• KYC & Identity Verification Partners: Third-party identity verification and document authentication services may process your government ID data solely for the purpose of completing your KYC verification. These partners are certified and operate under data processing agreements aligned with the DPA.
• Fraud Prevention & Security Services: We share technical data (including IP addresses and device fingerprints) with anti-fraud and cybersecurity service providers to protect the platform and its players from unauthorized access and fraudulent activity.
• Professional Advisors: Our legal counsel, auditors, and compliance consultants may access relevant personal data in connection with their professional services, subject to strict confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or reorganization of the okpllay business, player data may be transferred to the acquiring or successor entity. Affected players will be notified in advance of any such transfer that materially affects the handling of their personal data.

The okpllay website and mobile application use cookies and similar tracking technologies to deliver a functional, personalized, and secure user experience. By continuing to use the platform after being presented with our cookie notice, you consent to the use of cookies as described in this section.

• Strictly Necessary Cookies: Essential for the operation of the platform, including maintaining your logged-in session, remembering your language and currency preferences, and enabling security features. These cookies cannot be disabled without significantly impairing platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymized data about how players interact with the okpllay platform — including pages visited, session duration, and navigation paths — to help us identify performance bottlenecks and improve user experience.
• Functionality Cookies: Used to remember your preferences and customizations, such as notification settings, game lobby filters, and responsible gaming tool configurations.
• Security Cookies: Used to detect fraudulent activity, unauthorized access attempts, and bot traffic. These cookies are strictly necessary for platform security and cannot be opted out of.

You may manage your cookie preferences through your browser settings at any time. Note that disabling non-essential cookies will not affect your ability to access core gaming services on okpllay. The specific cookies set by the platform are listed in our Cookie Notice, available from your account settings page.

okpllay retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law or regulatory obligation. Our general data retention periods are as follows:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in a manner that prevents reconstruction of the original data. Where anonymization is not technically feasible, data will be securely destroyed in accordance with NPC-approved disposal standards.

okpllay implements a comprehensive information security program designed to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security measures include, but are not limited to:

• 256-Bit SSL Encryption: All data transmitted between your device and okpllay's servers is encrypted using industry-standard TLS 1.3 protocols — the same level of protection used by major Philippine banks such as BPI, BDO, and Metrobank.
• Data Encryption at Rest: Sensitive personal data stored in okpllay's databases — including government ID references, financial account identifiers, and authentication credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is strictly limited to okpllay employees and contractors who have a legitimate need to process that data in the course of their duties. All access is logged and subject to regular review.
• Multi-Factor Authentication (MFA): All internal systems containing personal data require MFA for access. Players are strongly encouraged to enable biometric or two-factor authentication on their okpllay accounts.
• Penetration Testing & Security Audits: okpllay conducts regular third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response Plan: In the event of a personal data breach, okpllay's incident response team will assess the breach, take immediate containment action, and notify affected players and the National Privacy Commission within 72 hours of discovery, in accordance with NPC Circular 16-03.

Under the Data Privacy Act of 2012, you — as a data subject — are granted specific rights in relation to the personal data that okpllay holds about you. okpllay is committed to upholding these rights in a transparent, timely, and accessible manner. Your rights are as follows:

• Right to Be Informed: The right to be informed that your personal data is being or has been collected and processed, including the purposes, scope, and methods of processing. This Policy fulfills okpllay's disclosure obligations under this right.
• Right to Access: The right to request a copy of the personal data that okpllay holds about you, along with information about how it is being used and with whom it has been shared. Requests will be fulfilled within 15 business days.
• Right to Correction: The right to request correction of any inaccurate, incomplete, or outdated personal data we hold about you. You may update basic account information directly through your account settings; requests involving identity or financial data should be submitted to support.
• Right to Erasure (Right to be Forgotten): The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. Note that certain data must be retained for regulatory compliance reasons even after account closure, as described in Section 7.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes, or where processing is based on legitimate interests. Where you object to marketing, your preferences will be updated within 5 business days.
• Right to Data Portability: The right to receive a structured, commonly used, and machine-readable copy of your personal data for transfer to another controller, where technically feasible. This right applies to data processed on the basis of consent or contractual necessity.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission if you believe that okpllay has violated your rights under the Data Privacy Act. Contact details for the NPC are available on their official website.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Subject Rights Request". Include your registered username, the specific right you wish to exercise, and any relevant details. We will acknowledge receipt within 48 hours and provide a substantive response within 15 business days. Identity verification may be required before we action any data rights request.

The okpllay platform is strictly intended for adults aged 21 years and older, in accordance with PAGCOR regulations governing casino-style gambling in the Philippines. okpllay does not knowingly collect personal data from individuals below the age of 21.

If you are a parent or guardian and believe that a minor has registered an account or provided personal data on the okpllay platform without your knowledge, please contact us immediately at [email protected]. Upon verification, we will take immediate steps to suspend the account, delete the personal data involved, and return any deposited funds in accordance with PAGCOR guidelines.

The okpllay platform integrates with third-party services and providers to deliver a complete gaming experience. While okpllay carefully selects and contractually binds all third-party processors, we are not responsible for the independent privacy practices of external entities whose services you may interact with separately.

• Game Providers: Software providers whose games are hosted on the okpllay platform may collect limited technical data (such as game session identifiers) for the purposes of delivering game content and certifying fairness. These providers do not receive your identity, contact, or financial data.
• Payment Processors: GCash, Maya, and bank transfer providers operate under their own privacy policies in respect of your payment account data. okpllay shares only the minimum data required to process your specific transaction.
• Analytics Providers: okpllay uses privacy-respecting analytics tools to understand platform performance. Data shared with analytics providers is aggregated and anonymized wherever possible.

All third-party processors engaged by okpllay are required to enter into a Data Processing Agreement (DPA) that mandates compliance with the Philippine Data Privacy Act and restricts the use of personal data to the specific purposes for which it was shared.

okpllay reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. The date of the most recent revision is displayed at the top of this page.

• Material changes to this Policy — particularly those that affect how we use your data or the rights available to you — will be communicated via the email address registered to your okpllay account, with at least 14 days ' notice prior to the changes taking effect.
• Minor changes — such as clarifications, corrections of typographical errors, or updates to contact details — may be made without prior notice, though the updated Policy will always be available on this page.
• Your continued use of the okpllay platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must cease using the platform and request account closure.
• All previous versions of this Privacy Policy are archived and available upon written request to our Data Protection Officer.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way okpllay handles your personal data, please do not hesitate to reach out to us. Our Data Protection Officer and support team are available to assist you.

• General Support & Data Rights Requests: [email protected] — responses within 48 hours on business days.
• Data Protection Officer: Contact via the same support email address with the subject line "DPO Inquiry" to ensure your message is routed to the correct team.
• Live Chat: Available 24/7 directly within the okpllay platform for immediate assistance with account and privacy matters.
• National Privacy Commission: If you are not satisfied with our response to a data rights request or privacy concern, you have the right to escalate your complaint to the NPC of the Philippines.