okiplay Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how okiplay ("okiplay," "we," "us," or "our") collects, processes, stores, and protects the personal data of individuals ("you," "user," or "data subject") who access or use the okiplay platform at okiplay.club and all associated services (collectively, the "Platform").

This Policy applies to all users of the okiplay Platform, including registered account holders, visitors who browse the website without registering, and individuals who contact okiplay's customer support team. By using the okiplay Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

okiplay is committed to protecting the privacy and personal data of its users in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC).

2. Data Controller Information

okiplay acts as the data controller for personal data collected through the Platform. As data controller, okiplay determines the purposes and means of processing your personal data. For all privacy-related inquiries, please contact our designated Data Privacy Officer (DPO) using the contact details provided in Section 14 of this Policy.

3. Personal Data We Collect

3.1 Identity and Registration Data

When you register an okiplay account, we collect the following personal data:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older, as required by PAGCOR)
• Mobile number registered in the Philippines
• Email address
• Residential address
• Nationality and citizenship

3.2 Identity Verification (KYC) Data

As part of our Know-Your-Customer (KYC) obligations under PAGCOR regulations and Philippine AML laws, we may collect:

• Scanned or photographed copies of government-issued identification (Philippine passport, driver's licence, SSS ID, UMID, PhilSys ID, or equivalent)
• Proof of address documentation (utility bill, bank statement, or equivalent)
• Selfie photograph or liveness check for identity confirmation
• Source of funds documentation where required by AML compliance procedures

3.3 Financial and Transaction Data

okiplay processes the following financial data in connection with deposits, withdrawals, and gaming activity:

• GCash or Maya account number linked to your okiplay account
• Bank account details (BDO, BPI, Metrobank, or other accepted banks) if used for transactions
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment references
• Gaming history including game types, wager amounts, win/loss records, and session durations

3.4 Technical and Usage Data

When you use the okiplay Platform, we automatically collect:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited, time spent on pages, and navigation paths
• Login timestamps and session duration
• Cookies and similar tracking data (see Section 9)

3.5 Communications Data

If you contact okiplay's support team or participate in promotions, we collect records of those communications including live chat transcripts, email correspondence, and any information you voluntarily provide to our support staff.

4. How We Collect Your Data

okiplay collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions on okiplay.club.
• Automatically: Through cookies, web analytics tools, and server logs when you browse the okiplay Platform.
• From third parties: From payment processors (e.g., GCash, Maya) when you initiate a transaction; from identity verification service providers during KYC processing; and from fraud prevention services that cross-reference publicly available information.

5. Purposes and Legal Basis for Processing

okiplay processes your personal data for the following purposes, each grounded in a legitimate legal basis under the Data Privacy Act of 2012:

• Account creation and management — to register and maintain your okiplay account. Legal basis: performance of contract.
• Identity verification and age confirmation — to verify that you are 21 years or older and a genuine individual, as required by PAGCOR regulations. Legal basis: legal obligation and legitimate interest.
• Processing financial transactions — to process deposits, withdrawals, and bonus credits. Legal basis: performance of contract.
• Anti-money laundering compliance — to monitor transactions and report suspicious activity as required by Republic Act No. 9160 (Anti-Money Laundering Act) and PAGCOR AML guidelines. Legal basis: legal obligation.
• Responsible gaming monitoring — to identify patterns of problematic gambling and enforce self-exclusion requests. Legal basis: legitimate interest and legal obligation.
• Customer support — to respond to your enquiries, resolve disputes, and improve service quality. Legal basis: performance of contract and legitimate interest.
• Marketing and promotions — to send you information about okiplay offers and promotions, where you have provided consent. Legal basis: consent (you may withdraw consent at any time by contacting support).
• Platform security and fraud prevention — to detect and prevent unauthorised access, cheating, and fraudulent activity. Legal basis: legitimate interest.
• Analytics and platform improvement — to understand how users interact with the Platform and to improve functionality and user experience. Legal basis: legitimate interest.

6. Sharing and Disclosure of Personal Data

okiplay does not sell your personal data to third parties. We may share your data only in the following circumstances:

• Service providers: We engage third-party service providers who process data on our behalf, including payment processors, KYC/AML verification platforms, cloud infrastructure providers, and customer support software vendors. All such providers are bound by data processing agreements obligating them to protect your data.
• Game providers: Limited session and wager data may be shared with licensed game providers (e.g., JILI, PG Soft, Pragmatic Play, Evolution) solely for the purpose of delivering game services and maintaining game integrity.
• Regulatory authorities: okiplay may be required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or law enforcement agencies where required by applicable Philippine law or a valid legal order.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.
• With your consent: We may share your data with other parties where you have explicitly consented to such sharing.

7. Data Retention

okiplay retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The following general retention periods apply:

• Account and KYC data: Retained for a minimum of 5 years from account closure, as required by PAGCOR AML regulations and the Anti-Money Laundering Act.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for 2 years from the date of the interaction.
• Technical and usage data: Retained for up to 12 months, after which it is anonymised or deleted.
• Marketing consent records: Retained until you withdraw consent, plus 1 year for record-keeping purposes.

When personal data is no longer required, okiplay securely deletes or anonymises it in accordance with industry best practices.

8. Data Security

okiplay implements comprehensive technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and okiplay's servers.
• Encryption of sensitive stored data, including passwords (stored as one-way cryptographic hashes — never in plaintext) and financial account details.
• Access controls limiting internal access to personal data on a strict need-to-know basis, with role-based permissions and audit logging.
• Regular security assessments, penetration testing, and vulnerability scanning of the okiplay Platform.
• Two-factor authentication (2FA) available to all account holders for enhanced login security.
• Intrusion detection systems and real-time monitoring for suspicious activity patterns.

While okiplay employs industry-standard security measures, no system is completely immune to breach. In the event of a data breach that is likely to result in harm to data subjects, okiplay will notify affected users and the National Privacy Commission within 72 hours of becoming aware of the breach, in accordance with NPC Circular 16-03.

9. Cookies and Tracking Technologies

okiplay uses cookies and similar tracking technologies to enhance Platform functionality, analyse usage patterns, and support marketing activities. The categories of cookies used include:

• Strictly necessary cookies: Essential for the Platform to function, including session management, login authentication, and security features. These cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings and login status ("Remember me" feature).
• Analytics cookies: Used to collect anonymised data about how users interact with the Platform, helping us identify areas for improvement.
• Marketing cookies: Used to deliver relevant promotional content. These are only activated with your consent.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect Platform functionality. Continued use of the okiplay Platform without adjusting your cookie settings constitutes acceptance of our cookie use as described above.

10. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data held by okiplay:

• Right to be informed: You have the right to know how your personal data is being collected and processed, which this Policy fulfils.
• Right of access: You may request a copy of the personal data we hold about you.
• Right to correction: You may request correction of inaccurate, incomplete, or outdated personal data. You can update most account information directly through your okiplay account settings.
• Right to erasure or blocking: You may request deletion or blocking of personal data where processing is unlawful, the purpose has been fulfilled, or consent has been withdrawn — subject to okiplay's legal retention obligations.
• Right to object: You may object to processing of your personal data for direct marketing purposes at any time.
• Right to data portability: You may request a machine-readable copy of personal data you have provided to okiplay.
• Right to damages: You have the right to seek compensation for damages sustained due to inaccurate, incomplete, outdated, or unlawfully processed personal data.
• Right to file a complaint: You have the right to file a complaint with the National Privacy Commission if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact okiplay's Data Privacy Officer using the details in Section 14. okiplay will respond to verified data subject requests within 15 business days.

11. Third-Party Links and Services

The okiplay Platform may contain references to or integrations with third-party services, including game providers and payment processors. okiplay is not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you interact with through the Platform. This Policy applies solely to data processing conducted by okiplay.

12. Children's Privacy

The okiplay Platform is strictly intended for individuals who are 21 years of age or older, as mandated by PAGCOR's regulations for online gaming in the Philippines. okiplay does not knowingly collect personal data from individuals under 21. If we become aware that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, delete all collected data, and, where appropriate, refer the matter to relevant authorities.

If you are a parent or guardian and believe your child has registered on the okiplay Platform, please contact our support team or Data Privacy Officer immediately.

13. Changes to This Privacy Policy

okiplay reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered users via email or Platform notification and update the "Last Updated" date at the top of this page. Your continued use of the okiplay Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

We recommend reviewing this Privacy Policy periodically to stay informed about how okiplay protects your personal data.

14. Contact and Data Privacy Officer

For all privacy-related inquiries, data subject requests, or concerns regarding this Privacy Policy, please contact okiplay's Data Privacy Officer:

• Email: [email protected] — Subject line: "Data Privacy Request"
• Live Chat: Available 24/7 via the chat widget on okiplay.club
• Response Time: We aim to acknowledge all privacy-related correspondence within 3 business days and provide a substantive response within 15 business days.

If you are not satisfied with okiplay's response to your privacy concern, you have the right to escalate the matter to the National Privacy Commission of the Philippines at privacy.gov.ph.