okplay Privacy
Policy

okplay is an online gaming platform accessible at okplay.live, offering a wide range of entertainment products to Filipino players, including live casino games, slot machines, fishing games, bingo, and sports betting. The platform is operated in accordance with the regulatory framework established by the Philippine Amusement and Gaming Corporation (PAGCOR).

For the purposes of this Privacy Policy, okplay acts as the data controller in respect of the personal information you provide when registering for and using our services. As data controller, we determine the purposes and means by which your personal data is processed.

This Privacy Policy applies to all personal data collected through the okplay website at okplay.live, our mobile-optimized site, and any related services, features, or communications we provide to you. By creating an account and using the okplay platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

okplay collects only the personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include the following:

2.1 Registration & Identity Data

When you create an okplay account, we collect your full legal name, date of birth, gender, residential address (including barangay, city or municipality, province, and postal code), email address, and mobile number. This information is required to verify your identity, confirm your eligibility to use the platform, and comply with our Know Your Customer (KYC) obligations.

2.2 Identity Verification Documents

As part of our KYC process, we may request copies of government-issued identification documents such as a Philippine passport, SSS ID, UMID, PhilSys National ID, driver's license, or PRC ID. We may also request proof of address documents such as a recent utility bill or bank statement, and proof of payment method ownership.

2.3 Financial Data

We collect information related to your deposits and withdrawals, including transaction amounts, dates, payment method types (e.g., GCash, PayMaya, BPI, BDO, Metrobank), and transaction reference numbers. We do not store full bank account numbers or complete card details on our servers — payment processing is handled by our certified payment service providers.

2.4 Gaming Activity Data

We record your gaming history on the okplay platform, including games played, bet amounts, win and loss records, session durations, and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting.

2.5 Technical & Device Data

We automatically collect certain technical information when you access the okplay platform, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and pages visited. This data helps us maintain platform security, detect fraud, and improve the user experience.

2.6 Communications Data

If you contact our customer support team via live chat, email, or any other channel, we retain records of those communications, including the content of your messages and any attachments you provide. This allows us to track the resolution of your queries and maintain service quality.

okplay collects personal data through the following means:

• Directly from you: When you register for an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in promotions, or update your account profile.
• Automatically: Through cookies, web beacons, and similar tracking technologies when you browse or interact with the okplay platform. See Section 7 for more details on our cookie practices.
• From third-party service providers: We may receive data from our payment processors (such as GCash, PayMaya, and banking partners), identity verification providers, fraud detection services, and analytics platforms. All such providers are contractually bound to handle your data in accordance with applicable privacy laws.
• From regulatory and law enforcement sources: In limited circumstances, we may receive information from PAGCOR, the Anti-Money Laundering Council (AMLC), or other government authorities as required by law.

okplay uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your okplay account, including processing your registration, verifying your identity, and enabling you to log in securely.
• Service Delivery: To provide you with access to all okplay games and features, process your deposits and withdrawals, and deliver the services you have requested.
• KYC & AML Compliance: To verify your identity and age (21+ requirement), conduct anti-money laundering checks, and fulfill our obligations under Philippine law and PAGCOR regulations.
• Responsible Gaming: To monitor your gaming activity for signs of problem gambling, enforce deposit and loss limits you have set, and administer self-exclusion requests.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, collusion, and other prohibited conduct.
• Customer Support: To respond to your queries, resolve disputes, and provide technical assistance.
• Marketing & Promotions: Where you have given your consent, to send you information about okplay promotions, bonuses, and new game launches via email or SMS. You may withdraw this consent at any time.
• Platform Improvement: To analyze usage patterns, conduct A/B testing, and improve the performance, design, and content of the okplay platform.
• Legal Obligations: To comply with applicable laws, respond to lawful requests from government authorities, and enforce our Terms and Conditions.

Under the Philippine Data Privacy Act of 2012 (RA 10173), okplay processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and okplay — specifically, to provide you with the gaming services you have registered for, process your financial transactions, and manage your account.
• Legal Obligation: Processing is required to comply with our legal and regulatory obligations, including KYC verification, anti-money laundering reporting, age verification (21+), and PAGCOR regulatory requirements.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services — provided these interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities, such as sending you marketing communications or using non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

okplay does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors require certain personal and financial data to process your deposits and withdrawals securely.
• Identity Verification Providers: Third-party KYC and AML service providers who assist us in verifying your identity and screening against sanctions lists and politically exposed persons (PEP) databases.
• Game Software Providers: Our game content partners may receive limited technical data (such as player session identifiers) necessary to deliver their games on the okplay platform. They do not receive your full personal profile.
• IT & Security Service Providers: Cloud hosting providers, cybersecurity firms, and fraud detection services that support the technical operation and security of the okplay platform.
• Regulatory & Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other government bodies where disclosure is required by law, court order, or regulatory directive.
• Professional Advisors: Lawyers, auditors, and accountants who provide professional services to okplay, subject to strict confidentiality obligations.

okplay uses cookies and similar tracking technologies to enhance your experience on our platform, maintain your session, and gather analytics data that helps us improve our services.

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember your preferences, keep you logged in, and collect information about how you use the site. Cookies do not contain executable code and cannot access other files on your device.

7.2 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the okplay platform to function. They enable core features such as user authentication, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymized information about how visitors use the okplay platform, such as which pages are visited most frequently and whether users encounter error messages. This data helps us improve platform performance.
• Functional Cookies: These cookies remember your preferences, such as your preferred language, display settings, and game lobby filters, to provide a more personalized experience.
• Marketing Cookies: Where you have given consent, these cookies track your browsing activity to deliver relevant promotional content. You may withdraw consent for marketing cookies at any time.

7.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that disabling certain cookies may affect the functionality of the okplay platform, including your ability to log in and access games.

okplay retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR regulatory requirements and anti-money laundering obligations.
• KYC & Identity Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later, as required by the Anti-Money Laundering Act (AMLA) of the Philippines.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming Activity Logs: Retained for a minimum of three (3) years for dispute resolution and responsible gaming monitoring purposes.
• Customer Support Communications: Retained for two (2) years from the date of the last communication.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of the consent given.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in a manner that prevents re-identification.

okplay implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security framework includes:

• Encryption: All data transmitted between your device and the okplay platform is encrypted using Transport Layer Security (TLS) protocol. Sensitive data stored on our servers, including identity documents and financial records, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized okplay personnel who require it to perform their job functions. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Firewalls & Intrusion Detection: Our servers are protected by enterprise-grade firewalls and intrusion detection systems that monitor for and respond to suspicious activity in real time.
• Secure Payment Processing: Payment transactions are processed through PCI-DSS compliant payment gateways. okplay does not store full payment card numbers or complete bank account details on its own servers.
• Regular Security Audits: We conduct periodic security assessments and penetration testing to identify and remediate vulnerabilities in our systems.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, okplay will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with RA 10173.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data held by okplay. We are committed to facilitating the exercise of these rights promptly and without unnecessary barriers.

To exercise any of these rights, please contact our Data Protection Officer (DPO) using the details provided in Section 14. We will respond to all verified requests within thirty (30) days. In complex cases, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

Please note that certain rights are subject to limitations. For example, we may be unable to delete data that we are legally required to retain, or data that is necessary to defend against a legal claim.

If we become aware that personal data has been collected from a person under 21 years of age without verifiable parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has registered on the okplay platform, please contact our support team immediately so we can investigate and take appropriate action.

okplay employs age verification measures during the registration process, including the collection of date of birth and, where required, documentary proof of age. We take our responsibility to prevent underage gambling seriously and continuously review our age verification procedures to ensure their effectiveness.

The okplay platform may contain links to third-party websites or services, such as payment provider portals or game software provider sites. This Privacy Policy applies solely to the okplay platform and does not cover the privacy practices of any third-party websites or services.

We encourage you to review the privacy policies of any third-party sites you visit. okplay is not responsible for the privacy practices, content, or security of third-party websites, and the inclusion of a link to a third-party site does not constitute an endorsement of that site or its privacy practices.

okplay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this policy, we will notify registered players by email and/or by posting a prominent notice on the okplay platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this document. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data. Your continued use of the okplay platform following the posting of changes constitutes your acceptance of the revised Privacy Policy.

If you do not agree with any changes to this Privacy Policy, you should cease using the platform and may request account closure in accordance with our Terms and Conditions.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way okplay handles your personal data, please contact our Data Protection Officer (DPO). Our DPO is responsible for overseeing our data protection strategy and ensuring compliance with the Philippine Data Privacy Act of 2012.

You may also reach our general customer support team through the live chat feature available on the okplay platform. For formal data subject requests (access, rectification, erasure, portability, or objection), we recommend contacting the DPO directly via email to ensure your request is properly logged and handled within the required timeframe.

If you are not satisfied with our response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the government body responsible for administering and implementing the Data Privacy Act of 2012 and ensuring compliance of personal information controllers with the provisions of the law.