okkplay Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") is issued by okkplay ("okkplay," "we," "us," or "our"), the operator of the online gaming platform at okkplay.one ("Platform"). This Policy describes how okkplay collects, uses, stores, shares, and protects the personal data of individuals ("you," "your," or "data subject") who access or use the Platform, including registered players, visitors, and prospective users.

This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC") of the Philippines. By using the okkplay Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2. Personal Data We Collect

okkplay collects the following categories of personal data:

2.1 Identity & Contact Data. Full legal name, date of birth, nationality, Philippine residential address, email address, and mobile number. This data is collected during registration and KYC verification.

2.2 Identity Verification Documents. Copies of government-issued identification documents (e.g., Philippine passport, PhilSys National ID, SSS ID, UMID, driver's license), proof of address documents, and selfie photographs submitted for KYC purposes.

2.3 Financial Data. Payment method details (e.g., GCash account reference, Maya account reference, bank account details), transaction history, deposit and withdrawal records, and account balance information. okkplay does not store full credit or debit card numbers on its servers.

2.4 Account & Gaming Data. Username, account preferences, game history, wagering records, bonus usage, session duration, and responsible gaming tool settings (e.g., deposit limits, self-exclusion status).

2.5 Technical & Usage Data. IP address, device type, operating system, browser type and version, referring URL, pages visited, time spent on pages, and clickstream data collected automatically when you use the Platform.

2.6 Communications Data. Records of your communications with okkplay's customer support team, including live chat transcripts, email correspondence, and support ticket history.

2.7 Marketing Preferences. Your preferences regarding receiving promotional communications from okkplay, including opt-in and opt-out records.

3. How We Collect Your Data

okkplay collects personal data through the following means:

• Direct collection — data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated collection — data collected automatically through cookies, web beacons, log files, and similar tracking technologies when you access the Platform;
• Third-party sources — data received from identity verification service providers, payment processors, fraud prevention services, and regulatory databases for the purpose of verifying your identity and complying with AML obligations;
• Publicly available sources — data from publicly accessible government databases or registries where necessary for compliance purposes.

4. How We Use Your Personal Data

okkplay processes your personal data for the following purposes:

• Account management — to create, maintain, and manage your okkplay account, including authentication and security;
• Service delivery — to provide access to games, process deposits and withdrawals, and deliver the features of the Platform;
• Identity verification (KYC) — to verify your identity and age (21+) as required by PAGCOR regulations and applicable Philippine law;
• Anti-money laundering (AML) compliance — to monitor transactions, detect suspicious activity, and report to relevant Philippine authorities as required by law;
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, cheating, and unauthorized access;
• Customer support — to respond to your inquiries, resolve disputes, and provide technical assistance;
• Responsible gaming — to administer deposit limits, self-exclusion, and other player protection tools;
• Marketing communications — to send you promotional offers, newsletters, and updates about okkplay, subject to your marketing preferences and applicable opt-in requirements;
• Platform improvement — to analyze usage patterns, conduct research, and improve the features and performance of the Platform;
• Legal compliance — to comply with applicable Philippine laws, regulatory requirements, court orders, and lawful requests from government authorities.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, okkplay processes your personal data on the following legal bases:

• Contractual necessity — processing required to perform the contract between you and okkplay (i.e., providing the gaming services you have registered for);
• Legal obligation — processing required to comply with applicable Philippine laws, including KYC, AML, and PAGCOR regulatory requirements;
• Legitimate interests — processing for fraud prevention, security, and Platform improvement, where such interests are not overridden by your rights and freedoms;
• Consent — processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

okkplay does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purposes:

• Game providers and technology partners — licensed game studios and platform technology providers who supply games and software to okkplay, bound by data processing agreements;
• Payment processors — GCash, Maya, and banking partners who process your deposits and withdrawals, subject to their own privacy policies and Philippine financial regulations;
• Identity verification providers — third-party KYC and AML service providers who assist in verifying your identity and screening against regulatory watchlists;
• Fraud prevention services — providers of fraud detection and cybersecurity services who help protect the Platform and its users;
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where disclosure is required by law;
• Professional advisors — lawyers, auditors, and accountants bound by professional confidentiality obligations;
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to equivalent privacy protections.

7. Data Retention

okkplay retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account and gaming data — retained for the duration of your account and for a minimum of five (5) years after account closure, in accordance with PAGCOR record-keeping requirements;
• KYC and identity documents — retained for a minimum of five (5) years after the end of the business relationship, as required by the Anti-Money Laundering Act;
• Financial transaction records — retained for a minimum of five (5) years from the date of the transaction;
• Customer support communications — retained for two (2) years from the date of the last interaction;
• Marketing preference records — retained until you withdraw consent or close your account, plus one (1) year for audit purposes;
• Technical and usage data — retained for up to twelve (12) months from collection, unless required longer for security investigations.

When personal data is no longer required, okkplay will securely delete or anonymize it in accordance with industry best practices and NPC guidelines.

8. Cookies & Tracking Technologies

8.1 What Are Cookies. Cookies are small text files placed on your device when you visit the okkplay Platform. They help us recognize your device, remember your preferences, and analyze how the Platform is used.

8.2 Types of Cookies We Use.

• Strictly necessary cookies — essential for the Platform to function, including session management, authentication, and security. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings and display options to improve your experience.
• Analytics cookies — collect anonymized data about how users interact with the Platform to help us improve performance and usability.
• Marketing cookies — used to deliver relevant promotional content. These are only placed with your explicit consent.

8.3 Managing Cookies. You can control non-essential cookies through your browser settings or our cookie preference center. Disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled as they are required for the Platform to operate.

9. Data Security

okkplay implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption — all data transmitted between your device and the okkplay Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols;
• Data encryption at rest — sensitive personal data stored on okkplay's servers is encrypted using AES-256 or equivalent encryption standards;
• Access controls — access to personal data is restricted to authorized okkplay personnel and service providers on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication;
• Regular security audits — okkplay conducts periodic security assessments, penetration testing, and vulnerability scans to identify and remediate potential weaknesses;
• Incident response — okkplay maintains a documented data breach response plan. In the event of a breach affecting your personal data, we will notify you and the NPC within seventy-two (72) hours of becoming aware of the breach, as required by the DPA.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okkplay:

• Right to be informed — the right to know what personal data okkplay collects about you and how it is processed, as described in this Policy;
• Right of access — the right to request a copy of the personal data okkplay holds about you;
• Right to rectification — the right to request correction of inaccurate or incomplete personal data;
• Right to erasure — the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to okkplay's legal retention obligations;
• Right to object — the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to data portability — the right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to lodge a complaint — the right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact okkplay's Data Protection Officer using the details in Section 14. okkplay will respond to verified requests within thirty (30) days. We may require proof of identity before processing your request.

11. Children's Privacy

The okkplay Platform is strictly intended for individuals who are at least twenty-one (21) years of age, in accordance with Philippine gambling regulations administered by PAGCOR. okkplay does not knowingly collect personal data from individuals under the age of 21.

If okkplay becomes aware that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, forfeit any balances in accordance with our Terms & Conditions, and securely delete the personal data. If you believe a minor has registered on the Platform, please notify us immediately at [email protected].

12. International Data Transfers

okkplay's primary operations and data storage are based in the Philippines. In certain circumstances, your personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or game studios operating internationally.

Where such transfers occur, okkplay ensures that appropriate safeguards are in place to protect your personal data, including contractual data processing agreements that require the recipient to apply data protection standards equivalent to those required under Philippine law. okkplay will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards.

13. Changes to This Privacy Policy

okkplay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered users via email or a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. We encourage you to review this Policy periodically to stay informed about how okkplay protects your personal data. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

14. Contact Us & Data Protection Officer

okkplay has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests regarding your personal data or this Policy, please contact:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated: