oklplay Privacy
Policy

This Privacy Policy ("Policy") describes how oklplay ("oklplay," "we," "us," or "our") collects, uses, stores, and protects the personal information of users ("you," "your") who access or use the oklplay platform, website, mobile application, and all related services available at oklplay.net.

oklplay is committed to protecting your privacy and handling your personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC). Where applicable, oklplay also observes the data-related requirements of the Anti-Money Laundering Act (RA 9160) and PAGCOR's regulatory guidelines.

This Policy applies to all personal data collected through:

• Account registration and profile management on oklplay.net
• Deposits, withdrawals, and payment transactions
• Gameplay activity, betting history, and session data
• Customer support interactions via live chat or email
• Participation in oklplay promotions, bonuses, or surveys
• Automated data collection through cookies and similar technologies

By creating an oklplay account or using any oklplay service, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

oklplay collects personal data that is necessary to provide you with a safe, compliant, and high-quality gaming experience. The categories of data we collect include:

oklplay does not collect sensitive personal information (as defined under RA 10173) beyond what is strictly required for identity verification and regulatory compliance. Where sensitive data such as government ID numbers is collected, it is stored with enhanced security controls and access restrictions.

oklplay uses your personal data for the following specific purposes, each of which is tied to a legitimate legal or operational basis:

• Account creation and management: To register your account, verify your identity, maintain your profile, and provide access to oklplay services.
• Payment processing: To facilitate deposits and withdrawals through your chosen Philippine payment method (GCash, Maya, BPI, BDO, Metrobank, Coins.ph, 7-Eleven, or USDT), and to verify that payment accounts match your registered identity.
• Regulatory and legal compliance: To meet our obligations under PAGCOR's regulatory framework, the Anti-Money Laundering Act, and the Data Privacy Act. This includes filing mandatory reports and responding to lawful requests from Philippine authorities.
• Fraud prevention and security: To detect unusual account activity, identify potential collusion or multi-account use, and protect the platform from exploitation.
• Responsible gaming: To monitor usage patterns for signs of problem gambling behaviour and to enforce player-requested limits, cooling-off periods, and self-exclusions.
• Customer support: To respond to your queries, resolve disputes, and improve our support processes.
• Platform improvement: To analyse aggregated, anonymised usage data to improve game offerings, performance, and user experience.
• Marketing communications (opt-in only): To send you promotional offers, bonuses, and platform updates if you have explicitly opted in to receive such communications. You may opt out at any time through your account settings or by contacting support.

oklplay does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required for real-time fraud prevention.

Under the Philippine Data Privacy Act of 2012, oklplay processes your personal data on the following legal grounds:

• Contractual necessity: Processing is necessary to perform the contract between you and oklplay — that is, to provide you with the gaming services you have registered for, process your transactions, and manage your account.
• Legal obligation: Processing is required to comply with applicable Philippine laws and regulations, including PAGCOR licensing conditions, Anti-Money Laundering Act requirements, and NPC obligations.
• Legitimate interests: Processing is necessary for oklplay's legitimate interests in maintaining platform security, preventing fraud, and improving service quality, provided these interests are not overridden by your rights and freedoms.
• Consent: For non-essential processing activities — such as marketing communications and certain analytics — oklplay relies on your freely given, specific, and informed consent. You have the right to withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

oklplay does not sell or trade your personal data. We share your information only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: Your financial data is shared with Philippine payment service providers — including GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, and Metrobank — solely for the purpose of processing your deposits and withdrawals.
• Game and software providers: Certain gameplay data (e.g., session tokens, bet amounts) may be shared with licensed game providers to facilitate game delivery and resolve technical disputes. These providers are contractually prohibited from using this data for any purpose other than game operation.
• Regulatory authorities: oklplay is required by law to share certain data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies upon lawful request or as mandated by applicable regulations.
• Identity verification services: During KYC review, identity documents may be processed by third-party verification service providers operating under strict data processing agreements and bound by Philippine data protection standards.
• Professional advisers: oklplay may share data with legal counsel, auditors, or compliance consultants where strictly necessary for the provision of professional services, subject to confidentiality obligations.

Any third party that receives personal data from oklplay is required to handle it in accordance with applicable Philippine data protection laws and in a manner consistent with this Privacy Policy. oklplay does not transfer personal data outside the Philippines except where necessary for USDT/crypto transaction processing, in which case appropriate safeguards are applied.

oklplay uses cookies and similar technologies on the oklplay.net website and platform to provide functionality, improve performance, and support security. The types of cookies used are:

• Strictly necessary cookies: Required for the platform to function — including session authentication, login state maintenance, and security tokens. These cannot be disabled without affecting platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming limits you have configured.
• Analytics cookies: Used to collect anonymised, aggregated data about how users navigate the platform, which pages are visited most frequently, and where technical errors occur. This data helps oklplay improve the platform experience.
• Security cookies: Used to detect and prevent fraudulent activity, including bot traffic, credential stuffing, and multi-account abuse.

oklplay does not use third-party advertising or retargeting cookies. You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use core platform features.

oklplay retains your personal data for only as long as necessary to fulfil the purposes outlined in this Policy and to meet our legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, in compliance with PAGCOR regulatory requirements and the Anti-Money Laundering Act.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations.
• KYC documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant verification process, whichever is later.
• Customer support communications: Retained for two (2) years from the date of the last interaction, or longer if the communication is relevant to an ongoing dispute or regulatory inquiry.
• Marketing consent records: Retained for the duration of your consent plus a reasonable period afterward for compliance evidence purposes.

When personal data is no longer required and the applicable retention period has expired, oklplay securely destroys or anonymises the data in a manner that prevents reconstruction or identification.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by oklplay:

• Right to be informed: The right to know what personal data oklplay collects about you, how it is used, and with whom it is shared — which is addressed by this Privacy Policy.
• Right of access: The right to request a copy of the personal data oklplay holds about you, and to receive information about how that data is processed.
• Right to rectification: The right to request correction of any inaccurate, incomplete, or outdated personal data in your oklplay account.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to oklplay's legal retention obligations under Philippine law.
• Right to object: The right to object to processing of your personal data for direct marketing purposes. You can opt out of marketing communications through your account settings or by contacting support.
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe oklplay has not handled your personal data in accordance with RA 10173.

To exercise any of the above rights, please contact oklplay's Data Protection Officer using the contact details in Section 12 of this Policy. oklplay will respond to verified data rights requests within the timeframes prescribed by the Data Privacy Act.

oklplay implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your browser or device and oklplay's servers is protected using TLS 1.2 or higher encryption. Sensitive data at rest — including KYC documents and financial records — is encrypted using industry-standard algorithms.
• Access controls: Access to personal data within oklplay's systems is restricted to authorised personnel on a strict need-to-know basis. All access is logged and subject to periodic audit.
• Security monitoring: oklplay's systems are monitored around the clock for anomalous activity, intrusion attempts, and data exfiltration signals.
• Penetration testing: oklplay conducts regular security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Staff training: All oklplay personnel who handle personal data receive regular data privacy and security training.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, oklplay will notify you and the National Privacy Commission within the timeframes required by the Data Privacy Act and its implementing rules.

oklplay's platform is strictly intended for adults who are 21 years of age or older, in compliance with Philippine gambling regulations. oklplay does not knowingly collect, process, or store personal data from individuals under the age of 21.

During account registration, oklplay requires users to declare their date of birth and submit a valid Philippine government-issued ID for age verification. Any account found to belong to a person under 21 years of age will be immediately closed, all funds returned to the verified payment source, and the matter reported to PAGCOR as required by applicable regulations.

If you are a parent or guardian and believe that a minor has registered an account on oklplay, please contact our support team immediately at [email protected]. We will investigate and take appropriate action, including account closure and data deletion, as promptly as possible.

oklplay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine laws, PAGCOR regulatory requirements, or platform features. The current version of this Policy is always available at oklplay.net/privacy-policy, and the effective date at the top of the page will reflect the most recent revision.

When material changes are made to this Policy — such as changes to the categories of data collected, the purposes for which data is used, or the third parties with whom data is shared — oklplay will notify registered users via the email address on file and/or through a prominent notice on the platform at least seven (7) days before the changes take effect.

Your continued use of the oklplay platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised Policy. If you do not agree to the updated terms, you may request account closure by contacting oklplay support.

oklplay has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests relating to the handling of your personal data, you may contact the oklplay DPO through the following channels:

• Email: [email protected] — include "Privacy / DPO Request" in your subject line
• Live Chat: Available 24/7 directly through the oklplay platform — state that your query relates to a data privacy matter

oklplay will acknowledge your request within three (3) business days and provide a substantive response within the timeframes prescribed by the Data Privacy Act, which are generally fifteen (15) calendar days for access and correction requests.

If you are not satisfied with oklplay's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) through the NPC's official channels. For regulatory matters falling under PAGCOR's scope, you may also contact PAGCOR directly.