Privacy Policy

1 About This Policy

This Privacy Policy ("Policy") describes how OkePlay ("we", "us", "our") collects, uses, stores, and protects the personal data of users ("you", "your") who access or use the OkePlay online gaming platform, including the OkePlay website and mobile application (collectively, the "Platform").

This Policy applies to all personal data collected through your use of the Platform, including data provided during registration, during gameplay, through payment transactions, and through your interactions with OkePlay's customer support team.

OkePlay operates in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its implementing rules and regulations. We are committed to upholding the rights of data subjects as defined under Philippine law.

This Policy should be read alongside OkePlay's Terms & Conditions and Responsible Gaming Policy. By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

2 Data We Collect

OkePlay collects personal data that is necessary to provide you with a safe, fair, and compliant gaming experience. The categories of personal data we collect include:

OkePlay does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where required by law or where you voluntarily provide such information in the context of a responsible gaming self-assessment.

3 How We Collect Your Data

OkePlay collects your personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions;
• Automated technologies: Data collected automatically when you use the Platform, including cookies, web beacons, log files, and similar tracking technologies that record your device information, IP address, and browsing behaviour on the Platform;
• Payment providers: Transaction data received from payment processors such as GCash, PayMaya, BPI, BDO, and Metrobank when you make deposits or request withdrawals;
• Identity verification services: Data received from third-party KYC and identity verification providers used to confirm your identity and age;
• Fraud prevention services: Data received from third-party fraud detection and anti-money laundering screening services.

4 How We Use Your Data

OkePlay uses your personal data for the following purposes:

• To create and manage your OkePlay account and verify your identity and age (minimum 21 years);
• To process deposits, withdrawals, and other financial transactions on the Platform;
• To provide customer support and respond to your enquiries and complaints;
• To comply with our legal and regulatory obligations, including anti-money laundering (AML) requirements and PAGCOR compliance;
• To detect, investigate, and prevent fraud, cheating, money laundering, and other prohibited activities;
• To monitor and enforce responsible gaming limits, self-exclusion requests, and cooling-off periods;
• To send you transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts;
• To send you promotional communications about OkePlay offers and new games, where you have consented to receive such communications;
• To analyse Platform usage and improve the performance, features, and user experience of OkePlay;
• To personalise your experience on the Platform based on your gaming preferences and history.

5 Legal Basis for Processing

OkePlay processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable Philippine regulations:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to when registering your OkePlay account, including account management, payment processing, and game provision;
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering laws, PAGCOR licensing requirements, and tax reporting obligations;
• Legitimate interests: Processing carried out for OkePlay's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your rights;
• Consent: Processing based on your freely given, specific, and informed consent, including the sending of marketing communications and the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Disclosure

OkePlay does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers used to process your deposits and withdrawals;
• Identity verification providers: Third-party KYC and age verification services used to confirm your identity in compliance with regulatory requirements;
• Fraud prevention and AML services: Third-party providers used to screen transactions and player activity for fraud, money laundering, and other prohibited conduct;
• Technology and hosting providers: Cloud hosting, data storage, and platform infrastructure providers who process data on OkePlay's behalf under strict data processing agreements;
• Regulatory and law enforcement authorities: PAGCOR, the National Privacy Commission of the Philippines, law enforcement agencies, and other government bodies where disclosure is required by law or court order;
• Professional advisers: Lawyers, auditors, and accountants where necessary for the conduct of OkePlay's business operations.

All third parties with whom OkePlay shares personal data are required to handle your data in accordance with applicable data protection laws and OkePlay's data processing standards. OkePlay does not authorise third parties to use your personal data for their own independent purposes.

7 Cookies & Tracking Technologies

OkePlay uses cookies and similar tracking technologies to operate and improve the Platform, personalise your experience, and analyse usage patterns. A cookie is a small text file placed on your device when you visit the Platform.

The types of cookies OkePlay uses include:

• Essential cookies: Required for the Platform to function correctly. These include session cookies that keep you logged in and security cookies that protect your account. These cannot be disabled;
• Functional cookies: Used to remember your preferences, such as language settings and game display options, to provide a more personalised experience;
• Analytics cookies: Used to collect anonymised data about how players use the Platform, including which games are most popular and how players navigate between pages. This data helps OkePlay improve the Platform;
• Marketing cookies: Used to deliver relevant promotional content within the Platform based on your gaming activity and preferences. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For essential cookies, no opt-out is available as they are strictly necessary for the Platform to operate.

8 Data Retention

OkePlay retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR requirements and Philippine anti-money laundering regulations;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction;
• Customer support communications: Retained for a minimum of two (2) years from the date of the communication;
• Marketing consent records: Retained until you withdraw your consent, plus a reasonable period thereafter for compliance purposes.

When your personal data is no longer required, OkePlay will securely delete or anonymise it in accordance with our internal data retention and disposal procedures.

9 Data Security

OkePlay implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the OkePlay Platform;
• Encryption of sensitive data at rest, including financial data and identity documents;
• Access controls that restrict access to personal data to authorised OkePlay personnel on a need-to-know basis;
• Regular security assessments and penetration testing of the Platform;
• Two-factor authentication options for player accounts;
• Monitoring systems to detect and respond to suspicious activity and potential data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, OkePlay will notify the National Privacy Commission of the Philippines and affected players in accordance with the requirements of the Data Privacy Act of 2012.

10 Your Rights as a Data Subject

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by OkePlay:

• Right to be informed: You have the right to be informed about how OkePlay collects and processes your personal data, as described in this Policy;
• Right of access: You have the right to request a copy of the personal data OkePlay holds about you;
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data OkePlay holds about you;
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to OkePlay's legal retention obligations;
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on OkePlay's legitimate interests;
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing;
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe OkePlay has not handled your personal data in accordance with applicable law.

To exercise any of these rights, please contact OkePlay's Data Protection Officer using the contact details provided in Section 14 of this Policy. OkePlay will respond to all data subject requests within thirty (30) days of receipt, in accordance with the Data Privacy Act of 2012.

11 Children & Minors

OkePlay employs age verification procedures during the registration process and as part of our KYC compliance programme to prevent underage access to the Platform. If you believe a minor has registered on OkePlay, please contact our support team immediately so we can investigate and take appropriate action.

12 International Data Transfers

OkePlay's primary operations are based in the Philippines. However, some of the third-party service providers we use — including cloud hosting providers, KYC verification services, and fraud prevention platforms — may process your personal data in countries outside the Philippines.

Where personal data is transferred outside the Philippines, OkePlay ensures that appropriate safeguards are in place to protect your data, including contractual data processing agreements that require recipient organisations to maintain data protection standards equivalent to those required under Philippine law.

By using the OkePlay Platform, you acknowledge and consent to the transfer of your personal data to countries outside the Philippines where necessary for the provision of OkePlay's services, subject to the safeguards described above.

13 Changes to This Privacy Policy

OkePlay reserves the right to update or amend this Privacy Policy at any time. When changes are made, the updated Policy will be published on this page with a revised "Last Updated" date. Where changes are material, OkePlay may notify registered players via email or an in-platform notification.

We encourage you to review this Privacy Policy periodically to stay informed about how OkePlay protects your personal data. Your continued use of the Platform following the publication of any updated Policy constitutes your acceptance of the changes.

14 Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or OkePlay's handling of your personal data, please contact our Data Protection Officer:

If you are not satisfied with OkePlay's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. For questions about responsible gaming tools and self-exclusion, please visit our Responsible Gaming page.