okiplay
Privacy Policy

This Privacy Policy is issued by okiplay ("okiplay", "we", "us", "our"), the operator of the online gaming platform accessible at okiplay.vip. okiplay serves players based in the Republic of the Philippines and is designed to comply with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission (NPC).

This Policy applies to all personal information collected from individuals who: (a) register an account on the okiplay platform; (b) visit the okiplay website without registering; (c) contact okiplay's customer support team; or (d) participate in promotions, surveys, or other activities organised by okiplay. It applies regardless of whether access is made via desktop, mobile browser, or any other means.

okiplay collects personal data that is necessary, adequate, relevant, and not excessive for the purposes stated in this Policy. The categories of personal data we collect are set out in the table below:

okiplay collects personal data through several methods, including:

• Registration: Information you provide when creating your okiplay account, including your name, date of birth, mobile number, and email address.
• KYC Verification: Identity documents and photographs you submit when completing the Know Your Customer verification process required prior to withdrawals.
• Deposits and Withdrawals: Payment details collected when you initiate financial transactions via GCash, Maya, BPI, BDO, or other supported payment methods.
• Support Interactions: Information you provide during live chat sessions, email correspondence, or other communications with okiplay customer support.
• Promotions: Data submitted when participating in okiplay promotions, competitions, or surveys.

• Cookies and Similar Technologies: Technical data collected automatically when you access the okiplay website, including IP address, device identifiers, and browsing behaviour. See Section 9 for details on cookies.
• Game and Betting Logs: Usage data generated automatically as you interact with games and the sports betting section of the platform.
• Login and Session Records: Technical data recording when and from where your okiplay account was accessed.

• Payment Processors: Transaction confirmation and status data from payment providers including GCash, Maya, BPI, BDO, and others.
• Identity Verification Services: Where okiplay uses third-party KYC verification service providers, we may receive verification results and supplementary identity data from those providers.
• Fraud Prevention Databases: Data from fraud detection services used to screen new registrations and transactions.

okiplay uses personal data collected from players only for purposes that are lawful, proportionate, and consistent with the expectations that players have when providing their information. The primary purposes for which we use your data are:

• Account Administration: Creating and maintaining your okiplay account, processing your registration, and managing your profile and preferences.
• Identity & Age Verification: Confirming that you are who you say you are and that you are at least 21 years of age, as required by PAGCOR-compliant gaming regulations.
• Financial Transactions: Processing deposits and withdrawals, reconciling account balances, and maintaining transaction records.
• Platform Delivery: Enabling access to casino games, sports betting, bingo, sabong, and all other features of the okiplay platform.
• Customer Support: Responding to your queries, resolving disputes, and providing technical assistance.
• Security & Fraud Prevention: Monitoring for unauthorised account access, detecting betting irregularities, preventing money laundering, and protecting the integrity of the platform.
• Responsible Gaming: Monitoring your gaming activity to identify behavioural indicators of problem gambling and, where appropriate, applying account-level protections or reaching out with relevant resources.
• Legal Compliance: Meeting our obligations under applicable Philippine laws, including anti-money laundering legislation, data protection law, and gaming regulations.
• Platform Improvement: Analysing usage patterns, game performance, and player feedback to improve the okiplay platform and user experience.
• Marketing Communications: Sending you information about promotions, bonuses, and new features at okiplay — only where you have provided consent or where we have a legitimate interest in doing so, and always with the option to opt out.

Under the Data Privacy Act of 2012, okiplay processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and okiplay — including account registration, game access, and payment processing — is necessary to provide the services you have requested.
• Legal Obligation: Processing required to comply with applicable laws, including KYC and AML obligations under the Anti-Money Laundering Act and PAGCOR gaming regulations.
• Legitimate Interests: Processing carried out for purposes such as fraud prevention, platform security, and internal analytics, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and certain optional features is carried out only where you have provided clear and specific consent, which you may withdraw at any time.

okiplay does not sell your personal data to third parties. We share your data only as described below and only to the extent necessary for the stated purpose:

• Payment Processors: Financial data is shared with payment providers — including GCash, Maya, BPI, BDO, UnionBank, and others — solely to execute your requested transactions.
• Game Providers: Certain technical and account data is shared with game software providers (such as Pragmatic Play, PG Soft, and Jili) to the extent necessary to deliver the game experience and track player activity for bonus and jackpot purposes.
• Identity Verification Partners: Where third-party KYC service providers are used, your identity documents and verification data are shared with those providers under strict data processing agreements.
• Fraud & Security Partners: Technical data may be shared with fraud detection and cybersecurity service providers to protect the okiplay platform and its players.
• Regulatory Authorities: okiplay will disclose personal data to regulatory bodies, law enforcement agencies, and government authorities where required to do so by applicable law, court order, or regulatory direction — including PAGCOR and the Anti-Money Laundering Council (AMLC).
• Professional Advisers: Data may be disclosed to legal counsel, auditors, and other professional advisers where necessary for legal proceedings, audits, or regulatory compliance.

All third parties who process personal data on behalf of okiplay are required to enter into data processing agreements that impose obligations consistent with the Data Privacy Act of 2012 and this Policy.

Some of okiplay's technology partners, game providers, and infrastructure providers may be located outside the Philippines. Where personal data is transferred to countries that the National Privacy Commission has not determined to offer an adequate level of data protection, okiplay implements appropriate safeguards, which may include:

• Standard contractual clauses approved or recognised by the NPC;
• Binding corporate rules where applicable to group entities; or
• Other lawful transfer mechanisms recognised under the Data Privacy Act of 2012 and its Implementing Rules.

You may request information about the specific safeguards okiplay has put in place for international transfers of your personal data by contacting our Data Protection Officer using the details provided in Section 14.

okiplay retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following general retention guidelines apply:

• Active Account Data: Retained for the duration of your active okiplay account relationship.
• KYC and Identity Data: Retained for a minimum of five (5) years from the date of last account activity, as required by AML regulations and NPC guidelines.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, consistent with applicable financial record-keeping requirements.
• Support Communications: Retained for three (3) years from the date of the communication, or longer if related to an unresolved dispute or regulatory inquiry.
• Marketing Consent Records: Retained for as long as we hold your contact details for marketing purposes, plus two (2) years to demonstrate compliance with consent obligations.

When personal data is no longer required, it is securely deleted or anonymised in accordance with NPC-approved data disposal procedures.

The okiplay website uses cookies and similar tracking technologies to operate essential platform functions, improve the user experience, and analyse how players interact with the site. The types of cookies we use are:

• Essential Cookies: Required for the platform to function. These include session management cookies that keep you logged in during your visit and security tokens that protect your account. These cannot be disabled without impacting platform functionality.
• Functional Cookies: Remember your preferences and settings, such as language selection and game lobby filters, to personalise your okiplay experience across visits.
• Analytics Cookies: Collect anonymised data about how visitors interact with the okiplay website, including pages visited, session duration, and navigation patterns. This data is used to improve the platform.
• Security Cookies: Used by okiplay's fraud detection systems to identify suspicious patterns such as unusual login locations or bot-like activity.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the okiplay platform. okiplay does not use third-party advertising cookies or permit third-party advertisers to place tracking cookies on the platform.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okiplay. These rights may be exercised by contacting our Data Protection Officer as described in Section 14.

The okiplay platform is strictly intended for adults aged 21 years and above. okiplay does not knowingly collect personal data from individuals under the age of 21. All registrations are subject to age and identity verification, and accounts found to belong to underage individuals will be immediately closed and all funds returned or held pending regulatory guidance.

If you believe that a person under 21 has submitted personal data to okiplay, please contact our Data Protection Officer immediately using the details in Section 14. Upon confirmation, okiplay will delete the relevant data promptly and take appropriate steps to prevent further access.

okiplay implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All data exchanged between your device and the okiplay platform is encrypted using 256-bit SSL/TLS protocols.
• Encryption at Rest: Sensitive personal and financial data stored in okiplay's systems is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to systems holding personal data is restricted to authorised personnel on a need-to-know basis, with multi-factor authentication required for administrative access.
• Regular Security Audits: okiplay conducts regular internal and third-party security assessments, penetration testing, and vulnerability scans of its platform infrastructure.
• Incident Response: okiplay maintains a documented data breach response plan. In the event of a security incident, the response team is activated immediately to contain the breach and assess impact.
• Employee Training: All okiplay staff with access to personal data receive data protection training and are bound by confidentiality obligations.

While okiplay takes its security obligations seriously and implements reasonable and appropriate measures, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your account credentials and for notifying okiplay immediately if you suspect unauthorised access to your account.

okiplay reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players by email to the address on file, by in-platform notification, or by posting a prominent notice on the okiplay website. The updated Policy will take effect on the date stated in the notice.

We encourage you to review this Privacy Policy periodically to stay informed about how okiplay handles your personal data. The "Last updated" date at the top of this page reflects when the most recent revision was made. Your continued use of the okiplay platform following the effective date of any amendment constitutes acceptance of the updated Policy.

If you disagree with any material change to this Policy, you may close your okiplay account and request deletion of your personal data by contacting our Data Protection Officer as described in Section 14, subject to any retention obligations we are required to fulfil by law.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by okiplay, please contact our Data Protection Officer (DPO) through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, via the okiplay platform. This is the fastest way to reach our support and data privacy team.
• Email: [email protected] — please include "Privacy Request" in the subject line. Responses are provided within fifteen (15) business days.

When submitting a data subject rights request, please provide your registered account email address and a description of your request. Identity verification will be required before we can fulfil requests involving access to, correction of, or deletion of personal data.

If you are not satisfied with okiplay's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). Information about the NPC's complaint process is available through official Philippine government channels.