OkyPlay Privacy
Policy

01 Introduction

OkyPlay ("we", "us", "our") operates the online gaming platform accessible at okyplay.com, including all associated services, games, features, and mobile applications (collectively, the "Platform"). We are committed to protecting the privacy and personal data of all individuals who use the OkyPlay Platform ("you", "the Player").

This Privacy Policy describes how OkyPlay collects, uses, stores, shares, and protects your personal data in connection with your use of the Platform. It also describes the rights you have in relation to your personal data and how you can exercise those rights.

By registering an account on OkyPlay or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Privacy Policy, you must not use the OkyPlay Platform.

02 Data We Collect

OkyPlay collects the following categories of personal data in connection with your use of the Platform:

03 How We Collect Your Data

OkyPlay collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access and use the Platform, including through cookies, log files, and similar tracking technologies.
• Third-party sources: Information received from payment processors (such as GCash, PayMaya, BPI, BDO, and Metrobank), identity verification service providers, and fraud prevention partners, where necessary to verify your identity or process transactions.
• Regulatory sources: Information received from PAGCOR or other Philippine regulatory authorities in connection with compliance obligations, including self-exclusion registers.

OkyPlay will always inform you at the point of collection what personal data is being collected and for what purpose, unless an exemption applies under the Data Privacy Act.

04 How We Use Your Data

OkyPlay uses your personal data for the following purposes:

• Account management: To create, maintain, and manage your OkyPlay account, including verifying your identity and age (21+ requirement) and processing your registration.
• Service delivery: To provide you with access to OkyPlay's games, features, and services, and to process your deposits, withdrawals, and wagers.
• Legal and regulatory compliance: To comply with PAGCOR licensing requirements, Philippine anti-money laundering laws (Republic Act No. 9160, as amended), the Data Privacy Act, and other applicable regulations — including mandatory reporting obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, and other security threats.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling, enforce self-exclusion requests, and administer deposit limits and other responsible gaming tools.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Platform improvement: To analyse usage patterns, conduct research, and improve the functionality, performance, and user experience of the OkyPlay Platform.
• Marketing communications: To send you promotional offers, bonuses, and updates about OkyPlay — but only where you have provided your consent to receive such communications. You may withdraw this consent at any time through your account settings.

OkyPlay will not use your personal data for any purpose that is incompatible with the purposes described in this Privacy Policy without first obtaining your consent or as otherwise permitted by applicable law.

05 Legal Basis for Processing

OkyPlay processes your personal data on the following legal bases under the Philippine Data Privacy Act:

• Contractual necessity: Processing is necessary to perform the contract between you and OkyPlay — specifically, to provide you with access to the Platform and its services.
• Legal obligation: Processing is necessary to comply with OkyPlay's legal and regulatory obligations under Philippine law, including PAGCOR licensing conditions, anti-money laundering requirements, and tax reporting obligations.
• Legitimate interests: Processing is necessary for OkyPlay's legitimate interests in operating a secure, fair, and commercially viable gaming platform — including fraud prevention, security monitoring, and platform improvement — provided that such interests are not overridden by your privacy rights.
• Consent: For certain types of processing — such as sending marketing communications or processing sensitive personal information — OkyPlay relies on your freely given, specific, informed, and unambiguous consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

06 Data Sharing & Disclosure

OkyPlay does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to the extent necessary to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC (Know Your Customer) and age verification service providers engaged by OkyPlay to verify your identity and age in compliance with regulatory requirements.
• Fraud prevention and security partners: Service providers that assist OkyPlay in detecting and preventing fraudulent activity, money laundering, and other security threats.
• Technology and infrastructure providers: Cloud hosting, data storage, and platform technology providers who process data on OkyPlay's behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where OkyPlay is required by law to disclose your personal data.
• Professional advisers: Lawyers, auditors, and other professional advisers engaged by OkyPlay in connection with legal proceedings, compliance reviews, or corporate transactions, subject to confidentiality obligations.

07 Data Retention

OkyPlay retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account data: Retained for the duration of your account relationship with OkyPlay, and for a minimum of five (5) years following account closure, in accordance with PAGCOR licensing requirements and anti-money laundering regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required under Philippine anti-money laundering laws.
• Identity verification documents: Retained for the duration of your account relationship and for a minimum of five (5) years following account closure.
• Customer support communications: Retained for a period of two (2) years from the date of the communication, unless a longer retention period is required for dispute resolution or legal proceedings.
• Marketing consent records: Retained for the duration of your consent and for a reasonable period thereafter to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, OkyPlay will securely delete or anonymise your personal data in accordance with its data disposal procedures, unless a longer retention period is required by law.

08 Data Security

OkyPlay takes the security of your personal data seriously. We implement a range of technical and organisational security measures designed to protect your data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data transmitted between your device and OkyPlay's servers is encrypted using industry-standard Transport Layer Security (TLS) protocols. Sensitive data at rest is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to OkyPlay personnel and authorised service providers who have a legitimate need to access it. All access is logged and monitored.
• Secure infrastructure: OkyPlay's platform is hosted on secure, regularly audited infrastructure with firewalls, intrusion detection systems, and regular vulnerability assessments.
• Staff training: OkyPlay personnel who handle personal data receive regular training on data privacy obligations and security best practices.
• Incident response: OkyPlay maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, OkyPlay will notify the National Privacy Commission and affected individuals in accordance with the Data Privacy Act.

While OkyPlay takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your OkyPlay account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

09 Cookies & Tracking Technologies

OkyPlay uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us recognise you, remember your preferences, and understand how you use the Platform.

We use the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against fraud. These cookies cannot be disabled.
• Functional cookies: Used to remember your preferences and settings, such as your preferred language and display options, to provide a more personalised experience.
• Analytics cookies: Used to collect anonymised information about how players use the Platform — such as which pages are visited most frequently and how long sessions last — to help us improve the Platform's performance and user experience.
• Security and fraud prevention cookies: Used to detect and prevent fraudulent activity, bot traffic, and other security threats on the Platform.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the OkyPlay Platform. For more information on managing cookies, refer to your browser's help documentation.

10 Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by OkyPlay:

• Right to be informed: You have the right to be informed about how your personal data is collected, used, and processed, as described in this Privacy Policy.
• Right of access: You have the right to request a copy of the personal data OkyPlay holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data OkyPlay holds about you.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to OkyPlay's legal retention obligations.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on OkyPlay's legitimate interests.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe that OkyPlay has processed your personal data in violation of the Data Privacy Act.

11 Children's Privacy

The OkyPlay Platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine law and PAGCOR regulations governing online gaming. OkyPlay does not knowingly collect personal data from individuals under the age of 21.

If OkyPlay becomes aware that personal data has been collected from an individual under the age of 21, it will take immediate steps to delete that data and close the associated account. Any funds held in such an account will be handled in accordance with applicable regulatory requirements.

If you are a parent or guardian and believe that your child under the age of 21 has registered an account on OkyPlay or provided personal data to OkyPlay, please contact us immediately using the details in Section 13 so that we can take appropriate action.

12 Updates to This Privacy Policy

OkyPlay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this Privacy Policy, we will notify you by posting the updated policy on the OkyPlay Platform and, where appropriate, by sending you a notification via your registered email address.

The date of the most recent update is indicated at the top of this Privacy Policy. Your continued use of the OkyPlay Platform following the posting of an updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how OkyPlay protects your personal data.

If you do not agree to the updated Privacy Policy, you must discontinue your use of the OkyPlay Platform and may request account closure in accordance with the Terms and Conditions.

13 Contact & Data Protection Officer

OkyPlay has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact our DPO:

For responsible gaming concerns, please visit our Responsible Gaming page. For general platform questions, visit our FAQ page. For the full terms governing your use of OkyPlay, please review our Terms & Conditions.