okpley Privacy Policy

1. Who We Are

okpley ("okpley," "we," "us," or "our") is an online casino and sports betting platform operating under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR). okpley is the data controller responsible for the personal data collected through the okpley.net platform and associated services.

As a PAGCOR-licensed operator, okpley is also subject to the data governance requirements embedded in Philippine gaming regulations, which complement and reinforce the obligations set out in the Philippine Data Privacy Act of 2012 (RA 10173). This Policy has been prepared to meet both sets of requirements and to give our players — the majority of whom are based in the Philippines — a clear, honest picture of how their data is handled.

okpley has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and with RA 10173. Contact details for the DPO are provided in Section 12.

2. Personal Data We Collect

okpley collects personal data through several distinct channels: the account registration process, ongoing platform use, payment transactions, customer support interactions, and automated technical collection. The specific categories of data collected are set out below.

2.1 Registration and Identity Data

When you create an okpley account, we collect the information needed to establish and verify your identity, including:

• Full legal name;
• Date of birth (to verify 21+ age requirement);
• Residential address;
• Email address;
• Mobile phone number;
• Government-issued identification documents (e.g., Philippine National ID, passport, driver's license) — collected during KYC verification.

2.2 Financial Data

To process deposits and withdrawals, okpley collects payment-related information including:

• GCash account number or mobile number linked to your GCash wallet;
• Maya, GrabPay, or other e-wallet identifiers used for transactions;
• Bank account details (account name, account number, bank name) for bank transfer withdrawals;
• Transaction history within the okpley platform.

okpley does not store full card numbers. Payment card processing, where applicable, is handled by PCI-DSS compliant third-party payment processors who manage card data under their own security frameworks.

2.3 Platform Usage Data

As you use the okpley platform, we collect data about your activity, including:

• Games played, bet amounts, and wagering history;
• Session duration and login timestamps;
• Bonus and promotion participation;
• Responsible gaming tool usage (deposit limits set, self-exclusion requests);
• Customer support interaction records.

2.4 Technical and Device Data

okpley automatically collects certain technical data when you access the platform, including:

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Referring URL and navigation path within the platform;
• Cookie and session identifiers (see Section 6).

3. How We Use Your Personal Data

okpley uses the personal data it collects for the following purposes:

okpley will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 (RA 10173), okpley processes personal data on the following legal grounds:

• Contractual necessity: Processing required to perform our obligations under your okpley account agreement, including account management, game delivery, and payment processing;
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AML regulations, KYC requirements, and other applicable Philippine laws;
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and business analytics — where these interests are not overridden by your rights and freedoms;
• Consent: Processing for direct marketing communications, where you have given clear, specific, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

okpley does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

5.1 Regulatory and Law Enforcement Authorities

okpley is required by law to share player data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities upon lawful request or as required by our licensing conditions. We will notify you of such disclosures where legally permitted to do so.

5.2 Payment Service Providers

To process your deposits and withdrawals, okpley shares necessary financial data with licensed payment service providers including GCash, Maya, GrabPay, and banking partners such as BPI, BDO, and Metrobank. These providers operate under their own privacy policies and are contractually obligated to handle your data securely.

5.3 Game Content Providers

okpley's platform integrates games developed by third-party game studios. Limited technical data — such as session tokens and wagering events — may be shared with these providers to deliver game functionality. These providers do not receive your full identity or financial data.

5.4 Technology and Infrastructure Partners

okpley uses trusted technology partners for platform hosting, cybersecurity, analytics, and customer support software. These partners act as data processors under contracts that prohibit them from using your data for any purpose other than providing services to okpley.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of okpley's business, player data may be transferred to the successor entity. You will be notified of any such transfer and the privacy implications before it takes effect.

6. Cookies and Tracking Technologies

okpley uses cookies and similar technologies to operate and improve the platform. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Required for the platform to function — including authentication session management, security tokens, and load balancing. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and responsible gaming tool configurations.
• Analytical Cookies: Collect anonymized data about how players use the platform to help us identify usability improvements and performance issues.
• Marketing Cookies: Used — only with your consent — to deliver relevant promotional content based on your activity on the okpley platform. No cross-site tracking of your activity on external websites is performed.

You can manage your cookie preferences at any time through your browser settings. Disabling non-essential cookies will not affect your ability to use core okpley platform features.

7. Data Retention

okpley retains personal data for as long as necessary to fulfill the purposes for which it was collected, and as required by applicable Philippine law. Specific retention periods include:

• Account and identity data: Retained for the duration of your active account relationship with okpley, and for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AML regulations;
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, in compliance with AMLC record-keeping requirements;
• Customer support records: Retained for three (3) years from the date of the interaction, or longer if the matter relates to an unresolved dispute or regulatory inquiry;
• Marketing consent records: Retained for as long as consent remains active, plus a reasonable period thereafter to demonstrate compliance;
• Technical and log data: Retained for up to twelve (12) months for security and fraud monitoring purposes.

When personal data is no longer required, okpley securely destroys or anonymizes it in accordance with our data disposal procedures.

8. Data Security

okpley implements a layered security framework to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Key security measures include:

• TLS 1.3 encryption for all data transmitted between your device and okpley servers;
• AES-256 encryption for personal and financial data stored at rest;
• Multi-factor authentication options for player accounts;
• Regular third-party penetration testing and vulnerability assessments;
• Role-based access controls limiting internal data access to authorized personnel only;
• 24/7 security monitoring and automated anomaly detection systems;
• Formal data breach response procedures aligned with NPC notification requirements under RA 10173.

While okpley takes all reasonable steps to protect your data, no digital platform is entirely immune to risk. You play an important role in protecting your account by maintaining strong, unique credentials and reporting any suspicious activity to our support team immediately.

9. Your Data Privacy Rights

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okpley:

• Right to be Informed: The right to know that okpley is collecting your personal data and to understand how it will be used — as fulfilled by this Privacy Policy;
• Right to Access: The right to request a copy of the personal data okpley holds about you, and to receive information about how it has been processed;
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected. You can update most of your account information directly through the okpley platform or by contacting support;
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes at any time, without needing to provide justification;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format, and to request that it be transmitted to another data controller where technically feasible;
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe okpley has violated your data privacy rights under RA 10173.

To exercise any of these rights, please contact okpley's Data Protection Officer using the details in Section 12. okpley will respond to all valid data subject requests within fifteen (15) calendar days of receipt, as required by RA 10173 and its Implementing Rules.

10. Children's and Minors' Privacy

okpley's platform is strictly for adults aged 21 years and above. okpley does not knowingly collect personal data from persons under 21 years of age. The 21+ minimum age requirement is enforced through mandatory age declaration at registration and KYC identity verification.

If okpley becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all associated data will be reviewed, and the data will be deleted in accordance with our data disposal procedures and applicable regulatory requirements. Any funds deposited by an underage player will be handled in accordance with PAGCOR's applicable directives.

If you believe a minor may have accessed or registered on the okpley platform, please report this to our support team or Data Protection Officer immediately.

11. Updates to This Privacy Policy

okpley reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform functionality. When material changes are made, okpley will notify active players via a platform notification and/or email to the address registered on your account, at least fourteen (14) days before the updated Policy takes effect.

The current version of the Privacy Policy will always be accessible at okpley.net/privacy-policy, with the effective date clearly indicated at the top of the document. We encourage you to review the Policy periodically. Your continued use of the okpley platform following the effective date of any update constitutes your acknowledgment of the revised Policy.

12. Contact the Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or to your personal data rights under RA 10173, please contact okpley's Data Protection Officer through the following channels:

• Live Chat: Available 24/7 directly within the okpley platform — select "Privacy / Data Request" from the support menu for priority routing to the DPO team.
• Email: [email protected] — mark your subject line "Data Privacy Request" to ensure prompt handling by the DPO. This is a plain text email address and is not a clickable link.

If you are not satisfied with okpley's response to your data privacy concern, you have the right to escalate your complaint directly to the National Privacy Commission (NPC) of the Philippines through the NPC's official complaints process.