okyplay Privacy Policy

1. Introduction

okyplay ("okyplay", "we", "us", "the Company") operates the online casino and sports betting platform accessible at okyplay.vip (the "Platform"). This Privacy Policy ("Policy") describes how okyplay collects, uses, stores, shares, and protects the personal data of individuals who register accounts, access, or otherwise interact with the okyplay Platform, including players based in the Philippines and other permitted jurisdictions.

This Policy is issued in compliance with the Republic Act 10173, also known as the Data Privacy Act of 2012 of the Philippines, its Implementing Rules and Regulations, and applicable international data protection standards. By registering an okyplay account or using the Platform in any capacity, you acknowledge that you have read, understood, and consent to the practices described in this Policy.

This Privacy Policy should be read alongside the okyplay Terms & Conditions, which govern your use of the Platform more broadly. In the event of any conflict between this Policy and the Terms & Conditions in relation to privacy matters, this Policy shall prevail.

2. Personal Data We Collect

okyplay collects different categories of personal data depending on how you interact with the Platform. The main categories are as follows:

2.1 Identity Data: Full legal name, date of birth, nationality, and government-issued identification document details (such as a Philippine National ID, passport, driver's licence, or SSS/GSIS card). This data is collected as part of okyplay's Know Your Customer (KYC) and age verification processes.

2.2 Contact Data: Philippine mobile number (used as your primary account identifier), email address (where provided), and residential address or region within the Philippines (e.g., Metro Manila, Cebu, Davao, or other provinces).

2.3 Financial Data: GCash account details, PayMaya account details, bank account numbers or card details (where used for deposits or withdrawals), transaction history including deposit amounts, withdrawal requests, bet histories, and account balances. okyplay does not store full payment card numbers; card data is processed exclusively through certified third-party payment processors.

2.4 Technical Data: IP address, device type (mobile, tablet, desktop), operating system, browser type, session duration, page views, and clickstream data collected automatically when you access the okyplay Platform.

2.5 Usage Data: Games played, wager amounts, win/loss history, bonus usage, promotional participation, session frequency, and player behaviour patterns used for personalisation and responsible gaming monitoring.

2.6 Communications Data: Records of your communications with okyplay's customer support team, including live chat transcripts, support ticket contents, and any documents or images submitted to support.

3. How We Collect Your Data

okyplay collects personal data through the following means:

• Direct Collection: Information you provide when registering an okyplay account, completing KYC verification, making deposits or withdrawals, or contacting our customer support team.
• Automated Collection: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access or interact with the okyplay Platform.
• Third-Party Sources: Identity verification and fraud screening providers, payment processors (such as GCash and PayMaya), and fraud intelligence services, which may provide supplementary data to assist okyplay in verifying your identity or detecting fraudulent activity.

4. How We Use Your Personal Data

okyplay uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your okyplay account, including login authentication and account security.
• Identity Verification (KYC): To verify your identity and age in compliance with applicable gaming regulations, and to prevent underage gambling and identity fraud.
• Payment Processing: To process GCash and other deposits, to verify the source of funds, and to facilitate withdrawal requests to your registered payment methods.
• Service Delivery: To provide access to okyplay's games, live dealer tables, sports betting, promotions, bonuses, and all other Platform features.
• Customer Support: To respond to your queries, resolve disputes, and provide assistance through okyplay's 24/7 Filipino-speaking support team.
• Legal Compliance: To comply with anti-money laundering (AML) obligations, responsible gaming regulatory requirements, and any lawful requests from PAGCOR or other competent authorities.
• Responsible Gaming: To monitor player activity for signs of problem gambling and to enforce deposit limits, self-exclusions, and other responsible gaming measures set by you or required by regulation.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, and other prohibited activities.
• Platform Improvement: To analyse aggregated usage data to improve the okyplay Platform's features, performance, and user experience.
• Marketing Communications: To send you information about okyplay promotions, bonuses, and new features where you have consented to receive such communications. You may opt out at any time.

5. Legal Basis for Processing

okyplay processes your personal data on the following legal bases, as applicable:

• Contractual Necessity: Processing necessary to perform the contract between you and okyplay, including account management, payment processing, and game access.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC, AML obligations, and PAGCOR directives.
• Legitimate Interests: Processing for okyplay's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent, such as for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

okyplay does not sell or rent your personal data to third parties. okyplay may share your data with the following categories of recipients under appropriate safeguards:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, RCBC, and other payment processors, solely for the purpose of processing your transactions.
• Identity Verification Providers: Third-party KYC and age verification services used to confirm your identity and comply with regulatory requirements.
• Game Software Providers: Licensed game studios whose software is integrated into the okyplay Platform may receive technical session data necessary to deliver their games. They do not receive your identity or financial data beyond what is technically required.
• Regulatory Authorities: PAGCOR, the National Privacy Commission (NPC), financial intelligence units, and other competent government authorities, where required by law or upon lawful request.
• Fraud Prevention Services: Third-party fraud screening and security intelligence services used to protect okyplay and its players from financial crime.
• Professional Advisers: Legal counsel, auditors, and compliance advisers, under strict professional confidentiality obligations.

Any third party with whom okyplay shares personal data is required to handle that data in accordance with applicable data protection laws and okyplay's data processing requirements.

7. Cookies & Tracking Technologies

okyplay uses cookies and similar tracking technologies on the Platform to provide a functional and personalised experience. The main types of cookies used are:

• Essential Cookies: Strictly necessary for the Platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled.
• Performance Cookies: Collect anonymised data about how players use the Platform (e.g., pages visited, session duration) to help okyplay improve performance and usability.
• Functional Cookies: Remember your preferences (e.g., language settings, last-played games) to provide a personalised experience on subsequent visits to okyplay.

By continuing to use the okyplay Platform, you consent to the use of cookies as described above. Most browsers allow you to manage cookie settings. Note that disabling essential cookies may prevent you from using certain features of the okyplay Platform.

8. Data Retention

okyplay retains your personal data for as long as your account is active and for such additional periods as are required by applicable law or regulation. Specifically:

• Account and identity data is retained for a minimum of five (5) years following account closure, as required for AML and regulatory compliance purposes.
• Financial transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications are retained for three (3) years from the date of the interaction.
• Marketing consent records are retained for as long as necessary to demonstrate compliance with applicable marketing regulations.

Upon expiry of applicable retention periods, okyplay will securely delete or anonymise your personal data in accordance with its data destruction policy.

9. Data Security

okyplay implements a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the okyplay Platform;
• Encryption at rest for sensitive personal and financial data stored on okyplay's servers;
• Role-based access controls ensuring that only authorised personnel can access personal data, on a need-to-know basis;
• Multi-factor authentication for internal system access;
• Regular security assessments, penetration testing, and vulnerability scanning of okyplay's infrastructure;
• Staff training on data protection and information security obligations.

While okyplay takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your okyplay account credentials and should notify us immediately if you suspect unauthorised access.

10. Your Data Rights

As a data subject under applicable Philippine data protection law, you have the following rights with respect to your personal data held by okyplay:

• Right to Access: You may request a copy of the personal data okyplay holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data in your okyplay account.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to okyplay's legal retention obligations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on okyplay's legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to Lodge a Complaint: If you believe okyplay has processed your data in a manner inconsistent with applicable law, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, please contact okyplay's data protection contact using the information provided in Section 13 of this Policy. okyplay will respond to data subject requests within 30 days of receipt, or such other timeframe as required by applicable law.

11. Children's Privacy

The okyplay Platform is strictly intended for adults aged 21 years or older in accordance with Philippine gaming regulations. okyplay does not knowingly collect personal data from individuals under the age of 21. If okyplay becomes aware that it has inadvertently collected personal data from a person under the minimum age, it will promptly delete that data and close the associated account.

If you believe that a minor has registered an okyplay account or provided personal data to okyplay without appropriate consent, please contact our support team immediately so that we can take appropriate action.

12. Changes to This Privacy Policy

okyplay reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players via email notification or prominent in-platform notice, with the updated Policy published on the okyplay website bearing a revised "Last Updated" date. Continued use of the okyplay Platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy.

okyplay encourages you to review this Policy periodically to remain informed of how your personal data is handled. If you disagree with any changes to this Policy, you should discontinue use of the Platform and may request account closure through customer support.

13. Contact & Data Protection

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a concern about okyplay's data practices, please contact us through the following channels:

• Privacy Enquiries Email: [email protected] (plain text — not a clickable link)
• Live Support: 24/7 live chat available on the okyplay Platform after logging in to your account
• Response Commitment: okyplay will acknowledge all privacy-related enquiries within 3 business days and provide a full response within 30 calendar days

For complaints that remain unresolved after engaging with okyplay directly, you have the right to escalate to the National Privacy Commission (NPC) of the Philippines, the regulator responsible for enforcing the Data Privacy Act of 2012.