okyplay Privacy Policy

okyplay operates the online gaming platform accessible at okyplay.club and provides casino games, sports betting, bingo, and related services to eligible players in the Philippines. In the course of providing these services, okyplay necessarily collects and processes personal information about the people who use the platform.

This Privacy Policy has been prepared in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). It governs how okyplay handles the personal data of all users — whether you are a registered account holder actively playing on okyplay, a visitor browsing the platform without an account, or a former player whose account has been closed.

By registering an account on okyplay, accessing okyplay.club, or using any okyplay service, you acknowledge that you have read and understood this Privacy Policy. Where okyplay's processing of your data requires your consent, we will ask for it explicitly. This Privacy Policy should be read together with okyplay's Terms & Conditions.

For the purposes of the Philippine Data Privacy Act of 2012 and this Privacy Policy, okyplay is the personal information controller in respect of personal data collected through the okyplay.club platform. This means okyplay determines the purposes and means by which your personal data is processed.

okyplay has appointed a Data Protection Officer (DPO) who is responsible for overseeing the platform's data protection compliance, handling data subject requests, responding to complaints, and serving as the primary point of contact for inquiries related to this Privacy Policy. The DPO may be contacted at the email address provided in Section 16 of this Policy.

okyplay collects the following categories of personal data from users of the platform. We only collect data that is necessary for the specific purposes described in this Policy.

okyplay collects your personal data through the following channels and interactions:

• Registration: When you create an okyplay account, you directly provide identity data, contact data, and your chosen password;
• KYC Verification: When you submit government ID documents for identity and age verification, either at registration or when processing a withdrawal request;
• Deposits and Withdrawals: When you initiate a financial transaction, okyplay receives transaction reference data from payment processors including GCash, PayMaya, and partnered Philippine banks;
• Platform Usage: Gaming data and technical data are collected automatically as you use the okyplay platform — every bet placed, game opened, and session initiated generates log data;
• Customer Support: When you contact okyplay via live chat or email, your communication content and contact details are recorded;
• Cookies and Similar Technologies: Technical data is collected automatically via cookies and session tokens as described in Section 10 of this Policy;
• Third-Party Verification Providers: Where okyplay uses third-party KYC or identity verification services, it may receive identity verification outcomes and associated data from those providers.

Under the Philippine Data Privacy Act of 2012, okyplay processes your personal data on the following legal bases, depending on the nature and purpose of the processing:

• Contractual Necessity: Processing required to provide the okyplay platform services to you as a registered account holder — including account management, game delivery, payment processing, and withdrawal fulfillment. This is the primary legal basis for most of okyplay's data processing activities;
• Legal Obligation: Processing required to comply with applicable Philippine law, PAGCOR regulatory requirements, anti-money laundering (AML) obligations under Republic Act No. 9160 as amended, and other mandatory legal requirements;
• Legitimate Interests: Processing undertaken to pursue okyplay's legitimate business interests where those interests are not overridden by your data protection rights — including fraud prevention, security monitoring, platform optimization, and responsible gaming monitoring;
• Consent: Processing of your personal data for direct marketing communications, which is done only where you have provided explicit opt-in consent. You may withdraw marketing consent at any time through your account settings.

okyplay uses your personal data for the following specific purposes:

• To create and manage your okyplay account, including verifying your identity and age at registration and ongoing KYC compliance;
• To process deposits, execute withdrawal requests, and maintain your okyplay PHP wallet transaction history;
• To deliver casino games, sports betting, bingo, and all other platform services to your registered account;
• To monitor gaming activity in connection with okyplay's responsible gaming obligations, including detecting patterns consistent with problem gambling and applying responsible gaming controls where appropriate;
• To detect and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct as defined in the okyplay Terms & Conditions;
• To fulfill okyplay's regulatory reporting obligations to PAGCOR and other applicable Philippine regulatory authorities;
• To communicate with you about your account, including transaction confirmations, security alerts, and service notifications via SMS or email;
• To handle customer support inquiries, complaints, and dispute resolution;
• To analyze platform usage patterns in aggregate to improve the okyplay service — this analysis uses anonymized or pseudonymized data wherever possible;
• To send you promotional communications and bonus offers where you have provided consent, and to manage your marketing preferences.

okyplay does not sell, rent, or trade your personal data to third parties for any commercial purpose. Your personal data is shared only in the following circumstances and with the following categories of recipients:

• Payment Processors: GCash (Mynt), PayMaya (Maya Bank), BPI, BDO, Metrobank, UnionBank, 7-Eleven Cliqq, and Cebuana Lhuillier, for the purpose of processing your deposits and withdrawal requests. These processors receive only the data necessary to execute the specific transaction;
• KYC and Identity Verification Providers: Third-party identity verification services used to confirm the authenticity of government ID documents you submit. These providers process your data under contract with okyplay and are subject to equivalent data protection obligations;
• Game Providers: Licensed game studios (such as JILI, Pragmatic Play, PG Soft, and others) whose games are integrated into the okyplay platform receive session identifiers and bet data necessary to operate the game. They do not receive your full identity data;
• PAGCOR and Regulatory Authorities: okyplay is required by law to disclose player account data, transaction records, and gaming logs to PAGCOR and other competent Philippine regulatory or law enforcement authorities upon lawful request;
• AML Compliance Authorities: Reporting of suspicious transactions to the Anti-Money Laundering Council (AMLC) as required under Republic Act No. 9160 and its amendments;
• Professional Advisors: Legal, accounting, and auditing professionals engaged by okyplay who are subject to professional confidentiality obligations;
• Business Successors: In the event of a merger, acquisition, or sale of okyplay's business, your data may be transferred to the successor entity subject to equivalent data protection commitments. You will be notified of any such transfer.

Some of okyplay's service providers, particularly game studios and technical infrastructure providers, may operate servers or process data outside the Philippines. Where okyplay transfers your personal data outside the Philippines, it does so only where:

• The receiving country has been assessed to provide an adequate level of data protection equivalent to Philippine standards;
• The transfer is covered by appropriate contractual safeguards, including data processing agreements that bind the recipient to data protection obligations consistent with the Philippine Data Privacy Act; or
• The transfer is necessary to perform the contract between you and okyplay (e.g., game session data processed by an overseas game provider).

okyplay's primary player data — including identity, financial, and gaming records — is stored on servers located within or accessible from the Philippines to the extent operationally practicable.

okyplay retains your personal data for as long as your account is active and for such period thereafter as is required by applicable law or legitimate business necessity. The following retention principles apply:

• Active Account Data: Retained for the full duration of your active okyplay account relationship;
• Post-Closure Data: Following account closure, okyplay retains your identity, financial, and gaming data for a minimum of five (5) years in accordance with PAGCOR regulatory requirements and Philippine AML laws;
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later, as required by AML compliance obligations;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction;
• Support Communications: Retained for three (3) years from the date of the communication, unless they relate to a dispute or regulatory matter that requires longer retention;
• Technical Logs: Retained for twelve (12) months from generation, unless flagged in connection with a security investigation;
• Marketing Consent Records: Retained until you withdraw consent plus an additional three (3) years as evidence of your consent history.

Upon expiry of the applicable retention period, okyplay will securely delete or anonymize your personal data in accordance with its data disposal procedures.

okyplay uses cookies and similar tracking technologies on the okyplay.club platform. A cookie is a small text file placed on your device by the okyplay website when you visit. okyplay uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in to your okyplay account, security tokens, and load-balancing cookies. These cannot be disabled without impairing your ability to use the platform;
• Functional Cookies: Used to remember your preferences within the okyplay platform — such as your preferred game lobby view, language setting, and responsible gaming tool configurations. These improve your experience but are not strictly required;
• Analytics Cookies: Used to collect aggregated, anonymized data about how users interact with okyplay.club — such as which game categories are most visited and where users encounter difficulties. This data helps okyplay improve the platform. No individual player is identifiable from analytics data.

okyplay does not use third-party advertising cookies, behavioral tracking pixels, or any tracking technology designed to build advertising profiles about you across other websites.

You may control cookie settings through your browser's privacy settings. Disabling functional or analytics cookies will not prevent you from using okyplay, but it may affect your experience. Disabling strictly necessary cookies will impair your ability to log in and use the platform.

okyplay implements technical and organizational security measures appropriate to the sensitivity of the personal data it processes. These measures include but are not limited to:

• Encryption in Transit: All data transmitted between your device and okyplay.club is encrypted using TLS 1.2 or higher (256-bit SSL). This is the same standard used by Philippine banks for online banking transactions;
• Encryption at Rest: Sensitive personal data, including identity documents and financial records, is encrypted at the database level using AES-256 encryption;
• Access Controls: okyplay staff access to personal data is restricted on a need-to-know basis. Access to sensitive data categories requires multi-factor authentication and is logged for audit purposes;
• Two-Factor Authentication: okyplay provides SMS OTP two-factor authentication for player accounts and strongly encourages all users to enable it. Staff access to administrative systems requires 2FA as a mandatory control;
• Penetration Testing: okyplay's platform undergoes regular security assessments, including penetration testing by qualified security professionals, to identify and remediate vulnerabilities;
• Incident Response: okyplay maintains a documented data breach incident response plan. In the event of a breach affecting your personal data, okyplay will notify the National Privacy Commission within seventy-two (72) hours of discovery and will notify affected individuals without undue delay where required under the Data Privacy Act.

While okyplay takes these security measures seriously, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials, as described in the okyplay Terms & Conditions.

The okyplay platform is strictly restricted to individuals who are 21 years of age or older, as required by PAGCOR regulations governing online gambling in the Philippines. okyplay does not knowingly collect personal data from any person under the age of 21.

If okyplay discovers or reasonably suspects that an account has been registered by a person under the age of 21, it will immediately suspend the account, retain the data as required for regulatory reporting purposes, and permanently close the account following investigation. All funds associated with such an account will be held pending regulatory review.

If you are a parent or guardian and you believe that a minor under your care has created an okyplay account, please contact our support team immediately at the contact details in Section 16. okyplay will investigate promptly and take appropriate action. 21+ Only

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in respect of your personal data held by okyplay. These rights may be exercised by contacting okyplay's Data Protection Officer at the details in Section 16:

okyplay will respond to all verified data rights requests within fifteen (15) business days of receipt. Some requests may take longer where they are complex or numerous, in which case okyplay will notify you of the extended timeline and the reason for it.

If you believe that okyplay has processed your personal data in a manner inconsistent with this Privacy Policy or the Philippine Data Privacy Act of 2012, you have the right to lodge a complaint. okyplay encourages you to first contact its Data Protection Officer directly so that we may attempt to resolve the concern informally and promptly.

If you are not satisfied with okyplay's response to your complaint, or if you believe a formal regulatory complaint is warranted, you may lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the government body responsible for administering and enforcing the Data Privacy Act.

okyplay will cooperate fully with any NPC investigation and will provide all requested records and documentation within the legally specified timeframes.

okyplay may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, PAGCOR regulatory requirements, or platform features. When we make changes to this Policy, the "Last Updated" date at the top of this page will be revised accordingly.

Where changes are material — meaning they significantly affect your rights or how we process your data — okyplay will provide advance notice to registered users via SMS or email to the contact details on your account, wherever practicable, at least seven (7) days before the changes take effect.

Your continued use of the okyplay platform after the effective date of an updated Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree to a material change in this Privacy Policy, you should stop using the platform and may request account closure.

For any question, concern, or request relating to this Privacy Policy or the processing of your personal data by okyplay, please contact us through the following channels:

• Data Protection Officer Email: [email protected] (please include "DPO Request" in the subject line)
• General Support Email: [email protected]
• Live Chat: Available 24/7 through the okyplay platform after login at okyplay.club
• Response Commitment: okyplay's DPO will acknowledge receipt of data rights requests within two (2) business days and provide a substantive response within fifteen (15) business days

This Privacy Policy was last reviewed and updated on 1 January 2026. The current version of this Privacy Policy supersedes all prior versions. The authoritative version is the English-language version published at okyplay.club/privacy-policy.