okayplay Privacy Policy

Introduction

okayplay is committed to protecting the privacy and personal data of every player who uses our platform. We understand that trust is the foundation of any relationship — and that trust begins with being transparent about how we handle your information.

This Policy applies to all personal data collected through the okayplay website at okayplay.one, including data collected during account registration, identity verification, gameplay, financial transactions, customer support interactions, and marketing communications. By registering an account or using the okayplay platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This Policy should be read together with the okayplay Terms & Conditions, which govern your use of the platform. Defined terms used in this Policy have the same meaning as in the Terms & Conditions unless otherwise specified.

Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, okayplay is the Personal Information Controller responsible for the personal data collected through the okayplay platform. This means okayplay determines the purposes and means of processing your personal data.

okayplay operates under the regulatory oversight of PAGCOR (Philippine Amusement and Gaming Corporation) and is subject to the data protection requirements applicable to PAGCOR-licensed online gaming operators in the Philippines.

Personal Data We Collect

3.1 Identity & Registration Data

When you register an account on okayplay, we collect the following personal data:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are at least 21 years of age)
• Gender
• Nationality and country of residence
• Residential address (including barangay, city/municipality, province, and ZIP code)
• Email address
• Mobile phone number
• Username and encrypted password

3.2 Identity Verification (KYC) Data

To comply with PAGCOR requirements and Philippine anti-money laundering regulations, we may collect:

• Copies of government-issued identification documents (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's license, UMID)
• Proof of address documents (e.g., utility bills, bank statements issued within the last three months)
• Selfie photographs for liveness verification
• Proof of payment method ownership

3.3 Financial Transaction Data

When you make deposits or request withdrawals, we collect:

• GCash or Maya mobile number associated with your payment account
• Bank account details (account name, account number, bank name) for bank transfer transactions
• Debit card details (card number masked, expiry date, cardholder name)
• Transaction amounts, dates, and reference numbers
• Deposit and withdrawal history

3.4 Gaming Activity Data

We automatically record data related to your use of the platform, including:

• Games played, bet amounts, win/loss records, and session durations
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type and version
• Cookie identifiers and session tokens
• Pages visited, time spent on pages, and clickstream data

3.6 Communications Data

Records of your communications with the okayplay customer support team, including live chat transcripts, email correspondence, and support ticket history.

How We Collect Your Data

okayplay collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automatically — through cookies, web beacons, and similar tracking technologies when you browse or use the okayplay platform.
• From third-party service providers — including identity verification providers, payment processors (GCash, Maya, partner banks), fraud detection services, and game providers, where necessary to deliver our services and comply with regulatory requirements.
• From public sources — including publicly available government databases and credit reference agencies, where permitted by applicable law and necessary for compliance purposes.

How We Use Your Personal Data

okayplay uses your personal data for the following purposes:

1. Account Management: To create, maintain, and administer your okayplay account, including verifying your identity and age (21+), processing login requests, and managing account security.
2. Service Delivery: To provide access to games, process deposits and withdrawals, credit bonuses, and deliver all features of the okayplay platform.
3. Regulatory Compliance: To comply with PAGCOR licensing requirements, Philippine anti-money laundering laws (AMLA), the Data Privacy Act, and other applicable regulations — including mandatory reporting obligations.
4. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other illegal or prohibited conduct.
5. Responsible Gaming: To monitor gaming activity for signs of problem gambling, enforce responsible gaming limits set by you, and comply with self-exclusion requests.
6. Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
7. Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided consent or where we have a legitimate interest, and always subject to your right to opt out.
8. Platform Improvement: To analyze usage patterns, conduct research, and improve the performance, security, and user experience of the okayplay platform.

Legal Basis for Processing

Under the Philippine Data Privacy Act, okayplay processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and okayplay (i.e., to provide the gaming services you have registered for).
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR regulations, AMLA, and the Data Privacy Act.
• Legitimate Interests: Processing is necessary for okayplay's legitimate interests in fraud prevention, platform security, and business analytics, provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and certain non-essential cookies, processing is based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

okayplay does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, Maya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) — to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and liveness verification service providers engaged to assist with regulatory compliance.
• Game Providers: Certified third-party game studios whose games are hosted on the okayplay platform — limited to the data necessary to deliver gameplay and resolve disputes.
• Fraud Prevention Services: Third-party fraud detection and anti-money laundering screening providers.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where required by law or regulatory mandate.
• Legal & Professional Advisors: Lawyers, auditors, and other professional advisors engaged by okayplay, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of okayplay's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

Data Retention

okayplay retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and KYC data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by PAGCOR regulations and Philippine anti-money laundering laws.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with AMLA requirements.
• Gaming activity logs: Retained for a minimum of three (3) years from the date of the activity.
• Customer support records: Retained for two (2) years from the date of the last interaction.
• Marketing consent records: Retained for the duration of your consent and for one (1) year after withdrawal of consent, as evidence of compliance.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with okayplay's data disposal procedures.

Data Security

okayplay implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encryption of sensitive data at rest, including KYC documents and financial records
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Multi-factor authentication for all administrative access to systems containing personal data
• Regular security audits, vulnerability assessments, and penetration testing
• Incident response procedures for detecting, reporting, and managing personal data breaches
• Staff training on data protection obligations and security best practices

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, okayplay will notify the National Privacy Commission and affected data subjects in accordance with the timelines prescribed by the Data Privacy Act and NPC regulations.

Cookies & Tracking Technologies

okayplay uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyze usage, and deliver relevant content. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and responsible gaming limits. Disabling these may affect platform functionality.
• Analytics Cookies: Collect anonymized data about how players use the platform to help us improve performance and user experience. Used only with your consent.
• Marketing Cookies: Used to deliver relevant promotional content. Used only with your explicit consent and subject to your right to opt out at any time.

You can manage your cookie preferences through your browser settings or through the cookie consent tool available on the okayplay platform. Note that disabling strictly necessary cookies will prevent you from using the platform.

Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okayplay:

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to all verified requests within fifteen (15) business days in accordance with NPC guidelines. We may need to verify your identity before processing your request.

Children's Privacy

If you are a parent or guardian and believe that a minor has registered on the okayplay platform, please contact us immediately at [email protected] so that we can take prompt action.

International Data Transfers

okayplay primarily stores and processes personal data within the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines — for example, to international game providers or cloud infrastructure providers — okayplay ensures that such transfers are made only to countries or organizations that provide an adequate level of data protection, or subject to appropriate contractual safeguards such as standard contractual clauses approved by the National Privacy Commission.

okayplay will not transfer your personal data to any jurisdiction that does not provide adequate protection for personal data without your explicit consent or a valid legal basis under the Data Privacy Act.

Changes to This Privacy Policy

okayplay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is indicated at the top of this document.

Where changes are material, okayplay will notify registered players via email or a prominent notice on the platform prior to the changes taking effect. Your continued use of the okayplay platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy. If you do not agree to the amended Policy, you should cease using the platform and may request account closure.

Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by okayplay, please contact our Data Protection Officer:

If you are not satisfied with our response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available on the NPC's official website.

This Privacy Policy was last updated on January 1, 2026. okayplay reserves all rights not expressly granted herein.