Privacy Policy

okpkay is committed to protecting the privacy and personal data of all individuals who interact with our Platform. This Policy has been prepared in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations, as overseen by the National Privacy Commission ("NPC").

This Policy applies to all personal data collected through the okpkay website, mobile application, customer support channels, and any other touchpoints through which you interact with okpkay. It covers data collected both online and, where applicable, offline in connection with our services.

By accessing the okpkay Platform, creating an account, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the okpkay Platform.

okpkay collects personal data that is necessary to provide our gaming and betting services, comply with legal obligations, and maintain the security and integrity of the Platform. The categories of personal data we collect include:

2.1 Registration Data

When you create an okpkay account, we collect information including your full legal name, date of birth, residential address, email address, and mobile phone number. This information is required to verify your identity, confirm your eligibility to use the Platform, and set up your account.

2.2 Identity Verification Data (KYC)

To comply with anti-money laundering regulations and age verification requirements, we may collect copies of government-issued identification documents (such as a Philippine passport, driver's licence, or SSS/UMID card), proof of address documents, and proof of payment method ownership. These documents are processed securely and retained only for as long as required by law.

2.3 Financial Data

We collect information related to your deposits and withdrawals, including your GCash number, PayMaya account details, bank account information (BPI, BDO, Metrobank, or other supported banks), and transaction history. We do not store full payment card numbers on our servers.

2.4 Gaming and Betting Activity

We record your gaming and betting activity on the Platform, including games played, bets placed, wager amounts, outcomes, bonus usage, and session duration. This data is used to operate your account, resolve disputes, and comply with regulatory reporting requirements.

2.5 Technical and Device Data

When you access the Platform, we automatically collect certain technical data, including your IP address, browser type and version, operating system, device identifiers, referring URLs, and pages visited. This data helps us maintain Platform security, detect fraud, and improve user experience.

2.6 Communications Data

If you contact our customer support team via live chat, email, or any other channel, we retain records of those communications, including the content of messages and any attachments, for quality assurance, training, and dispute resolution purposes.

okpkay uses the personal data we collect for the following purposes:

• To create, manage, and maintain your okpkay account, including processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods.
• To verify your identity and age in compliance with Philippine regulations, including confirming that you are at least 21 years of age before permitting access to real-money gaming features.
• To process and settle bets, wagers, and game outcomes accurately and transparently.
• To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal or prohibited conduct on the Platform.
• To comply with our legal and regulatory obligations under Philippine law, including anti-money laundering reporting requirements.
• To communicate with you regarding your account, including transaction confirmations, security alerts, and important policy updates.
• To send you promotional communications and offers where you have opted in to receive such communications. You may opt out at any time through your account settings.
• To provide customer support and resolve disputes or complaints raised through our support channels.
• To analyse Platform usage patterns and improve the functionality, performance, and user experience of the okpkay website and mobile application.
• To enforce our Terms & Conditions and other applicable policies.

okpkay processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012 of the Philippines:

• Contractual Necessity: Processing is necessary to perform the contract between you and okpkay — specifically, to operate your account, process transactions, and deliver the gaming and betting services you have registered to use.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and regulatory reporting duties.
• Legitimate Interests: Processing is necessary for okpkay's legitimate business interests, including fraud prevention, Platform security, and improving our services, provided that such interests are not overridden by your rights and freedoms.
• Consent: For certain types of processing — such as sending marketing communications or using non-essential cookies — we rely on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

okpkay does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may, however, share your personal data with the following categories of recipients where necessary and lawful:

5.1 Payment Processors

We share financial data with payment service providers — including GCash, PayMaya, and partner banks such as BPI, BDO, and Metrobank — to process your deposits and withdrawals. These providers are contractually bound to handle your data securely and only for the purpose of processing your transactions.

5.2 Identity Verification Providers

We may share your identity documents and personal details with third-party KYC and identity verification service providers to fulfil our age verification and anti-money laundering obligations. These providers operate under strict data processing agreements and are prohibited from using your data for any other purpose.

5.3 Regulatory and Law Enforcement Authorities

okpkay may disclose your personal data to relevant government agencies, regulatory bodies, or law enforcement authorities where required to do so by law, court order, or regulatory directive. This includes disclosures required under Philippine anti-money laundering legislation.

5.4 Technology and Infrastructure Providers

We work with technology partners who provide hosting, cloud infrastructure, analytics, and security services that are necessary to operate the Platform. These partners process data on our behalf under contractual obligations that require them to maintain appropriate security standards and use your data only as directed by okpkay.

5.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of okpkay's business, your personal data may be transferred to the relevant successor entity. We will notify you of any such transfer and the privacy practices of the acquiring entity before your data is transferred.

okpkay retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and Registration Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with Philippine anti-money laundering record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of submission, or longer if required by applicable regulatory obligations.
• Transaction and Gaming Records: Retained for a minimum of five (5) years from the date of each transaction or gaming session.
• Customer Support Communications: Retained for up to three (3) years from the date of the last communication, unless a longer retention period is required for dispute resolution or legal proceedings.
• Technical and Device Data: Retained for up to twelve (12) months from the date of collection, unless required for longer periods for security or fraud investigation purposes.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in accordance with our internal data disposal procedures.

okpkay uses cookies and similar tracking technologies — including web beacons, pixel tags, and local storage — to operate the Platform, remember your preferences, and analyse usage patterns. The following categories of cookies are used:

7.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They enable core features such as user authentication, session management, and security. These cookies cannot be disabled without significantly impairing your ability to use the Platform.

7.2 Functional Cookies

Functional cookies allow the Platform to remember your preferences and settings — such as your preferred language, display settings, and whether you have accepted this Privacy Policy — to provide a more personalised experience.

7.3 Analytics Cookies

We use analytics cookies to collect aggregated, anonymised data about how members use the Platform, including which pages are visited most frequently and how users navigate between sections. This data helps us identify areas for improvement and optimise the Platform's performance.

7.4 Managing Your Cookie Preferences

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain categories of cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled through browser settings without impacting your ability to log in and use your account.

okpkay implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the okpkay Platform.
• AES-256 encryption for sensitive data stored on our servers, including identity documents and financial information.
• Multi-factor authentication options for member accounts to prevent unauthorised access.
• Regular security audits, vulnerability assessments, and penetration testing of our systems and infrastructure.
• Strict access controls ensuring that only authorised personnel with a legitimate business need can access personal data.
• Staff training on data protection obligations and security best practices.
• Incident response procedures to detect, contain, and report data breaches in accordance with applicable legal requirements.

While okpkay takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for keeping your account credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by okpkay:

• Right to be Informed: You have the right to be informed about how your personal data is collected, used, and processed, which is the primary purpose of this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data that okpkay holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update certain account details directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the contact details provided in Section 13 of this Policy. We will respond to all verified requests within thirty (30) days of receipt, in accordance with the requirements of the Data Privacy Act.

The okpkay Platform is strictly intended for adults aged 21 years and above. okpkay does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has provided personal data to okpkay without your consent, please contact us immediately at the details provided in Section 13 so that we can take appropriate action.

The okpkay Platform may contain links to third-party websites or services for informational purposes. This Privacy Policy applies solely to the okpkay Platform and does not govern the data practices of any third-party websites. okpkay is not responsible for the privacy practices or content of any third-party sites. We encourage you to review the privacy policies of any third-party websites you visit.

okpkay reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. When we make material changes to this Policy, we will notify registered members by email or through a prominent notice on the Platform, and we will update the "Last Updated" date at the top of this page.

Your continued use of the okpkay Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with the revised Policy, you must cease using the Platform and may request account closure in accordance with our Terms & Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how okpkay is protecting your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way okpkay handles your personal data, please contact our Data Protection Officer (DPO). Our DPO is responsible for overseeing okpkay's compliance with the Data Privacy Act of 2012 and for handling all data subject rights requests.

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data protection rights have not been adequately addressed by okpkay.