1. Introduction & Scope
This Privacy Policy applies to all personal data collected, processed, stored, and shared by okplqy in connection with your use of the okplqy website at okplqy.net, its mobile-optimized interface, and all related services including account registration, deposits, withdrawals, gameplay, customer support, and promotional communications.
okplqy is committed to protecting the privacy and personal information of all Filipino players and visitors in full compliance with Republic Act No. 10173 — the Data Privacy Act of 2012, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. Where applicable, we also observe PAGCOR's data governance requirements as part of our licensing obligations.
By registering an account, accessing the platform, or continuing to use any okplqy service, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to request account closure.
This policy applies to all users regardless of whether you access okplqy from Metro Manila, Cebu, Davao, Quezon City, Makati, or any other location within the Philippines. It covers all personal data regardless of the device or network used to access the platform.
2. Data Controller
okplqy acts as the Personal Information Controller (PIC) with respect to all personal data collected through the platform, as defined under Section 3(h) of the Data Privacy Act of 2012. This means okplqy determines the purposes and means by which your personal data is processed.
Certain third-party game providers, payment processors, and technology partners who receive your data from okplqy for specific, limited purposes act as Personal Information Processors (PIPs) under okplqy's direction. okplqy remains responsible for ensuring that all PIPs handle your data in a manner consistent with this Privacy Policy and applicable Philippine law.
For all data privacy enquiries, requests, and complaints, you may contact our designated Data Protection Officer (DPO) at [email protected]. See Section 15 for full DPO contact details.
3. Data We Collect
okplqy collects the minimum personal data necessary to deliver a secure, compliant, and enjoyable gaming experience. The categories of personal data we process are as follows:
3.1 Identity & Registration Data
Collected at account registration and during KYC verification:
Full legal name Date of birth Government ID number Nationality Gender Philippine residential address Selfie / ID photograph Proof of address document
3.2 Contact Data
Email address Philippine mobile number Preferred language Communication preferences
3.3 Financial Data
GCash / Maya account number Bank account details (BPI, BDO, UnionBank, Metrobank) Deposit / withdrawal transaction history Account wallet balance Bonus and wagering records
3.4 Gameplay & Behavioural Data
Games played and session duration Bet amounts and outcomes Win / loss history Responsible gaming tool settings Self-exclusion status
3.5 Technical & Device Data
IP address Device type and OS Browser type and version Login timestamps Geolocation (city-level) Session logs
3.6 Support & Communications Data
Live chat transcripts Email correspondence Dispute and complaint records Feedback and survey responses
4. How We Collect Your Data
okplqy collects personal data through the following channels:
- Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.
- Automatically — through cookies, web beacons, server logs, and similar technologies as you use the platform. See Section 9 for our full Cookies Policy.
- From payment providers — GCash, Maya, BPI, BDO, UnionBank, and other payment processors may share transaction confirmation data with okplqy to verify deposits and withdrawals.
- From identity verification services — third-party KYC and AML screening providers may share results of identity and watchlist checks conducted on your submitted documents.
- From PAGCOR and regulatory sources — okplqy may receive information about self-excluded individuals or persons on regulatory watchlists from PAGCOR as required by our licensing obligations.
5. Purpose & Legal Basis for Processing
Under the Data Privacy Act of 2012, okplqy must have a lawful basis for each purpose for which we process your personal data. The table below sets out our primary processing activities, their purpose, and the corresponding legal basis:
| Processing Activity | Purpose | Legal Basis |
|---|---|---|
| Account registration | Create and manage your okplqy player account | Contractual necessity |
| KYC & age verification | Verify identity, confirm 21+ age requirement, prevent underage gambling | Legal obligation (PAGCOR / RA 9160) |
| Payment processing | Process deposits and withdrawals in PHP via GCash, Maya, BPI, etc. | Contractual necessity |
| AML / fraud screening | Detect and prevent money laundering, fraud, and prohibited conduct | Legal obligation (RA 9160 as amended) |
| Responsible gaming monitoring | Enforce deposit limits, self-exclusion, and player protection tools | Legal obligation (PAGCOR RG obligations) |
| Customer support | Resolve disputes, respond to queries, and maintain support records | Contractual necessity / Legitimate interest |
| Promotional communications | Send bonus offers, game updates, and personalised promotions | Consent (opt-in during registration) |
| Platform analytics | Improve platform performance, game selection, and user experience | Legitimate interest |
| Security monitoring | Detect unauthorised access, bot activity, and account takeover attempts | Legitimate interest |
| Legal compliance & reporting | Meet PAGCOR reporting obligations, respond to lawful regulatory requests | Legal obligation |
6. Sharing Your Personal Data
okplqy does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited and controlled circumstances:
6.1 Game Providers
To deliver live dealer games, slots, and other titles, okplqy shares limited session and account data with certified game providers including Pragmatic Play, Playtech, and Jili Games. These providers act as PIPs under contractual data processing agreements that restrict use of your data to game delivery only.
6.2 Payment Processors
To process deposits and withdrawals, we share transaction-relevant data with payment providers including GCash, Maya, BPI, BDO, UnionBank, and other processors. Each provider operates under its own privacy policy and Philippine BSP regulations. okplqy does not store full bank account credentials — these remain with the payment provider.
6.3 KYC & AML Providers
To satisfy identity verification and anti-money laundering requirements, okplqy shares KYC documents and identity data with accredited third-party verification and screening services. These providers are bound by confidentiality agreements and Philippine data privacy law.
6.4 Regulatory & Law Enforcement Authorities
okplqy is required by law to share certain player data with PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory or law enforcement bodies upon receipt of a lawful request. We will notify affected players of such disclosures where legally permitted to do so.
6.5 Professional Advisors
Lawyers, auditors, and financial advisors engaged by okplqy may access personal data where strictly necessary for the performance of their professional services. All such advisors are bound by professional secrecy obligations and confidentiality agreements.
6.6 Business Transfers
In the event of a merger, acquisition, or sale of all or substantially all of okplqy's assets, player data may be transferred to the acquiring entity. Affected players will be notified via their registered email address no less than 30 days before any such transfer takes effect, with the option to request account closure.
7. Data Retention
okplqy retains your personal data for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The following retention periods apply as a general guide:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration & KYC documents | 5 years after account closure | PAGCOR licensing / AML legal obligation |
| Financial transaction records | 5 years after transaction date | RA 9160 (AMLA) record-keeping requirement |
| Gameplay history | 3 years after account closure | Dispute resolution / PAGCOR audit compliance |
| Customer support records | 3 years from interaction date | Dispute resolution / complaint handling |
| Marketing preferences & consent records | Until consent withdrawal + 1 year | NPC consent management requirements |
| Technical / server logs | 12 months from log creation | Security monitoring / fraud investigation |
| Self-exclusion records | Permanent (no deletion) | PAGCOR responsible gaming obligations |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with NPC-approved data disposal procedures. Anonymised data may be retained indefinitely for aggregate statistical analysis.
8. Security Measures
okplqy implements a comprehensive, multi-layered security programme to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational security measures include:
- 256-bit SSL/TLS encryption across all data transmissions between your device and the okplqy platform.
- AES-256 encryption at rest for all stored personal data and KYC documents on okplqy servers.
- Two-factor authentication (2FA) available to all players and mandatory for all okplqy staff accounts.
- Access controls and role-based permissions ensuring that only authorised personnel can access personal data, limited to what is strictly necessary for their role.
- Regular penetration testing conducted by independent security professionals on a scheduled basis.
- Intrusion detection and DDoS protection systems monitoring the platform around the clock.
- Secure data centres with physical access controls, CCTV monitoring, and environmental protections.
- Staff training — all okplqy employees handling personal data receive regular data privacy and security training.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, okplqy will notify the National Privacy Commission within 72 hours of becoming aware of the breach. Affected players will be notified without undue delay via their registered email address where the breach is likely to result in high risk.
9. Cookies & Tracking Technologies
okplqy uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and deliver relevant promotions. The following types of cookies are used:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Enable core platform functions: login sessions, security tokens, self-exclusion enforcement | Session / up to 24 hours |
| Functional | Remember your language preferences, game lobby layout, and responsible gaming settings | Up to 1 year |
| Analytical | Understand how players navigate the platform to improve design and performance; data is aggregated and anonymised | Up to 2 years |
| Marketing / Retargeting | Deliver personalised bonus and game promotions relevant to your interests; only activated with your explicit consent | Up to 90 days |
You can manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies will affect the functionality of the platform — in particular, your ability to remain logged in and to have self-exclusion settings enforced across sessions. Disabling analytical or marketing cookies will not affect core gameplay.
okplqy does not use cookies to collect sensitive personal information or financial credentials. All cookie data processed for analytical purposes is aggregated and does not identify you individually in any report reviewed by okplqy.
10. Your Privacy Rights
Under the Data Privacy Act of 2012 and NPC regulations, you have the following rights with respect to your personal data held by okplqy. These rights may be exercised at any time by contacting our Data Protection Officer at [email protected]:
Right to Access
Request a copy of all personal data okplqy holds about you, including the purposes for which it is processed and the parties with whom it has been shared.
Right to Rectification
Request correction of inaccurate or incomplete personal data held on your account. Supporting documentation may be required for certain changes.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the original purpose, subject to overriding legal retention obligations under PAGCOR and AML law.
Right to Object
Object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests. Marketing opt-outs take effect within 48 hours.
Right to Data Portability
Request your personal data in a structured, commonly used, machine-readable format (JSON or CSV) where technically feasible for electronically processed data.
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
Right to Damages
Under the Data Privacy Act, you are entitled to claim compensation if you have suffered damage as a result of inaccurate, incomplete, outdated, or unlawfully obtained personal data held by okplqy.
Right to File a Complaint
If you believe okplqy has violated your data privacy rights, you may file a complaint with the National Privacy Commission (NPC) of the Philippines. See Section 13 for details.
okplqy will respond to all verified data subject requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it. There is no fee for exercising any of these rights. We may require you to verify your identity before processing a request to protect against unauthorised data disclosures.
11. Minors & Age Policy
okplqy strictly prohibits the use of its platform by any person under the age of 21 years, consistent with PAGCOR's minimum age requirement for online casino-style gambling in the Philippines. We do not knowingly collect personal data from individuals under 21 years of age.
If we discover or are informed that personal data belonging to a person under 21 has been collected — whether through misrepresentation during registration or any other means — we will immediately suspend the relevant account, delete the personal data of the minor to the extent permitted by law, and report the incident to PAGCOR as required.
Parents and guardians who believe their child may have accessed or registered on okplqy are encouraged to contact us immediately at [email protected] so we can take prompt corrective action. We take our duty to protect minors from gambling harm with the utmost seriousness.
12. Cross-Border Data Transfers
Some of okplqy's third-party service providers — including certain game providers and cloud infrastructure partners — may process personal data outside the Philippines. Where such cross-border transfers occur, okplqy ensures that:
- The recipient country or organisation provides a level of data protection comparable to that afforded under the Data Privacy Act of 2012 and NPC standards.
- Appropriate contractual safeguards are in place, including data processing agreements that bind the recipient to confidentiality, purpose limitation, and security obligations equivalent to those applicable in the Philippines.
- Transfers are notified to the NPC where required under NPC Circular No. 16-01 or any superseding issuance on cross-border data flow.
okplqy will not transfer your personal data to any jurisdiction that does not provide adequate protection for your rights as a Philippine data subject without your explicit informed consent, unless the transfer is required by law.
13. Complaints & the National Privacy Commission
If you have a concern about how okplqy handles your personal data, we encourage you to contact our Data Protection Officer first at [email protected]. Most data privacy concerns can be resolved promptly through direct dialogue, and we are committed to addressing your concerns fairly and transparently within 30 days.
If you are not satisfied with okplqy's response, or if you believe that a breach of your rights under the Data Privacy Act of 2012 has occurred that we have failed to adequately address, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the independent government authority responsible for data privacy enforcement in the Philippines.
14. Updates to This Privacy Policy
okplqy reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, PAGCOR regulatory requirements, or NPC issuances. We categorise updates as follows:
- Material changes — changes that substantially affect your rights, the categories of data we collect, or the purposes for which we use it. You will be notified of material changes via your registered email address at least 14 days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the revised policy.
- Minor changes — typographical corrections, clarifications that do not alter your rights, or updates required by NPC circular without substantive impact. These may take effect immediately upon publication without prior individual notice.
The "Last Updated" date at the top of this page always reflects the date of the most recent revision. We recommend reviewing this Privacy Policy periodically. The most current version is always available at okplqy.net/privacy-policy.
15. Contact Our Data Protection Officer
For all data privacy-related requests, questions, or concerns — including exercising your rights under Section 10, reporting a suspected data breach, or asking about our data practices — please contact okplqy's designated Data Protection Officer:
- Email: [email protected]
- Subject line: "Data Privacy Request – [Your Name]" for faster routing
- Response time: Within 30 calendar days of receipt
- Support hours: 24/7, Philippines Standard Time (PST)
- Location: Philippines · Metro Manila
Please include your registered account email address and a brief description of your request or concern so we can verify your identity and respond efficiently. Verification of identity is required before any data subject request can be actioned, to protect your information from unauthorised disclosure.