okpla Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is issued by okpla ("okpla," "we," "us," or "our"), operator of the online gaming platform accessible at okpla.vip and its associated subdomains and services (the "Platform"). This Policy describes how okpla collects, uses, stores, discloses, and protects the personal information of players, visitors, and registered users ("you" or "Player") of the Platform.

This Policy applies to all personal data collected through the Platform, including information provided during registration, identity verification (KYC), payment processing, customer support interactions, and general use of okpla services. It should be read alongside okpla's Terms & Conditions and Responsible Gaming Policy.

By creating an okpla account or using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not register for or use the Platform.

2 Data Controller

For the purposes of the Data Privacy Act of 2012, okpla is the Personal Information Controller (PIC) with respect to personal data collected through the Platform. okpla determines the purposes and means of processing your personal information and bears the obligations and responsibilities prescribed by the DPA and its implementing regulations.

okpla has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection laws. Contact details for the DPO are provided in Section 15 of this Policy.

3 Personal Data We Collect

okpla collects the following categories of personal data in connection with the operation of the Platform and provision of gaming services to Philippine players:

3.1 Identity & Registration Data

• Full legal name as it appears on your Philippine government-issued ID
• Date of birth (for age verification — players must be 21 or older)
• Nationality and country of residence
• Gender (where provided voluntarily)
• Username and account preferences

3.2 Contact Information

• Residential address in the Philippines (street, barangay, city/municipality, province, ZIP code)
• Valid email address
• Active Philippine mobile number (Smart, Globe, DITO, or other registered network)

3.3 Identity Verification (KYC) Documents

• Copies of government-issued Philippine identification documents (PhilSys National ID, Driver's License, Passport, PRC ID, UMID, Voter's ID, or other PAGCOR-accepted documents)
• Selfie photographs submitted for facial verification where required
• Proof of address documentation where requested
• Source-of-funds documentation where required by AMLC regulations

3.4 Financial Data

• GCash account details (mobile number linked to GCash)
• PayMaya / Maya account details
• Philippine bank account numbers (BPI, BDO, Metrobank, or other participating banks)
• Transaction records: deposit amounts, withdrawal requests, dates, and payment methods used
• Bonus and promotion redemption history

3.5 Gaming Activity Data

• Game session history: games played, bet amounts, wins, losses, session durations
• Sports betting records: events wagered on, bet types, odds, outcomes
• Responsible gaming preferences: deposit limits, loss limits, self-exclusion status
• Loyalty and rewards program data

3.6 Technical & Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser type and version
• Session login and logout timestamps
• Cookies and similar tracking data (see Section 9)
• System error logs and technical support records

3.7 Communications Data

• Records of customer support interactions (live chat transcripts, email correspondence)
• Records of any complaints or dispute submissions
• Marketing preferences and email/SMS opt-in or opt-out status

4 How We Collect Your Data

okpla collects personal data through the following channels:

• Directly from you when you register an account, complete identity verification, make deposits or withdrawals, contact support, or participate in promotions
• Automatically through cookies, log files, and similar technologies as you browse and use the Platform (see Section 9)
• From payment processors such as GCash, PayMaya, and partner banks when you initiate financial transactions
• From identity verification providers engaged by okpla to assist with KYC compliance under PAGCOR requirements
• From fraud prevention and anti-money laundering partners where required by law
• From PAGCOR and other regulatory authorities in connection with licensing compliance and investigations

5 Purpose & Legal Basis for Processing

okpla processes your personal data only for legitimate purposes and on a valid legal basis under the Data Privacy Act. The table below summarizes the primary purposes of processing and the applicable legal grounds:

okpla does not process special categories of personal data (as defined under the DPA) except where strictly required by law, such as government-issued ID processing for KYC purposes.

6 Data Sharing & Disclosure

6.1 Third-Party Service Providers

okpla engages carefully selected third-party service providers who process personal data on our behalf as Personal Information Processors (PIPs) under the DPA. These providers are contractually bound to process data only in accordance with okpla's instructions and this Policy. Categories of PIPs include:

• Payment processors: GCash (Mynt/Globe Fintech Innovations), PayMaya (Voyager Innovations), and partner Philippine banks
• Identity verification and KYC solution providers
• Game content providers and live studio operators
• Cloud hosting and infrastructure providers
• Customer support platform providers
• Fraud detection and cybersecurity service providers
• Analytics platform providers (where data is anonymized or pseudonymized)

6.2 Regulatory and Law Enforcement Disclosure

okpla will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and other competent Philippine government authorities where required or permitted by applicable law, including in response to lawful requests, court orders, and regulatory directives.

6.3 No Commercial Data Sales

6.4 Business Transfers

In the event of a merger, acquisition, sale of assets, or other corporate restructuring involving okpla, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the applicable privacy terms prior to your data being subject to a materially different privacy policy.

7 Data Retention

okpla retains personal data for as long as necessary to fulfil the purposes described in this Policy, to comply with applicable legal obligations, and to resolve disputes or enforce agreements. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements and applicable anti-money laundering regulations.
• Financial transaction records: Retained for a minimum of five (5) years as required by RA 9160 (Anti-Money Laundering Act) and PAGCOR regulations, or longer if subject to an active investigation.
• Gaming activity logs: Retained for three (3) years following the relevant game session, or longer if required for dispute resolution or regulatory purposes.
• Customer support records: Retained for two (2) years following the closure of the relevant support interaction.
• Marketing opt-in records: Retained until withdrawal of consent, plus an additional period as needed to demonstrate compliance.
• Technical and device logs: Retained for a maximum of twelve (12) months unless required longer for security investigations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification.

8 Data Security Measures

okpla implements organizational, technical, and physical security measures designed to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include, but are not limited to:

• Encryption in transit: All data transmitted between your device and the okpla Platform is protected using TLS 1.2 or higher protocols.
• Encryption at rest: Sensitive personal data and financial records stored on okpla systems are encrypted at rest using AES-256 or equivalent industry-standard algorithms.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. All okpla personnel with access to personal data are subject to confidentiality obligations.
• Two-factor authentication: Available to all players for their okpla login sessions and enforced for personnel accessing internal systems containing personal data.
• Regular security assessments: okpla conducts periodic vulnerability assessments, penetration testing, and security audits of its systems.
• Data breach response: okpla maintains an incident response plan and will notify affected individuals and the National Privacy Commission within 72 hours of discovering a breach likely to result in harm, as required by NPC Circular 16-03.

9 Cookies & Tracking Technologies

okpla uses cookies and similar technologies (including web beacons, pixel tags, and session tokens) to operate the Platform effectively and to improve the player experience. Cookies are small data files placed on your device when you visit the Platform.

9.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your okpla account during a session. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences, such as your preferred language, game settings, or last-viewed game categories. Disabling these cookies will affect the personalized experience of the Platform.
• Analytics Cookies: Used to understand how players interact with the Platform — which pages are visited most, how long sessions last, and where technical issues occur. This data is collected in aggregated or pseudonymized form and helps okpla improve the Platform.
• Security Cookies: Used to detect fraud, identify suspicious login patterns, and support the Platform's security systems.

9.2 Cookie Management

You can manage and delete cookies through your browser settings. Most browsers allow you to block all cookies, block third-party cookies only, or delete existing cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your okpla account. Browser-specific cookie management instructions are available in the help documentation of your browser.

10 Minors & Age Policy

The okpla Platform is strictly intended for individuals aged 21 years and above, in compliance with Philippine gaming laws and PAGCOR regulations. okpla does not knowingly collect personal data from individuals below the age of 21 years.

Where okpla discovers or is notified that personal data has been collected from an individual below the age of 21, we will immediately suspend the associated account, delete the personal data collected, and void any transactions processed through that account. If you believe a minor has created an account on the Platform, please notify us immediately at the contact details provided in Section 15.

11 Your Privacy Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by okpla:

To exercise any of the above rights, submit a written request to okpla's Data Protection Officer using the contact details in Section 15. okpla will acknowledge your request within three (3) business days and respond substantively within fifteen (15) business days, subject to identity verification requirements.

12 Cross-Border Data Transfers

Some of okpla's third-party service providers, including cloud hosting infrastructure providers and certain game content providers, operate outside the Philippines. Where personal data is transferred to recipients in other countries, okpla ensures that appropriate safeguards are in place consistent with the requirements of the Data Privacy Act and NPC guidance, including:

• Contractual clauses that impose DPA-equivalent data protection obligations on the recipient
• Transfers only to countries or organizations recognized as providing adequate levels of data protection
• Data Processing Agreements (DPAs) with each overseas Personal Information Processor

Where required, okpla will seek NPC approval for cross-border data transfers in accordance with applicable Philippine regulations.

13 Third-Party Services & Links

The okpla Platform may contain references to third-party services, including payment platforms such as GCash and PayMaya. When you interact with these third-party services, their own privacy policies apply to the personal data you share with them directly. okpla is not responsible for the privacy practices of third-party platforms and recommends that you review the privacy policies of any third-party service you use in connection with your okpla account.

GCash is operated by Mynt (Globe Fintech Innovations, Inc.) and PayMaya is operated by Voyager Innovations, Inc. / Maya Bank, Inc. Each of these entities is an independent Personal Information Controller for data processed through their respective platforms.

14 Amendments to This Policy

okpla reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or regulatory guidance. Where amendments are material — meaning they affect your rights or the way we use your personal data in a significant way — okpla will provide advance notice via the email address registered to your account or through a prominent notice on the Platform.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy.

15 Contact Us & Data Protection Officer

For any privacy-related inquiries, to exercise your data subject rights, or to report a concern about okpla's handling of your personal data, please contact our Data Protection Officer:

okpla is committed to resolving privacy concerns promptly and fairly. If you are not satisfied with our response to your privacy request or complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines.