This Privacy Policy explains how okyplay collects, uses, stores, shares, and protects your personal information when you use our Platform. We are committed to handling your data with transparency and in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines.
All personal data processed by okyplay is protected by 256-bit SSL encryption in transit and AES-256 encryption at rest. We apply industry-standard security controls to every layer of our infrastructure.
okyplay complies fully with Republic Act No. 10173 — the Philippine Data Privacy Act of 2012 — and its Implementing Rules and Regulations. Your rights as a data subject are upheld without exception.
You have the right to access, correct, object to, and request erasure of your personal data. okyplay's Data Protection Officer can be reached at any time to handle your data rights requests.
This Privacy Policy ("Policy") applies to all personal data collected, processed, stored, or shared by okyplay ("okyplay," "we," "us," or "our") in connection with the operation of the online gaming platform accessible at https://okyplay.org, including any associated mobile applications, subdomains, and related digital services (collectively, the "Platform").
This Policy applies to all registered users ("Players"), prospective registrants who access or browse the Platform, and any other individuals whose personal data okyplay processes in the course of its business operations. By using the okyplay Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.
This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC) of the Philippines. It should be read alongside our Terms & Conditions, which govern the overall use of the okyplay Platform.
okyplay collects personal data that falls into the following categories. We collect only the data that is necessary, adequate, and not excessive relative to the purposes for which it is processed (the principle of proportionality under the DPA).
okyplay collects personal data through the following channels and mechanisms:
| Collection Method | Data Collected | Context |
|---|---|---|
| Account Registration | Name, mobile number, email, date of birth, address | Directly provided by you when signing up |
| KYC Verification | Government ID copies, selfie, proof of address | Uploaded by you to complete verification |
| Payment Transactions | GCash/Maya number, bank details, transaction records | Provided during deposit or withdrawal |
| Platform Usage | Game history, session data, betting records | Automatically generated as you use the Platform |
| Device & Browser | IP address, device type, browser, OS | Automatically collected via server logs and cookies |
| Customer Support | Communications, complaint details, resolution records | Provided during live chat or email interactions |
| Third-Party Providers | Identity verification results, payment status | Received from KYC or payment processing partners |
okyplay processes your personal data only for specific, legitimate purposes that are declared at the time of collection or that arise necessarily from the nature of our service. The primary purposes are:
Under the Data Privacy Act of 2012, okyplay processes your personal data on the following legal bases:
okyplay does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following circumstances and only to the extent necessary:
We engage trusted third-party service providers to perform functions on our behalf, including KYC/identity verification providers, payment gateway operators (GCash, Maya, bank partners), game software providers (whose games are integrated into the okyplay Platform), IT infrastructure and cloud hosting providers, and fraud detection and cybersecurity partners. All third-party processors are contractually bound to process data only on okyplay's instructions and in compliance with the DPA and applicable international data protection standards.
okyplay is required by law to disclose certain player data to regulatory authorities, including PAGCOR (as our licensing body), the Anti-Money Laundering Council (AMLC) where transactions trigger mandatory reporting thresholds under the AMLA, and law enforcement agencies or courts upon receipt of a valid legal order or warrant. We will notify affected players of any disclosure to the extent permitted by applicable law.
In the event of a merger, acquisition, corporate restructuring, or sale of all or substantially all of okyplay's assets, your personal data may be transferred to the successor entity. okyplay will provide reasonable notice of such a transfer and ensure that the successor entity is bound by privacy obligations no less protective than those set out in this Policy.
okyplay retains your personal data for the minimum period necessary to fulfill the purpose for which it was collected, or for such longer period as required by applicable law or regulation. The following retention schedule applies:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | PAGCOR regulatory requirement |
| KYC Documents | Duration of account + 5 years after closure | AMLA and PAGCOR obligations |
| Financial / Transaction Records | Duration of account + 5 years after closure | AMLA (RA 9160, Section 9) |
| Gaming Session Logs | 3 years from date of session | Responsible gaming & dispute resolution |
| Customer Support Records | 3 years from last interaction | Dispute resolution and quality assurance |
| Marketing Consent Records | Until consent is withdrawn + 1 year | DPA consent documentation requirement |
| Technical / Access Logs | 90 days (rolling) | Security monitoring and fraud detection |
Upon expiry of the applicable retention period, okyplay will securely delete or anonymize your personal data in accordance with the NPC's guidelines on data disposal.
okyplay implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include, but are not limited to:
The okyplay Platform uses cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze how the Platform is used. The following categories of cookies are deployed:
okyplay does not deploy third-party advertising cookies or behavioral tracking cookies for the purpose of delivering targeted advertising on external platforms. You may manage cookie preferences through your browser settings, although disabling essential cookies may impair your access to the okyplay Platform.
Under the Data Privacy Act of 2012 and its IRR, you have the following rights with respect to your personal data held by okyplay. Requests to exercise these rights may be submitted to okyplay's Data Protection Officer via email at [email protected] or via live chat.
Request a copy of all personal data okyplay holds about you, including the purposes of processing, retention periods, and any third parties to whom it has been disclosed.
Request correction of inaccurate or incomplete personal data. You may update some information directly in your okyplay account settings.
Request deletion of your personal data where it is no longer necessary for the purpose collected, or where you have withdrawn consent. This right is subject to legal retention obligations.
Object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where your situation justifies it.
Request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another data controller.
File a complaint with the National Privacy Commission (NPC) of the Philippines if you believe okyplay has violated your data protection rights.
The okyplay Platform is strictly restricted to persons who are 21 years of age or older. okyplay does not knowingly collect, process, or store the personal data of individuals under the age of 21. This restriction is enforced through mandatory KYC age verification at account registration.
If okyplay becomes aware that personal data has been collected from an individual under 21 years old — whether through an erroneous registration, a circumvented age gate, or any other mechanism — okyplay will immediately close the relevant account, delete all associated personal data to the extent not required to be retained under applicable law, and refund any deposited balance to the originating payment source.
okyplay's primary data processing infrastructure is located within or connected to the Philippines. However, some of okyplay's third-party service providers — including game software providers, cloud infrastructure partners, and KYC verification services — may process data on servers located outside the Philippines.
Where personal data is transferred outside the Philippines, okyplay ensures that adequate safeguards are in place in accordance with Section 21 of the DPA and the NPC's guidelines on cross-border data flows. Such safeguards include contractual data processing agreements incorporating the NPC's standard data protection clauses, and verification that the receiving jurisdiction provides an adequate level of data protection.
okyplay does not transfer personal data to jurisdictions that do not provide adequate data protection unless appropriate contractual safeguards are in place and the transfer is strictly necessary for service delivery.
okyplay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or the okyplay Platform itself. When material changes are made, okyplay will notify you by displaying a prominent notice on the Platform at your next login, and where applicable, by sending a notification to your registered email address or mobile number.
The "Effective Date" at the top of this Policy indicates the date on which the current version took effect. Previous versions of this Policy are available upon request from okyplay's Data Protection Officer. Continued use of the okyplay Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.
okyplay has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the DPA and this Policy. You may contact the okyplay DPO for any privacy-related matter, including data subject rights requests, complaints, and general inquiries about how okyplay handles your personal data.
If you are not satisfied with okyplay's response to a privacy complaint, you have the right to escalate your concern to the National Privacy Commission of the Philippines (NPC).
Privacy commitments that go beyond the legal minimum
okyplay's data processing system is registered with the National Privacy Commission of the Philippines, as required under NPC Circular 16-01 for personal information controllers handling sensitive data at scale.
okyplay conducts Privacy Impact Assessments (PIAs) before introducing new data processing activities, new third-party integrations, or significant changes to Platform features that affect player data.
In the event of a data breach that poses a real risk to affected players, okyplay will notify both the NPC and affected individuals within 72 hours of discovery — the statutory requirement under Philippine law.
Your data is safe with us — and the games are waiting. Start with ₱100 via GCash at okyplay today. Must be 21 years old or above. 🔞🇵🇭
🔞 21+ only · PAGCOR regulated · DPA 2012 compliant · GCash & Maya · Play responsibly