okoplay Privacy Policy

okoplay is the data controller responsible for the personal information you provide when using the okoplay platform at okoplay.net. As a PAGCOR-licensed online casino and sports betting operator serving Filipino players, okoplay is legally obligated to process certain categories of personal data to deliver its services, comply with regulatory requirements, and protect players from fraud and money laundering.

For all data protection enquiries, please contact our Data Protection Officer (DPO) via the support channel. okoplay is registered with the National Privacy Commission (NPC) of the Philippines in accordance with the requirements of Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, and its Implementing Rules and Regulations.

okoplay collects only the personal data that is strictly necessary for the purposes described in this Privacy Policy. The categories of personal data we collect include the following:

okoplay processes your personal data only for specific, legitimate purposes. The table below sets out each processing purpose, the category of data used, and the legal basis under the Data Privacy Act that authorises that processing:

okoplay will never use your personal data for purposes that are incompatible with those listed above without first obtaining your explicit consent. We do not engage in profiling or automated decision-making that produces legal or similarly significant effects without human review.

okoplay does not sell your personal data to third parties for commercial purposes. We may share your personal data only in the following limited circumstances:

• Regulatory Authorities: okoplay is required by law to share certain player data with PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government bodies upon lawful request or as required by our operating license conditions.
• Payment Service Providers: To process deposits and withdrawals, okoplay shares the minimum necessary financial data with licensed payment processors including GCash, Maya, BPI, BDO, and Metrobank. These providers are contractually bound to process data only for the purpose of fulfilling the transaction.
• KYC Verification Partners: okoplay uses accredited third-party identity verification services to assist with document authentication. These partners process only the data strictly required for verification and are bound by equivalent data protection obligations.
• Game Technology Providers: Licensed game studios and live dealer providers that supply games on the okoplay platform may receive anonymised usage data for the purpose of game performance analytics. No personally identifiable information is shared with game providers beyond what is required for dispute resolution.
• IT Infrastructure & Security Providers: Cloud hosting, cybersecurity, and fraud detection vendors that form part of okoplay's technical infrastructure may process certain technical and usage data as data processors acting under okoplay's instructions and under binding contractual data processing agreements.
• Law Enforcement: okoplay will disclose personal data to Philippine law enforcement agencies where required by a valid court order, subpoena, or other lawful legal process.

Any third-party service provider that processes personal data on okoplay's behalf does so as a data processor under a written data processing agreement that imposes privacy and security obligations equivalent to those required by the Philippine Data Privacy Act.

okoplay retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulatory requirements. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of 5 years following account closure, in accordance with PAGCOR and AMLC record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, as required under Philippine AML regulations (Republic Act No. 9160 as amended).
• KYC Documents: Retained for 5 years from the date of submission or account closure, whichever is later.
• Communications Data: Live chat and email support records are retained for 2 years from the date of the interaction.
• Technical and Usage Data: Retained for 13 months for security and analytics purposes, after which it is anonymised or deleted.
• Marketing Consent Records: Retained for the duration of your account or until you withdraw consent, plus 1 year for compliance documentation purposes.

When personal data is no longer required, okoplay will securely delete or anonymise it in a manner consistent with industry best practices and NPC guidelines.

okoplay uses cookies and similar tracking technologies on the okoplay.net platform. Cookies are small text files stored on your device that help us deliver a functional, personalised, and secure experience. The types of cookies we use are described below:

• Strictly Necessary Cookies: These are essential for the platform to function correctly — for example, maintaining your logged-in session, remembering your language preference, and keeping your account secure. These cookies cannot be disabled without affecting platform functionality.
• Analytics Cookies: okoplay uses anonymised analytics to understand how players navigate the platform, which games are most popular, and where technical issues arise. This data is used exclusively to improve platform performance and user experience.
• Functional Cookies: These cookies remember your preferences — such as preferred deposit method or responsible gaming settings — to personalise your experience on return visits.
• Security Cookies: Used to detect fraudulent activity, unusual login patterns, and potential account takeover attempts. These cookies are a core component of okoplay's account security infrastructure.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair the functionality of the okoplay platform. okoplay does not use third-party advertising cookies or share behavioural data with advertising networks.

okoplay implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• TLS encryption for all data transmitted between your device and okoplay's servers;
• AES-256 encryption at rest for all sensitive personal and financial data stored in okoplay's systems;
• Multi-factor authentication (MFA) requirements for all internal okoplay staff accessing production systems;
• Role-based access controls (RBAC) limiting access to personal data to only those employees with a demonstrated need to access it;
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity firms;
• 24/7 security monitoring and automated intrusion detection systems;
• Annual data protection training for all okoplay staff who handle personal data.

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal data held by okoplay:

To exercise any of these rights, please contact our Data Protection Officer via the live chat support channel or by emailing us at the address on file. okoplay will respond to all verified data subject requests within 15 business days of receipt. In complex cases, this period may be extended by a further 15 business days with prior notification.

If you believe okoplay has not handled your personal data in accordance with the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

okoplay may send you promotional communications about bonuses, new games, tournaments, and special offers tailored to Filipino players — from Welcome Bonuses to reload promotions for PBA season specials. All marketing communications are sent only on the basis of your opt-in consent, provided during registration or subsequently through your account preferences.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email from okoplay;
• Updating your communication preferences in the Notifications section of your okoplay account dashboard;
• Contacting the okoplay support team via live chat and requesting removal from all marketing lists.

Opting out of marketing communications does not affect the delivery of transactional messages essential to your account, such as deposit confirmations, withdrawal notifications, and security alerts. These communications are sent on the basis of contractual necessity and cannot be disabled while your account is active.

okoplay's services are strictly limited to individuals aged 21 years and above in accordance with PAGCOR regulations. okoplay does not knowingly collect personal data from individuals under the age of 21. The okoplay registration process includes date-of-birth verification to prevent underage registration.

okoplay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC guidelines, or PAGCOR regulatory requirements. Material changes to this Policy — those that significantly affect your rights or how your data is used — will be communicated to you via your registered email address or via a prominent notice on the okoplay platform at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how okoplay protects your personal data. Your continued use of the okoplay platform following any update constitutes your acceptance of the revised Policy.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by okoplay, please contact our Data Protection Officer through the following channel: