okpla Privacy Policy

1. Introduction

okpla ("we," "us," or "our") is committed to protecting the privacy and personal data of all registered players and visitors to the okpla platform. This Privacy Policy describes how okpla collects, uses, stores, shares, and protects personal information in connection with the operation of the okpla online casino platform, accessible at okpla.org.

This policy applies to all personal data processed by okpla in connection with your use of the platform, including data collected through the website, mobile site, customer support channels, and any other touchpoints associated with the okpla brand.

okpla operates in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its implementing rules and regulations. We are registered with the National Privacy Commission (NPC) as required by Philippine law.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and applicable data protection legislation, okpla is the data controller responsible for your personal data collected through the okpla platform.

As data controller, okpla determines the purposes and means of processing your personal data. Where okpla engages third-party service providers to process data on its behalf, those providers act as data processors and are bound by contractual obligations to process data only in accordance with okpla's instructions and applicable law.

okpla has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. The DPO may be contacted using the details provided in Section 16.

3. Data We Collect

okpla collects the following categories of personal data in connection with the operation of the platform:

3.1 Identity & Contact Data

• Full legal name
• Date of birth
• Nationality and country of residence
• Residential address (including barangay, city, province, and ZIP code)
• Email address
• Mobile number
• Government-issued identification number (e.g., PhilSys ID, passport, SSS, UMID, driver's license)

3.2 Financial Data

• GCash or PayMaya account number (where used for deposits or withdrawals)
• Bank account details (where used for bank transfer transactions)
• Debit card details (card number, expiry, and billing address — stored in tokenized form only)
• Transaction history, including deposit amounts, withdrawal amounts, and dates

3.3 Gaming & Account Data

• Account username and encrypted password
• Game history, wager amounts, wins, and losses
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, self-exclusion status, etc.)
• Account correspondence and support ticket history

3.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Session duration and login timestamps
• Pages visited and features used on the platform
• Referral source (how you arrived at the okpla platform)

4. How We Collect Your Data

okpla collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically when you access the okpla platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud and risk data from anti-fraud screening services; payment data from payment processors such as GCash, PayMaya, and banking partners.
• Publicly available sources: In limited circumstances, okpla may verify information against publicly available records to confirm identity or detect fraud.

5. How We Use Your Data

okpla uses your personal data for the following purposes:

okpla does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or where you have provided explicit consent.

6. Legal Basis for Processing

okpla processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable regulations:

• Contractual necessity: Processing required to perform the contract between you and okpla — including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable Philippine laws, including anti-money laundering (AMLA) obligations, KYC requirements, and regulatory reporting.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform analytics, where these interests are not overridden by your rights.
• Consent: Processing for optional purposes such as marketing communications and non-essential cookies, where you have provided clear, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Sharing Your Data

okpla does not sell, rent, or trade your personal data to third parties. We share your data only in the following circumstances and only to the extent necessary:

7.1 Service Providers

okpla engages trusted third-party service providers to assist in operating the platform. These include KYC and identity verification providers, payment processors (GCash, PayMaya, and banking partners), game software providers, cloud hosting and infrastructure providers, customer support platform providers, and fraud detection and cybersecurity services. All service providers are bound by data processing agreements that restrict their use of your data to the specific services they provide to okpla.

7.2 Regulatory and Legal Authorities

okpla may disclose your personal data to government agencies, law enforcement bodies, or regulatory authorities — including the Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC) — where required by law, court order, or regulatory directive.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of okpla's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that result from it.

7.4 With Your Consent

okpla may share your data with third parties for purposes not described above where you have provided explicit prior consent. You may withdraw such consent at any time by contacting okpla support.

8. International Data Transfers

Some of okpla's service providers may be located outside the Philippines. Where personal data is transferred to a country that does not provide an equivalent level of data protection to that afforded under Philippine law, okpla will implement appropriate safeguards — such as standard contractual clauses or binding corporate rules — to ensure that your data remains protected to the standard required by the Data Privacy Act of 2012.

By using the okpla platform, you acknowledge that your data may be transferred to and processed in countries outside the Philippines, subject to the safeguards described above.

9. Data Retention

okpla retains your personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and identity data: Retained for a minimum of five (5) years following account closure, in compliance with AMLA and PAGCOR record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five (5) years following the date of the transaction.
• Gaming history: Retained for a minimum of three (3) years following account closure.
• Customer support records: Retained for three (3) years following resolution of the support interaction.
• Technical and usage data: Retained for up to twelve (12) months, after which it is aggregated or anonymized.
• Marketing consent records: Retained for the duration of your consent and for three (3) years thereafter as evidence of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with okpla's data disposal procedures.

10. Cookies & Tracking Technologies

okpla uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

• Essential cookies: Required for the platform to function correctly, including session management, login authentication, and security features. These cannot be disabled without affecting platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalized experience.
• Analytics cookies: Used to collect aggregated, anonymized data about how players use the platform, helping okpla identify areas for improvement. No personally identifiable information is included in analytics reports.
• Marketing cookies: Used only where you have provided consent, to deliver relevant promotional content. You may withdraw consent for marketing cookies at any time through your browser settings.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the okpla platform. For detailed information on the specific cookies used, please refer to the okpla Cookie Notice available within the platform settings.

11. Data Security

okpla implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the okpla platform
• Encryption of sensitive data at rest, including financial account details and government ID numbers
• Password hashing using industry-standard algorithms — okpla never stores passwords in plain text
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular security audits, vulnerability assessments, and penetration testing
• Multi-factor authentication for administrative access to systems holding personal data
• Incident response procedures for detecting, reporting, and managing personal data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, okpla will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012 and its implementing rules.

12. Your Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okpla:

• Right to be informed: The right to be told what personal data okpla holds about you and how it is used — which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data okpla holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact okpla's Data Protection Officer using the details in Section 16. okpla will respond to all valid requests within thirty (30) days. In complex cases, this period may be extended by a further thirty (30) days, with notice provided to you.

Please note that certain rights are subject to limitations where processing is required for legal compliance, fraud prevention, or the establishment, exercise, or defense of legal claims.

13. Children & Minors

The okpla platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine gaming regulations. okpla does not knowingly collect personal data from individuals under the age of 21.

If okpla discovers that personal data has been collected from a person under 21 years of age, the account will be immediately suspended, all associated data will be deleted (subject to any legal retention obligations), and any deposited funds will be returned to the original payment source.

If you believe that a minor has registered an account on the okpla platform, please contact okpla support immediately so that appropriate action can be taken.

14. Responsible Gaming & Data Processing

okpla processes gaming activity data as part of its responsible gaming obligations. This includes monitoring for patterns of play that may indicate problem gambling behavior, enforcing player-set limits and self-exclusion requests, and complying with regulatory requirements related to player protection.

Where a player has activated a self-exclusion, okpla retains the self-exclusion record for the duration of the exclusion period and for a minimum of five (5) years thereafter. This retention is necessary to prevent circumvention of the self-exclusion and to comply with regulatory obligations. Self-exclusion data is treated with the highest level of confidentiality and is accessible only to authorized responsible gaming staff.

For more information about the responsible gaming tools available on okpla, please visit our Responsible Gaming page.

15. Changes to This Privacy Policy

okpla reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. The effective date at the top of this page will be updated whenever a material change is made.

Where changes are material, okpla will notify registered players via email or a prominent notice on the platform prior to the changes taking effect. Your continued use of the okpla platform following the effective date of any amendment constitutes your acknowledgment of the revised policy.

We encourage you to review this Privacy Policy periodically to stay informed about how okpla protects your personal data.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by okpla, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) if you believe your data protection rights have been violated. The NPC can be reached through its official government channels.