Your Data, Your Rights: okaypla is committed to processing your personal data transparently and lawfully. This Privacy Policy is written in plain language so you can understand exactly what happens to your information. If you have questions about how your data is handled, contact us at [email protected] at any time.
Privacy at a Glance
How okaypla Protects Your Personal Information
Who We Are
okaypla is an online gaming and entertainment platform operating at okaypla.net, designed for and primarily serving adult players across the Philippines, including Metro Manila, Cebu, Davao, Quezon City, Makati, and other regions across Luzon, Visayas, and Mindanao.
For the purposes of this Privacy Policy, "okaypla," "we," "us," and "our" refers to the operating entity behind the okaypla platform and its affiliated service providers. "You," "your," and "Player" refers to any individual who registers an account, accesses the platform, or otherwise interacts with okaypla's services.
okaypla acts as the data controller in respect of personal information collected through the platform. This means we determine the purposes and means by which your personal data is processed. Where we engage third-party processors — such as payment providers and KYC verification services — those parties process your data strictly on our behalf and under our instructions.
For any privacy-related queries, you may contact our Data Privacy Officer at [email protected]. Please include "Data Privacy" in your subject line for fastest routing.
Personal Data We Collect
okaypla collects only the personal data necessary to provide our gaming services, comply with applicable Philippine law, and maintain the security and integrity of the platform. The categories of personal data we collect include:
Registration & Identity Data:
- Full legal name, date of birth, and gender
- Mobile number and email address
- Home address and city of residence
- Government-issued identification (PhilSys card, passport, driver's licence, SSS/GSIS ID) — collected for KYC verification purposes only
- Selfie or facial image submitted for identity verification
Financial & Transaction Data:
- GCash or PayMaya account number linked to your okaypla account
- Bank account details (BPI, BDO, Metrobank) where provided for withdrawal purposes
- Debit or credit card details (Visa, Mastercard) — card numbers are tokenised and never stored in full
- Transaction history including deposits, withdrawals, wager amounts, and game outcomes
Technical & Usage Data:
- IP address and approximate geographic location at time of login
- Device identifiers, browser type, and operating system
- Session timestamps, pages visited, games played, and features accessed
- Cookie identifiers and similar tracking technologies (see Section 7)
Communications Data:
- Records of live chat conversations with our support team
- Email correspondence with okaypla support or compliance staff
- Feedback, complaints, or dispute submissions made through the platform
Responsible Gaming Data:
- Deposit limits, session limits, and cool-off periods set by you
- Self-exclusion requests and their effective dates
- Any disclosures made in connection with problem gambling support
How We Collect Your Data
okaypla collects personal data through the following channels:
- Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your account profile.
- Automated collection: Technical data collected automatically when you access the platform, including IP addresses, device fingerprints, session logs, and cookie-based tracking data.
- Payment processors: Transaction confirmation data and partial payment identifiers passed to us by GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard when you complete a financial transaction.
- Identity verification providers: Verification results and risk scores returned by our third-party KYC partners after you submit your identification documents.
- Fraud prevention services: Risk signals and device reputation data provided by anti-fraud technology partners to help us detect suspicious activity on the platform.
- Public sources: In limited circumstances related to AML compliance, we may cross-reference information against publicly available sanctions lists or adverse media databases as required by Philippine law.
You are always in control: You may choose not to provide certain optional information. However, some data — such as identity verification documents — is required by law and cannot be waived. Without completing KYC, withdrawal requests cannot be processed.
How We Use Your Personal Data
okaypla uses the personal data we collect for the following purposes:
- Account management: Creating and maintaining your okaypla account, authenticating your identity at login, and processing account-related requests such as password resets and profile updates.
- Service delivery: Enabling you to access and participate in all games and features available on the okaypla platform, including slots, live dealer games, bingo, fishing games, dice, and sabong.
- Financial processing: Processing deposits and withdrawals in Philippine Peso (PHP) via GCash, PayMaya, bank transfer, and card payment. All transactions are recorded for reconciliation and regulatory reporting purposes.
- Identity and age verification: Confirming that you are at least 21 years of age and that the identity information you provided at registration is accurate and authentic, as required under Philippine gaming regulations.
- Legal and regulatory compliance: Fulfilling our obligations under Republic Act No. 10173 (Data Privacy Act), Republic Act No. 9160 (Anti-Money Laundering Act), and applicable PAGCOR regulations, including the preparation and submission of mandatory compliance reports.
- Fraud prevention and security: Detecting and investigating suspicious transactions, unauthorised account access, bonus abuse, money laundering, and other prohibited conduct. This includes automated risk scoring of sessions and transactions.
- Customer support: Responding to your queries, processing complaints, investigating disputes, and resolving technical issues reported through live chat or email.
- Responsible gaming: Monitoring gaming patterns to identify potential problem gambling indicators and implementing the responsible gaming tools you have activated on your account.
- Platform improvement: Analysing aggregated usage data — in anonymised form — to understand how players use the platform and to improve game selection, interface design, and promotional strategies for Filipino players.
- Marketing communications: Sending you information about okaypla promotions, seasonal bonuses, and new game releases, subject to your communication preferences. You may opt out of marketing communications at any time from your account settings.
Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, okaypla processes your personal data on the following legal grounds:
- Contractual necessity: Processing your registration data, financial transactions, game participation records, and account communications is necessary to perform the contract between you and okaypla — i.e., to provide you with access to our online gaming platform.
- Legal obligation: Collecting and retaining identity documents, transaction records, and AML-related data is required by Philippine law, including the Anti-Money Laundering Act, PAGCOR regulations, and the Implementing Rules of the Data Privacy Act. We have no discretion to waive these requirements.
- Legitimate interests: Processing technical data for fraud prevention, platform security, abuse detection, and aggregated analytics is carried out on the basis of our legitimate interests as a platform operator, balanced against your privacy rights.
- Consent: Where we send you optional marketing communications or use non-essential cookies, we rely on your prior consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Data Sharing & Third-Party Disclosure
okaypla does not sell your personal data to any third party. We share personal data with external parties only in the following limited circumstances:
- Payment processors: Your payment method details and transaction instructions are shared with GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard solely to process your deposits and withdrawals. These parties act as independent data controllers in respect of payment data transmitted through their own systems.
- KYC and identity verification providers: Your identity documents and facial images are shared with our third-party verification partners who conduct automated and manual identity checks on our behalf. These providers are bound by strict data processing agreements and confidentiality obligations.
- Fraud and AML compliance services: Device and behavioural data may be shared with anti-fraud and AML technology providers to enable risk scoring and suspicious activity detection. These parties process data strictly as our data processors.
- Regulatory and law enforcement authorities: We are required by Philippine law to report certain transactions and provide information to the Anti-Money Laundering Council (AMLC), PAGCOR, the National Privacy Commission (NPC), and law enforcement agencies when lawfully compelled to do so. We will always seek to notify you of such disclosures where legally permitted.
- Platform technology providers: Hosting, cloud infrastructure, analytics, and customer support software providers who access data incidentally in the course of providing their services to okaypla. All such providers are bound by data processing agreements consistent with the Data Privacy Act.
- Corporate transactions: In the event of a merger, acquisition, or sale of all or part of okaypla's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights as a data subject will be preserved.
No cross-border transfers without safeguards: Where data is transferred to service providers located outside the Philippines, okaypla ensures that adequate safeguards are in place consistent with the requirements of the Data Privacy Act and the rules of the National Privacy Commission.
Cookies & Tracking Technologies
okaypla uses cookies and similar technologies to operate the platform, remember your preferences, and analyse how the site is used. A cookie is a small text file stored on your browser or device when you visit a website.
We use the following categories of cookies:
- Strictly necessary cookies: These are essential for the platform to function. They handle session authentication, security tokens, and fraud prevention signals. You cannot opt out of these without breaking core platform functionality.
- Functional cookies: These remember your preferences — such as language settings, last-used game category, and responsible gaming notification dismissals — so the platform behaves consistently across sessions.
- Analytics cookies: These help us understand how players navigate the platform in aggregate, which game categories are most popular, and where players encounter friction. Analytics data is processed in anonymised or pseudonymised form.
- Marketing cookies: These are used to track whether you have interacted with promotional content and to avoid showing you the same promotion repeatedly. Marketing cookies are only set with your prior consent.
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in to and use the platform. For a full list of cookies in use and their retention periods, contact us at [email protected].
Data Retention
okaypla retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:
- Account and identity data: Retained for the duration of your active account, plus a minimum of five (5) years after account closure, as required under the Anti-Money Laundering Act and PAGCOR record-keeping obligations.
- Transaction records: Deposit, withdrawal, and wagering records are retained for a minimum of five (5) years from the date of each transaction, consistent with AML and tax compliance requirements.
- KYC documents: Identity documents submitted for verification are retained for the same period as account and identity data above. Copies are securely stored with access restricted to compliance personnel.
- Customer support communications: Live chat transcripts and email correspondence are retained for three (3) years from the date of the communication, or longer if the record relates to an ongoing dispute or regulatory matter.
- Marketing consent records: Records of your consent to receive marketing communications are retained for as long as your account is active and for one (1) year following account closure or consent withdrawal.
- Technical and usage logs: Session logs, IP address records, and device fingerprint data are retained for a maximum of twelve (12) months, except where a security investigation requires extended retention.
Upon expiry of the applicable retention period, personal data is securely deleted from okaypla's systems or anonymised in a manner that makes re-identification impossible. Anonymised data may be retained indefinitely for statistical and analytical purposes.
Data Security
okaypla implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
- Transport Layer Security (TLS): All data transmitted between your device and okaypla's servers is encrypted in transit using industry-standard TLS protocols, ensuring that your credentials and payment details cannot be intercepted.
- At-rest encryption: Sensitive data stored in okaypla's databases — including identity documents and financial records — is encrypted at rest using strong encryption standards.
- Access controls: Access to personal data is restricted to authorised okaypla personnel on a strict need-to-know basis. Staff with access to sensitive data undergo background screening and are bound by confidentiality obligations.
- Multi-factor authentication: Administrative access to okaypla's internal systems requires multi-factor authentication to reduce the risk of unauthorised access resulting from compromised credentials.
- Regular security assessments: okaypla conducts periodic vulnerability assessments and penetration testing of its platform infrastructure to identify and remediate security weaknesses proactively.
- Incident response: okaypla maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights, we will notify the National Privacy Commission (NPC) within 72 hours of discovery and notify affected players as required under the Data Privacy Act.
Protect your own account too: Keep your okaypla login password unique and strong. Never share it with anyone — including okaypla support staff, who will never ask for your password. Enable any additional security features available in your account settings, such as login notifications.
Your Data Subject Rights
Under Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, you have the following rights in relation to the personal data okaypla holds about you:
| Right | What It Means | How to Exercise |
|---|---|---|
| Right to be Informed | You have the right to know that okaypla is collecting your personal data, the purposes for which it is being processed, and the parties to whom it may be disclosed. | This Privacy Policy serves as your primary notice. Contact support for further clarification. |
| Right to Access | You may request a copy of the personal data okaypla holds about you, along with information about how it is being used. | Submit a written request to [email protected]. We will respond within 15 business days. |
| Right to Rectification | You may request correction of inaccurate or incomplete personal data in your okaypla account. | Update basic details in your account profile, or contact support for corrections requiring identity verification. |
| Right to Erasure | You may request deletion of your personal data where it is no longer necessary, where consent is withdrawn, or where processing is unlawful — subject to legal retention obligations. | Contact support in writing. Note that AML and PAGCOR requirements mean some records must be retained regardless. |
| Right to Data Portability | You may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service. | Submit a portability request to [email protected] specifying the data categories you require. |
| Right to Object | You may object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests. | Opt out of marketing in your account settings, or contact support to lodge a formal objection. |
| Right to Lodge a Complaint | If you believe okaypla has violated your data privacy rights, you may lodge a complaint with the National Privacy Commission (NPC) of the Philippines. | Visit the NPC website at privacy.gov.ph or contact okaypla's DPO first for internal resolution. |
To exercise any of the above rights, contact our Data Privacy Officer at [email protected] with the subject line "Data Subject Rights Request." We may need to verify your identity before processing your request.
Children & Minors
The okaypla platform is strictly intended for adults aged 21 years and above, consistent with Philippine gaming age restriction requirements. okaypla does not knowingly collect personal data from individuals under the age of 21.
During registration, all players are required to confirm their age and to submit a government-issued identification document for KYC verification. Any account found to belong to a person under 21 years of age will be immediately and permanently closed upon discovery.
If you are a parent or guardian and believe that your child has registered an account on okaypla without your knowledge, please contact us immediately at [email protected]. We will investigate the matter promptly and, where confirmed, close the account and delete the associated personal data as permitted by law.
21+ Only: Gambling is restricted to players aged 21 and above under Philippine law. okaypla takes underage gambling seriously and will take all available steps to prevent minors from accessing the platform.
Updates to This Privacy Policy
okaypla reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, new legal obligations, or improvements to our platform. The effective date at the top of this page indicates when the current version was last revised.
Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — okaypla will notify you via email to your registered address or through a prominent notice on the platform at least seven (7) days before the changes take effect. For minor clarifications or non-substantive edits, the Policy may be updated without prior notice.
Your continued use of the okaypla platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any updates, you should stop using the platform and may request account closure as outlined in our Terms & Conditions.
We recommend bookmarking this page and reviewing it periodically. The most current version is always available at okaypla.net/privacy-policy.
For any questions, concerns, or requests relating to this Privacy Policy or okaypla's handling of your personal data, contact our Data Privacy Officer at [email protected]. Our team is available 24/7 and responds in both Filipino and English.
Your Data Is Safe With Us
Ready to Play at okaypla?
Now that you know how okaypla protects your personal information, enjoy 500+ games, GCash and PayMaya support, live dealer tables, and 24/7 Filipino-English customer service — all on a platform that takes your privacy seriously.
For players aged 21 and above only. Please play responsibly. Visit our Responsible Gaming page for tools and resources.