okpla Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how okpla ("okpla," "we," "us," or "our"), the operator of the online gaming platform accessible at okpla.co ("the Platform"), collects, uses, stores, and discloses personal data relating to individuals who visit, register on, or use the okpla Platform ("you," "Player," or "User").

okpla is committed to protecting the privacy of all Players and website visitors. This Policy is intended to provide clear, transparent information in accordance with Republic Act No. 10173 (Data Privacy Act of 2012, "DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC") of the Philippines.

By registering an account or using the okpla Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, please discontinue use of the okpla Platform immediately.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, okpla is the data controller responsible for the personal data collected through the okpla Platform. Our designated Data Privacy Officer ("DPO") can be contacted using the information provided in Section 14 of this Policy.

okpla operates in compliance with applicable Philippine gaming regulations under PAGCOR guidelines. As a regulated gaming operator, okpla is subject to additional data handling requirements arising from anti-money laundering (AML) and know-your-customer (KYC) obligations under Philippine law.

3. Personal Data We Collect

3.1 Data You Provide Directly

When you register an account or use the okpla Platform, we collect the following categories of personal data that you provide to us directly:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification number (e.g., Philippine National ID, passport number, SSS/GSIS number).
• Contact Data: Email address, mobile phone number, and residential address (including city, province, and postal code within the Philippines).
• Financial Data: Payment method details (e.g., GCash account, PayMaya account, BPI/BDO/Metrobank account references), transaction history, and deposit and withdrawal records.
• Verification Documents: Copies of government-issued identification and proof of address submitted during KYC verification.
• Account Credentials: Username and encrypted password hash (we do not store plaintext passwords).
• Communication Data: Correspondence with okpla customer support, including live chat transcripts and email records.

3.2 Data Collected Automatically

When you access the okpla Platform, we automatically collect certain technical and behavioral data, including:

• IP address, device type, operating system, and browser type and version.
• Session data, including login timestamps, pages visited, and actions taken on the Platform.
• Game activity data, including games played, bet amounts, wagering history, and game outcomes.
• Geolocation data (city/region level) derived from IP address, for regulatory compliance purposes.
• Cookie and tracking data as described in Section 9.

3.3 Data from Third Parties

We may receive supplementary personal data from third-party identity verification providers, payment processors, and fraud detection services used in connection with the okpla Platform. This data is processed strictly for the purposes described in Section 4.

4. How We Use Your Personal Data

okpla processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your okpla account, including authentication and security monitoring.
• Service Delivery: To provide access to games, process bets, calculate winnings, and facilitate deposits and withdrawals in PHP.
• Identity Verification & KYC: To verify your identity and age (21+ requirement), confirm the source of funds, and comply with anti-money laundering obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, and other security threats.
• Regulatory Compliance: To comply with PAGCOR regulations, AML/CTF requirements, and obligations under the Data Privacy Act of 2012.
• Customer Support: To respond to your queries, resolve disputes, and process complaints.
• Responsible Gaming: To monitor gaming patterns for signs of problem gambling and to apply responsible gaming tools where appropriate.
• Marketing & Promotions: To send you promotional offers, bonus notifications, and platform updates where you have provided consent or where we have a legitimate interest in doing so. You may opt out at any time.
• Platform Improvement: To analyze usage patterns, conduct A/B testing, and improve the okpla user experience for Filipino players.

5. Legal Bases for Processing

Under the Data Privacy Act of 2012 and its IRR, okpla relies on the following legal bases for processing your personal data:

• Contract Performance: Processing necessary for the performance of your account agreement with okpla, including service delivery and payment processing.
• Legal Obligation: Processing required for compliance with applicable Philippine laws, including PAGCOR regulations, AML/CTF requirements, and taxation obligations.
• Legitimate Interests: Processing necessary for okpla's legitimate interests in fraud prevention, platform security, and business improvement, where these interests are not overridden by your rights.
• Consent: For marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time without affecting prior processing.

6. Sharing & Disclosure of Personal Data

okpla does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only to the extent strictly necessary:

• Game Providers: JILI, PG Soft, Pragmatic Play, BetterLive, and other certified game providers, for the delivery of gaming services. Data shared is limited to session tokens and game activity records necessary for game operation.
• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for processing deposits and withdrawals. Financial data shared is limited to what is required to complete each transaction.
• Identity Verification Providers: Third-party KYC and identity verification services used to verify player identity and age in compliance with regulatory requirements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, and other competent Philippine government authorities, where required by law or pursuant to a lawful order.
• Professional Advisers: Legal, accounting, and compliance advisers bound by professional confidentiality obligations, where necessary.
• Business Successors: In the event of a merger, acquisition, or sale of assets, player data may be transferred to a successor entity, subject to equivalent privacy protections.

All third-party service providers processing personal data on behalf of okpla are required to maintain appropriate technical and organizational security measures and to process data only in accordance with okpla's instructions and this Policy.

7. International Transfers

Some of okpla's service providers and game technology partners may be located outside of the Philippines. Where personal data is transferred to entities in other jurisdictions, okpla ensures that such transfers are governed by appropriate contractual safeguards — including data processing agreements incorporating standard contractual clauses — and that the receiving entity maintains a level of data protection equivalent to that required under the Data Privacy Act of 2012.

By using the okpla Platform, you consent to the transfer of your personal data to okpla's service providers in other jurisdictions under these conditions.

8. Data Retention

okpla retains your personal data for as long as your account remains active and for a minimum period thereafter as required by applicable Philippine law and PAGCOR regulations. In particular:

• Account and identity data is retained for a minimum of five (5) years following account closure, in compliance with AML/CTF record-keeping requirements.
• Transaction records are retained for a minimum of five (5) years from the date of each transaction.
• Customer support correspondence is retained for three (3) years from the date of the interaction.
• Marketing consent records are retained for as long as necessary to evidence consent and for a reasonable period thereafter.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymized in accordance with okpla's data destruction procedures.

9. Cookies & Tracking Technologies

okpla uses cookies and similar tracking technologies (including web beacons and local storage) to operate and improve the Platform. The categories of cookies we use include:

• Strictly Necessary Cookies: Required for the Platform to function, including authentication session management and security features. These cannot be disabled.
• Performance Cookies: Used to collect anonymized analytics on how Players use the Platform, which pages are most visited, and where errors occur. This data helps okpla improve the player experience.
• Functional Cookies: Used to remember your preferences, such as preferred language, game lobby layout, and deposit method, to personalize your okpla experience.
• Marketing Cookies: Used to deliver relevant promotional content and to measure the effectiveness of okpla's marketing campaigns. These are only set with your consent.

You can manage cookie settings through your browser. Disabling non-essential cookies will not prevent you from using okpla, but may affect some personalization features.

10. Security Measures

okpla implements a range of technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data transmitted between your device and okpla's servers.
• Encryption at rest for sensitive data including payment details and identity documents.
• Multi-factor authentication options for player accounts.
• Role-based access controls limiting employee access to personal data to only those with a legitimate business need.
• Regular security audits and penetration testing.
• Incident response procedures for data breaches, including notification to the NPC and affected individuals within the timeframes required under the DPA.

Notwithstanding these measures, no method of electronic transmission or storage is 100% secure. okpla cannot guarantee absolute security, and Players are encouraged to use strong passwords and to enable two-factor authentication on their accounts.

11. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okpla:

• Right to be Informed: The right to be notified of the purposes for which your personal data is being collected and processed.
• Right to Access: The right to obtain a copy of the personal data okpla holds about you, along with information about how it is being used.
• Right to Correction: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to okpla's legal retention obligations and legitimate interests.
• Right to Object: The right to object to the processing of your personal data for marketing purposes or on the basis of legitimate interests.
• Right to Data Portability: The right to receive a structured, commonly used, and machine-readable copy of the personal data you have provided to okpla.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data rights have been violated.

To exercise any of these rights, please contact our Data Privacy Officer as described in Section 14. okpla will respond to all valid data subject requests within fifteen (15) business days.

12. Children's Privacy

The okpla Platform is strictly for adults aged 21 years or older in accordance with PAGCOR regulations. okpla does not knowingly collect personal data from individuals under 21 years of age. If okpla becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended and the personal data will be deleted in accordance with our data retention procedures. Parents or guardians who believe that a minor has registered on okpla should contact us immediately using the details in Section 14.

13. Amendments to This Policy

okpla reserves the right to update or amend this Privacy Policy at any time. Where changes are material, okpla will provide advance notice to registered Players via email or through a prominent notice on the Platform before the changes take effect. The "Last Updated" date at the top of this Policy will reflect the date of the most recent revision. Your continued use of the okpla Platform following the effective date of any amendment constitutes acceptance of the revised Policy.

14. Contact & Data Privacy Officer

For all privacy-related inquiries, data subject access requests, or complaints, please contact okpla's Data Privacy Officer:

• Email: [email protected]
• Live Chat: Available on the okpla Platform, 8AM – 2AM PST
• Subject Line: Please use "Data Privacy Request – [Your Name]" when emailing

okpla will acknowledge all privacy requests within five (5) business days and will provide a substantive response within fifteen (15) business days, in accordance with the requirements of the Data Privacy Act of 2012 and NPC guidelines.

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines at privacy.gov.ph if you believe your data rights have not been adequately addressed by okpla.