okpl Privacy Policy

Personal Information We Collect

1.1 Information You Provide Directly

When you register an account with okpl, engage in gaming activities, make deposits or withdrawals, or communicate with our customer support, we collect personal information that you voluntarily provide including but not limited to:

• Identity Information: Full legal name, date of birth, nationality, government-issued identification numbers (PhilSys National ID, passport number, driver's license number, Unified Multi-Purpose ID number)
• Contact Information: Residential address, email address, mobile phone number, alternative contact details
• Account Credentials: Username, password, security questions and answers, two-factor authentication settings
• Financial Information: Bank account details, e-wallet account numbers (GCash, PayMaya), credit/debit card information (processed through PCI-DSS compliant payment processors), transaction history, deposit and withdrawal records
• Verification Documents: Copies of government-issued photo identification, proof of address documents (utility bills, bank statements), selfies or photos for identity verification purposes
• Communication Records: Chat transcripts with customer support, email correspondence, feedback submissions, complaint details

1.2 Information Collected Automatically

okpl automatically collects certain technical and usage information when you access our Services through various technologies including cookies, web beacons, server logs, and similar tracking mechanisms:

• Device Information: Device type and model, operating system and version, browser type and version, screen resolution, device identifiers (IMEI, MAC address, advertising ID)
• Connection Information: IP address, internet service provider, approximate geographic location (city and region level based on IP address), time zone settings
• Usage Data: Pages viewed, games played, betting patterns, session duration, navigation paths through our website, feature usage statistics, click-through rates
• Performance Data: Error logs, crash reports, loading times, technical diagnostics used to improve platform stability and user experience

1.3 Information from Third Party Sources

In certain circumstances, okpl may receive personal information about you from third-party sources including:

• Payment processors and financial institutions providing transaction verification and fraud prevention services
• Identity verification services conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance checks
• Credit reference agencies and fraud prevention databases (where permitted by law and with your consent)
• Marketing partners and affiliates through which you were referred to okpl (referral source and campaign information only, not detailed personal data)
• Social media platforms if you choose to authenticate or share information through social login features

How We Use Your Personal Information

2.1 Primary Processing Purposes

okpl processes your personal information for the following legitimate purposes, each based on specific lawful grounds under the Philippine Data Privacy Act:

Account Management and Service Delivery: We use your identity, contact, and credential information to create and maintain your okpl account, authenticate your identity during login, process your gaming transactions, manage your deposits and withdrawals, provide customer support, send service-related communications (account notifications, transaction confirmations, security alerts), and deliver the gaming services you request. This processing is necessary for the performance of our contract with you and to fulfill our obligations as your service provider.

Legal and Regulatory Compliance: We process your personal data to comply with legal obligations imposed by PAGCOR regulations, Philippine Anti-Money Laundering Act (AMLA), Tax Code of the Philippines, National Privacy Commission requirements, and other applicable laws. This includes conducting Know Your Customer (KYC) verification, monitoring transactions for suspicious activity, maintaining records required by gaming regulators, reporting to government agencies when legally mandated, responding to lawful requests from law enforcement, and implementing responsible gaming measures including age verification and self-exclusion programs.

Security and Fraud Prevention: Your information is processed to protect okpl Services, our users, and third parties from fraudulent activity, unauthorized access, security threats, and violations of our Terms and Conditions. This includes detecting multiple accounts, identifying collusion or cheating, preventing payment fraud and money laundering, investigating disputes and complaints, enforcing our policies and agreements, and maintaining the integrity of our gaming platform.

2.2 Secondary Processing Purposes

With your explicit consent or based on legitimate interests (where permitted by law), okpl may also use your personal information for:

• Marketing Communications: Sending promotional offers, bonus opportunities, game updates, and other marketing materials via email, SMS, or push notifications (you may opt out at any time)
• Platform Improvement: Analyzing usage patterns, conducting user research, testing new features, optimizing user experience, and developing new products and services
• Personalization: Customizing game recommendations, tailoring promotional offers based on your preferences and gaming history, and providing personalized customer support
• Research and Analytics: Creating aggregated, anonymized statistics about user behavior, platform performance, and market trends (this anonymized data cannot be used to identify individual users)

How We Share Your Personal Information

3.1 Disclosure to Third Parties

okpl does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may disclose your personal data to the following categories of recipients for the purposes described in this Privacy Policy:

Service Providers and Business Partners: We share personal information with trusted third-party service providers who perform functions on our behalf including payment processors (GCash, PayMaya, banks, card processors), identity verification services, customer support platforms, cloud hosting providers, email and SMS delivery services, analytics providers, and marketing technology vendors. These service providers are contractually obligated to process your data only for specified purposes, maintain confidentiality, implement appropriate security measures, and comply with applicable data protection laws.

Regulatory Authorities and Law Enforcement: okpl may disclose your personal information to PAGCOR, National Privacy Commission, Anti-Money Laundering Council (AMLC), Bureau of Internal Revenue (BIR), Philippine National Police, National Bureau of Investigation, or other government agencies when required by law, in response to valid legal process (subpoenas, court orders), to investigate potential violations of law or our Terms, to protect the rights and safety of okpl and our users, or to comply with regulatory reporting obligations.

Business Transfers: In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy proceeding involving okpl, your personal information may be transferred to successor entities or third parties, subject to this Privacy Policy and applicable data protection laws requiring notice and consent for such transfers.

3.2 International Data Transfers

Your personal data is primarily stored and processed within the Republic of the Philippines on servers located in Philippine data centers. However, some of our service providers (cloud hosting, payment processing, software vendors) may process or store data on servers located outside the Philippines. When we transfer personal data internationally, okpl ensures adequate protection through standard contractual clauses, data processing agreements requiring equivalent data protection standards, or transfers to countries recognized by the National Privacy Commission as providing adequate data protection levels. You have the right to request information about international data transfers affecting your personal information.

Data Security and Protection Measures

4.1 Technical Security Controls

okpl implements industry-standard technical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

• Encryption: All personal data is encrypted using AES-256 encryption at rest (when stored in databases) and TLS 1.3 encryption in transit (when transmitted over networks). Password credentials are hashed using bcrypt with salt.
• Access Controls: Multi-factor authentication for administrative access, role-based access control limiting data access to authorized personnel, regular access reviews and revocations, and comprehensive audit logging of all data access.
• Network Security: Firewall protection, intrusion detection and prevention systems, DDoS mitigation, regular vulnerability scanning, and penetration testing by independent security firms.
• Application Security: Secure coding practices, regular security patches and updates, input validation and sanitization, SQL injection prevention, cross-site scripting (XSS) protection, and cross-site request forgery (CSRF) tokens.
• Database Security: Database encryption, backup encryption, segregation of production and development environments, and restricted database access limited to essential personnel.

4.2 Organizational Security Measures

okpl maintains organizational policies and procedures to ensure data protection:

• Comprehensive information security policy reviewed and updated annually
• Mandatory security awareness training for all employees handling personal data
• Confidentiality and non-disclosure agreements signed by all personnel
• Incident response plan for data breaches with notification procedures
• Regular security audits and compliance assessments by qualified third parties
• Data protection impact assessments for new processing activities
• Designated Data Protection Officer responsible for privacy compliance

4.3 Data Breach Response

In the event of a personal data breach that is reasonably believed to have resulted in serious harm to you or where notification is required by law, okpl will notify the National Privacy Commission within 72 hours of becoming aware of the breach and will notify affected users without undue delay. Notifications will include the nature of the breach, categories of data affected, likely consequences, and measures taken or proposed to address the breach and mitigate its effects.

Data Retention and Deletion

5.1 Retention Periods

okpl retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, enforce our agreements, and establish legal defenses. Specific retention periods include:

• Account Data: Retained for the duration of your active account plus seven (7) years after account closure as required by PAGCOR regulations and Philippine tax laws
• Transaction Records: Retained for seven (7) years from transaction date as required by Anti-Money Laundering Act and tax regulations
• Identity Verification Documents: Retained for seven (7) years after account closure for regulatory compliance purposes
• Marketing Communications: Retained until you withdraw consent or for two (2) years of inactivity, whichever is earlier
• Customer Support Records: Retained for three (3) years to maintain service quality and resolve disputes
• Technical Logs: Retained for ninety (90) days for security and troubleshooting purposes

5.2 Data Deletion

Upon expiration of applicable retention periods, okpl will securely delete or anonymize your personal information using industry-standard data destruction methods including secure deletion algorithms, physical destruction of storage media for archived records, and verification of deletion completeness. Anonymized data that cannot be linked back to individual users may be retained indefinitely for statistical and research purposes.

Your Privacy Rights

6.1 Data Subject Rights Under Philippine Law

The Philippine Data Privacy Act grants you the following rights regarding your personal information processed by okpl:

Right to Information: You have the right to be informed about how okpl collects, uses, and processes your personal data, including the purposes of processing, categories of recipients, and retention periods. This Privacy Policy and our account notifications provide such information transparently.

Right to Access: You have the right to obtain confirmation whether okpl is processing your personal data and to access such data along with information about processing purposes, data categories, recipients, and retention periods. You may request copies of your personal data in a commonly used electronic format.

Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data. okpl will promptly update your information upon verification, though some corrections may require supporting documentation (e.g., name changes require legal proof).

Right to Erasure: You have the right to request deletion of your personal data when: the data is no longer necessary for the purposes for which it was collected, you withdraw consent and there is no other legal basis for processing, you object to processing and there are no overriding legitimate grounds, or the data was unlawfully processed. This right is subject to legal and regulatory retention obligations that may require okpl to maintain certain records despite deletion requests.

Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another service provider where technically feasible. okpl provides data export functionality through your account settings.

Right to Object: You have the right to object to processing of your personal data for direct marketing purposes (including profiling for marketing), and you may opt out of marketing communications at any time by clicking unsubscribe links in emails or adjusting preferences in your account settings.

6.2 Exercising Your Rights

To exercise any of your data subject rights, please contact okpl Data Protection Officer through our customer support channels with your account information and a clear description of your request. We will respond to verified requests within fifteen (15) days or as required by Philippine Data Privacy Act regulations. Some requests may require identity verification to prevent unauthorized disclosure of personal information. Certain rights may be subject to exceptions based on legal obligations or legitimate interests, which we will clearly explain if applicable to your request.

Cookies and Tracking Technologies

7.1 Types of Cookies We Use

okpl uses cookies and similar tracking technologies (web beacons, pixels, local storage) to enhance your experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that allow our website to recognize you during subsequent visits. We use the following categories of cookies:

• Essential Cookies: Required for core platform functionality including authentication, session management, security, and fraud prevention. These cookies cannot be disabled without severely impacting platform usability.
• Performance Cookies: Collect anonymous information about how you use okpl Services to help us improve performance, identify technical issues, and optimize user experience.
• Functional Cookies: Remember your preferences (language, display settings, game favorites) to provide enhanced, personalized features.
• Advertising Cookies: Used to deliver relevant promotional content, measure advertising effectiveness, and limit ad frequency. These cookies may track your activity across websites for targeted advertising purposes.

7.2 Managing Cookie Preferences

You can manage cookie preferences through your browser settings, though disabling certain cookies may affect okpl platform functionality. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications when cookies are set. You may also opt out of interest-based advertising through industry opt-out mechanisms. Note that opting out does not mean you will stop seeing advertisements, only that such advertisements will be less relevant to your interests.

Children's Privacy

okpl Services are intended exclusively for adults aged 21 years or older. We do not knowingly collect, process, or solicit personal information from persons under 21 years of age. If we become aware that we have inadvertently collected personal data from a minor, we will immediately delete such information from our systems and permanently close any associated account without refund. Parents or guardians who believe their child has provided personal information to okpl should contact our Data Protection Officer immediately so we can take appropriate remedial action.

Changes to This Privacy Policy

okpl reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, business operations, or technological capabilities. Material changes will be notified to you through email, account notifications, or prominent notices on our website at least thirty (30) days before the changes take effect, providing you opportunity to review the updated policy. Your continued use of okpl Services after the effective date of the revised Privacy Policy constitutes acceptance of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. The "Last Updated" date at the top of this Policy indicates when it was most recently revised.