Privacy Policy

1. Introduction

okeyplay ("okeyplay," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses the okeyplay platform at okeyplay.vip. This Privacy Policy ("Policy") describes how okeyplay collects, uses, stores, shares, and protects personal information in connection with the operation of our online gaming platform, which offers live casino games, slots, bingo, esports wagering, and related services to players in the Philippines.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations ("IRR"), as administered by the National Privacy Commission ("NPC"). By registering an account or using the okeyplay platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, okeyplay acts as the personal information controller ("PIC") in respect of the personal data collected through the okeyplay platform. As PIC, okeyplay determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

okeyplay has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with the DPA and this Policy. Contact details for the DPO are provided in Section 15 of this Policy.

3. Personal Data We Collect

okeyplay collects the following categories of personal data in connection with the operation of the platform:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification number (e.g., Philippine National ID, SSS, UMID, passport, or driver's license number).
• Contact Data: Email address, mobile phone number, and residential address in the Philippines.
• Account Data: Username, encrypted password, account preferences, communication preferences, and responsible gaming settings.
• Financial Data: GCash account details, Maya / PayMaya account details, bank account information (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank, or other Philippine banks), debit card details, transaction history, deposit and withdrawal records.
• Verification Data: Copies of government-issued identification documents, selfie photographs, and proof of address documents submitted for Know Your Customer (KYC) verification.
• Gaming Data: Game history, wagering activity, session duration, game preferences, bonus usage, and responsible gaming tool settings.
• Technical Data: IP address, device type, operating system, browser type and version, device identifiers, and geolocation data (country/region level).
• Usage Data: Pages visited, features used, click-stream data, session timestamps, and platform interaction logs.
• Communications Data: Records of your communications with okeyplay customer support, including live chat transcripts and email correspondence.

okeyplay does not collect sensitive personal information (as defined under the DPA) beyond what is strictly necessary for identity verification and compliance with Anti-Money Laundering (AML) obligations.

4. How We Collect Your Data

okeyplay collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access and use the okeyplay platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from licensed KYC and AML service providers; payment data from payment processors and financial institutions; fraud prevention data from third-party fraud detection services.
• Regulatory sources: Information received from PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other Philippine regulatory bodies in connection with compliance obligations.

5. How We Use Your Personal Data

okeyplay uses your personal data for the following purposes:

• To create, verify, and manage your okeyplay account.
• To process deposits, withdrawals, and other financial transactions through approved Philippine payment channels.
• To verify your identity and age (21+) in compliance with Philippine gaming regulations and KYC requirements.
• To detect, investigate, and prevent fraud, money laundering, and other illegal activity in compliance with the Anti-Money Laundering Act of 2001 (Republic Act No. 9160, as amended).
• To provide customer support and respond to your inquiries and complaints.
• To administer bonuses, promotions, and loyalty programs in accordance with applicable terms.
• To operate and improve the okeyplay platform, including game performance, user interface, and security systems.
• To send you service-related communications, including account notifications, security alerts, and transaction confirmations.
• To send you marketing communications about okeyplay promotions and new features, where you have provided consent or where permitted by applicable law. You may opt out of marketing communications at any time.
• To enforce our Terms & Conditions and other platform policies.
• To comply with applicable Philippine laws, regulations, and regulatory obligations, including reporting obligations to PAGCOR and the AMLC.
• To support responsible gaming initiatives, including monitoring for signs of problem gambling and administering self-exclusion requests.

6. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, okeyplay processes your personal data on the following legal bases:

• Consent: Where you have given your explicit consent to the processing of your personal data for a specific purpose, such as receiving marketing communications.
• Contractual necessity: Where processing is necessary for the performance of the contract between you and okeyplay (i.e., the Terms & Conditions), including account management, payment processing, and game provision.
• Legal obligation: Where processing is required to comply with a legal obligation applicable to okeyplay under Philippine law, including AML reporting, KYC verification, and regulatory compliance.
• Legitimate interests: Where processing is necessary for the legitimate interests of okeyplay, such as fraud prevention, platform security, and improving our services, provided that such interests are not overridden by your rights and freedoms.

7. Data Sharing & Disclosure

okeyplay does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: GCash (Mynt), Maya / PayMaya, and Philippine banking partners, for the purpose of processing deposits and withdrawals.
• KYC and identity verification providers: Licensed third-party providers that assist okeyplay in verifying player identity and age in compliance with Philippine regulations.
• Fraud prevention and AML service providers: Third-party services that assist okeyplay in detecting and preventing fraud, money laundering, and other illegal activity.
• Game content providers: Third-party game studios and live casino operators whose games are available on the okeyplay platform, to the extent necessary for game operation and dispute resolution.
• IT and cloud service providers: Technology partners that provide hosting, data storage, and platform infrastructure services to okeyplay.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where disclosure is required by law or regulatory obligation.
• Professional advisers: Lawyers, auditors, and other professional advisers engaged by okeyplay, subject to professional confidentiality obligations.

All third-party service providers engaged by okeyplay are required to process personal data only in accordance with okeyplay's instructions and in compliance with the Philippine Data Privacy Act.

8. Cookies & Tracking Technologies

okeyplay uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the platform. Cookies are small text files stored on your device when you visit okeyplay.vip.

okeyplay uses the following categories of cookies:

• Strictly necessary cookies: Essential for the operation of the platform, including maintaining your login session and enabling secure transactions. These cannot be disabled.
• Performance and analytics cookies: Used to collect anonymized information about how players use the platform, helping us identify and fix issues and improve the user experience.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming limits, to provide a more personalized experience.

okeyplay does not use third-party advertising or tracking cookies that share your data with external advertising networks. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may affect the functionality of the platform.

9. Data Retention

okeyplay retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

In general, okeyplay applies the following retention periods:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements under Philippine law.
• Financial transaction data: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• KYC verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Customer support communications: Retained for a period of two (2) years from the date of the communication, unless a longer period is required for dispute resolution or regulatory purposes.
• Technical and usage data: Retained for a period of up to twelve (12) months, after which it is anonymized or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with okeyplay's data disposal procedures.

10. Data Security

okeyplay implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the okeyplay platform.
• Encryption of sensitive data at rest, including financial data and identity verification documents.
• Role-based access controls limiting access to personal data to authorized personnel only, on a strict need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of the platform infrastructure.
• Multi-factor authentication (MFA) for administrative access to systems containing personal data.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

While okeyplay takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, okeyplay will notify you and the National Privacy Commission in accordance with the requirements of the Data Privacy Act.

11. Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by okeyplay:

• Right to be informed: The right to know what personal data okeyplay holds about you, how it is being used, and with whom it is shared.
• Right to access: The right to obtain a copy of your personal data held by okeyplay, together with information about how it is processed.
• Right to correction: The right to have inaccurate or incomplete personal data corrected or updated. You may update most account information directly through your okeyplay account dashboard.
• Right to erasure or blocking: The right to request the deletion or blocking of your personal data where it is no longer necessary for the purpose for which it was collected, or where processing is unlawful, subject to okeyplay's legal retention obligations.
• Right to object: The right to object to the processing of your personal data, including for direct marketing purposes. Where you object to marketing communications, okeyplay will cease such processing promptly.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to damages: The right to be indemnified for any damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data.
• Right to file a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe that okeyplay has violated your data privacy rights.

To exercise any of the above rights, please contact our Data Protection Officer using the details provided in Section 15. okeyplay will respond to all verified data subject requests within fifteen (15) business days of receipt, or within such other period as may be required by applicable law.

12. Children's Privacy

The okeyplay platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. okeyplay does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration process, and okeyplay reserves the right to request additional proof of age at any time.

If okeyplay becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete such data and close the associated account. If you believe that a minor has registered on the okeyplay platform, please notify us immediately via live chat support.

Gambling is addictive. Know when to stop. okeyplay is committed to protecting vulnerable individuals, including minors, from the potential harms of gambling.

13. Cross-Border Data Transfers

In the course of operating the okeyplay platform, your personal data may be transferred to, stored in, or processed in countries outside the Philippines, including where okeyplay's technology partners, game content providers, or cloud infrastructure providers are located.

Where such cross-border transfers occur, okeyplay ensures that appropriate safeguards are in place to protect your personal data in accordance with the requirements of the Philippine Data Privacy Act. These safeguards may include contractual data protection clauses, adequacy determinations, or other mechanisms recognized by the National Privacy Commission.

By using the okeyplay platform, you consent to the transfer of your personal data outside the Philippines where necessary for the provision of our services, subject to the safeguards described above.

14. Changes to This Privacy Policy

okeyplay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The revised Policy will be posted on this page with an updated effective date at the top of the document.

Where changes are material, okeyplay will endeavor to provide reasonable advance notice to registered players via email or an in-platform notification. Your continued use of the okeyplay platform following the posting of any amended Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how okeyplay protects your personal data.

15. Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by okeyplay, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that your data privacy rights have been violated. The NPC can be reached through their official government channels.