okpey Privacy Policy

1. Introduction

okpey ("okpey," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses our platform. This Privacy Policy describes how okpey collects, uses, stores, shares, and protects personal information in connection with the okpey online casino platform accessible at okpey.app.

This Privacy Policy is issued in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations. By registering an account on okpey or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Privacy Policy should be read together with our Terms & Conditions, which govern your use of the okpey platform. Capitalized terms not defined in this Privacy Policy have the meanings given to them in the Terms & Conditions.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, okpey is the personal information controller responsible for the personal data collected through the okpey platform. Our designated Data Privacy Officer (DPO) is responsible for overseeing okpey's data protection practices and can be contacted at the details provided in Section 16 of this Policy.

If you have any questions, concerns, or requests relating to your personal data and how okpey handles it, your first point of contact should be our Data Privacy Officer.

3. Data We Collect

okpey collects the following categories of personal data from players and prospective players:

3.1 Identity & Registration Data

• Full legal name
• Date of birth
• Gender
• Nationality
• Government-issued ID number (passport, driver's license, UMID, PhilSys ID, or SSS ID)
• Selfie or photograph (for KYC verification purposes)

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address (including barangay, city/municipality, province, and postal code)

3.3 Financial & Payment Data

• GCash or PayMaya account number or registered mobile number
• Bank account details (BPI, BDO, Metrobank) for withdrawal processing
• Transaction history (deposits, withdrawals, wagers, and bonus activity)
• Wallet balance history

3.4 Gaming & Activity Data

• Game history (games played, bet amounts, outcomes, session duration)
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)
• Customer support interaction records

3.5 Technical & Device Data

• IP address
• Device type, model, and operating system
• Browser type and version
• Unique device identifiers
• Time zone and language settings
• Pages visited, click paths, and session timestamps on the okpey platform

3.6 Communications Data

• Records of live chat conversations with our support team
• Email correspondence with okpey
• Records of any complaints or dispute submissions
• Survey responses and feedback you voluntarily provide

4. How We Collect Data

okpey collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey.
• Automatically — through cookies, web beacons, and similar tracking technologies when you access and use the okpey platform. See Section 10 for more details on our use of cookies.
• From third-party payment providers — GCash, PayMaya, BPI, BDO, and Metrobank may share transaction confirmation data with okpey when you initiate a deposit or withdrawal.
• From identity verification services — okpey may use third-party KYC and identity verification providers to assist in verifying the documents you submit during account verification.
• From fraud prevention and anti-money laundering (AML) services — okpey may receive data from third-party screening services used to detect and prevent fraud, money laundering, and other prohibited activities.

5. How We Use Your Data

okpey uses the personal data we collect for the following purposes:

Purpose	Data Used
Account registration and management	Identity data, contact data
Identity verification (KYC)	Identity data, government ID, selfie/photo
Processing deposits and withdrawals	Financial data, identity data
Providing and improving gaming services	Gaming data, technical data
Fraud prevention and security monitoring	Technical data, financial data, identity data
Anti-money laundering (AML) compliance	Identity data, financial data, transaction history
Responsible gaming monitoring and tools	Gaming data, responsible gaming settings
Customer support and dispute resolution	Communications data, account data
Sending service notifications and updates	Contact data
Sending promotional communications (with consent)	Contact data, gaming preferences
Platform analytics and performance improvement	Technical data, gaming data (aggregated/anonymized)
Legal and regulatory compliance	All categories as required by applicable law

6. Legal Basis for Processing

okpey processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing is necessary to perform our contract with you — specifically, to operate your account, process transactions, and provide gaming services.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including KYC requirements, AML obligations, and responsible gaming regulations.
• Legitimate interests: Processing is necessary for okpey's legitimate interests in fraud prevention, platform security, and improving our services, provided these interests are not overridden by your rights and interests.
• Consent: For certain processing activities — such as sending promotional communications and placing non-essential cookies — okpey relies on your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7. Data Sharing & Disclosure

okpey does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

7.1 Service Providers

okpey engages trusted third-party service providers to assist in operating the platform. These include payment processors (GCash, PayMaya, BPI, BDO, Metrobank), KYC and identity verification providers, fraud detection and AML screening services, cloud hosting and infrastructure providers, customer support platform providers, and email and SMS communication services. All service providers are contractually bound to process your data only on okpey's instructions and in accordance with applicable data protection law.

7.2 Regulatory and Law Enforcement Authorities

okpey may disclose personal data to the National Privacy Commission (NPC), the Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), law enforcement agencies, or other competent authorities where required or permitted by applicable Philippine law, including in response to lawful requests, court orders, or regulatory investigations.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of okpey's business, your personal data may be transferred to the acquiring entity as part of that transaction. okpey will notify affected players of any such transfer and ensure that the acquiring entity is bound by privacy obligations no less protective than those set out in this Privacy Policy.

7.4 With Your Consent

okpey may share your personal data with other third parties where you have given your explicit consent to such sharing.

8. International Data Transfers

Some of okpey's service providers may be located outside the Philippines. Where personal data is transferred to a country that does not provide an equivalent level of data protection to that afforded under Philippine law, okpey will implement appropriate safeguards — such as contractual clauses approved by the National Privacy Commission — to ensure that your personal data remains protected to the standard required by the Data Privacy Act of 2012.

By using the okpey platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines, subject to the safeguards described above.

9. Data Retention

okpey retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in accordance with AML and regulatory record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and BIR regulations.
• Gaming activity data: Retained for three (3) years from the date of each gaming session, or longer if required for dispute resolution or regulatory purposes.
• Customer support records: Retained for three (3) years from the date of each interaction.
• Technical and device data: Retained for up to twelve (12) months from collection, unless required for longer periods for security or fraud investigation purposes.
• Marketing consent records: Retained for the duration of your consent and for three (3) years after withdrawal of consent, as evidence of the consent given.

When personal data is no longer required, okpey will securely delete or anonymize it in accordance with our internal data disposal procedures.

10. Cookies & Tracking Technologies

okpey uses cookies and similar tracking technologies on the okpey platform to enhance your experience, maintain session security, and analyze platform usage. The following types of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies and security tokens. These cookies cannot be disabled.
• Functional cookies: Remember your preferences, such as language settings and responsible gaming tool configurations, to provide a more personalized experience.
• Analytics cookies: Collect anonymized or aggregated data about how players use the platform — such as pages visited, session duration, and navigation paths — to help okpey improve platform performance and user experience.
• Security and fraud prevention cookies: Help okpey detect and prevent fraudulent activity, unauthorized access, and other security threats.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the okpey platform. Strictly necessary cookies cannot be disabled as they are essential for platform security and operation.

11. Your Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okpey:

• Right to be informed: You have the right to be informed about how your personal data is collected, used, and processed. This Privacy Policy fulfils that obligation.
• Right of access: You have the right to request a copy of the personal data okpey holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data okpey holds about you. You can update most of your account information directly through your okpey account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to okpey's legal obligations to retain certain data.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to okpey's overriding legitimate grounds.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe okpey has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of these rights, please contact our Data Privacy Officer using the contact details in Section 16. okpey will respond to all verified data subject requests within fifteen (15) business days of receipt.

12. Data Security

okpey implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the okpey platform.
• Encryption at rest for sensitive personal data stored on okpey's servers, including financial data and government ID information.
• Role-based access controls ensuring that only authorized okpey personnel with a legitimate need can access personal data.
• Multi-factor authentication for internal systems that process personal data.
• Regular security audits and penetration testing conducted by independent security professionals.
• Incident response procedures to detect, contain, and respond to personal data breaches in accordance with the Data Privacy Act of 2012's breach notification requirements.
• Staff training on data protection obligations and secure data handling practices.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, okpey will notify the National Privacy Commission and affected players within seventy-two (72) hours of becoming aware of the breach, in accordance with applicable law.

While okpey takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the security of your own account credentials and for notifying okpey immediately if you suspect unauthorized access to your account.

13. Children's Privacy

The okpey platform is strictly intended for individuals who are 21 years of age or older. okpey does not knowingly collect personal data from individuals under the age of 21. If okpey becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all data will be deleted, and any deposits will be returned to the original payment method.

If you are a parent or guardian and believe that your child has registered an account on okpey, please contact our Data Privacy Officer immediately at the contact details provided in Section 16.

14. Third-Party Links

The okpey platform may contain links to third-party websites or services, including payment provider portals. This Privacy Policy applies solely to the okpey platform and does not cover the privacy practices of any third-party websites or services. okpey is not responsible for the privacy practices or content of any third-party sites. We encourage you to review the privacy policies of any third-party services you access through or in connection with the okpey platform.

15. Changes to This Policy

okpey reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, okpey will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect.

The most current version of this Privacy Policy will always be available on this page, with the effective date clearly indicated at the top. Your continued use of the okpey platform after the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy. If you do not agree to the revised Privacy Policy, you must stop using the platform and may request account closure in accordance with the Terms & Conditions.

16. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or okpey's handling of your personal data, please contact our Data Privacy Officer:

• Data Privacy Officer: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 within your okpey account

okpey will acknowledge all privacy-related inquiries within two (2) business days and aim to resolve them within fifteen (15) business days. If you are not satisfied with okpey's response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.