okpaly Privacy Policy

okpaly operates an online gaming platform accessible at okpaly.cam, offering casino games, sports betting, bingo, slots, sabong, and related gaming services to users in the Philippines. Privacy and data security are fundamental to our operations. This Privacy Policy governs all personal data collected, processed, and stored by okpaly in connection with the provision of our services.

This Privacy Policy should be read in conjunction with the okpaly Terms and Conditions, which together form the complete agreement between okpaly and its Members. Capitalized terms not defined in this Privacy Policy carry the same meaning as defined in the Terms and Conditions.

okpaly is committed to compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, as well as applicable gaming and anti-money laundering regulations in the Republic of the Philippines.

For the purposes of data protection law, okpaly acts as the data controller with respect to personal information collected through the okpaly platform. As data controller, okpaly determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable privacy and data protection laws.

If you have questions or concerns about how okpaly processes your personal data, or if you wish to exercise any of your data protection rights, you may contact okpaly's data protection team via email at [email protected] (plain text, not a clickable link) or through the live chat support function available on the platform.

okpaly collects personal data in several categories, depending on how you interact with the platform. The types of information we collect include:

3.1 Registration and Account Information

When you create an okpaly account, we collect:

• Full legal name as it appears on your government-issued identification;
• Date of birth (to verify that you meet the minimum age requirement of 21 years);
• Residential address in the Philippines;
• Valid email address;
• Mobile phone number (for account verification and two-factor authentication);
• Username and password (encrypted and stored securely);
• Preferred language and currency settings.

3.2 Identity Verification (KYC) Information

To comply with anti-money laundering (AML) and know-your-customer (KYC) requirements under Philippine law, okpaly requires Members to submit identity verification documents, which may include:

• Scanned or photographed copies of Philippine government-issued ID (passport, UMID, driver's license, national ID);
• Proof of address documents (recent utility bill, bank statement, or government-issued document showing your residential address);
• Photographs or selfies taken for identity verification purposes;
• Proof of payment method ownership (bank account details, GCash or PayMaya account verification).

3.3 Financial and Transaction Information

okpaly collects data related to deposits, withdrawals, and gaming transactions, including:

• Deposit amounts, dates, times, and payment methods used;
• Withdrawal requests, amounts, and destination payment methods;
• Account balance history and bonus fund usage;
• Bet placement records, game outcomes, winnings, and losses;
• Transaction history for responsible gaming and audit purposes.

3.4 Technical and Usage Data

When you access the okpaly platform, we automatically collect certain technical information, including:

• IP address and geolocation data (to verify access from permitted jurisdictions);
• Device type, operating system, browser type, and version;
• Pages visited, games played, session duration, and navigation patterns;
• Referring URL and search terms that led you to okpaly;
• Cookies and similar tracking technologies (see Section 7 for details).

3.5 Communications and Support Data

When you contact okpaly customer support or communicate with us via email, live chat, or other channels, we collect and store the content of those communications, including any attachments, support ticket history, and related metadata.

okpaly processes your personal data for the following purposes, each of which is necessary to operate a secure and legally compliant online gaming platform:

• Account Registration and Management: To create and maintain your okpaly account, authenticate your identity, and provide access to gaming services.
• Identity Verification (KYC/AML Compliance): To verify that you meet the minimum age requirement of 21 years, confirm your identity, and comply with anti-money laundering and counter-terrorist financing obligations under Philippine law.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, bank transfers, cryptocurrency, and other approved payment methods, and to maintain accurate financial transaction records.
• Gaming Services Delivery: To facilitate your participation in casino games, sports betting, bingo, slots, sabong, and other gaming activities offered on the okpaly platform.
• Customer Support: To respond to your inquiries, resolve disputes, troubleshoot technical issues, and provide assistance via live chat, email, or other support channels.
• Responsible Gaming: To monitor account activity for signs of problem gambling, enforce deposit limits and self-exclusion requests, and fulfill our duty-of-care obligations to Members.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, collusion, bonus abuse, money laundering, and other violations of the okpaly Terms and Conditions.
• Legal and Regulatory Compliance: To fulfill reporting obligations to PAGCOR and other regulatory authorities, respond to lawful requests from law enforcement, and comply with court orders and legal processes.
• Platform Improvement: To analyze usage patterns, optimize user experience, improve game offerings, and develop new features based on Member behavior and feedback.
• Marketing and Promotions: To send promotional offers, bonus notifications, and platform updates to Members who have consented to receive marketing communications (you may opt out at any time).

okpaly processes your personal data on the following legal grounds under the Data Privacy Act of 2012 and applicable data protection principles:

• Consent: You have provided explicit consent to the processing of your personal data by completing the registration process and accepting this Privacy Policy.
• Contractual Necessity: Processing is necessary to perform the contract between you and okpaly as established in the Terms and Conditions — including account management, payment processing, and service delivery.
• Legal Obligation: Processing is required to comply with legal obligations imposed on okpaly by gaming regulations, anti-money laundering law, tax law, and other applicable Philippine legislation.
• Legitimate Interests: Processing is necessary for okpaly's legitimate interests in preventing fraud, ensuring platform security, improving services, and operating a sustainable business, provided such interests do not override your fundamental rights and freedoms.

okpaly does not sell, rent, or trade your personal data to third parties for their own marketing purposes. However, we do share personal data with the following categories of third-party service providers and entities to the extent necessary to operate the platform and fulfill legal obligations:

6.1 Service Providers

• Payment Processors: GCash, PayMaya, bank payment gateways, and cryptocurrency payment processors receive transaction data necessary to complete deposits and withdrawals.
• KYC/AML Verification Vendors: Third-party identity verification services receive copies of your identification documents to conduct age verification, identity authentication, and anti-money laundering checks.
• Game Content Providers: Casino game studios and sports betting data feeds receive anonymized or pseudonymized data related to game sessions and outcomes.
• Cloud Hosting and Infrastructure Providers: Secure server and database hosting services store encrypted copies of your account data.
• Customer Support Software Providers: Live chat platforms and support ticketing systems process communications between you and okpaly support staff.

6.2 Regulatory and Legal Authorities

okpaly may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), law enforcement agencies, tax authorities, and courts when required by law, regulatory obligation, or lawful legal process. Such disclosures are made only to the extent necessary and permitted under Philippine law.

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets involving okpaly, your personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Privacy Policy.

okpaly uses cookies, web beacons, and similar tracking technologies to enhance your experience on the platform, remember your preferences, and collect usage analytics. A cookie is a small text file stored on your device that enables the platform to recognize you on subsequent visits.

7.1 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality, including account login, session management, and security features. These cookies cannot be disabled without impairing platform operation.
• Performance and Analytics Cookies: Collect anonymized data about how Members use the platform — pages visited, games played, session duration — to help okpaly improve user experience and optimize performance.
• Functional Cookies: Remember your preferences, language settings, and display options to provide a personalized experience on return visits.
• Advertising and Tracking Cookies: May be used to deliver targeted promotional content and measure the effectiveness of marketing campaigns (only with your consent).

7.2 Managing Cookies

Most web browsers allow you to control cookies through browser settings. You may disable or delete cookies at any time; however, doing so may impair certain platform features and require you to log in more frequently. You can manage your cookie preferences through your browser's privacy or security settings.

okpaly implements industry-standard technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL Encryption: All data transmitted between your device and okpaly servers is encrypted using Secure Sockets Layer (SSL) technology.
• Secure Data Storage: Personal data is stored on secure servers with restricted access controls, firewall protection, and regular security audits.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA on their accounts to provide an additional layer of login security.
• Password Security: Passwords are hashed and salted using strong cryptographic algorithms and are never stored in plain text.
• Access Controls: Only authorized okpaly personnel with a legitimate business need have access to personal data, and all access is logged and monitored.
• Employee Training: okpaly staff receive regular training on data protection principles and security best practices.

While okpaly employs robust security measures, no system is entirely immune to security breaches. In the unlikely event of a data breach that poses a risk to your rights and freedoms, okpaly will notify affected Members and the National Privacy Commission in accordance with Philippine data breach notification requirements.

okpaly retains your personal data for as long as necessary to fulfill the purposes for which it was collected and to comply with legal, regulatory, and contractual obligations. Specific retention periods vary by data category:

• Account Data: Retained for the duration of your active okpaly account and for a period of seven (7) years following account closure, as required by gaming and financial regulations.
• KYC Documents: Retained for a minimum of five (5) years following the end of the business relationship, in compliance with anti-money laundering law.
• Transaction Records: Retained for a minimum of seven (7) years following the transaction date for financial audit, tax compliance, and dispute resolution purposes.
• Marketing Communications: Retained until you withdraw consent or request deletion, whichever occurs first.
• Support Communications: Retained for three (3) years following the resolution of your inquiry for quality assurance and dispute resolution purposes.

After the applicable retention period expires, okpaly securely deletes or anonymizes your personal data in a manner that prevents reconstruction or re-identification.

Under the Data Privacy Act of 2012 and its implementing regulations, you have the following rights with respect to your personal data:

• Right to Access: You have the right to request a copy of the personal data okpaly holds about you, including details of how it is processed.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held in your okpaly account.
• Right to Erasure (Right to be Forgotten): You have the right to request deletion of your personal data, subject to legal retention obligations and legitimate business interests.
• Right to Restriction of Processing: You have the right to request that okpaly limit the processing of your personal data in certain circumstances.
• Right to Data Portability: You have the right to request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You have the right to object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time (note that withdrawal does not affect the lawfulness of processing prior to withdrawal).

To exercise any of these rights, please contact okpaly via email at [email protected] or through the live chat support function. okpaly will respond to your request within the timeframes prescribed by law, typically within fifteen (15) days.

okpaly operates primarily within the Philippines and stores personal data on servers located within the Philippines or in jurisdictions with adequate data protection standards. In some cases, personal data may be transferred to third-party service providers located outside the Philippines for purposes such as cloud hosting, payment processing, or KYC verification.

Where international data transfers occur, okpaly ensures that such transfers are conducted in compliance with the Data Privacy Act of 2012 and that the receiving jurisdiction provides an adequate level of protection for personal data, or that appropriate safeguards — such as standard contractual clauses — are in place to protect your data.

okpaly's services are strictly intended for individuals aged 21 years and above. The platform does not knowingly collect, process, or store personal data from individuals under the age of 21. If okpaly becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account.

Parents or guardians who believe that their child has provided personal information to okpaly should contact us immediately at [email protected] so that we may take appropriate action.

okpaly reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. Material changes to this Privacy Policy will be communicated to Members via the email address registered to their okpaly account and will be posted on the platform with a revised "Last Updated" date.

Your continued use of the okpaly platform following the posting of changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should cease using the platform and contact okpaly to close your account.

We encourage you to review this Privacy Policy periodically to stay informed about how okpaly protects your personal data.

If you have questions, concerns, or complaints regarding this Privacy Policy or okpaly's data processing practices, or if you wish to exercise any of your data protection rights, you may contact okpaly through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through the okpaly platform after logging into your account

okpaly aims to respond to all data protection inquiries within fifteen (15) business days. If you are not satisfied with okpaly's response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.