This Privacy Policy explains how ok.play collects, uses, stores, and protects the personal data of Filipino players using the ok.play platform. We handle your data in accordance with the Republic Act No. 10173 — the Data Privacy Act of 2012 of the Philippines — and all applicable PAGCOR regulatory requirements.
These principles guide how ok.play approaches your personal data. They don't replace the full policy below — please read the complete document for all the details.
Lawful Basis for Processing
ok.play only processes your personal data where a lawful basis exists under RA 10173 — typically contractual necessity (to operate your account), legal obligation (PAGCOR/AML compliance), legitimate interests (fraud prevention), or your explicit consent for optional activities like marketing communications.
Data Minimisation
ok.play collects only the personal data that is strictly necessary for the purpose it is being collected for. We don't ask for information we don't need. Mandatory registration data is limited to what is required for account operation and PAGCOR-mandated KYC compliance.
Security-First Storage
All ok.play player data is stored on encrypted servers using industry-standard AES-256 encryption at rest and TLS 1.3 in transit. Access to player data is restricted to authorised personnel only, governed by strict internal access control policies and regular security audits.
We Don't Sell Your Data
ok.play does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing or commercial use. Your data is shared only with our operational partners — game providers, payment processors, and regulators — strictly as required to operate your account and comply with Philippine law.
Your Rights Are Respected
Filipino players hold data subject rights under RA 10173 — including access, correction, deletion, portability, and objection rights. ok.play provides straightforward processes for exercising these rights, typically through Account Settings or by contacting our Data Privacy Officer at [email protected].
Full Transparency
This Privacy Policy is written in plain English — not buried in technical jargon. ok.play tells you exactly what data we collect, why we collect it, who we share it with, and for how long we keep it. If this policy changes materially, we will notify you before the change takes effect.
This Privacy Policy ("Policy") is issued by ok.play ("ok.play", "we", "us", "our") in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations. It applies to all personal data collected from players and visitors through the ok.play Platform at okplay.lat. By registering an account on ok.play, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.
This Policy describes how ok.play — as a Personal Information Controller (PIC) under RA 10173 — collects, uses, discloses, retains, and protects personal data in connection with the operation of the ok.play online gaming platform, including all games, account services, payment processing, customer support, marketing activities, and PAGCOR regulatory compliance functions.
This Policy applies to:
This Policy should be read in conjunction with ok.play's Terms and Conditions, which govern the broader contractual relationship between ok.play and its Players. Where this Policy and the Terms and Conditions address data privacy matters, this Policy governs.
This Policy is written in English, which is the governing language of the ok.play platform. Where a translation is made available for informational purposes, the English version shall prevail in the event of any inconsistency.
ok.play acts as the Personal Information Controller (PIC) for all personal data collected through the okplay.lat Platform in connection with Philippine player accounts. As PIC, ok.play determines the purposes and means of processing your personal data and is responsible for implementing appropriate technical and organisational measures to protect that data.
ok.play has designated a Data Privacy Officer (DPO) as required under RA 10173 and its Implementing Rules. The DPO is responsible for ensuring ok.play's compliance with data privacy obligations, handling data subject requests, and serving as the point of contact for the National Privacy Commission of the Philippines. The DPO may be contacted at [email protected], clearly marked "Data Privacy Officer" or "DPO Request."
ok.play collects personal data through several channels — directly from you during account registration and use, automatically through your interaction with the Platform, and from third-party sources where permitted by law.
| Category | Data Collected | Collection Method |
|---|---|---|
| Registration Data | Philippine mobile number, chosen username, date of birth (age verification), province/region of residence | Provided by you at registration |
| KYC Identity Data | Full legal name, government ID type and number (PhilSys, Passport, or Driver's Licence), ID document image, selfie photograph | Provided by you during KYC verification |
| Financial Data | GCash account number, PayMaya number, bank account details (account name and number only), transaction history, deposit and withdrawal records | Provided by you and automatically recorded |
| Gaming Activity Data | Game history, bet amounts, win/loss records, session duration, game type preferences, active bonus status | Automatically recorded during Platform use |
| Device & Technical Data | IP address, device type, operating system, browser type and version, screen resolution, device identifiers | Automatically collected via cookies and server logs |
| Communication Data | Live chat transcripts, support email content, complaint correspondence, feedback submissions | Recorded during interactions with ok.play support |
| Marketing Preferences | SMS/notification opt-in or opt-out status, promotion claim history, referral activity | Provided by you or automatically recorded |
No Sensitive Personal Information beyond what is required. ok.play limits KYC collection to the minimum information required by PAGCOR regulations and RA 10173. ok.play does not collect biometric data beyond the selfie photograph required for facial-match KYC verification, and does not collect health data, political opinions, religious beliefs, or other sensitive personal information beyond what is strictly required by regulatory obligations.
ok.play uses your personal data for the following specific purposes. For each purpose, the applicable lawful basis is identified in Section 5 below.
Under RA 10173, ok.play processes personal data only where one or more of the following lawful bases applies:
ok.play does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. ok.play shares personal data only in the following circumstances and only to the extent necessary for the stated purpose:
6.1 Operational Partners (Personal Information Processors). ok.play shares data with third-party vendors who process data on ok.play's behalf under binding data processing agreements that require them to maintain appropriate security and privacy standards:
6.2 Regulatory Authorities. ok.play discloses personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission of the Philippines, and other applicable government authorities where required by law, court order, or lawful regulatory demand.
6.3 Business Transfers. In the event of a merger, acquisition, or sale of all or part of ok.play's business, player data may be transferred to the acquiring entity — subject to the same privacy protections described in this Policy. Players will be notified of any such transfer.
All third parties that receive ok.play player data are bound by contractual data processing agreements requiring them to handle your data with appropriate security and to use it only for the specific purpose for which it was shared. ok.play conducts due diligence on all data processors before engagement.
ok.play uses cookies and similar tracking technologies on the okplay.lat Platform to support account functionality, security, analytics, and (where consented to) marketing personalisation. The following categories of cookies are used:
You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect Platform functionality. ok.play does not currently deploy third-party advertising or behavioural tracking cookies.
ok.play retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by PAGCOR regulations or Philippine law.
| Data Type | Retention Period | Basis |
|---|---|---|
| Account & KYC Data | 5 years following account closure | PAGCOR regulatory requirement |
| Financial Transaction Records | 5 years following the transaction date | AML law (RA 9160) and tax record requirements |
| Gaming Activity Records | 3 years following account closure | PAGCOR licensing requirement |
| Customer Support Communications | 3 years from date of communication | Legitimate interests (dispute resolution) |
| Marketing Consent Records | Duration of active account plus 1 year | Demonstrating lawful processing basis |
| Server and Security Logs | 12 months from creation | Security and fraud prevention |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is anonymised rather than deleted, ok.play may retain the anonymised dataset indefinitely for aggregate analytics purposes.
ok.play implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
No transmission over the internet is completely secure. While ok.play implements industry-standard security measures, ok.play cannot guarantee absolute security of data transmitted to the Platform. Players are responsible for maintaining the security of their login credentials and enabling 2FA on their accounts. Never share your password or OTP with anyone claiming to represent ok.play.
As a data subject under Republic Act No. 10173, Filipino ok.play Players have the following rights in relation to their personal data:
To exercise any of these rights, contact ok.play's Data Privacy Officer at [email protected], clearly stating your right and the specific data involved. Identity verification will be required before ok.play can process data subject requests.
ok.play may send you promotional communications — including bonus offers, new game announcements, VIP tier updates, and platform news — via SMS to your registered Philippine mobile number or via push notification if you have enabled browser notifications.
ok.play relies on your explicit consent as the lawful basis for marketing communications. Consent is collected during account registration and may be modified at any time through Account Settings after ok.play login, or by contacting [email protected].
Withdrawing consent for marketing communications will not affect your ability to use ok.play's core platform services, receive transactional notifications (such as deposit confirmations and withdrawal status updates), or receive security alerts related to your account.
ok.play does not send unsolicited cold-call marketing or sell your mobile number for use by third-party marketers. All ok.play marketing communications will clearly identify ok.play as the sender and include an unsubscribe instruction.
ok.play's Platform is not directed at, and is not intended for use by, persons under the age of 21 years. ok.play does not knowingly collect or process personal data belonging to minors. The minimum age for ok.play account registration is 21 years, as required by PAGCOR regulations governing online gaming in the Philippines.
If ok.play becomes aware that personal data has been collected from a person under the age of 21 — whether through account registration, KYC review, or any other means — ok.play will immediately suspend the relevant account, delete the associated personal data to the extent permitted by applicable regulatory retention requirements, and report the matter to PAGCOR as required.
Parents and guardians who believe that a minor may have registered an account on ok.play are encouraged to contact ok.play's support team immediately at [email protected] or via live chat. ok.play will investigate and respond to all such reports promptly.
ok.play's primary data processing infrastructure is operated within the Philippines. However, some operational partners — particularly international game providers and cloud infrastructure providers — may process player data in jurisdictions outside the Philippines.
Where ok.play transfers personal data outside the Philippines, it does so in compliance with RA 10173's requirements for cross-border data transfers, which require that the recipient country or organisation provides an adequate level of protection for personal data, or that appropriate contractual safeguards are in place (such as data transfer agreements meeting NPC requirements).
ok.play will not transfer your personal data to a jurisdiction or organisation that does not provide adequate protection, without your explicit consent or a lawful regulatory basis for doing so. Players may request information about specific cross-border transfers affecting their data by contacting the DPO at [email protected].
ok.play may update this Privacy Policy from time to time to reflect changes in Philippine data privacy law, PAGCOR regulatory requirements, ok.play's data processing practices, or Platform services. The effective date at the top of this Policy will be updated whenever a revision is made.
Material changes to this Policy — meaning changes that significantly affect how ok.play uses your personal data or your rights as a data subject — will be communicated to registered Players via: (a) a prominent notice displayed on the Platform prior to login; or (b) an SMS notification to your registered mobile number; or (c) both, at ok.play's discretion.
Continued use of the ok.play Platform following the effective date of a revised Privacy Policy constitutes acceptance of the revised terms. If you do not agree to the revised Policy, you should cease using the Platform and may request account closure in accordance with Section 11.1 of the Terms and Conditions.
For all privacy-related enquiries, data subject rights requests, or concerns regarding ok.play's handling of your personal data, please contact ok.play's designated Data Privacy Officer using the following channels:
If you are not satisfied with ok.play's response to a privacy concern or data subject request, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which is the supervisory authority responsible for enforcing RA 10173. The NPC's contact information is publicly available on the Philippine government's official websites.
All email addresses displayed in this Policy are shown as plain text for informational purposes only. ok.play does not use clickable mailto: links. Please copy the email address manually to your email client when submitting requests.
Republic Act No. 10173 gives Filipino data subjects specific rights over their personal information. Here's a plain-English summary of each right.
Right to Be Informed
ok.play must tell you what data it holds, why it's processing it, and who it shares it with. This Privacy Policy fulfils that obligation. You can also contact the DPO for specific queries about your data at any time.
Right of Access
Request a copy of all personal data ok.play holds about you. Submit your request to [email protected] marked "Data Access Request." ok.play will respond within 30 days and provide your data in a readable format.
Right to Rectification
If any personal data ok.play holds about you is wrong or out of date, you can request a correction. Many updates — like address or contact details — can be made directly through Account Settings after ok.play login.
Right to Erasure
Request deletion of your personal data where there is no lawful reason to keep it. Note that ok.play must retain certain data under PAGCOR and AML regulations — the DPO will explain what can and cannot be deleted.
Right to Portability
Request a machine-readable export of personal data you provided to ok.play, where technically feasible. This allows you to transfer your data to another service provider of your choice. Contact the DPO to make a portability request.
Right to Object
Object to processing based on legitimate interests, including profiling. Withdraw marketing consent at any time through Account Settings — no reason required. Withdrawal doesn't affect processing done before you withdrew consent.
ok.play is built on transparency and trust — two things Filipino players have every right to expect from a PAGCOR-regulated gaming platform. Your personal data is handled with the same care we put into every GCash payout and every certified fair game result. 21+ only.
AES-256 Encrypted
Your data stored with industry-standard encryption at rest.
RA 10173 Compliant
Full Data Privacy Act of 2012 compliance across all processing.
We Never Sell Your Data
Your personal information is not for sale. Period.
ok.play enforces the PAGCOR-mandated 21+ minimum age requirement. Age is declared at registration and verified during KYC. Personal data of underage individuals is not retained beyond what is required to process and report the incident to PAGCOR.
ok.play handles your personal data with the same care it applies to your gaming funds — securely, transparently, and only for the purposes described in this Policy. Questions about your data? Contact the DPO at [email protected] at any time.
ok.play uses gaming activity data as part of its responsible gaming monitoring obligations under PAGCOR licensing. This data is used to protect players — not to profile them for commercial gain. Full details on the Responsible Gaming page.