okokph Privacy Policy

1.1 This Privacy Policy applies to all personal data collected and processed by okokph in connection with your use of the okokph website, mobile platform, and all associated services (collectively, the "Platform").

1.2 okokph takes the privacy of its users seriously. We are committed to handling your personal data with transparency, integrity, and in full compliance with applicable Philippine data privacy laws. This policy is designed to give you a clear and honest picture of our data practices — no confusing legal jargon, no hidden surprises.

1.3 This Privacy Policy should be read alongside our Terms & Conditions, which govern your use of the okokph platform. Together, these documents form the complete agreement between you and okokph regarding your account and data.

1.4 If you have any questions about this Privacy Policy or how okokph handles your personal data, please contact our Data Protection Officer (DPO) using the details provided in Section 15 of this document.

2.1 For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, okokph is the personal information controller responsible for the personal data collected through the okokph Platform.

2.2 As the personal information controller, okokph determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is carried out in accordance with applicable Philippine data privacy laws.

2.3 okokph has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data privacy regulations. Contact details for the DPO are provided in Section 15.

3.1 okokph collects the following categories of personal data from users of the Platform:

3.2 okokph does not intentionally collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. Where sensitive personal information is collected (such as government ID numbers), it is handled with the highest level of security and access controls.

3.3 You are not required to provide all categories of personal data to use the Platform, but failure to provide certain mandatory data (such as identity verification documents) may limit your ability to access specific features, including withdrawal processing.

4.1 okokph collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting our support team, or participating in promotions;
• Automated collection: Technical and usage data collected automatically when you access and interact with the Platform, including through cookies and similar tracking technologies (see Section 8);
• Third-party sources: Identity verification data from accredited KYC service providers; fraud and AML screening data from compliance service providers; payment transaction data from GCash, PayMaya, BPI, BDO, and Metrobank.

4.2 okokph will always inform you at the point of collection what personal data is being collected and for what purpose, unless the collection is automated and disclosed in this Privacy Policy.

5.1 okokph processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — including account management, payment processing, and service delivery;
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations, KYC requirements, and tax reporting;
• Legitimate interests: Processing carried out for okokph's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and freedoms;
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — such as for marketing communications and optional personalization features. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6.1 okokph uses your personal data for the following purposes:

• To create, manage, and maintain your okokph account;
• To verify your identity and age (21+ requirement) in compliance with applicable regulations;
• To process deposits and withdrawals through your chosen payment method (GCash, PayMaya, BPI, BDO, Metrobank);
• To deliver the games, promotions, and other services available on the okokph Platform;
• To communicate with you regarding your account, transactions, and support requests;
• To send you promotional offers and marketing communications where you have consented to receive them;
• To monitor gameplay activity for responsible gaming purposes and to apply responsible gaming tools where appropriate;
• To detect, investigate, and prevent fraud, money laundering, and other illegal activity;
• To comply with our legal and regulatory obligations under Philippine law;
• To improve the okokph Platform through analytics, testing, and research;
• To resolve disputes and enforce our Terms & Conditions.

6.2 okokph will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for such processing.

7.1 okokph may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your financial transactions;
• KYC and identity verification providers: Accredited third-party services used to verify your identity and age in compliance with regulatory requirements;
• AML and fraud screening providers: Services used to screen transactions and account activity for money laundering, fraud, and other illegal activity;
• Game software providers: Licensed third-party game developers whose games are available on the okokph Platform, to the extent necessary for game delivery and dispute resolution;
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers who process data on our behalf under strict data processing agreements;
• Regulatory and law enforcement authorities: Philippine government agencies, including the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and law enforcement bodies, where disclosure is required by law or court order;
• Professional advisors: Lawyers, auditors, and accountants, where necessary for legal, compliance, or financial purposes, subject to professional confidentiality obligations.

7.2 All third parties with whom okokph shares personal data are required to handle such data in accordance with applicable Philippine data privacy laws and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

7.3 In the event of a merger, acquisition, or sale of all or part of okokph's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer in advance.

8.1 okokph uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain your session, and collect usage analytics. Cookies are small text files stored on your device when you visit the okokph website.

8.2 okokph uses the following types of cookies:

• Essential cookies: Required for the Platform to function correctly, including session management and security features. These cannot be disabled without affecting Platform functionality;
• Analytics cookies: Used to collect anonymized data about how users interact with the Platform, helping us identify areas for improvement;
• Preference cookies: Used to remember your settings and preferences, such as language and display options;
• Security cookies: Used to detect and prevent fraudulent activity and unauthorized access.

8.3 You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the okokph Platform. okokph does not use third-party advertising cookies or behavioral tracking cookies for external advertising purposes.

9.1 okokph retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML and regulatory record-keeping requirements;
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations;
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction;
• Gameplay records: Retained for a minimum of three (3) years for dispute resolution and responsible gaming monitoring purposes;
• Support communications: Retained for two (2) years from the date of the communication;
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year thereafter for compliance documentation purposes.

9.2 Upon expiry of the applicable retention period, okokph will securely delete or anonymize your personal data in accordance with our data disposal procedures. Where anonymization is used, the resulting data may be retained indefinitely for analytical purposes as it can no longer be linked to you.

10.1 okokph's security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the okokph Platform;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Role-based access controls ensuring that only authorized personnel can access personal data, on a strict need-to-know basis;
• Two-factor authentication (2FA) for both player accounts and internal staff systems;
• Regular security audits, vulnerability assessments, and penetration testing conducted by independent security professionals;
• Secure, redundant data centers with physical access controls and 24/7 monitoring;
• Comprehensive staff training on data privacy and security best practices.

10.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, okokph will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected individuals without undue delay, in accordance with the Data Privacy Act of 2012.

10.3 While okokph takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. You are responsible for keeping your account credentials confidential and for notifying okokph immediately if you suspect unauthorized access to your account.

11.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okokph:

11.2 To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 15. okokph will respond to all data subject requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case you will be notified of the extension and the reason for it.

11.3 okokph will not charge a fee for processing data subject requests unless the request is manifestly unfounded or excessive. In such cases, okokph may charge a reasonable administrative fee or decline to act on the request, with written justification provided to you.

11.4 If you are not satisfied with okokph's response to a data subject request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

12.1 okokph does not knowingly collect, process, or store personal data from individuals under the age of 21. If okokph becomes aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

12.2 If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to okokph, please contact our support team or Data Protection Officer immediately using the contact details in Section 15.

13.1 The okokph Platform may contain links to third-party websites or services. This Privacy Policy applies solely to the okokph Platform and does not cover the privacy practices of any third-party websites or services that may be accessible through links on our Platform.

13.2 okokph is not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to review the privacy policies of any third-party websites you visit before providing any personal data to them.

14.1 okokph reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The effective date at the top of this document will be updated to reflect the date of the most recent revision.

14.2 Where changes to this Privacy Policy are material — meaning they significantly affect your rights or how we process your personal data — okokph will notify registered users via email or a prominent notice on the Platform at least fourteen (14) days before the changes take effect.

14.3 Your continued use of the okokph Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree to the updated policy, you must cease using the Platform and may request account closure by contacting our support team.

15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or okokph's data practices, please contact our Data Protection Officer (DPO):

15.2 If you wish to exercise any of your data subject rights as described in Section 11, please submit your request in writing to the DPO email address above. Please include your full name, registered email address, and a clear description of the right you wish to exercise to help us process your request efficiently.

15.3 If you are not satisfied with okokph's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information about how to contact the NPC is available through official Philippine government channels.

15.4 For responsible gaming concerns, account self-exclusion requests, or deposit limit settings, please visit our Responsible Gaming page or contact our support team directly.