Privacy Policy

1 Who We Are

This Privacy Policy is issued by okpey ("okpey," "we," "us," or "our"), the operator of the online gaming platform accessible at okpey.org (the "Platform"). For the purposes of Philippine data protection law, okpey is the personal information controller ("PIC") in respect of personal data collected through the Platform.

okpey operates in the Philippines and serves Filipino players. All personal data processing activities described in this Privacy Policy are conducted in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations as enforced by the National Privacy Commission of the Philippines.

2 Personal Data We Collect

okpey collects the following categories of personal data, depending on how you interact with the Platform:

Data Category	Examples	Collection Point
Identity Data	Full legal name, date of birth, government ID number, ID document images	Registration; KYC verification
Contact Data	Philippine mobile number, email address	Registration; account settings
Financial Data	GCash/Maya account reference, bank account details, transaction history, deposit/withdrawal amounts	Deposit/withdrawal processes
Gaming Data	Bet history, game session data, win/loss records, game preferences, bonus activity	Platform usage
Technical Data	IP address, device type, browser type and version, operating system, session timestamps	Automatic collection on access
Communications Data	Live chat transcripts, support emails, feedback submissions	Support interactions
Responsible Gaming Data	Deposit limits, self-exclusion status, session time limits, cooling-off periods	Account settings; player protection tools

okpey does not collect sensitive personal information as defined under RA 10173 (such as health data, religious beliefs, or political affiliations) except where age and identity information is required for compliance with gaming regulations.

3 How We Use Your Personal Data

okpey processes your personal data for the following purposes:

• Account registration and management: To create and maintain your okpey account, verify your identity and age eligibility (21+), and administer your account settings and preferences.
• Payment processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and other supported payment methods.
• Gaming services delivery: To provide access to the okpey game library, record bet and win history, calculate and credit winnings, and apply bonus and promotional credits.
• Security and fraud prevention: To detect, investigate, and prevent unauthorized account access, fraudulent transactions, money laundering, and prohibited conduct as defined in okpey's Terms & Conditions.
• Regulatory compliance: To comply with PAGCOR licensing conditions, anti-money laundering (AMLA) obligations under Philippine law, and applicable tax reporting requirements.
• Responsible gaming: To monitor gaming patterns for indicators of problem gambling, apply and enforce deposit limits and self-exclusion requests, and provide responsible gaming interventions where appropriate.
• Customer support: To respond to inquiries, resolve disputes, and provide technical assistance through live chat and email.
• Platform improvement: To analyze aggregated usage data for product development, performance optimization, and user experience improvements. okpey uses anonymized and aggregated data for this purpose wherever possible.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates to Members who have opted in to marketing communications. You may opt out at any time through your account notification settings.

4 Legal Basis for Processing

Under the Philippine Data Privacy Act, okpey relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to fulfill our obligations under the Terms & Conditions you accepted at registration — including account management, payment processing, and gaming service delivery.
• Legal obligation: Processing required to comply with applicable Philippine law, including AMLA reporting, PAGCOR licensing conditions, tax obligations, and Know Your Customer (KYC) requirements.
• Legitimate interest: Processing necessary for okpey's legitimate business interests — including fraud prevention, platform security, and responsible gaming monitoring — where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and optional data uses, where you have provided freely given, informed, and specific consent. Consent may be withdrawn at any time.

5 Data Sharing & Third Parties

okpey does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances:

5.1 Payment Service Providers

To process transactions, okpey shares necessary financial data with GCash (GXI/Mynt), Maya (PayMaya Philippines), and Philippine banking partners (BPI, BDO, Metrobank, UnionBank). These providers process data under their own privacy policies and are bound by Philippine data protection law.

5.2 Identity Verification Providers

For KYC and age verification, okpey may share identity documents with licensed third-party verification service providers. These providers are contractually bound to process data solely for verification purposes and to apply appropriate security standards.

5.3 Regulatory Authorities

okpey is required by law to share certain data with PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other Philippine government agencies when lawfully requested or when required by okpey's licensing conditions.

5.4 Game Content Providers

Third-party game providers (such as JILI, PG Soft, and Pragmatic Play) may receive anonymized session data necessary to deliver their games within the okpey Platform. No directly identifiable personal data (such as your name or mobile number) is shared with game providers beyond what is technically necessary for game delivery.

5.5 Professional Advisers

okpey may share data with legal advisers, auditors, and compliance consultants where necessary for the proper conduct of okpey's legal and regulatory obligations. All such parties are bound by confidentiality obligations.

6 Cookies & Tracking Technologies

The okpey Platform uses cookies and similar tracking technologies to maintain session state, remember your preferences, and analyze Platform usage. The following cookie categories are in use:

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: Remember your preferences such as language settings, game lobby filters, and notification settings across sessions.
• Analytics cookies: Used to collect anonymized data about how Members use the Platform — pages visited, session duration, and navigation patterns. This data is aggregated and does not identify individual users. okpey uses this data exclusively for internal Platform improvement.

okpey does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform.

7 Data Retention

okpey retains personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of your okpey account and for a period of five (5) years following account closure, in compliance with AMLA and PAGCOR record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine anti-money laundering regulations.
• KYC and identity documents: Retained for five (5) years following account closure or the last transaction, whichever is later.
• Gaming and bet history: Retained for five (5) years following account closure.
• Marketing consent records: Retained until consent is withdrawn, and for two (2) years thereafter as evidence of consent.
• Support communications: Retained for three (3) years from the date of each interaction.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with okpey's data disposal procedures.

8 Data Security

okpey implements a layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Key security measures include:

• TLS 1.3 encryption for all data in transit between your device and the Platform;
• AES-256 encryption for sensitive data at rest in okpey's database systems;
• One-way cryptographic hashing (bcrypt) for all stored account passwords;
• Multi-factor authentication options for Member accounts, including SMS OTP and authenticator app support;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
• Regular third-party security assessments and penetration testing of Platform infrastructure;
• 24/7 automated monitoring for anomalous access patterns and potential data breach indicators.

In the event of a personal data breach that is likely to harm your rights and freedoms, okpey will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected Members without undue delay.

9 Your Data Rights

Under the Philippine Data Privacy Act, you have the following rights in respect of your personal data held by okpey:

To exercise any of the above rights, contact okpey's Data Protection Officer via the support email at [email protected] with the subject line "Data Rights Request — [Your Request Type]."

10 Children's Privacy and Minors

The okpey Platform is strictly intended for adults aged 21 years and above. okpey does not knowingly collect personal data from individuals under the age of 21. If okpey discovers that it has inadvertently collected personal data from an individual under 21 years of age, that account will be immediately closed and all associated personal data will be deleted, subject to any legal retention requirements relating to the closure.

11 Cross-Border Data Transfers

okpey's primary data infrastructure is located within the Philippines. In limited circumstances — such as the use of internationally hosted game delivery networks or cloud-based security services — personal data may be processed by systems located outside the Philippines. In all such cases, okpey ensures that equivalent data protection standards are contractually required of the third-party processor, consistent with the requirements of RA 10173 and its Implementing Rules.

okpey does not transfer personal data to countries or organizations that do not provide adequate levels of data protection without implementing appropriate safeguards such as contractual clauses approved by the National Privacy Commission.

12 Changes to This Privacy Policy

okpey may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform functionality. The effective date at the top of this document will be updated with each revision.

For material changes — those that significantly affect how we use your data or your rights — okpey will notify you via your registered email address or via a notice displayed upon your next Platform login, at least fourteen (14) days before the changes take effect. Your continued use of the Platform after the effective date constitutes acceptance of the revised Privacy Policy.

13 Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or okpey's personal data processing activities, please contact okpey's Data Protection Officer:

• Email: [email protected] — Subject: "Privacy / DPO Inquiry"
• Live Chat: Available 24/7 through your logged-in okpey account — request to speak with the Data Protection team
• Response Time: Within 15 business days for formal data rights requests; within 24 hours for general privacy inquiries

If you are not satisfied with okpey's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. The NPC can be reached through its official channels at privacy.gov.ph (please note: okpey does not control and is not responsible for external websites; this reference is provided for your legal information only).