Privacy Policy

okyply ("we," "us," "our," or "the Platform") is an online casino and sports betting platform operating at okyply.net, designed specifically for Filipino players across the Philippines — including Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond. okyply serves as the data controller for all personal data processed in connection with your use of the platform.

As data controller, okyply is responsible for determining the purposes and means by which your personal data is processed. We are committed to fulfilling all obligations imposed on data controllers under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines.

okyply has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection law. You can contact the DPO directly using the details provided in Section 13 of this Policy.

okyply collects personal data through three primary channels: information you provide directly during registration and ongoing use; information generated automatically as you use the platform; and information obtained from third-party identity verification and payment processing partners where required by law.

Information You Provide Directly:

Information Collected Automatically:

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers
• Usage Data: Pages visited, games launched, session duration, bet history, deposit and withdrawal records, and feature interactions
• Location Data: Approximate geographic location derived from your IP address, used for jurisdiction compliance verification
• Cookie Data: Session identifiers, preference settings, and analytics identifiers as detailed in Section 6

okyply uses your personal data only for the specific, legitimate purposes described below. We do not use your data for automated decision-making that produces significant legal effects without human review, and we do not process your data for purposes incompatible with those disclosed here without obtaining your separate consent.

• Account Creation and Management: To register your okyply account, verify your identity, manage your profile settings, and maintain the integrity of your account history.
• KYC and AML Compliance: To verify your identity and age (21+ requirement), screen against sanctions lists, and fulfill our obligations under the Anti-Money Laundering Act of the Philippines (Republic Act No. 9160, as amended) and PAGCOR-aligned compliance standards.
• Payment Processing: To process your deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard, and to maintain accurate financial records.
• Platform Delivery: To provide access to games, sports betting markets, live dealer tables, loyalty programs, and all other features of the okyply platform.
• Security and Fraud Prevention: To detect and prevent unauthorized access, fraud, collusion, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Customer Support: To respond to your inquiries, resolve disputes, process complaints, and communicate account-related updates.
• Responsible Gaming: To monitor gaming behavior patterns for indicators of problem gambling, enforce deposit limits and self-exclusion requests, and proactively reach out when responsible gaming concerns are identified.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided consent or where we have a legitimate interest. You may opt out at any time via your account settings or by emailing [email protected].
• Platform Improvement: To analyze aggregated usage data, improve game offerings, optimize the user interface, and enhance the overall okyply experience for Filipino players.
• Legal and Regulatory Compliance: To comply with applicable Philippine laws, respond to lawful requests from government authorities, and enforce our Terms & Conditions.

Under the Data Privacy Act of 2012, okyply must identify a valid legal basis for each category of personal data processing. The following table outlines the legal bases on which okyply relies:

Where okyply relies on legitimate interest as its legal basis, we have conducted a balancing assessment to confirm that our interests do not override your fundamental rights and freedoms as a data subject. You have the right to object to processing based on legitimate interest at any time — see Section 9 for details on exercising this right.

okyply does not sell, rent, or trade your personal data. We share your data only in the specific circumstances described below, and only to the minimum extent necessary for the stated purpose:

• KYC and Identity Verification Providers: okyply works with third-party identity verification services to validate the authenticity of government-issued IDs and conduct liveness checks. These providers process your identity data solely on okyply's instructions and are bound by confidentiality agreements.
• Payment Processing Partners: Your financial data is shared with payment processors (GCash, PayMaya, and banking partners including BPI, BDO, and Metrobank) solely for the purpose of executing your deposit and withdrawal transactions. Card transactions are processed through PCI-DSS compliant payment gateways.
• Game Providers: When you launch a game supplied by a third-party provider, a session token and minimal technical identifiers (not your full identity data) are shared with that provider to authenticate your game session. Game providers are contractually prohibited from using this data for any purpose beyond session delivery.
• Regulatory and Law Enforcement Authorities: okyply may disclose personal data to the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), PAGCOR, the Philippine National Police (PNP), or other competent authorities where required by law, court order, or regulatory directive. We will notify affected players of such disclosure where legally permitted to do so.
• Fraud Prevention and Security Services: Aggregated behavioral and technical data may be shared with fraud prevention partners to protect the okyply platform and all players from account takeover, bonus abuse, and financial crime.
• Professional Advisers: okyply's legal counsel, auditors, and compliance consultants may access personal data as necessary to provide their professional services, subject to strict confidentiality obligations.

okyply uses cookies and similar tracking technologies to operate the platform effectively, maintain your session, and analyze usage patterns. When you first visit okyply.net, you will be presented with a cookie consent notice. You may manage your cookie preferences at any time through your browser settings.

Types of Cookies Used:

okyply does not use third-party advertising cookies or permit ad networks to place tracking pixels on okyply.net pages. Analytics data collected via cookies is aggregated and anonymized before being used for platform improvement purposes. Individual player browsing data is not shared with analytics providers in personally identifiable form.

You may delete cookies stored by okyply at any time through your browser's privacy settings. Note that deleting strictly necessary cookies will log you out of your session and may require you to re-authenticate on your next visit.

okyply retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal and regulatory obligations, or to resolve disputes and enforce our agreements. The following retention schedule applies:

When your data reaches the end of its applicable retention period, okyply will securely delete or anonymize it in accordance with our internal data disposal procedures. Anonymized and aggregated data — which can no longer identify you — may be retained indefinitely for statistical and platform improvement purposes.

If you request account closure, okyply will cease active processing of your data for platform delivery purposes immediately. However, certain data will be retained for the periods specified above to comply with our legal obligations, even after your account is closed.

okyply implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security framework includes, but is not limited to, the following controls:

• Encryption in Transit: All data transmitted between your browser or device and the okyply platform is encrypted using TLS 1.2 or TLS 1.3 protocols. okyply enforces HTTPS across all pages and API endpoints without exception.
• Encryption at Rest: Sensitive personal data — including KYC documents, financial account details, and identity records — is encrypted at rest using AES-256 encryption in our database and file storage systems.
• Access Controls: Access to personal data within okyply's systems is restricted on a strict need-to-know basis. Role-based access controls (RBAC) ensure that only authorized personnel can access specific categories of player data, and all access is logged and audited.
• Two-Factor Authentication: okyply offers and strongly recommends two-factor authentication (2FA) for all player accounts. Internal okyply systems require multi-factor authentication for all staff accounts without exception.
• Intrusion Detection and Monitoring: okyply operates 24/7 security monitoring, intrusion detection systems (IDS), and automated alerting to identify and respond to potential security incidents in real time.
• Regular Security Assessments: okyply conducts periodic penetration testing, vulnerability assessments, and third-party security audits to identify and remediate weaknesses before they can be exploited.
• Staff Training: All okyply staff with access to personal data receive mandatory data protection and security awareness training upon onboarding and annually thereafter.

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okyply. okyply is committed to responding to all rights requests within thirty (30) calendar days of receipt. Complex requests may require up to sixty (60) days, in which case we will inform you of the extension and the reason for it.

To exercise any of the above rights, contact the okyply Data Protection Officer at [email protected] with the subject line "Privacy Rights Request." Please include your full registered name, registered email address, and a clear description of the right you wish to exercise. okyply may request additional verification to confirm your identity before processing a rights request — this is to protect against unauthorized access to your data by third parties.

The okyply platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law governing online casino-style gambling. okyply does not knowingly collect personal data from individuals under the age of 21.

If okyply becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the personal data in question, and retain only the minimum information necessary to prevent future re-registration by that individual.

As part of our registration process, all prospective okyply players are required to confirm that they are 21 years of age or older and to submit a valid government-issued ID for KYC verification. Age verification is a mandatory step and no deposits, withdrawals, or real-money gameplay are permitted until this verification is successfully completed.

okyply's primary infrastructure is hosted within data centers that maintain standards consistent with Philippine data protection requirements. However, some of our third-party service providers — including certain KYC verification partners and game software providers — may process data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, okyply ensures that an adequate level of protection is in place through one or more of the following mechanisms:

• Transfer to a country that the National Privacy Commission has recognized as providing an adequate level of data protection;
• Execution of data processing agreements incorporating standard contractual clauses approved by the NPC or equivalent international standard contractual clauses;
• Binding corporate rules or equivalent intragroup data transfer frameworks where applicable; or
• Your explicit informed consent to the specific transfer where required by law.

You may request further information about the specific safeguards in place for any cross-border transfers affecting your personal data by contacting the okyply Data Protection Officer at [email protected].

okyply reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our business operations, or our data processing practices. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

For material changes that significantly affect how we process your personal data, okyply will provide advance notice through one or more of the following channels: a prominent notice on okyply.net, an in-platform notification when you log in, or a direct email to the address registered on your okyply account. Your continued use of the platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes.

If you do not agree with any changes made to this Privacy Policy, you have the right to close your account and request deletion of your personal data (subject to legal retention obligations) by contacting us at [email protected]. We encourage you to review this page periodically to stay informed about how okyply protects your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way okyply handles your personal data, please contact our Data Protection Officer (DPO) directly. okyply is committed to responding to all privacy-related inquiries within five (5) business days.

okyply takes all privacy complaints seriously. If you are not satisfied with our initial response to your inquiry, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which is the competent supervisory authority responsible for enforcing the Data Privacy Act of 2012.

We thank all okyply players across Manila, Cebu, Davao, Quezon City, Makati, and throughout the Philippines for trusting us with your personal data. Protecting that trust is not just a legal obligation for okyply — it is a core part of who we are as a platform.