Privacy Policy

This Privacy Policy is issued by OkeyPlay ("OkeyPlay," "we," "us," or "our"), the operator of the online gaming and betting platform accessible at okeyplay.net and its associated mobile application (collectively, the "Platform"). OkeyPlay acts as the data controller in respect of the personal data of all registered players and visitors to the Platform.

As data controller, OkeyPlay determines the purposes and means by which your personal data is processed. We are committed to handling your data responsibly, transparently, and in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

This Privacy Policy applies to all personal data collected through the Platform, including data collected during account registration, identity verification, payment processing, gameplay, and customer support interactions. It applies to all players accessing OkeyPlay from the Philippines and any other jurisdiction where the Platform is lawfully accessible.

OkeyPlay collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect are set out in the table below:

OkeyPlay collects personal data through the following channels and methods:

• Direct Collection: Data you provide when registering an OkeyPlay account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and similar tracking technologies. See Section 8 for full details on cookies.
• Third-Party Sources: Identity verification data from KYC service providers; fraud and sanctions screening data from compliance databases; payment confirmation data from GCash, PayMaya, BPI, BDO, and Metrobank.
• Publicly Available Sources: In limited circumstances, OkeyPlay may supplement your data with information from publicly available sources for fraud prevention or regulatory compliance purposes.

OkeyPlay does not collect personal data from social media platforms or third-party advertising networks without your explicit consent. All data collection is proportionate to the purpose for which it is collected.

OkeyPlay uses your personal data for the following specific purposes. We will not use your data for any purpose that is incompatible with those listed below without first obtaining your consent or as otherwise permitted by law:

• Account Management: To create, maintain, and administer your OkeyPlay player account, including processing your registration and verifying your identity.
• Service Delivery: To provide access to OkeyPlay's games — including Ocean Lord, Tongits Go, Dice, Relax Fishing, Table games, and Esports betting — and to process your bets and winnings.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods in Philippine Peso (₱).
• KYC and Age Verification: To verify that you are at least 21 years of age and to confirm your identity in compliance with applicable Philippine gaming and anti-money laundering regulations.
• Regulatory Compliance: To comply with our obligations under Philippine gaming laws, anti-money laundering regulations, and data protection legislation, including reporting obligations to PAGCOR and other authorities.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other security threats to the Platform.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion.
• Customer Support: To respond to your queries, complaints, and requests, and to maintain records of our communications for quality assurance purposes.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given your explicit consent to receive such communications. You may withdraw consent at any time.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the functionality, performance, and user experience of the OkeyPlay Platform.

Under the Philippine Data Privacy Act of 2012, OkeyPlay relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing that is necessary to perform our contract with you — i.e., to operate your OkeyPlay account, process bets, and handle payments. Without this processing, we cannot provide our services.
• Legal Obligation: Processing required to comply with our legal obligations under Philippine gaming regulations, anti-money laundering laws, tax laws, and data protection legislation.
• Legitimate Interests: Processing necessary for OkeyPlay's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

OkeyPlay does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to facilitate deposits and withdrawals in Philippine Peso.
• KYC and Identity Verification Providers: Third-party service providers engaged to verify your identity and age as required by Philippine gaming regulations.
• Fraud Prevention and Compliance Services: Providers of sanctions screening, fraud detection, and anti-money laundering compliance tools.
• Regulatory Authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other Philippine government agencies, where disclosure is required by law or court order.
• IT and Cloud Service Providers: Providers of hosting, data storage, and technical infrastructure services, who process data on OkeyPlay's behalf under strict data processing agreements.
• Professional Advisers: Lawyers, auditors, and accountants, where necessary for the conduct of OkeyPlay's business and subject to professional confidentiality obligations.

OkeyPlay retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account Data: Retained for the duration of your active OkeyPlay account and for a period of five (5) years following account closure, in compliance with Philippine anti-money laundering record-keeping requirements.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act of 2001 (Republic Act No. 9160, as amended).
• KYC Documents: Identity verification documents are retained for five (5) years following account closure or the last transaction, whichever is later.
• Customer Support Records: Communications with OkeyPlay's support team are retained for three (3) years from the date of the interaction.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for the duration of your account and for three (3) years thereafter.
• Technical and Usage Data: Log data and usage analytics are retained for up to twelve (12) months, after which they are anonymized or deleted.

Upon expiry of the applicable retention period, OkeyPlay will securely delete or anonymize your personal data in accordance with its data disposal procedures. Where data cannot be immediately deleted due to technical constraints, it will be isolated and protected from further processing until deletion is possible.

OkeyPlay uses cookies and similar tracking technologies on the Platform to enhance your experience, maintain session security, and analyze how the Platform is used. A cookie is a small text file placed on your device when you visit the Platform.

OkeyPlay uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cookies cannot be disabled without affecting core Platform functionality.
• Functional Cookies: Remember your preferences, such as language settings and display options, to provide a more personalized experience.
• Analytics Cookies: Collect anonymized data about how players use the Platform — such as pages visited and session duration — to help OkeyPlay improve its services. These are only set with your consent.
• Security Cookies: Used to detect and prevent fraudulent activity, account takeover attempts, and other security threats.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by OkeyPlay. To exercise any of these rights, please contact OkeyPlay's Data Protection Officer using the support email address in the footer of this page.

OkeyPlay implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:

• Encryption: All data transmitted between your device and the OkeyPlay Platform is encrypted using Transport Layer Security (TLS). Sensitive data at rest is encrypted using AES-256 or equivalent standards.
• Access Controls: Access to personal data is restricted to OkeyPlay personnel and authorized third parties who have a legitimate need to access it. All access is logged and audited.
• Two-Factor Authentication: OkeyPlay supports and encourages the use of two-factor authentication (2FA) for player accounts to reduce the risk of unauthorized access.
• Regular Security Audits: OkeyPlay conducts regular security assessments, penetration testing, and vulnerability scans of its systems and infrastructure.
• Incident Response: OkeyPlay maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, OkeyPlay will notify the National Privacy Commission and affected players in accordance with the requirements of the Philippine Data Privacy Act.

OkeyPlay's Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. OkeyPlay does not knowingly collect personal data from individuals under the age of 21.

If OkeyPlay becomes aware that personal data has been collected from a person under 21 years of age, it will immediately suspend the relevant account, void any associated bets, return any deposited funds to the original payment source, and permanently delete all personal data associated with that account.

If you are a parent or guardian and believe that your child has registered an account on OkeyPlay, please contact our support team immediately using the email address in the footer of this page. We will investigate and take appropriate action without delay.

OkeyPlay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

When material changes are made to this Privacy Policy, OkeyPlay will notify registered players via the email address associated with their account and/or through a prominent notice on the Platform. We encourage you to review this Privacy Policy periodically to stay informed about how OkeyPlay protects your personal data.

Your continued use of the OkeyPlay Platform following notification of changes to this Privacy Policy constitutes your acknowledgment of the updated policy. If you do not agree with any changes, you should cease using the Platform and contact our support team to close your account.

If you have any questions, concerns, or requests regarding this Privacy Policy or OkeyPlay's handling of your personal data, please contact our Data Protection Officer. We aim to respond to all privacy-related inquiries within fifteen (15) business days.

You may also reach OkeyPlay's general customer support team for account-related queries. Our support email address is displayed as plain text in the footer of this page. Please include your registered account email address and a clear description of your request when contacting us.

This Privacy Policy was last reviewed and updated on January 1, 2026. It supersedes all previous versions of OkeyPlay's Privacy Policy.