okpl Casino Privacy Policy

1 Introduction

okpl Casino ("okpl," "we," "us") operates the online casino platform accessible at okpl.asia. This Privacy Policy describes how okpl collects, processes, stores, shares, and protects personal data provided by or collected from players ("you," "User," "Data Subject") in connection with your use of the platform.

This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as relevant PAGCOR regulatory requirements relating to player data handling.

By registering an account with okpl Casino or by continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please do not register or continue using okpl Casino.

2 Personal Data We Collect

okpl Casino collects personal data that is necessary to provide our gaming services, comply with legal and regulatory obligations, and maintain the security and integrity of the platform. The categories of personal data we collect include:

• Identity Data: Full legal name, date of birth, government-issued ID number (e.g., PhilSys ID, passport, driver's license), nationality.
• Contact Data: Philippine mobile number, email address, residential address (city/province level, as required for KYC).
• Account Data: Username, encrypted password, account creation date, login history, session timestamps.
• Financial Data: GCash account details, PayMaya account details, BPI/BDO/Metrobank account identifiers (for withdrawal processing), transaction history, deposit and withdrawal amounts.
• Gaming Data: Game history, bet amounts, win/loss records, wagering patterns, bonus usage history.
• Technical Data: IP address, device type, operating system, browser type and version, mobile network provider, approximate geolocation (country/region level).
• Communications Data: Records of your communications with okpl's customer support team, including live chat transcripts and support ticket history.
• Responsible Gaming Data: Self-exclusion status, deposit limit settings, cooling-off period records.

3 How We Collect Personal Data

okpl Casino collects personal data through the following means:

• Direct collection: When you complete our account registration form, submit KYC documents, contact our support team, or update your account profile.
• Automated collection: Through server logs, session management systems, and first-party analytics tools that record your interactions with the okpl platform as you browse and play.
• Cookies and similar technologies: As described in Section 7 of this Policy.
• Payment processors: When you initiate a deposit or withdrawal, payment providers such as GCash or PayMaya may share transaction confirmation data with okpl for reconciliation purposes.
• Identity verification providers: Third-party KYC service providers may process copies of identity documents you submit during account verification and return a verification result to okpl.

4 How We Use Your Personal Data

okpl Casino processes your personal data for the following purposes:

• To create and manage your okpl Casino account and verify your identity.
• To provide access to our gaming services, including slots, live casino, sports betting, and bingo.
• To process financial transactions — deposits, withdrawals, bonus credits, and jackpot payouts — in Philippine Peso via your chosen payment method.
• To comply with anti-money laundering (AML) and Know Your Customer (KYC) obligations under Philippine law and PAGCOR requirements.
• To detect, investigate, and prevent fraudulent activity, unauthorized account access, and platform abuse.
• To administer responsible gaming tools including self-exclusion, deposit limits, and session controls.
• To provide customer support and resolve queries submitted through our live chat and support systems.
• To send you transactional communications (account activity alerts, withdrawal confirmations, security notifications). Marketing communications are sent only where you have provided explicit consent.
• To analyze platform usage patterns and improve okpl's services for Filipino players.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act, okpl Casino processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfill our contractual obligations to you as a registered okpl player — account creation, game access, transaction processing.
• Legal obligation: Processing required to comply with Philippine law, PAGCOR regulations, AML obligations, and tax reporting requirements.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform analytics, where these interests are balanced against your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained and can be withdrawn at any time.

6 Data Sharing & Third Parties

okpl Casino does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, and other approved payment processors — to facilitate deposits and withdrawals.
• Identity verification providers: Third-party KYC vendors engaged to verify player identity documents as required by law.
• Game providers: Game software suppliers such as JILI Games may receive pseudonymised gameplay data for technical and audit purposes.
• Regulatory bodies: PAGCOR, the National Privacy Commission, and other Philippine government authorities, where disclosure is required by law or court order.
• Anti-fraud and AML services: Compliance technology providers engaged to screen transactions and player profiles for suspicious activity.
• Customer support platforms: Third-party live chat and helpdesk software providers that process communications data on our behalf, subject to data processing agreements.

All third parties with whom okpl shares personal data are contractually required to process that data only in accordance with our instructions and applicable Philippine data protection law.

7 Cookies & Tracking Technologies

okpl Casino uses cookies and similar technologies on the okpl.asia website. These include:

• Essential cookies: Required for the platform to function — session authentication, login state management, and security tokens. These cannot be disabled without impairing core platform functionality.
• Functional cookies: Remember your language preference, display settings, and game lobby configurations.
• Analytics cookies: First-party analytics tools that collect aggregated data on page visits, session duration, and feature usage to help us improve okpl's platform for Filipino players.

Non-essential cookies are only set with your consent, which you may provide or withdraw via the cookie preference centre accessible on the okpl platform. Essential cookies do not require consent as they are necessary for service delivery.

8 Data Retention

okpl Casino retains your personal data for the following periods:

• Active accounts: Personal and account data is retained for the duration of your active okpl Casino account.
• Closed accounts: Following account closure, transaction records, KYC documents, and AML-related data are retained for a minimum of five (5) years in compliance with Philippine AML regulations and PAGCOR record-keeping requirements.
• Support communications: Live chat transcripts and support tickets are retained for a minimum of two (2) years for quality assurance and dispute resolution purposes.
• Marketing consent records: Records of marketing consent and withdrawal are retained for six (6) years for compliance purposes.

Following the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle management procedures.

9 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okpl Casino:

• Right to be informed: You have the right to be informed about how your personal data is collected and processed — which this Policy fulfils.
• Right of access: You may request a copy of the personal data okpl holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data in your okpl account.
• Right to erasure: You may request deletion of your personal data, subject to our legal and regulatory retention obligations.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time.
• Right to data portability: You may request a copy of your personal data in a structured, machine-readable format.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of the above rights, contact our Data Protection Officer using the details in Section 13. okpl will respond to all valid data subject requests within thirty (30) days.

10 Children's Privacy & Age Restriction

okpl Casino is strictly for adults aged 21 years and above. We do not knowingly collect personal data from any person below the age of 21. The 21+ age requirement reflects Philippine regulations governing casino-style gambling.

During registration, okpl requires players to confirm their age and to undergo KYC identity verification. If okpl becomes aware that personal data has been collected from a person under 21, that account will be immediately closed, all data will be purged to the extent legally permitted, and any deposited funds will be returned via the original payment method.

Parents and guardians who believe a minor may have registered with okpl Casino are encouraged to contact our support team immediately at [email protected].

11 Security Measures

okpl Casino implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or destruction:

• SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data at rest, including financial identifiers and authentication credentials.
• Role-based access controls — only authorized okpl personnel with a legitimate business need can access player personal data.
• Regular penetration testing and security audits of the okpl platform and infrastructure.
• Intrusion detection and continuous security monitoring systems.
• Multi-factor authentication requirements for all internal okpl staff accounts with access to production systems.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach, okpl will notify affected players and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, in accordance with applicable law.

12 Changes to This Privacy Policy

okpl Casino reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered players via email or in-platform notification where the changes materially affect how we process your personal data.

Your continued use of okpl Casino following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically.

13 Contact & Data Protection Officer

For any queries, concerns, or requests relating to this Privacy Policy or the personal data okpl Casino holds about you, please contact our Data Protection Officer:

• Email: [email protected]
• Subject line: "Data Privacy Request – [Your Account Username]"
• Live Chat: Available 24/7 from within your logged-in okpl account
• Response time: We aim to respond to all privacy-related requests within 30 calendar days.