okpey Privacy Policy

1. Introduction

okpey is an online casino platform designed for Filipino players, offering live dealer games, slots, Bingo, and other gaming entertainment. In the course of providing these services, okpey necessarily collects and processes certain personal information about its users. We take this responsibility seriously.

This Policy applies to all personal data collected through the okpey website (okpey.net), mobile applications, customer support interactions, and any other touchpoints through which you interact with the okpey platform. It does not apply to third-party websites or services that may be referenced on the Platform – those are governed by their own privacy policies.

We encourage you to read this Policy in full. If you have questions about any section, our Data Protection Officer is available to assist – contact details are provided in Section 15.

2. Data Controller

For the purposes of the Data Privacy Act of the Philippines (RA 10173), okpey acts as the Personal Information Controller (PIC) in respect of the personal data you provide when using the Platform. This means okpey determines the purposes and means of processing your personal information.

Where okpey engages third-party service providers to process data on its behalf (for example, payment processors or identity verification providers), those parties act as Personal Information Processors (PIPs) and are bound by data processing agreements that require them to handle your data in accordance with this Policy and applicable Philippine law.

3. Personal Data We Collect

okpey collects personal data through several channels. The categories of data we collect, and the circumstances in which we collect them, are described below.

3.1 Data You Provide Directly

• Registration Data: Full legal name, date of birth, gender, nationality, residential address, email address, and mobile number provided when you create an okpey account.
• Identity Verification (KYC) Documents: Government-issued identification (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's license), proof of address, and proof of payment method, collected to comply with KYC and AML obligations.
• Financial Data: Payment method details (e.g., GCash account reference, bank account details for BPI, BDO, UnionBank, Metrobank, or other supported banks, debit card details). Note: okpey does not store full card numbers – payment data is tokenized by our payment processors.
• Communications: Records of your interactions with okpey customer support, including chat transcripts, emails, and call recordings where applicable.
• Preferences & Settings: Responsible gaming settings, notification preferences, and language or display preferences you configure within your account.

3.2 Data Collected Automatically

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, games played, session duration, click patterns, search queries within the Platform, and features accessed.
• Transaction Data: Records of all deposits, withdrawals, bets placed, game outcomes, bonus activations, and account balance history.
• Cookies & Similar Technologies: Session cookies, authentication tokens, and performance cookies as described in Section 9.

3.3 Data from Third Parties

• Identity Verification Providers: Results of identity and age verification checks conducted by our KYC partners.
• Payment Processors: Transaction confirmation data and fraud screening results from GCash, Maya, and banking partners.
• Fraud Prevention Services: Risk scores and flagging data from anti-fraud and AML screening services.

4. How We Use Your Personal Data

okpey uses the personal data it collects for the following purposes:

• Account Management: Creating and maintaining your okpey player account, verifying your identity, and managing your account settings and preferences.
• Service Delivery: Providing access to games, processing deposits and withdrawals, crediting bonuses, and delivering all other features of the okpey Platform.
• Legal & Regulatory Compliance: Fulfilling our obligations under Philippine gaming regulations, the Data Privacy Act (RA 10173), Anti-Money Laundering Act (RA 9160 as amended), and PAGCOR compliance requirements, including KYC verification and suspicious transaction reporting.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, cheating, and other prohibited conduct.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behavior, enforcing deposit limits and self-exclusion requests, and providing responsible gaming interventions where appropriate.
• Customer Support: Responding to your inquiries, resolving disputes, and improving the quality of our support services.
• Platform Improvement: Analyzing usage patterns and technical data to improve the performance, stability, and user experience of the okpey Platform.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may withdraw this consent at any time.
• Legal Claims: Establishing, exercising, or defending legal claims in connection with your use of the Platform.

5. Legal Basis for Processing

Under the Data Privacy Act of the Philippines (RA 10173), okpey processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you – i.e., to operate your okpey account and deliver the services you have requested.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations, including KYC/AML requirements, PAGCOR licensing conditions, and tax reporting obligations.
• Legitimate Interests: Processing carried out for okpey's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent – primarily for marketing communications and optional analytics. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

okpey does not sell your personal data. We may share your information with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, Maya, and banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) receive the minimum data necessary to process your transactions.
• Identity Verification Providers: KYC and age verification partners who assist okpey in confirming the identity and eligibility of players.
• Fraud & AML Screening Services: Third-party providers that assist okpey in detecting and preventing money laundering, fraud, and other financial crimes.
• IT & Infrastructure Providers: Cloud hosting, database, and cybersecurity service providers who process data on okpey's behalf under binding data processing agreements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law or regulatory order.
• Legal & Professional Advisors: Lawyers, auditors, and other professional advisors engaged by okpey, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of okpey's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

7. International Data Transfers

Some of okpey's service providers and technology partners may be located outside the Philippines. Where personal data is transferred to a country that does not provide an equivalent level of data protection, okpey ensures that appropriate safeguards are in place, such as standard contractual clauses approved by the National Privacy Commission or equivalent contractual protections.

By using the okpey Platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines, subject to the safeguards described above.

8. Data Retention

okpey retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting requirements. The following general retention periods apply:

• Account Data: Retained for the duration of your active account relationship with okpey, plus a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• KYC Documents: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by a regulatory authority.
• Customer Support Records: Retained for three (3) years from the date of the interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing Consent Records: Retained for the duration of your consent and for three (3) years thereafter as evidence of consent.

When personal data is no longer required, okpey will securely delete or anonymize it in accordance with our data disposal procedures.

9. Cookies & Tracking Technologies

okpey uses cookies and similar technologies to operate and improve the Platform. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without affecting Platform functionality.
• Performance Cookies: Collect anonymized data about how players use the Platform (e.g., pages visited, error messages encountered) to help us improve performance and stability.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gaming configurations to provide a more personalized experience.

okpey does not use third-party advertising cookies, cross-site tracking pixels, or behavioral profiling technologies that track your activity outside the okpey Platform. You can manage cookie preferences through your browser settings, though disabling strictly necessary cookies may impair your ability to use the Platform.

10. Your Data Protection Rights

Under the Data Privacy Act of the Philippines (RA 10173), you have the following rights in relation to your personal data held by okpey:

• Right to Be Informed: The right to be informed of how your personal data is being collected and processed – which this Policy fulfills.
• Right of Access: The right to request a copy of the personal data okpey holds about you, along with information about how it is being used.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You can update most account information directly through your okpey account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to okpey's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 15. okpey will respond to all verified requests within fifteen (15) business days, in accordance with NPC guidelines.

11. Children's Privacy and Age Restriction

The okpey Platform is strictly intended for persons who are 21 years of age or older, in compliance with Philippine law governing casino-style gambling. okpey does not knowingly collect personal data from individuals under the age of 21.

If okpey discovers or has reason to believe that an account is held by a person under 21, the account will be immediately suspended, all personal data associated with the account will be reviewed, and any funds will be returned to the verified payment source pending investigation. Any personal data collected from an underage user will be deleted as soon as practicable.

If you are a parent or guardian and believe that your child has registered an account with okpey, please contact our support team immediately so we can take appropriate action.

12. Security Measures

okpey implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the okpey Platform;
• Encryption of sensitive data at rest, including KYC documents and financial records;
• Role-based access controls ensuring that only authorized personnel can access personal data, on a strict need-to-know basis;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Comprehensive audit logging of all access to and modifications of personal data;
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

While okpey takes all reasonable precautions to protect your data, no system is completely immune to security risks. You are encouraged to use a strong, unique password for your okpey account and to enable any additional security features available in your account settings.

13. Third-Party Links

The okpey Platform may contain references to third-party services such as payment providers. These third parties operate their own websites and privacy policies, which are independent of okpey. okpey is not responsible for the privacy practices or content of any third-party services. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of okpey.

14. Updates to This Privacy Policy

okpey reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform features. When material changes are made, we will notify registered players by email or through a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the okpey Platform following the posting of an updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the updated Policy, you should cease using the Platform and may request account closure in accordance with our Terms & Conditions.

We recommend reviewing this Policy periodically to stay informed about how okpey protects your personal information.

15. Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by okpey, please contact our Data Protection Officer (DPO):

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have not been adequately addressed by okpey.