okolay Privacy Policy

1 Introduction and Scope

This Privacy Policy ("Policy") describes how okolay ("okolay", "we", "us", "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "Player", "User") who access or use the okolay online gaming platform at okolay.org and its associated services (collectively, the "Platform").

This Policy applies to all personal data processed by okolay in connection with the registration and operation of player accounts, financial transactions, customer support interactions, and general use of the Platform — regardless of whether you access okolay from a desktop browser, mobile browser, or any other device.

By registering an Account or continuing to use the okolay Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not create an Account or use the Platform.

2 Data Controller Information

For the purposes of the Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, okolay is the personal information controller responsible for the personal data collected through the Platform.

All data processing activities conducted by okolay are subject to the oversight of the National Privacy Commission (NPC) of the Philippines. Where okolay engages third-party service providers to process personal data on its behalf, such providers act as personal information processors and are bound by contractual obligations that are consistent with the requirements of the Data Privacy Act.

3 Personal Data We Collect

okolay collects the following categories of personal data in the course of operating the Platform and fulfilling its regulatory obligations:

3.1 Identity and Registration Data

This includes your full legal name, date of birth, nationality, gender, and a copy of a valid government-issued Philippine identification document (such as a PhilSys ID, passport, driver's licence, or UMID) provided during the Know Your Customer (KYC) verification process.

3.2 Contact Data

Philippine mobile number, email address, and residential address. These are used to communicate with you about your Account, transactions, promotions (where opted in), and important service notices.

3.3 Financial and Transaction Data

Details of deposits, withdrawals, wagers placed, bonuses claimed, and payment method information including your GCash or PayMaya-registered mobile number, or bank account details for BPI, BDO, or Metrobank transactions. Full payment card or bank account numbers are not stored directly by okolay — these are handled by our payment processing partners.

3.4 Gaming Activity Data

Records of games played, wagers placed, game outcomes, session du ration, and betting history. This data is retained in accordance with PAGCOR regulatory requirements and is used for responsible gaming monitoring, dispute resolution, and audit purposes.

3.5 Technical and Device Data

IP address, browser type and version, operating system, device identifiers, screen resolution, referring URLs, and pages visited within the Platform. This information is collected automatically when you access the Platform and is used for security, fraud prevention, and service optimisation purposes.

3.6 Communications Data

Records of your interactions with okolay's customer support team, including live chat transcripts, support ticket history, and any correspondence sent to our support email address. These records are maintained for quality assurance, dispute resolution, and regulatory compliance.

4 How We Collect Your Data

okolay collects personal data through the following channels:

• Account Registration: Information you provide directly when opening a new Account on the Platform, including name, date of birth, contact details, and preferred currency.
• KYC Verification: Identity documents and selfies submitted by you during the mandatory verification process required before withdrawals are processed.
• Deposits and Withdrawals: Payment information provided or confirmed when you initiate a financial transaction through GCash, PayMaya, BPI, BDO, or Metrobank.
• Platform Usage: Technical and behavioural data collected automatically through server logs, session tracking, and analytics tools as you navigate the Platform.
• Cookies and Similar Technologies: Data collected through cookies, web beacons, and local storage mechanisms as described in Section 9 of this Policy.
• Customer Support: Information you voluntarily share when contacting the okolay support team via live chat or email.
• Third-Party Sources: In limited circumstances, okolay may receive personal data from payment processors, fraud prevention services, or identity verification partners for the purpose of fulfilling our AML and KYC obligations.

5 Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, okolay processes your personal data on the following legal bases:

6 How We Use Your Data

okolay uses the personal data it collects for the following purposes:

• Creating, verifying, and managing your player Account on the Platform;
• Processing deposits, withdrawals, and bonus credits in Philippine Peso (PHP) through your chosen payment method;
• Conducting mandatory KYC and AML checks in compliance with PAGCOR requirements and Philippine law;
• Detecting, investigating, and preventing fraudulent activity, cheating, collusion, and unauthorised Account access;
• Monitoring gaming activity to identify and respond to signs of problem gambling under okolay's responsible gaming obligations;
• Providing customer support and resolving disputes or complaints raised by players;
• Sending transactional communications such as deposit confirmations, withdrawal notifications, and Account security alerts;
• Sending promotional communications about offers, bonuses, and new games — only where you have provided explicit consent and may unsubscribe at any time;
• Complying with reporting obligations to PAGCOR, the National Privacy Commission, and other competent Philippine authorities;
• Analysing platform usage patterns to improve game selection, interface design, and overall player experience.

7 Sharing Your Data

okolay does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the following limited circumstances:

7.1 Payment Service Providers

We share the minimum necessary financial and identity data with our payment partners — including GCash, PayMaya, BPI, BDO, and Metrobank — to facilitate the processing of your deposits and withdrawals. These partners process data solely for payment purposes and are bound by their own privacy obligations under Philippine law.

7.2 Regulatory and Law Enforcement Authorities

okolay is required by PAGCOR regulations and the Anti-Money Laundering Act (AMLA) of the Philippines to report certain transactions and player information to the Anti-Money Laundering Council (AMLC), PAGCOR, the National Privacy Commission, and other competent authorities upon lawful request or where required by law. We will notify affected players of such disclosures where legally permissible to do so.

7.3 Identity Verification and Fraud Prevention Services

okolay may share identity data with third-party KYC and fraud prevention service providers for the purpose of verifying your identity and detecting fraudulent activity. These providers act as personal information processors under contractual agreements that require them to handle your data in accordance with the Data Privacy Act of 2012.

7.4 Technology and Infrastructure Providers

okolay uses third-party cloud hosting, analytics, and security services to operate the Platform. These providers may process certain technical data as part of service delivery. All such providers are bound by data processing agreements and are prohibited from using your data for any purpose other than delivering the contracted service to okolay.

7.5 Business Transfers

In the event of a merger, acquisition, or transfer of all or a substantial part of okolay's assets, personal data held by okolay may be transferred to the successor entity, subject to the same protections as set out in this Privacy Policy. Players will be notified of any such transfer in advance where practicable.

8 Data Retention

okolay retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data must be retained beyond the standard period due to an ongoing legal dispute, regulatory investigation, or audit, we will retain only the minimum data necessary for that specific purpose.

9 Cookies and Tracking Technologies

The okolay Platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience. Cookies are small text files stored on your device when you visit the Platform. They do not contain personally identifiable information on their own but may be combined with Account data in certain circumstances.

9.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function correctly — including session management, login authentication, and security tokens. These cannot be disabled without affecting the usability of the Platform.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and notification preferences to improve your experience.
• Analytics Cookies: Collect anonymised or pseudonymised data about how players use the Platform — pages visited, session duration, and navigation paths — to help us improve the service. These are only set with your consent.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts.

9.2 Managing Cookies

You may control non-essential cookies through the cookie preference centre available on the Platform, or by adjusting your browser settings to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. Your cookie preferences are saved per device and browser and can be updated at any time.

10 Your Rights Under Philippine Law

As a data subject under the Republic Act No. 10173 (Data Privacy Act of 2012), you hold the following rights with respect to your personal data processed by okolay. You may exercise any of these rights by contacting our Data Protection Officer at [email protected].

okolay will respond to data rights requests within fifteen (15) business days of receipt. In complex cases, we may extend this period by a further fifteen (15) business days and will notify you accordingly. Some rights may be limited where their exercise would conflict with okolay's legal obligations under PAGCOR regulations, AMLA, or other applicable Philippine law.

11 Children and Minors

The okolay Platform is strictly for individuals who are twenty-one (21) years of age or older, in accordance with PAGCOR requirements for online casino gaming in the Philippines. okolay does not knowingly collect personal data from individuals under the age of 21.

If we become aware that an Account has been registered by or on behalf of a minor, we will immediately suspend that Account, void all associated transactions, and delete all personal data collected in connection with that Account, except where retention is required by law. Where such a case involves suspected misrepresentation of age, we reserve the right to report the matter to the relevant Philippine authorities.

If you are a parent or guardian and believe your minor child has accessed or registered on the okolay Platform, please contact us immediately at [email protected] so that we can take prompt remedial action.

12 Security Measures

okolay implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the Platform;
• Encryption at rest for sensitive personal and financial data stored on okolay servers;
• Role-based access controls limiting data access to authorised personnel on a need-to-know basis;
• Multi-factor authentication requirements for staff accessing production systems;
• Regular penetration testing and vulnerability assessments conducted by qualified security professionals;
• Automated monitoring and alerting systems to detect and respond to security incidents in real time;
• Data breach response procedures in compliance with the NPC's breach notification requirements under the Data Privacy Act.

While okolay takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security and encourage all players to use strong, unique passwords and to enable two-factor authentication on their Accounts.

13 Changes to This Policy

okolay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or Platform functionality. When material changes are made to this Policy, we will notify registered Players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy will be revised whenever changes are made. We encourage you to review this Policy periodically to stay informed about how okolay protects your personal information. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the changes.

14 Contact and Data Requests

For any questions, concerns, or requests relating to this Privacy Policy or the personal data that okolay holds about you, please contact our Data Protection Officer using the details below. We are committed to responding to all privacy-related enquiries promptly and transparently.

If you are not satisfied with our response to a privacy complaint or data rights request, you have the right to escalate the matter to the National Privacy Commission of the Philippines, which may be contacted through its official government channels.