Your personal data belongs to you. This Privacy Policy explains exactly what information okply collects from Filipino players, why we collect it, how we use and protect it, and what rights you hold under Philippine law — including the right to access, correct, and erase your data at any time.
Six principles that govern how okply handles every piece of your personal information
okply collects only the personal data that is strictly necessary for account registration, identity verification, transaction processing, and compliance with PAGCOR regulations. We do not collect data for its own sake.
Every category of data collected by okply has a specific, documented purpose. Your data is never used for any purpose incompatible with the reason it was originally collected, without your prior consent.
okply does not sell, rent, or trade your personal data to any third party for their independent marketing or commercial use. Period. Your data is yours, and okply treats it that way.
All data transmitted between your device and okply's servers is protected by 256-bit TLS/SSL encryption — the same standard used by Philippine banks and GCash. Data at rest is encrypted using AES-256 in segregated, access-controlled storage.
Under RA 10173, you have the right to access, correct, erase, object to processing, and port your data. okply provides a straightforward mechanism for exercising all of these rights through your account dashboard or via support.
okply's data processing activities are registered with the Philippines National Privacy Commission (NPC) as required under the implementing rules of Republic Act No. 10173 (Data Privacy Act of 2012).
This Privacy Policy ("Policy") applies to all personal data processed by okply ("okply," "we," "us," or "our") in connection with the online gaming platform accessible at okply.org and all related services ("Platform"). It applies to all registered members, prospective members, and visitors to the Platform located in or accessing from the Republic of the Philippines. By creating an okply account or using any part of the Platform, you acknowledge that you have read and understood this Policy. This Policy is incorporated by reference into the okply Terms & Conditions.
The data controller responsible for the personal information collected and processed through the okply Platform is okply, the PAGCOR-licensed operator of okply.org. okply processes personal data in accordance with Republic Act No. 10173 (Data Privacy Act of 2012) and its implementing rules and regulations, and in compliance with ongoing PAGCOR licensing requirements governing online gambling operators in the Philippines.
okply has designated a Data Protection Officer (DPO) as required under the Data Privacy Act. The DPO is responsible for overseeing data protection strategy, ensuring compliance with RA 10173, handling data subject requests, and coordinating with the National Privacy Commission (NPC). Contact details for the okply DPO are provided in Section 14 of this Policy.
okply collects the following categories of personal data directly from you during registration, KYC verification, and ongoing account use:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number | Registration & KYC |
| Contact Data | Philippine mobile number, email address, residential address (barangay, city, province) | Registration |
| Identity Documents | Scanned or photographed copy of UMID, Driver's License, Passport, or other valid Philippine government ID | KYC Verification |
| Financial Data | GCash number, PayMaya number, bank account details (BPI, BDO, Metrobank), transaction history | First deposit / withdrawal |
| Account Credentials | Username, hashed and salted password (never stored in plain text) | Registration |
| Communications Data | Records of live chat conversations, support emails, and feedback submissions | When you contact support |
| Marketing Preferences | Opted-in promotional email or SMS consent records | Registration or account settings |
When you access the okply Platform, certain technical data is automatically collected by our servers and analytics systems:
okply processes your personal data for the following specific, documented purposes:
okply processes your personal data on the following lawful bases as recognized under Republic Act No. 10173 and its implementing rules:
Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. You can manage marketing consent preferences in your okply account settings or by contacting support.
okply shares personal data with carefully selected third-party service providers who process data on our behalf under binding data processing agreements that comply with RA 10173. These processors include:
okply may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities where:
okply does not sell, rent, trade, or otherwise provide your personal data to any third party for their own commercial or marketing purposes. Any data shared with processors is governed by strict contractual data protection obligations and is used exclusively for the purposes described in this Policy.
okply retains personal data for the minimum period necessary to fulfill the purpose for which it was collected, and no longer than required by applicable law. Key retention periods are as follows:
| Data Category | Retention Period | Reason |
|---|---|---|
| Identity & KYC documents | 5 years after account closure | AMLA and PAGCOR compliance requirements |
| Transaction records | 5 years from transaction date | AMLA reporting obligations and dispute resolution |
| Gaming activity logs | 3 years after last activity | PAGCOR audit requirements and dispute resolution |
| Support correspondence | 2 years after closure of query | Dispute resolution and quality assurance |
| Marketing consent records | Duration of consent + 1 year | Demonstrating lawful basis for marketing |
| Technical / usage logs | 12 months from collection | Security monitoring and fraud prevention |
| Anonymized analytics data | Indefinite | No personal identifiers retained — platform improvement only |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with okply's data deletion procedures. Requests for early deletion are handled subject to Section 9 (Your Rights) and any overriding legal retention obligations.
okply implements a comprehensive, layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Security measures in place include:
In the event of a personal data breach that is reasonably believed to have resulted in unauthorized access to your personal data, okply will notify you and the National Privacy Commission (NPC) within 72 hours of discovery, in accordance with the NPC's Circular on Personal Data Breach Management. Notification will include the nature of the breach, the data categories affected, and the steps okply has taken to address it.
The okply Platform uses cookies and similar tracking technologies to maintain session state, remember your preferences, and analyze Platform usage. The following cookie categories are used:
okply does not use third-party advertising cookies or tracking pixels for cross-site behavioral advertising. You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent you from logging in or using core Platform features. okply's cookies do not track your activity on websites other than okply.org.
As a data subject under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data held by okply. These rights may be exercised at any time by contacting the okply Data Protection Officer using the contact details in Section 14:
Request a copy of all personal data okply holds about you, along with information about how it is processed.
Request correction of any inaccurate or incomplete personal data held in your okply account.
Request deletion of your personal data where there is no overriding legal obligation to retain it (e.g., AMLA retention periods).
Object to processing of your personal data for legitimate interest purposes or for direct marketing, including profiling.
Receive a copy of the personal data you provided to okply in a structured, machine-readable format for transfer to another service.
Request restriction of processing in specific circumstances, such as while a data accuracy dispute is being resolved.
okply will respond to data subject requests within 30 calendar days of receipt. Where a request is complex or numerous, the response period may be extended by a further 60 days with prior notification. There is no charge for exercising your rights, except where requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied. You also have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.
The okply Platform is strictly intended for individuals who are twenty-one (21) years of age or older, in accordance with PAGCOR regulations. okply does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted through mandatory KYC processes during registration.
If okply becomes aware that personal data has been collected from a person under 21 years of age, the associated account will be immediately and permanently suspended, all data collected will be deleted as promptly as permitted by applicable law, and the matter will be reported to PAGCOR in accordance with licensing obligations. Parents and guardians who believe their child may have accessed the okply Platform are encouraged to contact the DPO immediately.
Where okply uses third-party service providers (such as cloud infrastructure or KYC technology partners) that process data in jurisdictions outside the Philippines, okply ensures that such transfers are conducted in compliance with the cross-border transfer provisions of RA 10173 and NPC regulations. Specifically:
okply sends promotional communications — including bonus offers, game announcements, and loyalty program updates — only to members who have provided explicit, opt-in marketing consent. Consent is collected separately from the main registration process and is never bundled with acceptance of the Terms & Conditions.
Marketing communications from okply may be delivered via: email to your registered address; SMS to your registered Philippine mobile number; and in-Platform notification messages visible after login. You can withdraw marketing consent at any time by:
Withdrawal of marketing consent does not affect the delivery of transactional communications that are necessary for account management, such as deposit confirmations, withdrawal notifications, security alerts, and KYC verification requests. These communications will continue to be sent regardless of marketing consent status, as they are necessary for the performance of your account agreement with okply.
okply may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. The effective date at the top of this Policy indicates when it was last reviewed.
Where changes are material — meaning they significantly affect your rights or how your data is processed — okply will provide advance notice of no less than 14 days by email to your registered address and/or by a prominent notification displayed on the Platform upon your next login. For non-material updates, such as clarifications or typographical corrections, the Policy will be updated on this page without separate notification.
Your continued use of the okply Platform after the effective date of an updated Policy constitutes your acknowledgment of the changes. If you disagree with any update to this Policy, you may exercise your rights under Section 9, including requesting account closure.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the okply Data Protection Officer or our general support team through the following channels:
If you are not satisfied with okply's response to a data privacy concern, you have the right to lodge a complaint with the Philippines National Privacy Commission (NPC). The NPC is the independent regulatory body established under RA 10173 to protect the fundamental human right of privacy and ensure data protection compliance in the Philippines.
This Privacy Policy was last reviewed and updated on 1 January 2026. Thank you for trusting okply with your personal data. We take that trust seriously, and this Policy reflects our commitment to handling your information with transparency, care, and full compliance with Philippine law.
Your personal data is protected under Philippine law, secured with bank-grade encryption, and never sold to third parties. Join hundreds of thousands of Filipino players who trust okply for a safe, regulated gaming experience. 21+ only.
By registering you confirm you are 21+ and agree to our Terms & Conditions and this Privacy Policy. Gambling involves risk — please play responsibly.