ookplay Privacy Policy — Your Data, Your Rights

01Introduction

ookplay ("we", "us", "our", or "the Company") is committed to protecting the personal information of every player, visitor, and user who interacts with the ookplay Platform at ookplay.net. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us in connection with the ookplay online casino and sports betting services.

ookplay operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to the Data Privacy Act of 2012 (Republic Act No. 10173) and the regulations issued by the National Privacy Commission (NPC) of the Philippines. This Privacy Policy reflects ookplay's obligations as a Personal Information Controller (PIC) under Philippine law.

We encourage you to read this Privacy Policy carefully before using the Platform. If you are a registered ookplay player in Manila, Cebu, Davao, Quezon City, Makati, or anywhere else in the Philippines, this document directly governs how your personal data is handled from the moment you register your account.

This Privacy Policy should be read alongside our Terms and Conditions, Responsible Gaming Policy, and any game- or promotion-specific terms that may apply to your use of the Platform.

02Data Controller

For the purposes of the Data Privacy Act of 2012, ookplay acts as the Personal Information Controller (PIC) in respect of personal data collected through the Platform. This means ookplay is responsible for determining the purposes for which, and the manner in which, your personal data is processed.

Where ookplay engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, or game platform operators — those parties act as Personal Information Processors (PIPs) under written agreements that impose data protection obligations consistent with this Privacy Policy and applicable Philippine law.

Our designated Data Protection Officer (DPO) oversees compliance with the Data Privacy Act and can be contacted directly for privacy-related enquiries at [email protected], referencing "Data Protection — DPO" in your subject line.

03Data We Collect

ookplay collects personal information through several channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and from trusted third parties as part of our verification and compliance obligations. The categories of personal data we collect are described below.

3.1 Information You Provide Directly

3.2 Information Collected Automatically

When you access and use the ookplay Platform, we automatically collect certain technical and behavioural data, including:

• IP address, browser type and version, operating system, device type, and screen resolution;
• Pages visited on the Platform, time spent on each page, game sessions started and completed, bet history, and navigation patterns;
• Login timestamps, session durations, and approximate geolocation data derived from your IP address;
• Cookies, pixel tags, and similar tracking technologies as described in Section 9 below.

3.3 Information from Third Parties

ookplay may receive personal data about you from third parties in the following circumstances:

• Identity verification and anti-fraud service providers who assist us in confirming your identity during KYC;
• Payment providers such as GCash, PayMaya, and partner banks, who share transaction status and verification flags with us;
• PAGCOR's self-exclusion registry and any cross-operator exclusion lists that we are required to check under our regulatory licence;
• Credit reference agencies or sanctions screening services as required by our Anti-Money Laundering Act (AMLA) compliance obligations.

04How We Use Your Data

ookplay uses your personal data only for the specific, legitimate, and declared purposes listed below. We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

• Account Creation and Management: To register your account, verify your identity, and maintain your player profile throughout your relationship with ookplay.
• Service Delivery: To provide you with access to the full ookplay game library — including slots, live casino, sports betting, sabong, bingo, and wheel games — and to process your bets, deposits, and withdrawals.
• Regulatory Compliance: To fulfil our obligations under the Data Privacy Act, PAGCOR regulations, the Anti-Money Laundering Act (RA 9160 as amended), and any other applicable Philippine legislation, including filing suspicious transaction reports (STRs) with the Anti-Money Laundering Council (AMLC) where required.
• KYC and Fraud Prevention: To verify that you meet the minimum age requirement of 21 years, to prevent fraudulent account activity, to detect collusion or bonus abuse, and to protect the integrity of our gaming environment.
• Customer Support: To respond to your enquiries, process complaints, investigate disputes, and provide account assistance via live chat and email.
• Responsible Gaming: To monitor your gaming behaviour and proactively offer responsible gaming tools where our systems detect patterns that may indicate problematic gambling. This is a legal and ethical obligation we take seriously.
• Platform Improvement: To analyse aggregated usage data and improve the ookplay Platform's features, performance, game selection, and user experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may withdraw this consent at any time through your account settings or by contacting our support team.
• Legal Proceedings: To establish, exercise, or defend legal claims in connection with your use of the Platform, including cooperation with law enforcement and regulatory investigations.

05Legal Basis for Processing

Under the Data Privacy Act of 2012, ookplay processes your personal data on the following legal grounds:

• Contractual Necessity: Processing that is necessary to perform our contract with you — i.e., to deliver the gaming services you have signed up for, process payments, and manage your account.
• Legal Obligation: Processing that is required to comply with applicable Philippine laws, including PAGCOR regulatory requirements, AMLA reporting obligations, and NPC data governance standards.
• Legitimate Interest: Processing carried out to pursue our legitimate business interests, including fraud detection, security monitoring, platform analytics, and responsible gaming compliance, provided such interests do not override your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — in particular, marketing communications and optional profiling features. You have the right to withdraw this consent at any time without affecting the lawfulness of any prior processing.

06Sharing Your Data

ookplay does not sell or trade your personal data to third parties. We share your personal information only in the following limited and controlled circumstances:

• Licensed Game Providers: To the extent necessary to enable your participation in specific games, we share relevant session and account data with our licensed game providers. These providers are contractually bound to use your data only for the purpose of delivering their games to you.
• Payment Processors: We share financial transaction data with GCash, PayMaya, BPI, BDO, Metrobank, card networks (Visa/Mastercard), and selected cryptocurrency processing partners, solely to facilitate your deposits and withdrawals.
• KYC and Fraud Prevention Providers: We share identity and verification data with accredited third-party KYC service providers for the purpose of confirming your identity and detecting fraudulent activity.
• Regulatory Authorities: We disclose personal data to PAGCOR, the AMLC, the NPC, and other competent Philippine government authorities where required by law or regulatory mandate, including in connection with investigations or audits.
• Legal and Professional Advisers: We may share your data with our lawyers, accountants, or auditors under strict confidentiality obligations where necessary to obtain professional advice or to manage legal proceedings.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your personal data may be transferred to the successor entity, subject to equivalent data protection obligations and advance notice to you where required by law.

All third parties with whom we share your personal data are required to implement appropriate technical and organisational security measures and to process your data only in accordance with our instructions and applicable Philippine data protection law.

07Data Retention

ookplay retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention standards are as follows:

Upon expiry of the applicable retention period, ookplay will securely delete or anonymise your personal data in a manner that prevents recovery or reconstruction.

08Security Measures

ookplay implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• Encryption: All data transmitted between your device and the ookplay Platform is encrypted using TLS 1.2 or higher. Sensitive data at rest, including payment credentials and identity documents, is encrypted using AES-256 standard encryption.
• Access Controls: Access to personal data within ookplay's systems is restricted on a strict need-to-know basis. All staff with access to personal data undergo background screening and regular data protection training.
• Infrastructure Security: ookplay's Platform is hosted on ISO-certified infrastructure with multi-layered firewall protection, intrusion detection systems, and regular penetration testing by accredited third-party security firms.
• Account Security: Player accounts are protected by password hashing, optional two-factor authentication (2FA), and automated session timeout controls. Suspicious login activity triggers immediate account alerts.
• Incident Response: In the event of a personal data breach that is likely to give rise to a real risk of serious harm, ookplay will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required by NPC Circular 16-03, and will notify affected data subjects without undue delay.

While we take every reasonable precaution to protect your data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the confidentiality of your ookplay account credentials and must notify us immediately at [email protected] if you suspect any unauthorised access to your account.

09Cookies & Tracking Technologies

ookplay uses cookies and similar tracking technologies (collectively, "Cookies") to operate the Platform, personalise your experience, and carry out analytics. A cookie is a small text file stored on your device when you visit the Platform.

We use the following categories of Cookies:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including session management, authentication, and security functions. These cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Allow the Platform to remember your preferences, such as language settings, preferred game categories, and responsible gaming limit configurations.
• Analytics Cookies: Help us understand how players interact with the Platform — which pages are visited most frequently, where players navigate from, and how game sessions are used. This data is processed in aggregate and anonymised form.
• Marketing Cookies: Used to deliver relevant promotional content to you on the Platform, based on your game history and preferences. These are only activated where you have provided explicit consent.

You can manage your Cookie preferences through your browser settings. Please note that disabling certain categories of Cookies may affect the functionality of the ookplay Platform. For full details, refer to our Cookie management panel accessible from the Platform footer.

10Your Rights as a Data Subject

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by ookplay. You may exercise these rights by contacting our Data Protection Officer at [email protected].

ookplay will respond to all verified data subject requests within 15 business days of receipt. We may request proof of identity before processing any request to protect your data from unauthorised access.

11Minors and Age Restriction

The ookplay Platform is strictly intended for individuals who are at least 21 years of age, in accordance with the minimum age requirement established by PAGCOR for online gaming participation in the Philippines. ookplay does not knowingly collect, store, or process the personal data of any person below the age of 21.

Age verification is a mandatory step in our KYC process. Where ookplay has reasonable grounds to believe that a registered account holder is below 21 years of age, the account will be suspended immediately pending verification, all balances will be frozen, and the case will be referred to our compliance team for investigation and regulatory reporting where required.

If you are a parent or guardian and believe that a minor under your care has registered an account on the ookplay Platform, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay, including deletion of any personal data collected from the minor in question, subject to applicable legal retention obligations.

12Cross-Border Data Transfers

In certain circumstances, personal data collected by ookplay may be transferred to, stored, or processed in countries outside the Philippines — for example, where our game providers, cloud infrastructure partners, or fraud detection service providers are based in other jurisdictions.

Where such cross-border transfers occur, ookplay ensures that adequate safeguards are in place to protect your personal data in accordance with the Data Privacy Act and NPC guidelines on cross-border data transfers. Safeguards may include:

• Binding contractual clauses imposing data protection obligations on the recipient consistent with Philippine law;
• Transfers only to jurisdictions recognised by the NPC as providing an adequate level of data protection;
• Standard contractual mechanisms approved by the NPC for cross-border data flows.

You may request further information about the specific safeguards applicable to any cross-border transfer of your personal data by contacting our Data Protection Officer.

13Amendments to This Policy

ookplay reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance from the NPC or PAGCOR, or changes in how we process personal data. The effective date at the top of this document will always reflect the date of the most recent version.

Where amendments are material — meaning they significantly affect your rights or the way we use your data — ookplay will notify you by email to the address registered on your account and/or by displaying a prominent notice on the Platform prior to the changes taking effect. Your continued use of the Platform following the effective date of any amendments constitutes acceptance of the updated Privacy Policy.

We encourage all ookplay players to review this Privacy Policy periodically. If you disagree with any material amendment, you should cease using the Platform and contact our support team to request account closure.

14Contact Information

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ookplay, please reach out to our Data Protection Officer through the following channels:

• Email: [email protected] — please include "Privacy Policy" or "Data Subject Request" in your subject line
• Live Chat: Available 24/7 through the in-platform chat widget after logging in to your ookplay account
• Response Time: We aim to acknowledge all privacy-related enquiries within 24 hours and provide a substantive response within 15 business days

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. The NPC can be reached through their official government portal. ookplay cooperates fully with all NPC investigations and enforcement proceedings.