Privacy Policy
okaygames Data Commitment

Introduction

This Privacy Policy ("Policy") is issued by okaygames ("okaygames," "we," "us," or "our") and governs the collection, processing, storage, disclosure, and protection of personal data in connection with your use of the okaygames online gaming platform accessible at https://okaygames.app ("the Platform").

okaygames is committed to protecting the personal data of Filipino players in accordance with the Republic of the Philippines Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the orders, circulars, and resolutions issued by the National Privacy Commission ("NPC").

By registering an account, accessing the Platform, or otherwise providing your personal data to okaygames, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, you must refrain from using the Platform.

Data Controller Identity

For the purposes of the Philippine Data Privacy Act of 2012, the Data Controller responsible for the personal data you provide to the Platform is:

okaygames
Platform: https://okaygames.app
Contact: [email protected]
Data Protection Officer: Reachable via live chat support or the email address above.

okaygames has designated a Data Protection Officer ("DPO") as required under RA 10173. The DPO is responsible for overseeing the Platform's data protection strategy, ensuring compliance with applicable law, and serving as the primary point of contact for data subject inquiries and NPC communications.

Personal Data We Collect

okaygames collects personal data that is necessary, relevant, and not excessive in relation to the purposes for which it is processed. The categories of personal data we collect include the following:

okaygames does not intentionally collect sensitive personal information as defined under RA 10173 (such as racial or ethnic origin, political opinions, or health data) unless required for the fulfillment of a specific legal obligation, in which case your explicit consent will be sought.

How We Collect Personal Data

okaygames collects personal data through the following channels:

4.1 Direct Collection

Data you provide directly when you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, respond to surveys or promotions, or update your account settings.

4.2 Automated Collection

Data collected automatically when you access the Platform, including technical and usage data gathered through server logs, cookies, web beacons, session trackers, and similar technologies. See Section 10 for full details on cookies.

4.3 Third-Party Sources

Data received from authorized third parties in connection with the delivery of Platform services, including:

• Payment service providers (GCash, Maya, BPI, BDO, Coins.ph) who confirm transaction status and provide transaction reference data;
• Identity verification service providers engaged to support the KYC process;
• Fraud detection and anti-money laundering service providers;
• Analytics and reporting partners operating under data processing agreements with okaygames.

Purpose & Legal Basis for Processing

okaygames processes your personal data only for specified, explicit, and legitimate purposes. The following table sets out the purposes for which we process your data and the legal basis for each under RA 10173:

• Account Registration and Management: Necessary for the performance of the contract between you and okaygames (the Terms & Conditions).
• Identity and Age Verification (KYC): Compliance with legal obligations under applicable Philippine gaming regulations and PAGCOR requirements.
• Payment Processing: Necessary for the performance of contract; compliance with financial regulations.
• Fraud Prevention and Security: Legitimate interests of okaygames and legal obligation under AML/CTF regulations.
• Responsible Gaming Management: Legal obligation and legitimate interest in player protection.
• Customer Support: Performance of contract; legitimate interest in service quality.
• Platform Improvement and Analytics: Legitimate interest of okaygames in improving service delivery.
• Marketing Communications (where opted in): Your consent, which may be withdrawn at any time.
• Regulatory Reporting: Legal obligation to relevant Philippine authorities including PAGCOR and the Anti-Money Laundering Council (AMLC).

Data Sharing & Disclosure

okaygames does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with third parties in the following circumstances:

6.1 Service Providers

okaygames engages carefully selected third-party service providers who process personal data on our behalf under written data processing agreements that require them to implement appropriate technical and organizational security measures. Categories of such providers include: payment processors, identity verification providers, cloud hosting providers, game software suppliers, fraud detection services, and customer support platforms.

6.2 Regulatory and Legal Authorities

okaygames may disclose personal data to Philippine government authorities, regulatory bodies (including PAGCOR and the NPC), law enforcement agencies, and the Anti-Money Laundering Council (AMLC) where required by law, court order, or applicable regulation. okaygames will notify you of such disclosure where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or substantially all of okaygames' assets, your personal data may be transferred to the acquiring entity, provided that the acquiring entity agrees to process your data in accordance with this Policy and applicable Philippine data protection law.

6.4 With Your Consent

okaygames may share your personal data with third parties in additional circumstances where you have provided your explicit, informed, and freely given consent for such sharing.

International Data Transfers

Some of okaygames' service providers and game software partners are based outside of the Republic of the Philippines. Where personal data is transferred to recipients in other countries, okaygames ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses that impose data protection obligations on the recipient equivalent to those required under RA 10173;
• Transferring data only to countries or organizations recognized as providing an adequate level of protection for personal data;
• Obtaining your explicit consent for the transfer where required by applicable law.

All international transfers of personal data by okaygames are conducted in compliance with the NPC's rules on cross-border data transfers as set out in the Implementing Rules and Regulations of RA 10173.

Data Retention

okaygames retains personal data for the period necessary to fulfill the purposes described in this Policy, subject to the following principles:

• Active Account Data: Retained for the duration of your account relationship with okaygames and for a period of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements under the Anti-Money Laundering Act of 2001 (AMLA), as amended.
• Transaction Records: Retained for a minimum of five (5) years as required by AMLA and applicable PAGCOR regulations.
• KYC Documentation: Retained for the period of account activity plus five (5) years following account closure.
• Customer Support Records: Retained for three (3) years following the resolution of the relevant inquiry or dispute.
• Marketing Consent Records: Retained until consent is withdrawn and for three (3) years thereafter as evidence of compliance.
• Technical and Usage Data: Retained for up to two (2) years, subject to anonymization where retention beyond this period serves legitimate analytics purposes.

Upon expiry of the relevant retention period, okaygames will securely delete or anonymize your personal data so that it can no longer be attributed to an identified individual.

Data Security

okaygames implements technical, administrative, and physical security measures appropriate to the nature of the personal data processed and the risks associated with its processing. These measures include:

• Encryption: All data transmitted between your device and the okaygames platform is encrypted using 256-bit SSL/TLS protocols. Data at rest in okaygames' databases is encrypted using industry-standard algorithms.
• Access Controls: Personal data is accessible only to okaygames employees, contractors, and service providers who require access for legitimate operational purposes, subject to role-based access restrictions.
• Two-Factor Authentication: okaygames strongly recommends enabling 2FA on your account. okaygames staff accounts handling personal data are required to use 2FA.
• Vulnerability Management: Regular security assessments, penetration testing, and vulnerability scanning are conducted on the Platform infrastructure.
• Incident Response: okaygames maintains a documented data breach response plan and will notify the NPC and affected data subjects within the timeframes required under RA 10173 in the event of a qualifying breach.

You acknowledge that no electronic transmission over the internet is completely secure. While okaygames employs industry-standard security measures, we cannot guarantee absolute security against all threats. You are responsible for maintaining the confidentiality of your own login credentials.

Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device when you access the okaygames Platform. They allow the Platform to recognize your device across sessions, remember your preferences, and gather analytical data about how the Platform is used.

10.2 Types of Cookies Used by okaygames

• Strictly Necessary Cookies: Essential for the Platform to function. These enable login session management, security features, and basic navigation. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, last viewed game category, and responsible gaming settings to personalize your experience.
• Analytics Cookies: Collect aggregate, anonymized data about how players navigate the Platform to help okaygames improve design and performance. No personally identifiable information is contained in analytics cookie data.
• Security Cookies: Used to detect fraud, bot activity, and unusual login patterns to protect your account and the integrity of the Platform.

10.3 Managing Cookies

You may manage cookie preferences through your browser settings. Most modern browsers allow you to refuse non-essential cookies or delete existing cookies. Please note that disabling certain cookies may affect the functionality of the okaygames Platform, including login persistence and game loading performance.

Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okaygames. To exercise any of these rights, please contact the okaygames Data Protection Officer through the channels described in Section 15.

okaygames will respond to verified data subject requests within thirty (30) days of receipt. Where requests are complex or numerous, the response period may be extended by an additional sixty (60) days, with notice provided within the initial thirty-day period. Identity verification may be required before a request is processed to protect against unauthorized disclosure.

Children's Privacy

The okaygames Platform is strictly prohibited for use by persons under the age of 21 years, consistent with the minimum age requirements for online casino gaming in the Philippines as mandated by PAGCOR. okaygames does not knowingly collect personal data from individuals under 21 years of age.

If okaygames becomes aware that personal data has been collected from an individual under the age of 21, the relevant account will be immediately suspended, the data will be deleted in accordance with our data retention procedures, and any associated deposits will be returned through the original payment method. Winnings associated with underage accounts will be forfeited.

If you are a parent or guardian and believe that a minor under your care has registered an okaygames account, please contact our support team immediately via live chat or at [email protected].

Third-Party Links & Services

The okaygames Platform may reference or facilitate access to third-party payment services (such as GCash and Maya) and third-party game software providers. okaygames is not responsible for the privacy practices or data protection standards of these third parties. Your use of third-party payment services is subject to those services' own terms and privacy policies, which are separate from this Policy.

okaygames does not control and is not responsible for the content, privacy policies, or practices of any third-party services accessed in connection with the Platform. We encourage you to review the privacy policies of any third-party service providers you interact with in connection with your use of okaygames.

Policy Amendments

okaygames reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes to this Policy will be communicated to registered players via the mobile number or email address on file at least seven (7) days before the effective date of the changes.

The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. Your continued use of the okaygames Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

If you do not agree with any amendments to this Policy, you have the right to close your account and withdraw your available balance before the effective date of the changes. Please contact the okaygames support team to initiate this process.

Contact, Complaints & NPC Referral

15.1 Contacting the Data Protection Officer

For all data privacy inquiries, data subject rights requests, or concerns about okaygames' data handling practices, please contact the okaygames Data Protection Officer through the following channels:

• Live Chat: Available 24/7 through the okaygames Platform. State that your inquiry is a Data Privacy matter and you will be directed to the appropriate team.
• Email: [email protected] — mark your email "ATTN: Data Protection Officer" for routing to the correct team.

15.2 Complaints to the National Privacy Commission

If you believe that okaygames has not handled your personal data in accordance with the Philippine Data Privacy Act of 2012 and you are not satisfied with okaygames' response to your complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Republic of the Philippines. The NPC is the Philippine government agency responsible for enforcing RA 10173 and its implementing regulations.

Information on how to file a complaint with the NPC is available through Philippine government information channels. okaygames will cooperate fully with any NPC investigation or inquiry relating to the processing of personal data on our Platform.