Privacy Policy — okplus Casino Philippines

okplus operates the online gaming platform accessible at okplus.asia. As the entity that determines the purposes and means of processing your personal data, okplus is the Personal Information Controller (PIC) as defined under Section 3(h) of Republic Act 10173.

okplus operates under the PAGCOR regulatory framework and is subject to all applicable Philippine gaming laws and anti-money laundering regulations administered by the Anti-Money Laundering Council (AMLC). Our Data Protection Officer (DPO) is designated in accordance with Section 21 of the DPA and can be reached at the contact details set out in Section 14 of this Policy.

okplus collects the following categories of personal data from Players:

okplus does not collect or process Sensitive Personal Information as defined under Section 3(l) of the DPA (such as health, genetic, sexual life, or political affiliation data) unless specifically required by PAGCOR compliance obligations and with your explicit consent.

okplus collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, submitting a support request, or updating your account profile.
• Automated technical collection: Data collected automatically when you access the okplus platform, including IP address, device identifiers, browser fingerprint, and session activity, via cookies and server logs.
• Transaction processing: Data received from payment processors (GCash, Maya, bank transfer networks) in connection with deposits and withdrawals, including transaction references and timestamps.
• Third-party verification services: Identity and document verification data received from licensed KYC/AML service providers engaged by okplus for PAGCOR compliance.
• Game providers: Game session and outcome data received from okplus's licensed game providers as part of normal platform operations.

okplus processes your personal data for the following purposes:

1. Account Management: To create, maintain, verify, and manage your okplus Player account, including authentication and session management.
2. Service Delivery: To provide you with access to casino games, sports betting, bingo rooms, fishing games, and all other platform features you have requested.
3. Financial Processing: To process deposits and withdrawals via your chosen payment method (GCash, Maya, bank transfer, USDT), to reconcile transactions, and to manage your PHP Wallet balance.
4. Regulatory Compliance: To fulfil okplus's obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and all other applicable Philippine laws, including mandatory identity verification, suspicious transaction reporting, and record-keeping requirements.
5. Responsible Gaming: To monitor gaming activity for signs of problem gambling, to enforce self-exclusion orders, deposit limits, and session time limits set by the Player or by okplus.
6. Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and unauthorised access to Player accounts.
7. Customer Support: To respond to your support enquiries, resolve disputes, and improve the quality of our support services.
8. Platform Improvement: To analyse aggregate usage patterns, identify technical issues, and improve the okplus platform experience for Filipino players.
9. Marketing Communications: To send you personalised promotional offers, bonus notifications, and platform updates, subject to your marketing communication preferences. You may opt out at any time through your account settings.

Under the Data Privacy Act of 2012, okplus processes personal data on the following lawful bases:

• Contractual Necessity (Section 12(b), DPA): Processing necessary to fulfil the Terms & Conditions agreement between you and okplus — including account operation, financial transactions, and game delivery.
• Legal Obligation (Section 12(c), DPA): Processing required to comply with PAGCOR regulations, the AMLA, National Privacy Commission requirements, and other mandatory Philippine laws.
• Legitimate Interests (Section 12(f), DPA): Processing for okplus's legitimate interests in fraud prevention, platform security, responsible gaming enforcement, and business operations — where such interests are not overridden by your rights and freedoms.
• Consent (Section 12(a), DPA): Processing for marketing communications and optional analytics, subject to your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting your access to the platform.

okplus shares personal data only where necessary and on a strictly limited basis. The categories of third parties with whom okplus may share your data are:

• PAGCOR and Philippine Government Authorities: okplus is required by law to share player data with PAGCOR, the AMLC, the National Privacy Commission, and other competent Philippine authorities upon lawful request or as part of mandatory reporting obligations.
• Payment Processors: GCash (GXI), Maya (Voyager Innovations), Philippine banks (BPI, BDO, Metrobank, UnionBank), and other licensed payment service providers — to the minimum extent necessary to process deposits and withdrawals.
• KYC / AML Service Providers: Licensed third-party identity verification services engaged to assist okplus in meeting its PAGCOR and AMLA compliance obligations. These providers act as Personal Information Processors (PIPs) under written agreements with okplus.
• Game Providers: Licensed game software providers are provided with session data necessary to operate the games you play. Game providers do not receive your financial or identity data beyond what is technically required for game delivery.
• IT and Cloud Service Providers: Technology vendors that provide hosting, data storage, security, and infrastructure services to okplus, bound by data processing agreements that require them to maintain the same standards of data protection as okplus.

All third parties that receive personal data from okplus are bound by contractual data protection obligations and are permitted to use your data only for the specific purpose for which it was shared.

Some of the third-party service providers used by okplus — particularly game providers and cloud infrastructure partners — may process data on servers located outside the Philippines. Where such cross-border data transfers occur, okplus ensures that:

• The destination country provides an adequate level of protection for personal data, as assessed by the National Privacy Commission;
• Appropriate safeguards are in place, such as standard contractual clauses or binding corporate rules;
• The transfer is limited to data strictly necessary for the third party to fulfil its designated function.

okplus retains personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with legal, regulatory, and tax obligations. The principal retention periods are:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. okplus does not retain personal data beyond the periods required by law or legitimate business necessity.

The okplus platform uses cookies and similar tracking technologies to provide a functional, personalised, and secure gaming experience. A cookie is a small text file placed on your device when you visit okplus.asia.

okplus uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These cookies enable your login session, PHP Wallet access, and security features. They cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences — such as your preferred language, game lobby layout, and responsible gaming limit settings — to personalise your okplus experience.
• Analytical Cookies: Aggregate data on how Filipino players use the okplus platform to help us identify and resolve performance issues and improve user experience. This data is anonymised.
• Security Cookies: Used to detect fraudulent account access, suspicious login patterns, and bot activity. These contribute to the protection of your okplus account and your PHP Wallet.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in to okplus and access games. For detailed instructions on managing cookies, refer to your browser's help documentation.

okplus implements a multi-layered security framework to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the okplus platform is encrypted in transit using industry-standard HTTPS/TLS protocols — the same technology used by Philippine banks.
• Encrypted Data Storage: Sensitive data at rest — including identity documents, financial records, and authentication credentials — is stored using strong encryption algorithms.
• Access Controls: Personal data is accessible only to authorised okplus personnel who require it to perform their specific job functions. All access is logged and auditable.
• Two-Factor Authentication: Players are encouraged to enable 2FA on their accounts; okplus staff with access to player data are required to use multi-factor authentication.
• Regular Security Audits: The okplus platform undergoes regular internal and external security assessments to identify and remediate vulnerabilities.
• Incident Response Plan: In the event of a personal data breach, okplus has a documented incident response procedure. Where required by the DPA, we will notify affected Players and the National Privacy Commission within 72 hours of becoming aware of the breach.

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okplus. These rights may be exercised at any time by contacting our Data Protection Officer through the channels described in Section 14.

To exercise any of the above rights, contact the okplus Data Protection Officer using the details in Section 14. okplus will respond to all valid requests within fifteen (15) business days of receipt and verification of identity. Some rights may be limited where their exercise conflicts with our regulatory obligations under PAGCOR, AMLA, or other Philippine law.

The okplus platform is strictly for persons aged 21 years and older, as required by PAGCOR regulations and Philippine law. okplus does not knowingly collect, process, or retain personal data from individuals under 21 years of age.

During the registration and KYC verification process, okplus requires documentary proof of age. If okplus discovers that personal data has been collected from an individual under 21 years of age — whether through a false declaration during registration or any other means — it will immediately:

• Suspend and close the account;
• Delete all personal data collected from the individual, to the extent permitted by PAGCOR and AMLC reporting obligations;
• Withhold any funds deposited or winnings accumulated, pending referral to PAGCOR and relevant Philippine authorities.

If you believe a minor has registered an okplus account, please notify us immediately via live chat or the contact details in Section 14.

okplus may update this Privacy Policy from time to time to reflect changes in our data processing practices, new regulatory requirements from the National Privacy Commission or PAGCOR, changes in technology, or other operational developments. The current version of this Policy, including its effective date, is always accessible at okplus.asia/privacy-policy.

Where changes are material — meaning they substantially affect how we collect or use your personal data — okplus will provide notice to registered Players via the email address on file or through an in-platform notification at least seven (7) calendar days before the updated Policy takes effect. Your continued use of the okplus platform after that date constitutes your acceptance of the updated Policy.

For questions about this Privacy Policy, to exercise your data rights, or to report a potential data breach or privacy concern, contact the okplus Data Protection Officer through the following channels:

• Live Chat: Available 24/7 inside your logged-in okplus account. For urgent data concerns, live chat is the fastest channel.
• Email (DPO): [email protected] — mark your subject line "Data Privacy Request" for priority routing to the DPO team.
• Operating Hours: 24/7, Philippine Standard Time (PST, UTC+8)

If you are not satisfied with okplus's response to your privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph. Please note that the NPC's website address is provided here for informational reference; it is not a clickable link from this page.

For responsible gaming support unrelated to data privacy, contact the PAGCOR Responsible Gaming Hotline at 1-800-10-7277.