okllay Privacy Policy

This Privacy Policy governs the collection, use, storage, and disclosure of personal data by okllay in connection with your use of the okllay online gaming platform accessible at okllay.cam and any associated mobile applications or services.

By registering an okllay account or using the okllay platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein, in accordance with Republic Act No. 10173 (the Philippine Data Privacy Act of 2012) and its Implementing Rules and Regulations.

If you do not agree with the terms of this Privacy Policy, you must not register for or use the okllay platform.

For the purposes of Philippine data protection law, okllay is the personal information controller (PIC) responsible for the processing of your personal data. okllay is registered with the National Privacy Commission (NPC) and operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR).

okllay's data protection officer (DPO) can be contacted at:

okllay collects the following categories of personal data from players who register and use the platform:

3.1 Registration Data. When you create an okllay account, you provide:

• Full legal name (as it appears on your government-issued ID)
• Email address
• Mobile phone number
• Date of birth (to verify you are 21 years of age or older)
• Username and password (passwords are cryptographically hashed and never stored in plain text)
• Residential address (city, province, and postal code)
• Preferred language and currency

3.2 Identity Verification (KYC) Data. To comply with PAGCOR licensing requirements and the Anti-Money Laundering Act (Republic Act No. 9160, as amended), okllay collects:

• Government-issued photo identification documents (e.g., Philippine passport, driver's license, SSS ID, PhilSys National ID, UMID card, voter's ID)
• Proof of address documents (e.g., utility bills, bank statements, or barangay certifications issued within the last three months)
• Proof of payment method ownership (e.g., screenshots showing your name on your GCash, PayMaya, or bank account)
• Selfie photographs taken as part of liveness verification or biometric validation processes

3.3 Transaction & Gameplay Data. When you use okllay, the platform automatically logs:

• Deposit and withdrawal transactions, including amounts, dates, times, and payment methods used
• All bets placed, games played, outcomes, winnings, and losses
• Bonus offers claimed and wagering progress toward bonus conditions
• Session logs, including login times, logout times, and duration of gaming sessions
• IP addresses, device identifiers, browser type and version, operating system, screen resolution, and mobile device model
• Geolocation data (used to confirm you are physically located within a jurisdiction where okllay's services are legally permitted)

3.4 Communications Data. When you contact okllay support or participate in promotional campaigns, we collect:

• Email correspondence, live chat transcripts, and support ticket history
• Survey responses, feedback forms, and promotional preferences
• Social media interactions (if you contact okllay via Facebook or other social platforms)

3.5 Cookies & Tracking Data. okllay uses cookies, web beacons, and similar tracking technologies to collect information about your browsing behavior and platform usage. For more details, see Section 11 (Cookies & Tracking Technologies).

okllay processes your personal data for the following purposes:

• Account Management: To create and maintain your okllay account, authenticate your identity, and provide access to the gaming platform.
• Regulatory Compliance: To comply with PAGCOR licensing obligations, Philippine anti-money-laundering laws, and tax reporting requirements under the Bureau of Internal Revenue (BIR) regulations.
• Age Verification: To verify that you are at least 21 years of age and therefore legally eligible to gamble in the Philippines.
• Payment Processing: To process deposits, withdrawals, and refunds via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods.
• Fraud Prevention: To detect and prevent fraudulent activity, money laundering, match-fixing, bonus abuse, and unauthorized account access.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Marketing & Promotions: To send you promotional offers, bonus notifications, newsletters, and personalized game recommendations, where you have provided your consent to receive such communications.
• Platform Improvement: To analyze usage patterns, conduct A/B testing, and improve the user experience, game library, and overall platform performance.
• Legal Obligations: To respond to subpoenas, court orders, or lawful requests from Philippine government authorities, including the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and the Philippine National Police (PNP).

okllay processes your personal data under the following legal bases recognized by the Philippine Data Privacy Act:

• Consent: You have explicitly consented to the processing of your personal data for specific purposes, such as receiving promotional emails or participating in customer surveys.
• Contractual Necessity: Processing is necessary to perform the contract between you and okllay (i.e., the Terms and Conditions), including account creation, gameplay, and payment processing.
• Legal Obligation: Processing is required to comply with Philippine laws, including PAGCOR regulations, Republic Act No. 9160 (the Anti-Money Laundering Act), Republic Act No. 10173 (the Data Privacy Act), and Bureau of Internal Revenue tax reporting obligations.
• Legitimate Interests: Processing is necessary for okllay's legitimate business interests, such as fraud detection, security monitoring, platform optimization, and defending okllay's legal rights, provided such interests do not override your fundamental rights and freedoms.

okllay does not sell, rent, or commercially lease your personal data to third parties. However, okllay may share your data with the following categories of recipients under strict data processing agreements and only to the extent necessary to provide the services you requested:

6.1 Payment Service Providers. okllay shares transaction data with GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors to facilitate deposits and withdrawals. These providers process data in accordance with their own privacy policies and applicable Philippine banking regulations.

6.2 Gaming Content Providers. okllay shares limited gameplay data with JILI, PG Soft, Pragmatic Play, Hacksaw Gaming, and other licensed game studios to enable game functionality, validate Random Number Generator (RNG) integrity, and generate gameplay statistics.

6.3 Identity Verification Services. okllay uses third-party KYC verification providers to authenticate your identity documents and conduct anti-fraud checks. These providers operate under strict confidentiality obligations and process data solely on okllay's instructions.

6.4 Cloud Infrastructure Providers. okllay stores data on secure cloud servers operated by reputable international infrastructure providers. All data is encrypted at rest and in transit, and access is controlled through multi-factor authentication.

6.5 Government Authorities. okllay may disclose personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council, the Bureau of Internal Revenue, or other Philippine government agencies when required by law, court order, subpoena, or lawful regulatory request.

6.6 Legal Advisors & Auditors. okllay may share data with external legal counsel, auditors, and compliance consultants to ensure adherence to Philippine gambling law, tax law, and data protection law.

While okllay's operations are centered in the Philippines, some third-party service providers used by okllay (such as cloud hosting providers and gaming content studios) may be located outside the Philippines. When your personal data is transferred internationally, okllay ensures that:

• The receiving country has been recognized by the National Privacy Commission as providing an adequate level of data protection; or
• The recipient has entered into Standard Contractual Clauses (SCCs) or Binding Corporate Rules (BCRs) approved by the NPC; or
• The transfer is necessary for the performance of the contract between you and okllay (e.g., to process payments via international payment gateways); or
• You have explicitly consented to the international transfer after being informed of the potential risks.

okllay takes all reasonable steps to ensure that your data receives equivalent protection regardless of where it is processed.

okllay implements industry-standard technical and organizational measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include:

• Encryption: All personal data is encrypted at rest using AES-256 encryption and in transit using TLS 1.3 or higher.
• Access Controls: Access to personal data is restricted through role-based permissions, multi-factor authentication, and IP whitelisting.
• Firewalls & Intrusion Detection: okllay's infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS).
• Regular Security Audits: okllay conducts annual penetration testing and security audits performed by independent third-party cybersecurity firms.
• Employee Training: All okllay employees with access to personal data undergo mandatory data protection training and sign confidentiality agreements.
• Incident Response Plan: okllay maintains a documented incident response plan to ensure rapid detection, containment, and notification in the event of a personal data breach.

okllay retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. Specific retention periods are as follows:

• Active Accounts: Personal data associated with active okllay accounts is retained for the duration of your account's active status.
• Closed Accounts: After you close your okllay account, personal data is retained for a maximum of five (5) years from the date of closure, as required by PAGCOR record-keeping obligations and Republic Act No. 9160 (Anti-Money Laundering Act).
• Transaction Records: Financial transaction records, including deposits, withdrawals, and bet history, are retained for five (5) years from the date of the transaction for tax reporting and regulatory compliance purposes.
• KYC Documents: Identity verification documents are retained for five (5) years from the date of account closure or the date of the last transaction, whichever is later.
• Marketing Communications: If you unsubscribe from okllay marketing emails, your email address is retained on a suppression list to ensure you do not receive further marketing communications.
• Legal Holds: Where personal data is subject to a legal hold, subpoena, or ongoing investigation, retention periods may be extended until the matter is resolved.

At the end of the applicable retention period, okllay securely deletes or anonymizes your personal data in accordance with industry best practices.

Under the Philippine Data Privacy Act (Republic Act No. 10173) and its Implementing Rules and Regulations, you have the following rights with respect to your personal data:

• Right to be Informed: You have the right to be informed of the nature, purpose, and extent of the processing of your personal data.
• Right of Access: You have the right to obtain a copy of your personal data held by okllay, including a summary of how that data has been used and to whom it has been disclosed.
• Right to Rectification: You have the right to correct inaccurate or incomplete personal data. You can update most of your account information directly through your okllay account settings.
• Right to Erasure / Right to be Forgotten: You have the right to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw your consent, subject to okllay's legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes. You can opt out of marketing emails by clicking the "Unsubscribe" link in any promotional email from okllay.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller, where technically feasible.
• Right to Suspend or Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
• Right to File a Complaint: You have the right to file a complaint with the National Privacy Commission if you believe okllay has violated your data protection rights.

To exercise any of these rights, please contact okllay's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." okllay will respond to your request within fifteen (15) days, as required by the NPC's rules.

okllay uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your user experience, analyze platform traffic, and deliver personalized content. Cookies are small text files stored on your device by your web browser.

11.1 Types of Cookies Used by okllay:

• Strictly Necessary Cookies: These cookies are essential for the operation of the okllay platform. They enable account login, session management, and security features. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: These cookies collect anonymous information about how visitors use the okllay platform, such as which pages are most frequently visited and whether users receive error messages. This data is used to improve platform performance.
• Functionality Cookies: These cookies remember your preferences, such as language selection, time zone, and display settings, to provide a more personalized experience.
• Targeting / Marketing Cookies: These cookies track your browsing activity across websites and are used to deliver targeted advertisements and promotional offers based on your interests. You can opt out of these cookies through your browser settings or the cookie consent banner displayed when you first visit okllay.

11.2 Managing Cookies. Most web browsers allow you to control cookies through their settings. You can set your browser to reject all cookies, accept only certain cookies, or notify you when a cookie is set. Note that disabling strictly necessary cookies may affect your ability to use certain features of the okllay platform.

okllay is strictly intended for adults aged 21 years and above, as required by PAGCOR regulations. okllay does not knowingly collect personal data from individuals under the age of 21.

If okllay becomes aware that a person under 21 has registered an account or provided personal data to okllay, the account will be immediately closed, all personal data will be deleted, and any deposits will be refunded to the originating payment method after deducting any winnings obtained through play.

Parents and guardians are encouraged to monitor their children's internet usage and to contact okllay at [email protected] if they believe a minor has provided personal data to okllay.

The okllay platform may contain links to third-party websites, payment processors, and social media platforms. okllay is not responsible for the privacy practices or the content of these third-party sites.

When you click on a third-party link and leave the okllay platform, you are subject to the privacy policy and terms of service of that third-party site. okllay encourages you to read the privacy policies of any third-party sites you visit.

This Privacy Policy applies only to information collected by okllay through the okllay platform and does not apply to information collected by third parties.

okllay reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in okllay's data processing practices, Philippine data protection law, or PAGCOR regulatory requirements.

Material changes to this Privacy Policy will be communicated to you via email to your registered email address or through a prominent notice displayed on the okllay platform at least seven (7) days before the changes take effect, except where changes are required immediately by law or regulatory directive.

Your continued use of the okllay platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must stop using the okllay platform and may request account closure in accordance with okllay's Terms and Conditions.

The "Last Updated" date at the top of this Privacy Policy indicates when the current version was published. You are encouraged to review this Privacy Policy periodically to stay informed about how okllay protects your personal data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or okllay's data processing practices, you may contact okllay's Data Protection Officer using the following details:

If you are not satisfied with okllay's response, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines:

This Privacy Policy was last updated on 1 January 2026. This version supersedes all previous versions.