okplus Privacy Policy

For the purposes of the Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, the data controller responsible for the personal data you provide through the okplus Platform is the operator of okplus.club.

okplus is a Philippines-facing online gaming platform operating under the regulatory framework established by the Philippine Amusement and Gaming Corporation (PAGCOR). Our Data Privacy Officer (DPO) is accessible through the contact channels described in Section 16 of this policy.

This Privacy Policy applies to all personal data collected, used, stored, disclosed, or otherwise processed by okplus in connection with your registration, access to, and use of the okplus Platform, including the website at okplus.club, any mobile-optimized versions of the site, and all related customer support, payment processing, and promotional services.

This policy applies to all current and former registered account holders, individuals who have submitted an application to register an okplus account, and any person who contacts okplus through our support channels regardless of whether they hold a registered account.

This Privacy Policy does not apply to third-party websites, services, or platforms that may be linked from or integrated with the okplus Platform. Those third parties operate under their own independent privacy policies, and okplus is not responsible for the data practices of those entities.

okplus collects personal data across several categories depending on your interaction with the Platform. The table below summarizes the main categories of personal data we process:

3.1 Sensitive Personal Information

In certain circumstances, okplus may collect sensitive personal information as defined under the Data Privacy Act of 2012, including government identification numbers (such as your PhilSys number, passport number, or LTO license number) obtained during the KYC verification process. This information is processed exclusively for identity verification and regulatory compliance purposes and is subject to heightened security measures beyond those applied to standard personal data.

okplus collects personal data through the following channels and methods:

4.1 Direct Collection

You provide personal data directly to okplus when you: register an account on the Platform; complete the KYC identity verification process; make a deposit or request a withdrawal; participate in promotional offers or tournaments; contact our customer support team; respond to surveys or feedback requests; or update your account settings and preferences.

4.2 Automated Collection

When you access and use the okplus Platform, we automatically collect certain technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device identifiers, browser information, session duration, pages visited, and gameplay patterns. This data helps us maintain platform security, detect fraud, and improve the user experience for Philippine players.

4.3 Third-Party Sources

In limited circumstances, okplus may receive personal data about you from third-party sources including: identity verification service providers used to authenticate government-issued IDs during KYC; payment service providers such as GCash and PayMaya for transaction confirmation; and fraud prevention partners that provide risk signals associated with account or payment activity. Data received from these sources is used only in ways consistent with this Privacy Policy and the terms under which it was originally collected.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, okplus processes your personal data under one or more of the following lawful bases:

• Contractual Necessity: Processing that is necessary to perform our contract with you — specifically, to operate your okplus account, process transactions, deliver gaming services, and fulfill our obligations under the Terms and Conditions;
• Legal Obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA) requirements, and reporting obligations to the Anti-Money Laundering Council (AMLC);
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud detection and prevention, platform security, responsible gaming monitoring, and improving the Platform — provided those interests are not overridden by your rights and freedoms;
• Consent: Where we rely on consent as the basis for processing (primarily for marketing communications and certain analytics), you have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

okplus uses the personal data it collects for the following purposes:

• To create, manage, and maintain your okplus account and verify your identity in accordance with PAGCOR and AML requirements;
• To process deposits and withdrawals through your selected Philippine payment methods, including GCash, PayMaya, BPI, BDO, and Metrobank;
• To provide access to all games and betting services available on the okplus Platform;
• To communicate with you regarding your account, transactions, security alerts, and service updates;
• To deliver and administer promotional offers, bonuses, and VIP rewards for which you are eligible;
• To monitor your gaming activity for the purposes of responsible gaming — including detecting patterns that may indicate problem gambling behavior — and to provide responsible gaming tools and interventions where appropriate;
• To detect, prevent, investigate, and report fraud, unauthorized account access, collusion, and other prohibited activities;
• To comply with our obligations under Philippine law, including PAGCOR reporting requirements, AMLA suspicious transaction reporting, and NPC data processing registration;
• To improve the functionality, performance, and personalization of the okplus Platform based on usage patterns and player feedback;
• To send you marketing communications about okplus promotions, new games, and special events, where you have provided consent or where we have a legitimate interest in doing so.

okplus may share your personal data with the following categories of third parties, subject to appropriate data processing agreements and security safeguards:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard — for the processing and settlement of deposits and withdrawals from your okplus account;
• Identity Verification Partners: Third-party KYC service providers that assist in verifying the authenticity of Philippine government-issued identification documents submitted during the account verification process;
• Game Content Providers: Licensed game suppliers such as JILI, PG Soft, and Pragmatic Play receive session data necessary to deliver game content and record game outcomes. These providers do not receive unnecessary personal data beyond what is required for game delivery;
• Fraud Prevention Services: Specialist fraud detection and risk scoring partners that help identify and prevent unauthorized account access, payment fraud, and bonus abuse;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, as required by law or regulatory instruction;
• Professional Advisers: Legal counsel, auditors, and compliance consultants engaged by okplus, subject to confidentiality obligations;
• Business Successors: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to continued compliance with this Privacy Policy.

okplus uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. okplus uses the following categories of cookies:

8.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They include session management cookies that keep you logged in to your okplus account, security tokens that protect against cross-site request forgery, and cookies that remember your currency and language preferences. These cookies cannot be disabled without affecting the functionality of the Platform.

8.2 Performance and Analytics Cookies

These cookies collect information about how visitors use the okplus Platform — which pages are visited most often, how long sessions last, and where players navigate from. This information is used in aggregate form to improve Platform performance and the player experience. Players on Philippine mobile networks may experience optimized load times as a result of improvements informed by this data.

8.3 Functional Cookies

These cookies allow the Platform to remember choices you have made — such as your preferred game lobby view, notification settings, or responsible gaming limits — and provide a more personalized experience as a result.

8.4 Managing Cookies

You can manage cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect the functionality of your okplus account or the Platform more broadly. Strictly necessary cookies cannot be disabled through the Platform — they are required for basic operation.

okplus retains personal data for as long as is necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active account relationship with okplus, plus an additional period following account closure as required by PAGCOR and AMLA regulations;
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of the most recent transaction associated with the account, in accordance with Anti-Money Laundering Act requirements;
• Transaction and Betting Records: Retained for a minimum of five (5) years from the date of each transaction, as required by PAGCOR licensing conditions and AMLA;
• Support Communications: Retained for a minimum of three (3) years from the date of the communication, for quality assurance and dispute resolution purposes;
• Marketing Consent Records: Retained for as long as you remain a registered okplus account holder, or for three (3) years from your last interaction with a marketing communication, whichever is longer.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized. Where data is anonymized rather than deleted, it may be retained indefinitely for statistical and research purposes as it can no longer be linked to an identifiable individual.

okplus implements technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the okplus Platform;
• Encryption of sensitive data at rest, including financial account information and identity document copies;
• Role-based access controls that restrict staff access to personal data on a strict need-to-know basis;
• Multi-factor authentication requirements for internal systems that process sensitive player data;
• Regular security assessments, vulnerability scanning, and penetration testing of the Platform infrastructure;
• Incident response procedures for the detection, containment, and notification of personal data breaches.

10.1 Data Breach Notification

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, okplus will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected individuals without undue delay where the breach is likely to result in high risk to those individuals, as required under the Data Privacy Act of 2012 and NPC Circular 16-03.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by okplus:

• Right to be Informed: The right to be informed of the data processing activities being conducted with respect to your personal data, as set out in this Privacy Policy;
• Right of Access: The right to obtain confirmation of whether okplus processes your personal data, and to receive a copy of that data in a readable format;
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected without undue delay;
• Right to Erasure: The right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to okplus's retention obligations under Philippine law;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes, or where processing is based on legitimate interests, where you have grounds relating to your particular situation;
• Right to Data Portability: The right to receive personal data you have provided to okplus in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your personal data rights have been violated.

To exercise any of the above rights, please contact the okplus Data Privacy Officer using the contact details provided in Section 16 of this policy. okplus will respond to verifiable rights requests within thirty (30) days of receipt. Where the request is complex or numerous, we may extend this period by up to an additional thirty (30) days, with prior notification to you.

In the event that okplus discovers it has inadvertently collected personal data from a person under the age of 21, such data will be immediately and permanently deleted and the associated account will be permanently closed. If you are a parent or guardian and believe a minor has submitted personal data to okplus, please contact us immediately using the details in Section 16 so that we can investigate and remediate the matter without delay.

KYC identity verification, which requires submission of a valid Philippine government-issued ID, is a mandatory requirement for all account holders and serves as the primary mechanism by which okplus enforces its age restriction policy.

okplus may send you marketing communications about promotions, new games, tournaments, and special offers via email, SMS, and push notifications where you have provided consent or where we have a legitimate interest in doing so as a registered account holder.

13.1 Opting Out

You may withdraw your consent to receive marketing communications at any time by: updating your notification preferences in your okplus Account settings; clicking the "unsubscribe" link in any marketing email; replying "STOP" to any marketing SMS message; or contacting okplus customer support directly. Opt-out requests are processed within 48 hours. Please note that opting out of marketing communications does not affect the receipt of transactional and account-related communications that are necessary for the operation of your okplus account.

13.2 Responsible Gaming and Marketing

okplus does not send promotional marketing communications to players who are currently subject to a self-exclusion order or a marketing opt-out. Players who have activated deposit limit restrictions or other responsible gaming controls will not receive promotional content that may be at odds with those restrictions, consistent with our responsible gaming obligations under PAGCOR regulations.

The okplus Platform may use service providers, including game content providers and cloud infrastructure operators, whose systems are located outside of the Philippines. Where personal data is transferred outside the Philippines, okplus ensures that such transfers are conducted in accordance with the requirements of the Data Privacy Act of 2012 and NPC guidance on cross-border data transfers, including requiring appropriate contractual safeguards with recipient organizations.

okplus only transfers personal data to third-party organizations outside the Philippines where it has verified that those organizations provide an adequate level of protection for personal data consistent with Philippine data protection standards, or has put in place appropriate contractual mechanisms to ensure equivalent protection.

okplus reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, new regulatory requirements, or improvements to the Platform. Material changes to this Privacy Policy will be communicated to registered account holders via the email address on file or through a prominent notification within the Platform, with reasonable advance notice prior to the effective date.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how okplus protects your personal data. Your continued use of the okplus Platform following the effective date of any revision constitutes your acknowledgment of the updated policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data okplus holds about you, please contact our Data Privacy Officer using the following channels:

• Email: [email protected] — Please include "Privacy Request" or "Data Privacy" in the subject line so your message is routed correctly.
• Live Chat: Available 24/7 directly within the okplus Platform after login. Request to speak with the Data Privacy team and a human agent will assist you in Tagalog or English.

okplus will acknowledge receipt of your privacy request within two (2) business days and provide a substantive response within thirty (30) days, unless the complexity of the request requires an extension, in which case we will notify you in writing of the extended timeline.

If you are not satisfied with okplus's response to your privacy concern, you have the right to escalate the matter to the National Privacy Commission of the Philippines (NPC) through the NPC's official complaint and resolution process.