okplau Privacy Policy

1. Introduction

okplau is an online casino platform serving Filipino players across the Philippines, including Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond. We take the privacy of our players seriously. This Privacy Policy applies to all personal data collected through the okplau website, mobile-optimised platform, customer support channels, and any other services operated under the okplau brand.

This Privacy Policy should be read together with the okplau Terms & Conditions, which govern your use of the Platform. Capitalised terms not defined in this Privacy Policy have the meanings given to them in the Terms & Conditions.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, okplau acts as the Personal Information Controller (PIC) in respect of the personal data collected through the Platform. This means okplau determines the purposes and means of processing your personal data.

Where okplau engages third-party service providers to process personal data on its behalf (for example, payment processors or identity verification providers), those parties act as Personal Information Processors (PIPs) and are bound by data processing agreements that require them to process your data only in accordance with okplau's instructions and applicable Philippine law.

3. Personal Data We Collect

okplau collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Registration & Identity Data

• Full legal name
• Date of birth (for age verification — you must be 21 or older)
• Philippine mobile number
• Email address
• Username and encrypted password
• Residential address

3.2 KYC & Verification Data

• Government-issued photo ID (e.g., Philippine passport, SSS ID, PhilHealth ID, driver's licence, UMID)
• Proof of address documents
• Selfie or facial image for identity verification
• Source of funds documentation (where required by anti-money laundering regulations)

3.3 Financial & Transaction Data

• GCash or PayMaya/Maya account reference (masked)
• Bank account details (masked) for BPI, BDO, Metrobank, UnionBank, Landbank, PNB, or Security Bank transfers
• Debit card details (masked, last four digits only)
• Deposit and withdrawal history
• Account wallet balance and transaction records

3.4 Gaming & Activity Data

• Game session history, wager amounts, and outcomes
• Bonus and promotion usage records
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)
• Customer support interaction records

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session timestamps and login history
• Cookie identifiers and similar tracking data (see Section 8)

4. How We Collect Your Data

okplau collects personal data through the following means:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions;
• Automatically — through cookies, web beacons, and similar technologies when you access and use the Platform (see Section 8);
• From third parties — from identity verification providers, payment processors, fraud prevention services, and regulatory authorities where permitted by law.

5. Legal Basis for Processing

okplau processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

Processing Purpose	Legal Basis
Account registration and management	Performance of a contract
Age and identity verification (KYC)	Legal obligation (PAGCOR / AMLA requirements)
Payment processing and fraud prevention	Performance of a contract; legal obligation
Responsible gaming monitoring	Legal obligation; legitimate interest
Customer support	Performance of a contract
Marketing and promotional communications	Consent (you may withdraw at any time)
Platform analytics and improvement	Legitimate interest
Regulatory reporting and compliance	Legal obligation

6. How We Use Your Personal Data

okplau uses the personal data we collect for the following purposes:

• To create, verify, and manage your okplau Account;
• To verify your age (21+) and identity in compliance with PAGCOR requirements and Philippine anti-money laundering laws;
• To process deposits and withdrawals via GCash, PayMaya/Maya, bank transfer, and debit card;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited conduct;
• To provide and improve the games, features, and services available on the Platform;
• To administer bonuses, promotions, and loyalty programmes;
• To monitor responsible gaming indicators and apply protective measures where necessary;
• To respond to your customer support enquiries and complaints;
• To send you transactional communications (e.g., deposit confirmations, withdrawal notifications, security alerts);
• To send you marketing communications about okplau promotions and offers, where you have provided consent;
• To comply with our legal and regulatory obligations under Philippine law, including reporting to PAGCOR and the Anti-Money Laundering Council (AMLC);
• To enforce our Terms & Conditions and protect the rights and safety of okplau and its players.

7. Data Sharing & Disclosure

okplau does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

7.1 Service Providers

We engage trusted third-party service providers to assist in operating the Platform, including identity verification providers, payment processors (GCash, PayMaya/Maya, and Philippine banking partners), cloud hosting providers, fraud detection services, and customer support platforms. These providers act as Personal Information Processors and are contractually bound to process your data only as instructed by okplau.

7.2 Regulatory & Law Enforcement Authorities

okplau may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities where required by law, court order, or regulatory directive. We will notify you of such disclosures where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of okplau's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to the transfer taking effect.

7.4 With Your Consent

We may share your personal data with other third parties where you have given your explicit consent to such sharing. You may withdraw your consent at any time by contacting okplau customer support.

8. Cookies & Tracking Technologies

okplau uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. We use the following types of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled.
• Functional Cookies: Remember your preferences (e.g., language, display settings) to personalise your experience on okplau.
• Analytics Cookies: Help us understand how players use the Platform so we can improve performance and user experience. Data collected is aggregated and anonymised where possible.
• Marketing Cookies: Used to deliver relevant promotional content about okplau. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the okplau Platform. For more information, refer to the cookie consent banner displayed on your first visit to the Platform.

9. Data Retention

okplau retains your personal data for as long as your Account is active and for a period thereafter as required by applicable Philippine law and regulatory obligations. Specifically:

• Account and KYC data is retained for a minimum of five (5) years after Account closure, in compliance with PAGCOR requirements and the Anti-Money Laundering Act;
• Transaction and financial records are retained for a minimum of five (5) years from the date of the transaction;
• Customer support records are retained for three (3) years from the date of the interaction;
• Marketing consent records are retained until you withdraw your consent, plus one (1) year thereafter for compliance purposes;
• Technical and device data (including logs) is retained for up to twelve (12) months.

When personal data is no longer required for the purposes for which it was collected, and no legal retention obligation applies, okplau will securely delete or anonymise the data.

10. Data Security

okplau implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS encryption for all data in transit between your device and the okplau Platform;
• AES-256 encryption for sensitive data stored at rest;
• Multi-factor authentication options for player Accounts;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing;
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

11. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by okplau:

To exercise any of these rights, please contact the okplau Data Protection Officer (DPO) using the contact details in Section 16. okplau will respond to all data subject requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further sixty (60) days, with prior notice to you.

12. Children's Privacy

The okplau Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming law. okplau does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the associated Account, delete the data, and return any deposited funds to the original payment source.

If you believe that a minor has registered on the okplau Platform, please contact us immediately at the details provided in Section 16.

13. Cross-Border Data Transfers

okplau primarily processes and stores personal data within the Philippines. Where it is necessary to transfer personal data to service providers or infrastructure located outside the Philippines (for example, cloud hosting or fraud detection services), okplau ensures that such transfers are made only to countries or organisations that provide an adequate level of data protection, or are subject to appropriate contractual safeguards such as standard contractual clauses approved by the National Privacy Commission.

By using the okplau Platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines, subject to the safeguards described above.

14. Third-Party Links

The okplau Platform may contain links to third-party websites or services (for example, payment provider portals). This Privacy Policy applies only to the okplau Platform. okplau is not responsible for the privacy practices of third-party websites and encourages you to review the privacy policies of any third-party sites you visit. We do not endorse or make any representations about third-party websites.

15. Updates to This Privacy Policy

okplau reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, we will notify registered Players by email or via a prominent notice on the Platform prior to the changes taking effect.

The current version of this Privacy Policy, together with its effective date, will always be accessible on this page. Your continued use of the okplau Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Privacy Policy, you must cease using the Platform and may close your Account in accordance with the Terms & Conditions.

16. Contact & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by okplau, please contact our Data Protection Officer (DPO):

If you are not satisfied with okplau's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.