okply Privacy
Policy

okply operates an online casino and sports betting platform at okply.vip serving registered users in the Philippines. In the course of providing gaming, payment processing, customer support, and fraud prevention services, okply necessarily processes certain personal data belonging to its registered users and website visitors. This Privacy Policy describes what personal data okply collects, why it is collected, how it is used, with whom it may be shared, how long it is retained, and what rights you hold over your own data.

By registering an account on okply, accessing the Platform, or transacting with okply in any capacity, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree with the practices described in this Privacy Policy, you should not use the okply Platform.

This Privacy Policy is to be read together with the Terms & Conditions and Responsible Gaming Policy, all of which together form the full agreement governing your relationship with okply.

For the purposes of the Philippine Data Privacy Act of 2012, okply acts as the personal information controller with respect to all personal data collected through the okply Platform. As personal information controller, okply determines the purposes for which and the means by which personal data is processed in connection with the Platform's operation.

Certain processing activities — particularly payment processing, identity verification, and game delivery — are carried out by third-party service providers acting as personal information processors on behalf of okply, subject to contractual data processing agreements that impose obligations consistent with this Privacy Policy and applicable Philippine data protection law.

okply collects the following categories of personal data from registered users and, in some cases, from visitors to the okply website who have not yet registered an account:

okply does not collect credit card or debit card numbers directly. All card-based payment processing, where applicable, is handled by certified payment service providers subject to PCI DSS compliance obligations. okply does not retain full card numbers in its systems.

okply does not collect or process sensitive personal information as defined under the Philippine Data Privacy Act — including racial or ethnic origin, religious beliefs, health data, or criminal records — except where age verification or AML compliance obligations specifically require it, and only to the minimum extent necessary for that purpose.

okply collects personal data through the following primary mechanisms:

• ◆
  Direct provision by you — Information you enter during account registration, identity verification, payment setup, support contact, or any other direct interaction with the okply Platform.
• ◆
  Automated technical collection — Data collected automatically when you access the Platform, including IP address, device fingerprint, browser type, session data, and behavioral analytics through cookies and similar tracking technologies.
• ◆
  Transaction processing — Financial data generated when you make deposits or withdrawal requests through GCash, Maya, or other supported payment methods. Payment providers may share transaction confirmation data with okply for reconciliation purposes.
• ◆
  Identity verification providers — Where okply uses a third-party KYC (Know Your Customer) verification service to validate your identity document and selfie during account verification, that provider processes verification data on okply's behalf and returns a verification result.
• ◆
  Game providers — Game providers integrated into the okply Platform may return session data and game results to okply's system for wallet reconciliation, bonus tracking, and dispute resolution purposes.
• ◆
  Fraud and AML screening — okply may receive information about you from fraud detection services or government AML watchlists as part of legally required due diligence procedures.

okply processes your personal data only where a lawful basis for processing exists under the Philippine Data Privacy Act of 2012. The following table sets out the primary purposes for which okply processes personal data and the corresponding legal basis for each:

okply does not sell your personal data to third parties. okply does not share your personal data for third-party marketing purposes without your explicit consent. Personal data is shared only in the following circumstances, and only to the extent necessary for the stated purpose:

• ◆
  Payment service providers — GCash (Mynt), Maya (Voyager Innovations), BDO, BPI, Metrobank, GrabPay, 7-Eleven CLiQQ, and Coins.ph receive the minimum financial and identity data necessary to process your deposit or withdrawal transactions. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
• ◆
  Game providers — JILI Games, PG Soft, Pragmatic Play, Evolution Gaming, Ezugi, and other game developers integrated into the okply Platform receive session data necessary to deliver and authenticate your gameplay. Game providers do not receive your full identity or financial profile.
• ◆
  Identity verification services — Third-party KYC providers receive your identity document images and selfie for the purpose of verifying your age and identity as required. Verification data is processed under data processing agreements consistent with this policy.
• ◆
  Fraud and AML screening services — okply may screen account and transaction data against fraud detection databases and AML watchlists operated by certified compliance service providers.
• ◆
  Cloud infrastructure providers — okply's Platform operates on cloud infrastructure provided by certified data center operators. Server-side data storage and processing occur on infrastructure subject to security certifications and contractual data protection obligations.
• ◆
  Regulatory and law enforcement authorities — okply will disclose personal data to Philippine government authorities, courts, or law enforcement agencies where required by law, court order, regulatory directive, or where disclosure is necessary to protect the rights, property, or safety of okply, its users, or the public.
• ◆
  Business successors — In the event of a merger, acquisition, asset sale, or corporate restructuring involving okply, personal data held by okply may be transferred to a successor entity, subject to the incoming entity's agreement to honor this Privacy Policy or to provide equivalent protections.

All third parties with whom okply shares personal data are required to handle that data in accordance with applicable data protection law. Where okply engages processors, it does so under written data processing agreements that impose obligations regarding security, confidentiality, purpose limitation, and data subject rights.

okply retains personal data for as long as necessary to fulfill the purposes for which it was collected, including satisfying any applicable legal, accounting, regulatory, or reporting requirements. The following general retention periods apply:

• ◆
  Account and identity data — Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, to satisfy AML record-keeping requirements under Philippine law.
• ◆
  Financial and transaction records — Retained for a minimum of five (5) years from the date of the transaction, consistent with Philippine financial record-keeping regulations.
• ◆
  Gaming session data — Retained for a minimum of three (3) years for dispute resolution, bonus management, and responsible gaming audit purposes.
• ◆
  Communication and support records — Retained for two (2) years from the date of the last communication or support interaction.
• ◆
  Technical and behavioral data — Log data and session analytics are retained for up to twelve (12) months for security and fraud detection purposes, after which they are deleted or anonymized.
• ◆
  Marketing consent records — Records of marketing consent (or its withdrawal) are retained for the duration of the account relationship plus three (3) years.

Where okply is required by law or regulatory obligation to retain data beyond the periods specified above, it will do so for the duration of that extended legal obligation and no longer. Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification.

okply implements a range of technical and organizational security measures to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction. Key measures include:

• ◆
  Transport Layer Security (TLS 1.3) — All data transmitted between your device and the okply Platform is encrypted in transit using TLS 1.3, the same standard used by Philippine banking applications.
• ◆
  Password hashing — Account passwords are stored as salted cryptographic hashes using bcrypt. okply never stores plaintext passwords and cannot recover or transmit your original password.
• ◆
  Two-factor authentication (2FA) — SMS OTP-based 2FA is available to all okply users and is strongly recommended. When 2FA is active, account login requires both your password and physical possession of your registered SIM.
• ◆
  Access controls — okply employee access to personal data is restricted on a need-to-know basis. Internal access to sensitive account data is logged and subject to audit.
• ◆
  Session anomaly detection — The Platform monitors login sessions for unusual patterns including access from unfamiliar IP addresses or geographic locations and may require additional authentication in such cases.
• ◆
  Intrusion detection and DDoS mitigation — The Platform employs network-level security controls including intrusion detection systems and DDoS protection to safeguard Platform availability and data integrity.

While okply employs industry-standard security measures, no system is completely immune to security threats. okply cannot guarantee absolute security of data transmitted over the internet. You are responsible for maintaining the confidentiality of your own account credentials and for reporting suspected unauthorized access promptly to okply support.

okply uses cookies and similar tracking technologies (including local storage tokens and session identifiers) on the okply Platform for the following purposes:

• ◆
  Strictly necessary cookies — Session management tokens that are essential for the Platform to function, including maintaining your logged-in state, securing your session, and enabling basic navigation. These cannot be disabled without affecting Platform functionality.
• ◆
  Functional cookies — Cookies that remember your preferences such as selected language, display settings, and "Remember me" login state. These improve your experience but are not strictly essential.
• ◆
  Analytics cookies — Aggregate, anonymized data collection about how users interact with the Platform, used to identify performance issues, improve navigation, and optimize the user experience. Analytics data is not linked to individual identities.
• ◆
  Security cookies — Tokens used for fraud detection, bot mitigation, and anomalous session identification. These operate in the background and are essential to Platform security.

okply does not use third-party advertising cookies or tracking pixels for behavioral advertising purposes. The Platform does not participate in cross-site tracking networks or sell behavioral profiles to advertising networks.

Most web browsers and mobile devices allow you to control cookie behavior through their settings. Disabling strictly necessary cookies may impair or prevent use of the okply Platform. Disabling functional or analytics cookies will not prevent you from using the Platform but may affect certain preferences and features.

Under the Philippine Data Privacy Act of 2012 and its implementing rules, you have the following rights with respect to your personal data held by okply. You may exercise any of these rights by contacting okply support at [email protected] with the subject line "Privacy Request":

okply will acknowledge data rights requests within five (5) business days and endeavor to resolve them within thirty (30) calendar days. Where a request cannot be fully resolved within that timeframe, okply will notify you of the expected resolution date. Certain rights — notably erasure and portability — may be limited where okply has a legal obligation to retain the data in question (for example, AML retention obligations).

Identity verification may be required before processing data rights requests to confirm that the request is being made by the account holder and not a third party. This is a protective measure for your own data security.

If you are a parent or guardian and believe that a minor under your care has registered an account on okply or submitted personal data to the Platform, please contact okply support at [email protected] immediately with the subject line "Minor Account" and okply will investigate and take appropriate action without delay.

The age verification process employed by okply at the point of withdrawal — requiring submission of a government-issued photo ID confirming date of birth — is designed to enforce the 21+ age requirement in practice. Any account where the registered user is confirmed to be under 21 will be suspended and all personal data associated with that account scheduled for deletion in accordance with this policy.

Certain service providers used by okply — including cloud infrastructure providers and game delivery networks — may operate data centers located outside the Philippines. Where personal data is transferred to servers or processors outside the Philippines, okply takes the following steps to ensure adequate data protection:

• ◆ Transfer occurs only to recipients in countries with an adequate level of data protection as recognized under Philippine law, or
• ◆ Transfer is subject to a data processing agreement containing standard contractual clauses that impose data protection obligations on the recipient equivalent to those under Philippine law, or
• ◆ Transfer is necessary for the performance of a contract to which you are a party (for example, game delivery or payment processing) and is carried out only to the extent necessary for that purpose.

Where data is transferred outside the Philippines, okply retains primary responsibility for ensuring that your data protection rights are honored by the recipient. You may request information about the specific safeguards applied to cross-border transfers of your data by contacting okply support.

The okply Platform does not contain links to external third-party websites for browsing purposes. All navigation within the Platform is internal. However, payment processing flows may redirect you temporarily to third-party payment application interfaces — for example, the GCash app or Maya app — to authenticate a transaction. These applications are governed by their own privacy policies and are not controlled by okply.

okply is not responsible for the privacy practices, data security measures, or content of third-party applications or services to which you navigate during a payment flow. We encourage you to review the privacy policies of GCash, Maya, and other payment applications you use in connection with okply transactions.

okply reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business practices, or data processing activities. The effective date at the top of this page will be updated whenever material changes are made.

Where changes are material — meaning they significantly affect how okply processes your personal data or the rights available to you — okply will provide notice via in-Platform notification and, where possible, by email or SMS to your registered contact details, at least seven (7) days before the amended Privacy Policy takes effect.

Your continued use of the okply Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy. If you disagree with the changes, you may request account closure in accordance with the Terms & Conditions and any verified real-money balance will be returned through standard procedures.

For any questions, concerns, or requests relating to this Privacy Policy or okply's data processing practices, you may contact us through the following channels. All privacy-related communications should reference "Privacy Request" in the subject line to ensure routing to the appropriate handling team.

For responsible gaming inquiries — including self-exclusion requests, deposit limit settings, or session controls — please visit the Responsible Gaming page for direct access to the relevant account tools and support resources. For general platform questions, the FAQ covers the most frequently raised topics about account management, payments, and game rules.