okoak Privacy Policy

1. Introduction

okoak ("okoak," "we," "us," or "our") operates the online gaming platform accessible at okoak.org. We are committed to protecting the personal information of all users, particularly our Filipino players across Manila, Cebu, Davao, Quezon City, Makati, and beyond.

This Privacy Policy ("Policy") describes how we collect, use, disclose, and safeguard your personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC). It also reflects applicable international data protection standards.

By registering an account or using the okoak Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please discontinue use of the Platform immediately.

This Policy applies to all personal data collected through the okoak website, mobile-optimized interface, customer support channels, and any other touchpoints through which you interact with okoak.

2. Personal Data We Collect

okoak collects personal data that is necessary to provide our services, comply with legal obligations, and maintain the security and integrity of the Platform. The categories of data we collect include:

We do not collect sensitive personal information (as defined under RA 10173) unless strictly required for regulatory compliance, and only with your explicit consent where applicable.

3. How We Use Your Personal Data

okoak processes your personal data for the following purposes:

• Account Management: To create, verify, maintain, and secure your okoak account, including age verification to enforce our strict 21+ policy.
• Service Delivery: To provide access to games, process deposits and withdrawals, and deliver the full range of okoak Platform features.
• Legal & Regulatory Compliance: To fulfill obligations under Philippine law, including Anti-Money Laundering (AML) requirements under RA 9160, PAGCOR licensing conditions, and NPC data privacy regulations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and unauthorized account access.
• Responsible Gaming: To monitor gaming behavior, enforce self-exclusion requests, apply deposit limits, and identify players who may need support.
• Customer Support: To respond to your inquiries, resolve disputes, and improve our support services.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided consent, and always with an easy opt-out mechanism.
• Platform Improvement: To analyze usage patterns, conduct research, and enhance the performance and user experience of the okoak Platform.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, okoak processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — i.e., to provide the gaming services you have registered for.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including AML regulations, PAGCOR requirements, and tax obligations.
• Legitimate Interests: Processing is necessary for our legitimate interests in operating a secure, fair, and commercially viable gaming platform, provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and certain non-essential data processing activities, we rely on your freely given, specific, and informed consent.

5. Data Sharing & Disclosure

okoak does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, PayMaya/Maya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process financial transactions.
• Identity Verification Providers: Third-party KYC service providers engaged to verify your identity and age in compliance with regulatory requirements.
• Technology & Infrastructure Partners: Cloud hosting providers, cybersecurity firms, and platform technology vendors who process data on our behalf under strict data processing agreements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where required by law or court order.
• Professional Advisors: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third-party service providers engaged by okoak are contractually required to process your personal data only in accordance with our instructions and in compliance with applicable data protection laws.

6. Cookies & Tracking Technologies

okoak uses cookies and similar tracking technologies to enhance your experience on the Platform. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function correctly, including session management and security features. These cannot be disabled.
• Performance Cookies: Collect anonymized data about how players use the Platform to help us improve functionality and performance.
• Functional Cookies: Remember your preferences (such as language settings and game history) to provide a more personalized experience.
• Analytics Cookies: Used to understand aggregate usage patterns and improve our services. Data collected is anonymized where possible.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. By continuing to use okoak after being presented with our cookie notice, you consent to our use of non-essential cookies.

7. Data Retention

okoak retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR licensing requirements and AML regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required under RA 9160.
• Customer Support Records: Retained for three (3) years from the date of the last interaction.
• Marketing Consent Records: Retained until you withdraw consent, plus a reasonable period thereafter for compliance documentation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data disposal procedures.

8. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okoak:

• Right to Be Informed: The right to know what personal data we collect and how it is processed.
• Right of Access: The right to request a copy of the personal data we hold about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer (DPO) using the contact details in Section 13. We will respond to all verified requests within fifteen (15) business days, as required under RA 10173.

9. Data Security

okoak implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Industry-standard SSL/TLS encryption for all data transmitted between your device and our servers.
• AES-256 encryption for sensitive data stored in our databases.
• Multi-factor authentication (MFA) options for player accounts.
• Regular penetration testing and vulnerability assessments conducted by independent security firms.
• Strict access controls ensuring that only authorized personnel can access personal data on a need-to-know basis.
• 24/7 security monitoring and incident response procedures.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, okoak will notify the National Privacy Commission and affected individuals within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03.

10. Children's Privacy

The okoak Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine casino gambling regulations. We do not knowingly collect personal data from persons under the age of 21.

If we become aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data, and return any deposited funds in accordance with applicable regulations. If you believe a minor has registered on our Platform, please contact us immediately at the details provided in Section 13.

11. International Data Transfers

okoak primarily processes and stores personal data within the Philippines. In certain circumstances, your personal data may be transferred to and processed in countries outside the Philippines — for example, where our technology infrastructure partners operate data centers in other jurisdictions.

Where such transfers occur, okoak ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that impose data protection obligations equivalent to those under Philippine law, as required by the NPC. By using the okoak Platform, you consent to such transfers where they are necessary for the provision of our services.

12. Changes to This Privacy Policy

okoak reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform features. When material changes are made, we will notify registered players via email and/or a prominent notice on the Platform.

The date of the most recent revision is indicated at the top of this page. We encourage you to review this Policy periodically. Your continued use of the Platform following the posting of any changes constitutes your acceptance of the revised Policy.

13. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer (DPO):

• Data Protection Officer: okoak DPO Office
• Email: [email protected]
• General Support: [email protected]
• Response Time: We aim to acknowledge all privacy-related requests within 3 business days and resolve them within 15 business days.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing RA 10173.