okoak Casino – Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how okoak Casino ("okoak", "we", "us", "our") collects, processes, stores, and protects personal data relating to registered players and visitors ("you", "your") of the online gaming platform available at https://okoak.cam and its associated interfaces (collectively, the "Platform").

okoak is committed to handling your personal data with care, transparency, and in full compliance with applicable Philippine data protection law, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations administered by the National Privacy Commission (NPC).

By accessing the Platform, creating an okoak account, or otherwise providing your personal data to us, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your data as described herein. This Policy forms part of okoak's Terms & Conditions. Capitalised terms not defined in this Policy carry the meanings assigned in the Terms & Conditions.

2 Data Controller

For the purposes of applicable data protection law, okoak Casino is the data controller responsible for your personal information collected through the Platform. Our designated Data Protection Officer (DPO) can be reached through the contact details provided in Section 15 of this Policy.

Where okoak engages third-party service providers to process data on our behalf — for example, payment processors, identity verification services, or technology infrastructure providers — those parties act as data processors under okoak's instructions and are contractually bound to implement appropriate data protection safeguards.

3 Personal Data We Collect

okoak collects the following categories of personal data from players and Platform visitors. The specific data collected depends on your level of interaction with the Platform.

okoak does not intentionally collect sensitive personal information beyond what is strictly required for identity verification, fraud prevention, and regulatory compliance. We do not collect data relating to racial or ethnic origin, religious beliefs, political opinions, or biometric data beyond what is present in submitted identity documents.

4 How We Collect Your Data

okoak collects personal data through the following means:

4.1 Directly From You

The majority of personal data we hold about you is provided directly by you when you register an okoak account, complete identity verification, make a deposit or withdrawal request, contact our support team, or update your account profile. Providing accurate and complete information at each of these steps is both a contractual requirement and a regulatory obligation at okoak.

4.2 Automatically

When you access and use the okoak Platform, our systems automatically collect technical and usage data through cookies, server logs, and similar tracking technologies. This data helps us maintain the security and performance of the Platform, personalise your experience, and comply with our regulatory obligations. Refer to Section 12 for more detail on how okoak uses cookies.

4.3 From Third Parties

okoak may receive personal data about you from third-party identity verification providers, payment processors (including GCash and PayMaya), fraud prevention agencies, and — where required by law — from Philippine regulatory authorities including PAGCOR and relevant anti-money laundering bodies.

5 How We Use Your Personal Data

okoak uses the personal data we collect for the following purposes:

• Account Management: Creating, maintaining, and administering your okoak player account, including processing your okoak login credentials and OTP-based authentication.
• Identity Verification & KYC: Verifying your identity, confirming that you are at least 21 years of age, and meeting our Know Your Customer obligations under Philippine regulations.
• Transaction Processing: Processing deposits and withdrawal requests via GCash, PayMaya, BDO, BPI, and Metrobank; maintaining accurate financial records.
• Platform Operation: Delivering the games, services, and features of the okoak Platform; troubleshooting technical issues; optimising Platform performance.
• Regulatory Compliance: Meeting okoak's obligations under applicable Philippine law, including PAGCOR requirements, anti-money laundering rules, and data protection regulations.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour; facilitating deposit limits, self-exclusion requests, and cooling-off periods.
• Customer Support: Responding to your inquiries, resolving complaints, and improving our support quality based on interaction records.
• Marketing Communications: Sending you promotional offers, bonus notifications, and okoak platform updates — but only where you have expressly opted in to receive such communications. You may opt out at any time through your account settings.
• Analytics & Improvement: Analysing aggregated, anonymised usage data to improve the design, content, and functionality of the okoak Platform over time.

6 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, okoak processes your personal data on one or more of the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between you and okoak — i.e., delivering the Platform services you have agreed to use.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate Interests: Processing necessary for okoak's legitimate business interests — including fraud prevention, security monitoring, and Platform analytics — where those interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, and informed consent — most notably for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

7 Sharing Your Personal Data

okoak does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients, solely to the extent necessary for the purposes described in this Policy:

• Payment Processors: GCash, PayMaya, BDO, BPI, Metrobank, and other financial institutions required to process your transactions.
• Identity Verification Providers: Third-party KYC and age verification services engaged to confirm your identity and eligibility.
• Fraud Prevention & AML Services: Specialist agencies that assist okoak in detecting and preventing fraudulent transactions and money laundering.
• Technology and Infrastructure Partners: Cloud hosting providers, cybersecurity services, and software vendors who process data solely under okoak's instructions.
• Regulatory and Law Enforcement Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council, Philippine law enforcement agencies, and courts — where okoak is legally required to disclose information.
• Professional Advisers: Legal, accounting, and audit firms engaged by okoak under confidentiality obligations.

8 International Data Transfers

Some of okoak's technology and service providers operate from outside the Philippines. Where your personal data is transferred to countries that may not have equivalent data protection laws, okoak will ensure that appropriate safeguards are in place — including contractual protections consistent with NPC requirements — to protect your information to the same standard it receives within the Philippines.

You may request information about the safeguards applicable to any specific international transfer by contacting our Data Protection Officer using the details in Section 15.

9 Data Retention

okoak retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements imposed under Philippine law.

In general, okoak applies the following retention periods as a baseline:

• Active account data: Retained for the duration of your okoak account and for five (5) years after account closure, in line with standard Philippine financial recordkeeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years after your last transaction, as required by Philippine anti-money laundering regulations.
• Transaction records: Retained for five (5) years from the date of the transaction.
• Support and communications records: Retained for three (3) years from the date of the interaction, or longer where required in connection with an open dispute or investigation.
• Marketing preference data: Retained until you withdraw consent or close your account, whichever occurs first.

After applicable retention periods expire, okoak will securely delete or anonymise your personal data in accordance with industry best practices.

10 Security Measures

okoak implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure:

• 256-bit TLS Encryption: All data transmitted between your device and the okoak Platform is encrypted using the same standard applied by Philippine commercial banks.
• Password Hashing: okoak account passwords are stored using industry-standard cryptographic hashing. Plain-text passwords are never stored or transmitted.
• Two-Factor Authentication: All okoak accounts are protected by OTP-based two-factor authentication on unrecognised devices.
• Access Controls: Access to personal data within okoak is restricted to staff members whose role requires it, subject to strict internal authorisation controls.
• Security Monitoring: The Platform is continuously monitored for suspicious activity, intrusion attempts, and anomalous data access patterns.
• Regular Security Reviews: okoak conducts periodic internal and independent security assessments to identify and address potential vulnerabilities.

While okoak takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. If you believe your okoak account has been compromised, please contact our support team immediately.

11 Your Data Protection Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by okoak:

To exercise any of the rights listed above, please contact okoak's Data Protection Officer using the details in Section 15. We will respond to all valid data rights requests within thirty (30) days of receipt, or within such other period as permitted by applicable law. Identity verification may be required before a request is fulfilled to prevent unauthorised access to your data.

12 Cookies and Tracking Technologies

The okoak Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to collect analytical data about how players use the site.

12.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to operate. These include session management cookies that keep you logged into your okoak account and security cookies that support our authentication processes. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming configurations within your okoak account.
• Analytical Cookies: Collect anonymised data about how visitors interact with the okoak Platform to help us improve its performance and usability. No personally identifiable information is included in analytical reports.

12.2 Managing Cookies

You can control and manage cookies through your web browser settings. Most modern browsers allow you to refuse or delete cookies. However, disabling strictly necessary cookies may prevent you from logging into your okoak account or using core Platform features. Please refer to your browser's help documentation for instructions on cookie management.

13 Minors

The okoak Platform is strictly intended for individuals who are twenty-one (21) years of age or older, in compliance with applicable Philippine gambling regulations. okoak does not knowingly collect personal data from individuals under the age of 21.

All okoak accounts are subject to mandatory age verification. Where okoak discovers or has reasonable grounds to believe that personal data has been collected from a player under the age of 21, we will immediately suspend the account, delete the relevant data, and — where required by law — report the matter to the appropriate Philippine regulatory authority.

14 Changes to This Policy

okoak may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. Where changes are material, we will notify registered players by email to their registered address or by a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy will reflect the most recent revision. Your continued use of the okoak Platform following notification of any changes constitutes your acceptance of the updated Policy.

15 Contact Us & Filing Complaints

If you have questions, concerns, or requests regarding this Privacy Policy or the way okoak handles your personal data, please contact our Data Protection Officer:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Privacy Request – [Your Full Name]"
• Response Time: Within 30 days of receiving a valid request
• Support Availability: 24 hours a day, 7 days a week via live chat on the Platform

If you are not satisfied with okoak's response to a data protection concern, you have the right to lodge a formal complaint with the Philippine National Privacy Commission (NPC). Information about the NPC complaints process is available through official Philippine government channels.