Data Privacy · RA 10173 · PAGCOR Licensed

OkadaPlay Privacy Policy — How We Keep Your Personal Data Safe

Your privacy matters to us — genuinely. This Privacy Policy explains exactly what personal information OkadaPlay collects when you use our platform, how we use it, who we may share it with, and what rights you have over your own data under the Philippine Data Privacy Act of 2012 (Republic Act 10173).

Effective: January 2025 RA 10173 Compliant PAGCOR Licensed

What You Need to Know Right Away

Here's the short version of OkadaPlay's privacy approach. Please read the full policy below for everything that applies to your account.

We Collect Only What We Need
OkadaPlay collects personal data solely to operate your account, verify your identity, process payments, and comply with PAGCOR and AML regulations. Nothing extra.
We Never Sell Your Data
OkadaPlay does not sell, rent, or trade your personal information to third-party marketing companies. Your data is used to run your account — full stop.
Your Data Stays Under PH Law
All data processing by OkadaPlay is governed by the Philippine Data Privacy Act (RA 10173) and its Implementing Rules and Regulations.
You Control Your Information
You have the right to access, correct, and request deletion of your personal data held by OkadaPlay, subject to legal retention requirements.
SSL Encryption on Everything
All data transmitted between your device and OkadaPlay is encrypted using 256-bit SSL. Your login credentials, financial data, and personal details travel securely.
You Can Opt Out of Marketing
If OkadaPlay sends you promotional emails or SMS notifications, you can opt out at any time. Your account will not be affected by unsubscribing from marketing communications.
okadaplay
1

Who We Are — OkadaPlay as Data Controller

OkadaPlay (hereinafter "OkadaPlay," "we," "us," or "our") is the operator of the online gaming platform accessible at okadaplay.xyz. OkadaPlay is licensed by the Philippine Amusement and Gaming Corporation (PAGCOR) and operates in compliance with Philippine law, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations issued by the National Privacy Commission (NPC).

For the purposes of RA 10173, OkadaPlay acts as the personal information controller with respect to all personal data collected from players registered on the platform. This means OkadaPlay determines the purpose and means of processing your personal information and is responsible for ensuring that your rights as a data subject are protected.

This Privacy Policy applies to all persons who register for, access, or use the OkadaPlay platform — including persons who browse the website without creating an account, though the data we collect in those cases is more limited.

By creating an OkadaPlay account or continuing to use our platform after being notified of changes to this Privacy Policy, you acknowledge that you have read and understood how OkadaPlay handles your personal data as described here.

2

What Personal Data OkadaPlay Collects

OkadaPlay collects the following categories of personal data from players. The specific data collected depends on whether you are browsing the site, registering an account, making a deposit, or undergoing KYC verification.

CategoryExamplesWhen Collected
Identity DataFull legal name, date of birth, nationality, genderRegistration & KYC verification
Contact DataMobile number, email address, residential addressRegistration
Identity Document DataGovernment ID number, ID type, document imagesKYC verification (on request)
Financial DataGCash number, Maya account, bank account details (last 4 digits), transaction historyDeposit / withdrawal processing
Account DataUsername, password (hashed), account preferences, session historyAccount creation & ongoing use
Gaming Activity DataGame history, bet amounts, win/loss records, bonus usageDuring gaming activity
Technical DataIP address, device type, browser, operating system, geolocation (country level)Automatic — on each session
Communication DataSupport chat transcripts, emails sent to/from OkadaPlayWhen you contact support

OkadaPlay does not collect sensitive personal information as defined under RA 10173 (such as health data, political affiliations, or biometric data) unless specifically required for legal compliance purposes and disclosed separately at the point of collection.

3

How OkadaPlay Collects Your Data

OkadaPlay collects personal data through the following methods:

  • Directly from you: When you register an account, make a deposit, submit a withdrawal request, contact customer support, or respond to a survey or promotion on OkadaPlay.
  • Automatically through technology: When you access OkadaPlay, our servers automatically log technical data such as your IP address, device identifiers, browser type, and session timing. This is standard web server practice and applies to most websites you visit.
  • Through cookies and similar technologies: OkadaPlay uses cookies and similar tracking tools to maintain your session, remember your preferences, and analyse how the platform is being used. See Section 7 for full details on cookies.
  • From third-party payment processors: When you make a deposit or withdrawal via GCash, Maya, or a Philippine bank, OkadaPlay receives confirmation and reference data from the payment provider. We do not receive or store your full GCash PIN, password, or OTP.
  • From identity verification partners: For KYC purposes, OkadaPlay may use third-party identity verification services that process document images to confirm authenticity.
okadaplay
4

How OkadaPlay Uses Your Personal Data

OkadaPlay processes your personal data for the following specific purposes, all of which are directly connected to operating a PAGCOR-licensed gaming platform in the Philippines:

  • Account management: Creating and maintaining your OkadaPlay player account, processing login and authentication, managing account preferences.
  • Identity verification and KYC: Confirming your identity to comply with PAGCOR licensing conditions and Anti-Money Laundering Act (AMLA) requirements. KYC is mandatory before first withdrawal for accounts that meet transaction thresholds.
  • Payment processing: Processing your deposits and withdrawals via GCash, Maya, and Philippine banks. Verifying that payment accounts belong to you to prevent fraud and comply with AML obligations.
  • Gaming services: Providing access to casino games, sports betting markets, and live dealer tables. Maintaining fair game records and settling bets accurately.
  • Bonuses and promotions: Administering OkadaPlay bonuses, tracking wagering progress, and applying promotional credits to your account.
  • Customer support: Responding to your queries, resolving disputes, and providing account assistance through live chat and email.
  • Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour. Enforcing deposit limits and self-exclusion requests you have set on your account.
  • Security and fraud prevention: Detecting and investigating suspicious account activity, unauthorised access attempts, and potential fraud or money laundering.
  • Legal and regulatory compliance: Fulfilling OkadaPlay's obligations under PAGCOR licensing, AMLA, RA 10173, and any other applicable Philippine law.
  • Marketing communications (optional): Sending you information about OkadaPlay promotions, new games, and special offers — only if you have consented to receive marketing communications. You can opt out at any time.
  • Platform improvement: Analysing anonymised and aggregated usage data to improve the OkadaPlay platform, user experience, and product offering.

OkadaPlay does not use your personal data to make automated decisions that produce legal effects concerning you, other than standard fraud-detection scoring that may trigger manual review.

5

Legal Basis for Processing Under RA 10173

Under the Philippine Data Privacy Act, OkadaPlay must have a lawful basis for each processing activity. The legal bases OkadaPlay relies on are:

  • Contractual necessity: Processing required to deliver the services you signed up for when you created an OkadaPlay account — including account management, payment processing, game access, and customer support.
  • Legal obligation: Processing required to comply with PAGCOR licensing conditions, Anti-Money Laundering Act obligations, and other applicable Philippine regulations. OkadaPlay cannot provide services or waive these obligations on a player's request.
  • Legitimate interest: Processing for fraud prevention, platform security, and internal analytics — where OkadaPlay's interest in maintaining a secure and functional platform is balanced against your privacy rights.
  • Consent: Where OkadaPlay relies on your consent — primarily for marketing communications — you may withdraw consent at any time without affecting the legality of processing carried out before withdrawal or the operation of your account.
6

Sharing Your Personal Data

OkadaPlay does not sell your personal data. We share your data only in the following limited circumstances, and only to the extent necessary for the specific purpose:

  • PAGCOR and Philippine government authorities: OkadaPlay is required to share player data with PAGCOR as part of its licensing obligations. We are also required to disclose information to the AMLC (Anti-Money Laundering Council), BIR, or other Philippine government agencies upon valid legal request.
  • Payment processors: OkadaPlay shares necessary transaction data with GCash, Maya, GrabPay, Philippine banks, and card networks to process deposits and withdrawals. These processors handle your data under their own privacy policies and applicable Philippine law.
  • KYC and identity verification partners: Third-party services that assist with document verification for PAGCOR KYC compliance. These partners are bound by data processing agreements that restrict their use of your data to the verification purpose only.
  • Game software providers: Third-party game developers whose games are hosted on the OkadaPlay platform may receive anonymised session data for game integrity and performance purposes. They do not receive your name, contact details, or payment information.
  • IT and infrastructure providers: Cloud hosting, security, and analytics providers used to operate and protect the OkadaPlay platform. All such providers are contractually bound to process data only on OkadaPlay's instructions.
  • Professional advisors: Lawyers, auditors, and accountants in connection with legal proceedings or regulatory compliance, under professional confidentiality obligations.

OkadaPlay will never share your personal information with marketing agencies, data brokers, or unaffiliated third parties for advertising purposes without your explicit prior consent.

7

Cookies and Tracking Technologies

OkadaPlay uses cookies and similar tracking technologies on its website. Cookies are small text files stored on your device that help the platform function correctly and improve your experience.

Cookie TypePurposeCan You Opt Out?
Strictly NecessarySession management, login state, security tokens. Required for the platform to function at all.No — disabling these breaks core functions
FunctionalRemembering your language preferences, game layout settings, and notification preferences.Yes — at the cost of re-entering preferences each session
AnalyticsAnonymised data on how players navigate OkadaPlay, which games are most popular, and where errors occur. Used to improve the platform.Yes — via browser settings or OkadaPlay cookie preferences
Marketing / RetargetingOnly used if you have consented to receive personalised OkadaPlay promotions. Not shared with external ad networks.Yes — withdraw consent at any time

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your OkadaPlay account. For all other cookie types, disabling them won't affect your ability to play.

okadaplay
8

How OkadaPlay Protects Your Data

OkadaPlay implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, loss, or alteration:

  • 256-bit SSL encryption: All data transmitted between your device and OkadaPlay's servers is encrypted in transit. Look for the padlock icon in your browser's address bar when accessing okadaplay.xyz.
  • Password hashing: OkadaPlay never stores your password in plain text. Passwords are processed through a one-way cryptographic hash function — even OkadaPlay employees cannot read your password.
  • Access controls: Internal access to player data is restricted on a strict need-to-know basis. Only OkadaPlay employees who require access to perform their specific job function can view player account data, and all access is logged.
  • Two-factor authentication: OkadaPlay supports two-factor authentication (2FA) on player accounts. We strongly recommend enabling this feature to add an additional layer of security to your account.
  • Regular security audits: OkadaPlay conducts periodic technical security reviews and penetration testing to identify and address vulnerabilities in the platform.
  • Data breach response: In the event of a personal data breach that poses a real risk to affected players, OkadaPlay will notify the National Privacy Commission (NPC) within 72 hours and notify affected players within a reasonable timeframe as required by RA 10173.

Security is a shared responsibility. Always use a strong, unique password for your OkadaPlay account and never share your login credentials with anyone. OkadaPlay will never ask for your password via email, SMS, or chat.

9

How Long OkadaPlay Keeps Your Data

OkadaPlay retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Philippine law and PAGCOR regulatory requirements.

  • Account data: Retained for the duration of your active OkadaPlay account, plus a minimum of 5 years after account closure — as required by PAGCOR licensing conditions and AMLA record-keeping obligations.
  • Financial transaction records: Retained for a minimum of 5 years in compliance with the Anti-Money Laundering Act of 2001 (RA 9160 as amended).
  • KYC documents: Retained for the duration of the account plus 5 years post-closure, or longer if required by a specific PAGCOR or AMLC directive.
  • Marketing consent records: Retained until you withdraw consent, plus a reasonable period afterward to demonstrate that marketing was sent with valid consent.
  • Technical / server logs: Retained for up to 12 months for security monitoring and fraud investigation purposes, then deleted or anonymised.
  • Support communications: Retained for 3 years to assist with dispute resolution and ongoing account management.

After the applicable retention period, OkadaPlay will securely delete or anonymise your personal data. Anonymised data (which cannot be linked back to any individual) may be retained indefinitely for statistical and analytics purposes.

10

Your Rights as a Data Subject Under RA 10173

Under the Philippine Data Privacy Act, you have the following rights with respect to the personal data OkadaPlay holds about you. These rights can be exercised by contacting our Data Protection Officer (see Section 14).

Right to Access
Request a copy of your data
You can request a copy of the personal information OkadaPlay holds about you, along with information about how it is being processed.
Right to Correction
Update inaccurate data
If any personal data OkadaPlay holds is inaccurate or incomplete, you have the right to request correction. Minor contact updates can also be made directly in your account settings.
Right to Erasure
Request deletion of your data
You can request deletion of your personal data when it is no longer necessary for the purpose it was collected. This right is subject to our legal retention obligations under PAGCOR and AMLA.
Right to Object
Object to certain processing
You can object to OkadaPlay processing your data for marketing purposes or processing based on legitimate interest. Objecting to legally required processing (PAGCOR compliance) may require account closure.
Right to Portability
Receive your data in a usable format
You can request your personal data in a structured, commonly used electronic format where technically feasible.
Right to Complain
Lodge a complaint with the NPC
If you believe OkadaPlay has handled your personal data in violation of RA 10173, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact our Data Protection Officer at privacy@okadaplay.xyz. OkadaPlay will acknowledge receipt within 3 business days and respond substantively within 30 calendar days of receiving a valid request.

11

Children's Privacy — No Access Under 18

OkadaPlay is strictly an 18+ platform. We do not knowingly collect, process, or retain personal data from persons under 18 years of age. The OkadaPlay registration process requires age confirmation, and accounts for which we receive evidence of underage registration are immediately suspended.

If a parent or guardian believes their minor child has created an OkadaPlay account or submitted personal data to our platform, please contact us immediately at support@okadaplay.xyz. We will investigate and delete any data confirmed to belong to a minor within 10 business days.

12

Third-Party Links and External Platforms

The OkadaPlay platform does not contain links to external third-party websites for general browsing purposes. The only external connections are to Philippine payment processors (GCash, Maya, etc.) that are necessary to complete financial transactions.

When you are redirected to a payment provider's interface to complete a deposit or verify your payment account, that provider's own privacy policy governs how your data is handled on their platform. OkadaPlay is not responsible for the privacy practices of payment providers once you are on their own interface. We recommend reviewing the privacy policies of GCash, Maya, and any other payment service you use.

13

Updates to This Privacy Policy

OkadaPlay may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. When we make material changes, we will:

  • Update the "Effective Date" at the top of this page
  • Notify registered OkadaPlay players via email and/or a notice displayed upon login
  • Keep the previous version accessible upon request for a reasonable period

Your continued use of OkadaPlay after the effective date of an updated Privacy Policy constitutes your acknowledgement of the changes. If you disagree with material changes, you may request account closure by contacting customer support.

14

Contact Us — Data Protection Officer

OkadaPlay has designated a Data Protection Officer (DPO) as required under the Implementing Rules and Regulations of RA 10173. The DPO is responsible for ensuring OkadaPlay's compliance with Philippine data privacy law and is your primary contact for any privacy-related matter.

  • Privacy / DPO email: privacy@okadaplay.xyz
  • General support: support@okadaplay.xyz
  • Live chat: Available 24/7 within the OkadaPlay platform (login required)
  • Response time: Initial acknowledgement within 3 business days; substantive response within 30 calendar days

If your concern is not resolved to your satisfaction through OkadaPlay's internal process, you have the right to escalate to the National Privacy Commission of the Philippines (NPC) — the government body responsible for administering and enforcing RA 10173.

For account-related matters — deposits, withdrawals, bonuses, or game disputes — please contact OkadaPlay's general customer support team rather than the DPO, as these are handled by the operations team.

Six Ways OkadaPlay Protects Filipino Players' Data

Beyond legal compliance, OkadaPlay genuinely believes your personal information should be handled with respect. Here's what that looks like in practice.

Full RA 10173 Compliance

OkadaPlay's data practices are built around the Philippine Data Privacy Act from the ground up — not retrofitted after the fact. We have a registered Data Protection Officer, maintain a data processing inventory, and have implemented the required organisational and technical security measures that the National Privacy Commission requires of personal information controllers.

256-bit SSL — Always On

Every page of OkadaPlay, every transaction, every live chat message, and every API call is protected by 256-bit SSL encryption. Your financial details, login credentials, and personal information are never transmitted over an unencrypted connection while using OkadaPlay.

Passwords Are Never Stored in Plain Text

OkadaPlay uses industry-standard one-way cryptographic hashing for all player passwords. This means that even if someone gained unauthorised access to OkadaPlay's database, your password would remain unreadable. Not even OkadaPlay's own staff can retrieve your password.

Strict Internal Access Controls

Access to player account data within OkadaPlay is strictly limited to staff who have a demonstrated operational need. All data access is logged and periodically audited. No employee can access player financial or identity data for personal purposes — and attempting to do so is a termination offence.

Zero Data Sales — Guaranteed

OkadaPlay operates on a simple policy: your personal data is used to run your account and comply with Philippine law. Nothing more. We have never sold player data and have no commercial arrangement with any third party that involves the sale or sharing of identifiable player information for marketing purposes.

Transparent Breach Notification

In the unlikely event of a data security breach that could harm you, OkadaPlay commits to notifying affected players promptly and reporting to the NPC within 72 hours as required by RA 10173 — not burying it, not delaying, not hoping nobody notices. Transparency in difficult moments is part of how we earn your trust.

Your Privacy is Protected at OkadaPlay — Join 500,000+ Filipino Players

OkadaPlay is built on transparency and trust. Your data stays in the Philippines, protected under RA 10173. Register today and claim your 150% welcome bonus of up to ₱50,000.

RA 10173 Compliant 256-bit SSL PAGCOR Licensed 18+ Only