oklj Privacy Policy

1. Introduction

oklj ("the Company", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who access or use the oklj platform (accessible at oklj.app and all associated subdomains and mobile interfaces, collectively the "Platform"). This Privacy Policy ("Policy") describes how we collect, use, store, share, and protect your personal information when you interact with the Platform.

This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). By registering on or using the Platform, you acknowledge that you have read, understood, and consent to the practices described in this Policy.

This Policy should be read together with the oklj Terms & Conditions, which govern your use of the Platform. Capitalised terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

2. Personal Data We Collect

oklj collects personal data that you provide directly to us, as well as data that is generated automatically through your use of the Platform. The categories of personal data we collect include:

• Identity Data: Full name, date of birth, gender, nationality, and government-issued identification numbers (e.g., Philippine National ID, passport, driver's licence, SSS/GSIS number).
• Contact Data: Email address, mobile number, and residential address (including city, province, and postal code).
• Financial Data: Payment method details (e.g., GCash account number, PayMaya account, BPI/BDO/Metrobank account details), transaction history, deposit and withdrawal records, and account balance information.
• Account Data: Username, encrypted password, account preferences, communication preferences, and responsible gaming settings.
• Technical Data: IP address, device type, operating system, browser type and version, time zone, and session data collected automatically when you access the Platform.
• Usage Data: Information about how you use the Platform, including games played, wagers placed, session duration, pages visited, and features accessed.
• Communications Data: Records of your communications with oklj customer support, including live chat transcripts, email correspondence, and support ticket history.
• Verification Data: Copies of identity documents, proof of address, and source of funds documentation submitted during the Know Your Customer (KYC) verification process.

We do not collect sensitive personal information (as defined under the DPA) unless strictly necessary for compliance with our legal obligations, such as anti-money laundering (AML) requirements. Where such data is collected, we apply heightened security measures and process it only on the basis of explicit consent or legal obligation.

3. How We Use Your Personal Data

oklj uses your personal data for the following purposes:

• To create, verify, and manage your player account on the Platform.
• To process deposits, withdrawals, and other financial transactions via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods.
• To verify your identity and age (21 years or older) in compliance with Philippine gaming regulations and our KYC obligations.
• To detect, investigate, and prevent fraud, money laundering, and other illegal activities in accordance with the Anti-Money Laundering Act (AMLA) of the Philippines.
• To provide customer support and respond to your enquiries, complaints, and feedback.
• To send you transactional communications, including account notifications, deposit confirmations, and withdrawal updates.
• To send you marketing communications about oklj promotions, bonuses, and new games, where you have provided consent or where we have a legitimate interest in doing so.
• To personalise your experience on the Platform, including recommending games and promotions relevant to your preferences.
• To monitor and analyse Platform usage for the purposes of improving our services, fixing technical issues, and enhancing security.
• To comply with our legal and regulatory obligations, including reporting requirements under PAGCOR regulations and the DPA.
• To enforce our Terms & Conditions and protect the rights, property, and safety of oklj, our players, and third parties.

4. Legal Basis for Processing

oklj processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary for the performance of our contract with you (the Terms & Conditions), including account management, payment processing, and game provision.
• Legal Obligation: Processing is necessary to comply with our legal obligations under Philippine law, including AML regulations, PAGCOR requirements, and tax reporting obligations.
• Legitimate Interests: Processing is necessary for our legitimate interests in operating a secure and compliant gaming platform, preventing fraud, and improving our services, provided such interests are not overridden by your rights and freedoms.
• Consent: Where we rely on your consent as the legal basis for processing (e.g., for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Sharing Your Personal Data

oklj does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your financial transactions.
• Identity Verification Providers: Third-party KYC and AML service providers engaged to assist with identity verification and fraud prevention.
• Technology Providers: Cloud hosting, data storage, and software service providers who process data on our behalf under strict data processing agreements.
• Game Providers: Third-party game developers and live dealer studios whose games are made available on the Platform, to the extent necessary for game operation and fairness auditing.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other Philippine government authorities, where required by law.
• Law Enforcement: Philippine law enforcement agencies, where we are legally required or permitted to disclose personal data in connection with the investigation or prosecution of criminal offences.

All third parties with whom we share personal data are required to maintain the confidentiality and security of that data and to process it only for the purposes for which it was shared.

6. Cookies and Tracking Technologies

oklj uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience on the Platform, remember your preferences, maintain your session, and analyse how the Platform is used. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function correctly, including session management and security features. These cannot be disabled.
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming limits.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players use the Platform, helping us identify areas for improvement.
• Marketing Cookies: Used to deliver relevant promotional content based on your interests and usage patterns, where you have provided consent.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For more information on managing cookies, refer to your browser's help documentation.

7. Data Retention

oklj retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The specific retention periods we apply are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR and AMLC record-keeping requirements.
• Financial transaction data: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and BIR regulations.
• KYC verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the last interaction, unless a longer period is required for the resolution of a dispute.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of the consent given.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in accordance with our data disposal procedures.

8. Data Security

oklj implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Staff training on data privacy obligations and secure data handling practices.

While oklj takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. We encourage you to use a strong, unique password for your oklj account and to enable any additional security features available in your account settings.

9. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by oklj:

• Right to be Informed: You have the right to be informed of how your personal data is being collected and processed, as set out in this Policy.
• Right of Access: You have the right to request a copy of the personal data oklj holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 13 of this Policy. We will respond to all verified requests within thirty (30) days of receipt, in accordance with NPC guidelines.

10. Children's Privacy

The oklj Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately close the relevant account, return any deposits, and securely delete the associated personal data.

If you are a parent or guardian and believe that your child has registered on the Platform, please contact our support team immediately so that we can take appropriate action.

11. International Data Transfers

oklj primarily processes and stores personal data within the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines — for example, to cloud infrastructure providers or international game studios — we ensure that such transfers are carried out in accordance with the Data Privacy Act of 2012 and NPC regulations, including through the use of appropriate contractual safeguards such as data processing agreements that impose data protection standards equivalent to those required under Philippine law.

By using the Platform, you acknowledge and consent to the transfer of your personal data to recipients outside the Philippines where necessary for the purposes described in this Policy, subject to the safeguards described above.

12. Changes to This Privacy Policy

oklj reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. Material changes will be communicated to registered players via email or prominent notice on the Platform at least seven (7) days prior to taking effect, except where immediate amendment is required by law or regulatory directive.

The date of the most recent revision is displayed at the top of this Policy. We encourage you to review this Policy periodically to stay informed about how oklj protects your personal data. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

13. Contact and Data Protection Officer

oklj has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Policy, you may contact our DPO at:

If you are not satisfied with our response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information about the NPC and how to file a complaint is available through official Philippine government channels.