oksgame Privacy Policy — How We Handle Your Personal Data

1 Introduction

oksgame is an online gaming platform accessible at oksgame.org, licensed and regulated by the Philippine Amusement and Gaming Corporation ("PAGCOR"). In operating the platform and providing gaming services to Filipino players, oksgame necessarily collects and processes personal information about its players, visitors, and prospective customers.

This Privacy Policy describes the personal data that oksgame collects, the purposes for which it is processed, the legal bases upon which processing is conducted, the parties with whom it may be shared, the period for which it is retained, and the rights available to you as a data subject under Philippine law. This policy applies to all personal data processed by oksgame in connection with the operation of the oksgame platform, regardless of the channel through which it was collected.

This policy is to be read alongside the oksgame Terms & Conditions, which govern your contractual relationship with us. In the event of any conflict between this Privacy Policy and the Terms & Conditions on matters relating to personal data, this Privacy Policy shall prevail.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, oksgame is the Personal Information Controller in respect of personal data collected through the oksgame platform. As Personal Information Controller, oksgame determines the purposes and means of processing personal data and is responsible for ensuring that all processing activities comply with applicable data privacy law.

oksgame has designated a Data Protection Officer ("DPO") who is responsible for overseeing the Company's data protection strategy and ensuring compliance with the DPA. Contact details for the DPO are provided in Section 15 of this Policy.

3 Personal Data We Collect

oksgame collects the following categories of personal data from players and visitors to the platform:

4 How We Collect Personal Data

oksgame collects personal data through the following means:

• Direct collection: Data you provide when you register for an oksgame account, complete KYC verification, make a deposit or withdrawal, contact our support team, respond to surveys, or participate in promotions.
• Automated collection: Technical data collected automatically when you access the oksgame platform, including through cookies, log files, and similar tracking technologies as described in Section 9.
• Third-party payment providers: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, and other approved payment processors when you make deposits or withdrawals.
• Identity verification services: Where oksgame engages third-party KYC or identity verification service providers to assist with age verification and document authentication, those providers may supply data back to oksgame as part of the verification process.
• PAGCOR and regulatory authorities: In limited circumstances, oksgame may receive data from PAGCOR or other regulatory authorities in connection with its licensing obligations, player dispute processes, or responsible gaming programmes.

5 Legal Basis for Processing

oksgame processes personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contractual obligations to you as an oksgame account holder — including account management, payment processing, game delivery, and customer support.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and any applicable taxation or financial reporting obligations.
• Legitimate interests: Processing conducted for the legitimate interests of oksgame where those interests are not overridden by your privacy rights — including fraud prevention, platform security, responsible gaming monitoring, and improvement of the platform's services.
• Consent: Processing of personal data for direct marketing communications (promotional emails, SMS) where required by law to be based on your consent. You may withdraw consent at any time as described in Section 11.

6 How We Use Your Personal Data

oksgame uses the personal data it collects for the following purposes:

6.1 Account Management and Service Delivery

To create and manage your oksgame account, verify your identity and age (21+), process deposits and withdrawals, deliver gaming services, provide customer support, and communicate with you about your account and transactions.

6.2 Legal and Regulatory Compliance

To comply with PAGCOR licensing requirements, including player registration reporting. To conduct due diligence and KYC checks as required under the Anti-Money Laundering Act. To detect, investigate, and report suspicious transactions to the Anti-Money Laundering Council ("AMLC") as required by law. To respond to lawful requests from regulatory authorities and law enforcement agencies.

6.3 Responsible Gaming and Player Protection

To monitor gaming activity for signs of problematic gambling behaviour, to enforce the responsible gaming tools you have set (deposit limits, loss limits, self-exclusion), to communicate with you about responsible gaming resources, and to comply with PAGCOR's responsible gaming framework. For more details, visit the Responsible Gaming page.

6.4 Fraud Prevention and Security

To detect and prevent fraud, money laundering, multi-account abuse, bonus exploitation, and other prohibited conduct. To protect the integrity of the oksgame platform and the interests of legitimate players.

6.5 Marketing Communications

To send you promotional offers, bonus notifications, news, and updates about oksgame — subject to your communication preferences and, where required by law, your consent. You may opt out of marketing communications at any time through your account settings.

6.6 Platform Improvement and Analytics

To analyse how players use the oksgame platform, identify technical issues, improve game offerings and user experience, and conduct internal research and development. Analytical data is used in aggregated, de-identified form wherever possible.

7 Sharing of Personal Data

oksgame does not sell, rent, or trade personal data. We share personal data only in the following circumstances:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, and other approved payment processors, for the purpose of processing your deposits and withdrawals. These providers process data only in accordance with their own privacy policies and as necessary for payment processing.
• Identity verification providers: Third-party KYC and identity verification services engaged to assist with age and document verification, as required by PAGCOR and AMLA obligations.
• Technology and platform providers: Software vendors, game content providers, cloud hosting services, and IT support contractors who provide technology services to oksgame under contractual data processing agreements that require them to maintain the security and confidentiality of player data.
• PAGCOR: Player registration data, gaming activity reports, and other information as required to be submitted to PAGCOR under the terms of our gaming licence.
• AMLC and law enforcement: Suspicious transaction reports and player data as required by the Anti-Money Laundering Act of 2001 (as amended) and upon receipt of valid legal process from competent Philippine authorities.
• Professional advisors: Lawyers, accountants, auditors, and insurers acting in their professional capacity, subject to confidentiality obligations.

8 Data Retention

oksgame retains personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, to maintain an active account relationship with you, and to comply with legal and regulatory obligations. The following retention principles apply:

• Active accounts: Personal data is retained for the duration of your active oksgame account relationship.
• Closed accounts: Following account closure, oksgame retains personal data — including KYC documentation, transaction records, and gaming activity logs — for a minimum of five (5) years in accordance with PAGCOR requirements and the Anti-Money Laundering Act. Where a longer retention period is required by law, that period shall apply.
• Technical and log data: Server logs and technical data are retained for a period of up to twenty-four (24) months for security, fraud investigation, and dispute resolution purposes.
• Responsible gaming records: Self-exclusion requests and responsible gaming correspondence are retained for a minimum period sufficient to give effect to the exclusion and to prevent re-registration during the exclusion period.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data is no longer subject to this Privacy Policy.

9 Cookies and Tracking Technologies

The oksgame platform uses cookies and similar tracking technologies to operate the platform, personalise your experience, and maintain the security and integrity of sessions. The following types of cookies are used:

• Strictly necessary cookies: Essential to the operation of the oksgame platform. These include session cookies that keep you logged in, security tokens that protect against cross-site request forgery, and cookies that remember your language and display preferences. These cookies cannot be disabled without affecting core platform functionality.
• Functional cookies: Remember your preferences such as game settings, display options, and responsible gaming tool configurations to provide a more personalised experience on return visits.
• Analytics cookies: Used by oksgame to understand how the platform is used, which pages are most visited, and where users encounter difficulties, in order to improve the platform. Analytics data is collected in aggregate and does not identify individual users by name.
• Security cookies: Support fraud detection, bot prevention, and account security monitoring functions on the platform.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the oksgame platform and may prevent you from logging in or completing transactions.

10 Data Security

oksgame implements technical and organisational security measures appropriate to the sensitivity of the personal data processed and the risks associated with online gaming platforms. These measures include:

• SSL/TLS encryption for all data transmitted between player devices and oksgame servers.
• Encryption of sensitive personal data — including government ID information and financial account details — at rest in oksgame's database systems.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Real-time security monitoring and intrusion detection systems on the oksgame platform infrastructure.
• Regular penetration testing and security audits conducted by independent security professionals.
• Staff training on data protection, phishing awareness, and secure data handling practices.

11 Your Data Subject Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by oksgame:

• Right to Access: You may request a copy of the personal data that oksgame holds about you, together with information about how it is processed.
• Right to Correction: You may request that inaccurate or incomplete personal data be corrected or updated. You may also update your contact details directly through your oksgame account settings.
• Right to Erasure: You may request that your personal data be deleted where it is no longer necessary for the purposes for which it was collected, subject to oksgame's legal and regulatory retention obligations (see Section 8). Erasure may not be possible where data must be retained under PAGCOR requirements or AMLA obligations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you have grounds related to your particular situation.
• Right to Data Portability: You may request that personal data you have provided to oksgame be provided to you in a commonly used, structured, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, please contact our Data Protection Officer as described in Section 15. oksgame will respond to all valid data subject requests within thirty (30) days of receipt. We may require you to verify your identity before processing your request. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

12 Children's and Minors' Privacy

The oksgame platform is strictly intended for individuals aged 21 years and above, in accordance with PAGCOR regulations and Philippine law governing online gambling. oksgame does not knowingly collect personal data from persons under 21 years of age. Age verification is conducted as part of the account registration and KYC process.

If oksgame becomes aware that personal data has been collected from a person under the age of 21, it will take prompt steps to delete that data and close the associated account. If you believe that a minor has registered for or is using an oksgame account, please notify us immediately at [email protected].

13 Third-Party Links and Services

The oksgame platform may contain references to or integrations with third-party services — including payment processors such as GCash and PayMaya, and game software providers. When you interact with these third-party services, you may be subject to their own privacy policies and terms of use.

oksgame is not responsible for the privacy practices or data handling of third-party services. We encourage you to review the privacy policies of any third-party services you use in connection with your oksgame account, particularly your payment provider's policy. oksgame selects its third-party service providers carefully and requires them to maintain appropriate data security standards under contractual data processing agreements.

14 Amendments to This Privacy Policy

oksgame reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, oksgame will notify registered players via the email address or mobile number on their account at least fourteen (14) days before the changes take effect, except where a shorter notice period is required by law.

The current version of this Privacy Policy is always available at oksgame.org/privacy-policy and is dated with its effective date at the top of this document. Your continued use of the oksgame platform after the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy.

15 Contact and Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by oksgame, please contact our Data Protection Officer:

• Data Protection Officer, oksgame
• Email: [email protected]
• Platform: oksgame.org
• Response time: Within 30 days of receipt of your request

If you are not satisfied with our response to a data privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph). The NPC is the independent regulatory authority responsible for administering and enforcing the Data Privacy Act of 2012.

For matters related to responsible gaming or self-exclusion, please visit our Responsible Gaming page or contact the support team directly.