oakplay Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how oakplay ("oakplay," "we," "us," or "our") collects, processes, stores, and protects the personal information of users ("you," "Player," or "User") who access or use the oakplay website at oakplay.org and all associated services, games, and features (collectively, the "Platform").

This Policy applies to all personal information collected through the Platform, whether provided directly by you during registration, collected automatically through your use of the Platform, or obtained from third-party sources in connection with your account. It should be read together with the oakplay Terms and Conditions.

We take our obligations under Philippine data privacy law seriously. If you have questions about how we handle your personal data, please refer to Section 14 for our contact details.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, oakplay acts as the Personal Information Controller in respect of the personal data collected through the Platform. This means oakplay determines the purposes and means of processing your personal information.

Where oakplay engages third-party service providers to process personal data on its behalf (for example, payment processors or KYC verification providers), those parties act as Personal Information Processors and are contractually bound to process your data only in accordance with oakplay's instructions and applicable law.

3 Personal Data We Collect

oakplay collects the following categories of personal data:

3.1 Identity and Contact Information

• Full legal name as it appears on your government-issued ID;
• Date of birth (for age verification — you must be 21 or older);
• Philippine mobile number and email address;
• Residential address (province, city/municipality, barangay);
• Government-issued ID type and number (e.g., PhilSys National ID, passport, driver's license).

3.2 Financial Information

• GCash or PayMaya registered mobile number and account name;
• Bank account details (bank name, account name) for bank transfer transactions;
• Transaction history including deposits, withdrawals, and wager records.

3.3 Technical and Usage Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Session duration, pages visited, and features used on the Platform;
• Login timestamps and access logs.

3.4 Communications Data

• Records of your communications with oakplay customer support;
• Feedback, survey responses, and promotional opt-in preferences.

4 How We Collect Your Data

oakplay collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or participate in promotions;
• Automatically: Through cookies, web beacons, and similar tracking technologies when you access and use the Platform (see Section 10);
• From third parties: From KYC verification service providers, payment processors (GCash, PayMaya, banks), and fraud prevention services, where necessary to verify your identity or process transactions;
• From publicly available sources: Where permitted by law, from publicly available government databases or registries for identity verification purposes.

5 Purpose and Legal Basis for Processing

oakplay processes your personal data for the following purposes and on the following legal bases:

oakplay will not process your personal data for purposes incompatible with those listed above without first obtaining your consent or establishing another lawful basis.

6 Sharing Your Personal Data

oakplay does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors: GCash, PayMaya (Maya), and participating Philippine banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to facilitate deposits and withdrawals;
• KYC and identity verification providers: Third-party services engaged to verify your identity and age in compliance with PAGCOR requirements;
• Fraud prevention and AML service providers: To detect and prevent fraudulent activity and money laundering;
• Game software providers: Licensed game studios whose titles are available on the Platform, to the extent necessary to deliver gameplay and resolve disputes;
• Customer support platforms: Third-party helpdesk tools used to manage and respond to your support inquiries;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where required by law or regulation;
• Law enforcement: Where oakplay is legally compelled to disclose information in response to a valid court order, subpoena, or other legal process.

All third-party processors engaged by oakplay are required to implement appropriate technical and organizational security measures and to process personal data only in accordance with oakplay's documented instructions.

7 Data Retention

oakplay retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and regulation. Specifically:

• Account and KYC records: Retained for a minimum of five (5) years following account closure, in accordance with PAGCOR licensing requirements and the Anti-Money Laundering Act;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Customer support communications: Retained for three (3) years from the date of the last interaction;
• Marketing preferences: Retained until you withdraw your consent or close your account, whichever is earlier.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with oakplay's data disposal procedures, unless further retention is required by a specific legal obligation.

8 Data Security

oakplay implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the oakplay Platform;
• Encryption of sensitive data fields (including financial information) at rest;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of Platform infrastructure;
• Multi-factor authentication requirements for administrative access to systems containing personal data.

9 Your Data Privacy Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by oakplay:

• Right to be Informed: You have the right to be informed of how your personal data is being collected and processed, as set out in this Policy;
• Right of Access: You may request a copy of the personal data oakplay holds about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure or Blocking: You may request deletion or blocking of your personal data where processing is no longer necessary, subject to oakplay's legal retention obligations;
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time;
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact oakplay's Data Protection Officer using the contact details in Section 14. We will respond to your request within fifteen (15) business days. We may need to verify your identity before processing your request.

10 Cookies and Tracking Technologies

oakplay uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and support security functions. The following types of cookies may be used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly, including session management and security tokens. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and login state to provide a more personalized experience.
• Analytics Cookies: Collect aggregated, anonymized data about how users interact with the Platform to help us improve performance and usability.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity verification.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. oakplay does not use cookies to serve third-party advertising.

11 Minors

The oakplay Platform is strictly intended for persons aged 21 years and above, in accordance with PAGCOR regulations governing online gambling in the Philippines. oakplay does not knowingly collect personal data from individuals under the age of 21.

If oakplay becomes aware that personal data has been collected from a person under 21 years of age, the relevant account will be immediately suspended, the data will be deleted, and any funds associated with the account may be forfeited in accordance with applicable regulations. If you believe a minor has registered on the Platform, please contact us immediately using the details in Section 14.

12 Cross-Border Data Transfers

Some of oakplay's third-party service providers (such as game software providers or cloud infrastructure partners) may be located outside the Philippines. Where personal data is transferred to a country that does not provide an equivalent level of data protection to that afforded under Philippine law, oakplay will implement appropriate safeguards — such as contractual clauses approved by the National Privacy Commission — to ensure your data remains protected to the standard required by the Data Privacy Act of 2012.

oakplay will not transfer your personal data to jurisdictions that are subject to international sanctions or that are known to present unacceptable data protection risks without your explicit consent.

13 Changes to This Privacy Policy

oakplay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email or a prominent notice on the Platform, and the "Last Updated" date at the top of this page will be revised accordingly.

Your continued use of the Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how oakplay protects your personal data.

14 Contact Our Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by oakplay, please contact our designated Data Protection Officer (DPO):

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. Information on how to file a complaint is available on the NPC's official website.