Privacy Policy —
How okpiso Handles Your Data

01 Introduction

okpiso ("we", "us", "our") is the operator of the online gaming and sports betting platform accessible at okpiso.ws (the "Platform"). We are committed to protecting the privacy and security of the personal data of all users, visitors, and account holders ("you", "your", "User") in accordance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations.

This Privacy Policy describes the categories of personal data we collect, the purposes for which we process it, the conditions under which we may share it, the security measures we have in place, and the rights available to you as a data subject under Philippine law.

This Policy should be read alongside the okpiso Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

02 Data We Collect

okpiso collects the following categories of personal data from users of the Platform:

03 How We Collect Data

okpiso collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically via cookies, server logs, and similar tracking technologies when you access and interact with the Platform.
• Third-party sources: Identity verification data received from our KYC provider; fraud risk signals from payment processors; publicly available information used to validate identity details where required for AML compliance.
• Payment providers: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, and cryptocurrency network APIs to reconcile deposit and withdrawal records.

04 How We Use Your Data

okpiso processes your personal data for the following purposes:

4.1 Account Administration

To create and maintain your okpiso account, verify your identity, process your deposits and withdrawals, manage your bonus entitlements, and communicate important account notifications.

4.2 Regulatory & Legal Compliance

To fulfil our obligations under Philippine anti-money laundering (AML) laws, the PAGCOR regulatory framework, the Data Privacy Act, and any other applicable legislation. This includes conducting Know Your Customer (KYC) checks, monitoring transactions for suspicious activity, and reporting to the relevant authorities where required by law.

4.3 Fraud Prevention & Security

To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, unauthorised account access, and other illegal or prohibited conduct on the Platform. This includes automated and manual review of account activity, device fingerprinting, and IP geolocation analysis.

4.4 Platform Operation & Improvement

To operate, maintain, and improve the technical performance and user experience of the okpiso Platform, including resolving technical issues, analysing usage patterns, and developing new features and game categories.

4.5 Responsible Gaming

To monitor usage patterns that may indicate problem gambling behaviour, to enforce self-exclusion requests, to apply deposit and session limits, and to communicate responsible gaming resources to users who may need support.

4.6 Marketing Communications

To send you promotional offers, bonus notifications, and platform updates where you have provided consent to receive such communications. You may withdraw consent to marketing communications at any time by contacting okpiso support or using the unsubscribe mechanism in any marketing email.

05 Legal Basis for Processing

okpiso processes personal data on the following legal bases as recognised under the Philippine Data Privacy Act:

• Contractual necessity: Processing required to perform our obligations under the okpiso Terms & Conditions, including account management, payments, and game delivery.
• Legal obligation: Processing required to comply with applicable Philippine laws, including AML regulations, PAGCOR licensing requirements, and tax obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and product improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing for optional marketing communications and the use of non-essential cookies, where you have provided explicit, freely given consent. Consent may be withdrawn at any time.

06 Data Sharing & Disclosure

okpiso does not sell your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

6.1 Service Providers

Third-party providers engaged by okpiso to deliver specific operational services, including KYC verification providers, payment processors (GCash, PayMaya, bank partners, and cryptocurrency payment gateways), cloud hosting providers, cybersecurity services, and customer support platforms. All service providers are bound by data processing agreements requiring them to protect your data and use it only for the purpose for which it was shared.

6.2 Regulatory Authorities

The Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, and other competent government bodies, where okpiso is legally required or permitted to disclose personal data.

6.3 Game Providers

Licensed third-party game software providers may receive limited technical data (such as anonymised session identifiers) necessary to deliver game content and resolve disputes. These providers do not receive your full identity data.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the okpiso business, personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer in advance where practicably possible.

07 Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit the okpiso Platform. They allow the Platform to recognise your device, remember your session state, and collect usage data to improve your experience.

7.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function correctly, including session authentication and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options to personalise your experience.
• Analytics cookies: Help okpiso understand how users interact with the Platform, which pages are most visited, and where technical issues occur. Data collected is aggregated and anonymised where possible.
• Security cookies: Used for fraud detection and prevention, including device fingerprinting to identify suspicious login attempts.

7.3 Managing Cookies

You may control non-essential cookie categories through your browser settings or the cookie preference centre available on the Platform. Disabling certain cookies may affect the functionality of your okpiso account, including game loading and session persistence.

08 Data Security

okpiso implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• AES-256 encryption for all personal data stored at rest on okpiso servers.
• TLS 1.3 protocol for all data transmitted between your device and the okpiso Platform.
• Hashed and salted storage of account passwords — okpiso never stores passwords in readable form.
• Role-based access controls restricting employee access to personal data on a strict need-to-know basis.
• Regular penetration testing and vulnerability assessments conducted by qualified security professionals.
• 24/7 security monitoring and automated anomaly detection on okpiso systems.
• Two-factor authentication (2FA) available for all okpiso user accounts.

In the event of a personal data breach that poses a risk to your rights and freedoms, okpiso will notify the National Privacy Commission and affected users in accordance with the timelines prescribed by the Data Privacy Act and its implementing rules.

09 Data Retention

okpiso retains your personal data for only as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable Philippine law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account relationship with okpiso.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure, as required by AML regulations.
• Financial transaction records: Retained for a minimum of five (5) years in accordance with PAGCOR regulations and the Anti-Money Laundering Act.
• Support communications: Retained for three (3) years for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period thereafter for compliance auditing.
• Technical and log data: Typically retained for twelve (12) months unless a security investigation requires longer retention.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

10 Your Privacy Rights

As a data subject under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by okpiso:

To exercise any of the above rights, please contact the okpiso Data Protection Officer using the contact details provided in Section 14 of this Policy. okpiso will respond to valid requests within thirty (30) days, or as otherwise required by applicable law.

11 Minors & Age Verification

The okpiso Platform is strictly restricted to individuals who are at least 21 years of age, consistent with Philippine gambling regulations. okpiso does not knowingly collect personal data from individuals below the age of 21.

If okpiso becomes aware that personal data has been collected from a person below the minimum age threshold, we will immediately close the relevant account, refund any deposits where applicable, and securely delete all associated personal data. Any winnings generated on an underage account will be forfeited.

If you believe a minor has registered an account on the okpiso Platform, please notify us immediately at the contact details in Section 14.

12 International Data Transfers

okpiso's primary data processing infrastructure is located within the Philippines. Where engagement with third-party service providers (such as cloud infrastructure providers or KYC verification services) involves the transfer of personal data outside the Philippines, okpiso ensures that:

• The receiving country or organisation provides an adequate level of data protection as assessed under Philippine law.
• Appropriate data processing agreements containing standard contractual clauses are in place between okpiso and the receiving party.
• Such transfers are strictly limited to the minimum data necessary for the specific operational purpose.

okpiso will not transfer personal data internationally where doing so would violate the Data Privacy Act or its implementing regulations.

13 Policy Updates

okpiso reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The effective date at the top of this Policy will be updated to reflect the date of the most recent revision.

Where changes are material — meaning they significantly affect how we process your personal data or the rights available to you — okpiso will provide advance notice through a prominent platform notification or via email to your registered address, at least fourteen (14) days before the changes take effect.

Your continued use of the okpiso Platform following the effective date of any update constitutes acceptance of the revised Privacy Policy. If you do not agree with the updated Policy, you should cease using the Platform and may request account closure by contacting our support team.

14 Contact & Data Protection Officer

okpiso has designated a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, you may contact us as follows:

okpiso's support team is available 24/7 and will direct privacy-related requests to the DPO for handling. For complaints that cannot be resolved directly with okpiso, you may escalate to the National Privacy Commission of the Philippines.