okjil Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how okjil ("okjil," "we," "us," or "our") collects, uses, stores, discloses, and otherwise processes personal data relating to individuals ("you," "your," or "Data Subject") who access or use the okjil online gaming platform, including the okjil website and any associated mobile applications (collectively, the "Platform").

okjil is committed to protecting the privacy and security of your personal data. We process personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). Where applicable, we also observe internationally recognized data protection principles.

By registering an account on the okjil Platform or otherwise providing us with your personal data, you acknowledge that you have read and understood this Policy. Please read it carefully. If you do not agree with the practices described herein, you should not use the Platform.

2 Data Controller

For the purposes of the DPA and this Policy, okjil is the personal information controller in respect of the personal data you provide when using the Platform. This means okjil determines the purposes and means of processing your personal data.

If you have any questions about how okjil processes your personal data, or wish to exercise any of your rights under the DPA, please contact our Data Protection Officer (DPO) using the details set out in Section 14 of this Policy.

3 Personal Data We Collect

okjil collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Identity & Contact Data

• Full legal name, date of birth, gender;
• Residential address (including city — e.g., Manila, Cebu, Davao, Makati, Quezon City);
• Email address and mobile phone number;
• Government-issued identification documents (e.g., PhilSys ID, passport, driver's license) submitted for KYC verification.

3.2 Financial Data

• Payment method details (e.g., GCash account reference, Maya account reference, bank account details for BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank, or debit card details);
• Transaction history, including deposit and withdrawal records;
• Account balance information.

3.3 Gaming & Activity Data

• Game play history, bet amounts, win/loss records;
• Bonus and promotion usage history;
• Session duration and frequency of play;
• Responsible gaming tool settings (e.g., deposit limits, self-exclusion status).

3.4 Technical & Device Data

• IP address, device type, operating system, browser type and version;
• Unique device identifiers;
• Log data, including access times, pages viewed, and error reports.

3.5 Communications Data

• Records of your communications with okjil customer support;
• Survey responses and feedback you voluntarily provide.

4 How We Collect Your Data

okjil collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions;
• Automated technologies: Data collected automatically when you use the Platform, including via cookies, web beacons, and server logs (see Section 8);
• Third-party sources: Data received from payment processors, identity verification service providers, and fraud prevention agencies, where permitted by law and necessary for our legitimate purposes;
• Regulatory sources: Data received from PAGCOR or other regulatory bodies in connection with licensing, compliance, or responsible gaming obligations.

5 Legal Basis for Processing

Under the DPA, okjil processes your personal data on the following legal bases:

Processing Purpose	Legal Basis
Account registration and management	Performance of a contract with you
Processing deposits and withdrawals	Performance of a contract with you
Identity verification (KYC/AML)	Compliance with a legal obligation
Fraud detection and prevention	Legitimate interests of okjil
Responsible gaming monitoring	Compliance with a legal obligation / legitimate interests
Customer support communications	Performance of a contract with you
Marketing communications (opt-in)	Your consent
Platform analytics and improvement	Legitimate interests of okjil
Regulatory reporting	Compliance with a legal obligation

6 How We Use Your Personal Data

okjil uses the personal data we collect for the following purposes:

• Account management: To create, maintain, and administer your okjil player account;
• Service delivery: To provide you with access to games, process your deposits and withdrawals, and deliver the features of the Platform;
• Identity verification: To verify your identity and age (21+) in compliance with applicable Philippine gaming and AML regulations;
• Fraud and security: To detect, investigate, and prevent fraudulent transactions, cheating, money laundering, and other illegal activities;
• Responsible gaming: To monitor gaming activity, enforce responsible gaming tools (such as deposit limits and self-exclusion), and identify players who may be at risk of problem gambling;
• Customer support: To respond to your enquiries, complaints, and support requests;
• Legal compliance: To comply with our obligations under Philippine law, including the DPA, AML regulations, and PAGCOR licensing requirements;
• Marketing (with consent): To send you promotional offers, newsletters, and updates about okjil — only where you have opted in to receive such communications. You may withdraw consent at any time;
• Platform improvement: To analyze usage patterns and improve the functionality, performance, and user experience of the Platform.

7 Sharing Your Personal Data

okjil does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, Maya, and banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process your financial transactions;
• Identity verification providers: Third-party KYC and AML service providers engaged to verify your identity and comply with regulatory requirements;
• IT and platform service providers: Cloud hosting, data storage, and cybersecurity providers who process data on our behalf under strict data processing agreements;
• Regulatory and law enforcement authorities: PAGCOR, the NPC, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities, where required by law or regulatory direction;
• Professional advisers: Lawyers, auditors, and accountants, subject to professional confidentiality obligations;
• Business transfers: In the event of a merger, acquisition, or sale of all or part of okjil's business, your data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

8 Cookies & Tracking Technologies

okjil uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform.

Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled.
• Functional Cookies: Remember your preferences (e.g., language, display settings) to improve your experience.
• Analytics Cookies: Help us understand how players use the Platform so we can improve it. Data collected is aggregated and anonymized where possible.
• Marketing Cookies: Used only where you have consented, to deliver relevant promotional content. You may withdraw consent at any time via your account settings.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform.

9 Data Retention

okjil retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML and gaming regulatory requirements;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations;
• KYC documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction;
• Customer support records: Retained for three (3) years from the date of the interaction;
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter for compliance purposes.

When personal data is no longer required, okjil will securely delete or anonymize it in accordance with our data disposal procedures.

10 Data Security

okjil implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and the okjil Platform;
• Encryption of sensitive data at rest using industry-standard algorithms;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability scanning;
• Incident response procedures to detect, report, and address personal data breaches promptly.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, okjil will notify the NPC and, where required, affected individuals in accordance with the DPA's breach notification requirements.

11 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by okjil:

• Right to be Informed: The right to be informed of how your personal data is being processed — which this Policy fulfils;
• Right of Access: The right to obtain a copy of the personal data okjil holds about you;
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected;
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to Object: The right to object to processing based on legitimate interests, including direct marketing;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to all verified requests within fifteen (15) business days, in accordance with NPC guidelines. We may need to verify your identity before processing your request.

12 Children's Privacy

The okjil Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. okjil does not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the Platform, please contact us immediately at [email protected].

13 Changes to This Policy

okjil reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. Where changes are material, we will notify you via email to your registered address or via a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. We encourage you to review this Policy periodically. Your continued use of the Platform following any update constitutes your acknowledgment of the revised Policy.

14 Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the okjil Data Protection Officer:

• DPO Email: [email protected]
• General Support: [email protected]
• Support Hours: 8:00 AM – 12:00 AM PHT (GMT+8), 7 days a week

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data protection rights have been violated. Information on how to file a complaint is available on the NPC's official website.