okji Casino Privacy Policy

1 Introduction

okji Casino ("okji", "we", "us", or "our") is committed to protecting the privacy and personal data of all Filipino players and visitors who interact with the okji platform at okji.club. This Privacy Policy sets out in clear, plain language how okji collects, uses, stores, protects, and discloses personal information in the course of operating its online casino services.

This Policy applies to all personal data processed by okji in connection with: (a) the registration and maintenance of player accounts; (b) the provision of casino games, sports betting, sabong, bingo, and all other services available on the okji platform; (c) processing of deposits and withdrawals through GCash, PayMaya, BDO, BPI, Metrobank, and Dragonpay; (d) customer support interactions via live chat and email; and (e) marketing communications where consent has been given.

By registering an account with okji or by continuing to use the okji platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, please refrain from using the okji platform and contact us to request account closure.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 and applicable international data protection law, okji Casino is the personal information controller in respect of all personal data collected through the okji.club platform. All data processing activities carried out by okji on behalf of its players are conducted under okji's direction and responsibility.

okji has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection law. Contact details for the okji DPO are set out in Section 15 of this Policy. Players may contact the DPO directly with any privacy-related concern, request, or complaint at any time.

3 Personal Data We Collect

okji collects the minimum personal data necessary to operate the platform safely, legally, and effectively. The categories of personal data we collect are described in the table below.

3.1 Sensitive Personal Information

Certain categories of data collected during the KYC process — including government ID numbers and financial account details — constitute sensitive personal information under the Data Privacy Act of 2012. okji applies heightened security measures to the storage and handling of sensitive personal information and limits access to authorised personnel strictly on a need-to-know basis.

4 How We Collect Personal Data

okji collects personal data through the following channels:

• Directly from you — when you complete the registration form, submit KYC documents, make deposits or withdrawal requests, participate in promotions, or contact our support team via live chat or email.
• Automatically during platform use — through server logs, session tracking, and cookies that record technical data such as your IP address, device details, login timestamps, and page navigation patterns during each okji session.
• From payment service providers — when you make a GCash, PayMaya, or bank transfer deposit or withdrawal, the relevant payment provider shares transaction confirmation data with okji to facilitate account crediting and withdrawal processing.
• From identity verification service providers — during KYC verification, okji may use third-party document verification services to confirm the authenticity of submitted identification documents.
• From anti-fraud and compliance systems — okji uses automated risk management and anti-money laundering screening systems that process certain account and transaction data to identify suspicious activity.

5 Purposes & Legal Basis for Processing

okji processes personal data for the following purposes, each supported by a legal basis under the Data Privacy Act of 2012:

5.1 Account Registration and Management

Legal basis: Performance of contract. Processing your registration data is necessary to create and maintain your okji account, authenticate your identity on each login, and administer your account balance and transaction history.

5.2 Identity Verification (KYC)

Legal basis: Compliance with a legal obligation. okji is required by applicable anti-money laundering regulations to verify the identity of players before processing withdrawals. KYC data is processed solely for this compliance purpose.

5.3 Payment Processing

Legal basis: Performance of contract. Financial data is processed to facilitate GCash, PayMaya, and bank transfers for deposits and withdrawals, to maintain accurate transaction records, and to investigate disputed transactions.

5.4 Gaming Services

Legal basis: Performance of contract. Gaming activity data is processed to deliver the games you choose to play, calculate and pay out winnings, apply responsible gaming limits you have set, and maintain accurate records for dispute resolution.

5.5 Customer Support

Legal basis: Legitimate interest. Communications data from live chat and email interactions is retained to resolve support enquiries, maintain service quality, and train support staff.

5.6 Regulatory Compliance & Anti-Fraud

Legal basis: Compliance with legal obligation / legitimate interest. okji processes account and transaction data through anti-money laundering and fraud detection systems to meet its obligations under Philippine financial regulations and to protect players from fraudulent activity on the platform.

5.7 Marketing Communications

Legal basis: Consent. Where you have opted in to marketing communications at registration or subsequently, okji uses your contact details to send you information about promotions, bonuses, and new features on the okji platform. You may withdraw this consent at any time through your account settings.

5.8 Platform Improvement & Analytics

Legal basis: Legitimate interest. Anonymised and aggregated technical and usage data is analysed to understand platform performance, identify areas for improvement, and develop new features that better serve Filipino players.

6 Sharing of Personal Data

okji does not sell, rent, or trade your personal information to third parties. We share personal data only in the following circumstances and only to the extent necessary for each purpose:

6.1 Payment Service Providers

GCash, PayMaya, BDO, BPI, Metrobank, and Dragonpay receive the financial data necessary to process deposits and withdrawals on your behalf. These providers operate under their own privacy policies and are subject to Philippine financial regulation.

6.2 Game Technology Providers

okji's game library is powered by certified third-party providers including but not limited to Pragmatic Play, PG Soft, and Evolution Gaming. These providers receive the minimum data necessary (session tokens, wager amounts) to deliver games and calculate outcomes. Game providers do not receive your full identity or KYC data.

6.3 Identity Verification Services

During the KYC process, okji may engage accredited identity verification service providers to confirm the authenticity of submitted documents. These providers process document images solely for verification and do not retain copies beyond the verification period.

6.4 Legal and Regulatory Authorities

okji will disclose personal data to Philippine law enforcement agencies, the National Privacy Commission, PAGCOR, or other competent authorities where required to do so by valid legal process, regulatory obligation, court order, or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity.

6.5 Professional Advisors

okji's legal, accounting, and compliance advisors may have access to personal data to the extent necessary to provide their professional services, and are bound by confidentiality obligations.

6.6 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or a substantial portion of okji's assets, personal data held by okji may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections being maintained.

7 Data Retention

okji retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and identity data: Retained for the duration of your account plus a minimum of five (5) years after account closure, in compliance with Philippine anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable Philippine financial regulation.
• KYC documents: Retained for five (5) years after account closure or the last transaction, whichever is later.
• Gaming activity logs: Retained for three (3) years from the date of each session.
• Support communications: Retained for two (2) years from the date of each interaction.
• Marketing consent records: Retained for three (3) years from the date of the last marketing communication or withdrawal of consent, whichever is earlier.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

8 Security Measures

okji implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Transport Encryption: All data transmitted between your device and okji's servers is protected using 256-bit TLS encryption.
• Data at Rest Encryption: Personal data and KYC documents stored in okji's systems are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised okji personnel on a strict need-to-know basis, enforced through role-based access controls and audit logging.
• Two-Factor Authentication: Internal systems containing personal data require multi-factor authentication for access by okji staff.
• Penetration Testing: okji's platform undergoes periodic independent security assessments to identify and remediate vulnerabilities.
• Incident Response: okji maintains a documented data breach response procedure. In the event of a personal data breach, affected players and the National Privacy Commission will be notified within the timeframes required by the Data Privacy Act of 2012.

9 Cookies & Tracking Technologies

okji uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform and improve the user experience. The categories of cookies used by okji are as follows:

9.1 Strictly Necessary Cookies

These cookies are essential for the okji platform to function correctly. They maintain your login session, remember your security preferences, and prevent cross-site request forgery. These cookies cannot be disabled without impacting core platform functionality.

9.2 Functional Cookies

Functional cookies remember your preferences — such as preferred game categories, language settings, and responsible gaming limits — so that your okji experience is consistent across sessions and devices.

9.3 Analytics Cookies

okji uses first-party analytics tools to collect anonymised data about how the platform is used — which pages are most visited, how players navigate between game categories, and where technical errors occur. This data is used solely to improve the okji platform and is not shared with third-party analytics services in personally identifiable form.

9.4 Managing Cookies

You can manage and delete cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your okji account. Disabling functional cookies may result in loss of saved preferences. Disabling analytics cookies will not affect your ability to use the platform. Instructions for managing cookies are available in the help documentation of all major browsers including Chrome, Safari, Firefox, and Edge.

10 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by okji:

1. Right to be Informed — You have the right to be informed that okji is processing your personal data and of the purposes, legal basis, and scope of that processing. This Privacy Policy fulfils okji's obligation to inform you.
2. Right to Access — You have the right to obtain a copy of the personal data okji holds about you, together with information about how and why it is being processed.
3. Right to Correction — You have the right to request correction of any inaccurate, outdated, incomplete, or misleading personal data okji holds about you. You may update basic account details directly from your okji account profile.
4. Right to Object — You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interest, though okji may continue processing where compelling legitimate grounds exist.
5. Right to Erasure / Right to be Forgotten — You may request erasure of your personal data where processing is no longer necessary, where consent has been withdrawn and there is no other legal basis, or where data has been unlawfully processed. Note that certain data must be retained for regulatory compliance purposes and cannot be erased on request.
6. Right to Data Portability — You have the right to receive your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
7. Right to Lodge a Complaint — You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated by okji.

To exercise any of the rights listed above, please contact okji's Data Protection Officer at the contact details provided in Section 15. okji will respond to all data subject requests within 30 days of receipt. We may require identity verification before processing any data subject request to prevent fraudulent access to another player's personal information.

11 Children & Minors

The okji platform is strictly for use by persons aged 21 years and above, in compliance with PAGCOR regulations governing online gambling in the Philippines. okji does not knowingly collect personal data from any person under the age of 21.

If you believe that a minor has registered an account with okji or that a minor's personal data has been submitted to us, please contact our support team immediately at [email protected]. We will take immediate steps to verify the complaint, close any account belonging to an underage user, and securely delete any personal data collected in connection with that account.

12 Cross-Border Data Transfers

Some of okji's service providers — including certain game technology providers and cloud infrastructure services — may process personal data in jurisdictions outside the Philippines. Where such transfers occur, okji ensures that appropriate safeguards are in place to protect your personal data in accordance with the requirements of the Data Privacy Act of 2012 and NPC regulations on cross-border data flows.

Safeguards employed by okji for cross-border data transfers include: contractual clauses requiring equivalent data protection standards; data processing agreements that limit the scope and purpose of data use; and, where applicable, transfer only to jurisdictions that have been recognised as offering an adequate level of data protection.

13 Third-Party Links & Services

The okji platform may contain references to third-party services such as payment providers (GCash, PayMaya, BDO, BPI, Metrobank). When you interact with these third-party services — for example, when completing a GCash deposit — you are directed to and subject to that provider's own privacy policy and data practices. okji is not responsible for the privacy practices of any third-party provider, and we encourage you to review their privacy policies before sharing your data with them.

14 Changes to This Privacy Policy

okji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory guidance. Material changes will be notified to registered okji players by email to their registered address and/or by a prominent notice on the platform, with a minimum of seven (7) days' advance notice before the revised Policy takes effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. We encourage you to review this Policy periodically to stay informed about how okji protects your personal data. Continued use of the okji platform following the effective date of any revision constitutes acceptance of the updated Policy.

15 Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data held by okji, please contact us through any of the following channels:

• Data Protection Officer (DPO): [email protected] — please use the subject line "Data Privacy Request" for priority routing to our DPO.
• General Support: [email protected]
• Live Chat: Available 24/7 within the okji platform after signing in to your account.

okji will acknowledge all data privacy requests within five (5) business days and will resolve them within 30 days, or notify you if additional time is required for complex requests.

If you are not satisfied with our response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available on the NPC's official government website.