This Privacy Policy explains how oakplay collects, uses, stores, discloses, and protects your personal data. It applies to all users of the oakplay Platform and has been drafted in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and relevant PAGCOR licensing requirements.
A plain-language overview of the core data protection commitments embedded in oakplay's privacy practices. These summaries do not replace the full legal text below — please read the complete policy carefully.
oakplay collects personal data exclusively for purposes that are directly related to the operation of a licensed gaming platform — identity verification, account management, payment processing, regulatory compliance, and responsible gaming. No data is collected speculatively or sold to third-party advertisers or data brokers.
All personal data and financial information transmitted between your device and the oakplay Platform is protected using 256-bit SSL/TLS encryption — the same standard used by major Philippine banks including BPI and BDO. Data at rest is encrypted and stored on access-controlled servers with multi-layer security protocols.
Your personal data is shared with third parties only in limited, defined circumstances: with PAGCOR for regulatory reporting, with payment processors like GCash and Maya to complete transactions, and with law enforcement when legally compelled. oakplay does not sell, rent, or trade your personal data to any third party for commercial purposes.
Under the Philippine Data Privacy Act, you have specific rights over your personal data held by oakplay — including the right to access, correct, object, and in certain circumstances request deletion of your data. These rights can be exercised by contacting the oakplay Data Protection Officer through the contact details provided in this Policy.
Personal data is retained for the minimum period required to fulfill its collection purpose and to comply with legal retention obligations — including PAGCOR's recordkeeping requirements, the Anti-Money Laundering Act of 2001 (Republic Act No. 9160), and the Philippine Data Privacy Act. Retained data is securely deleted when no longer required.
This Policy is drafted in compliance with the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission. oakplay's Data Protection Officer is registered with the National Privacy Commission in accordance with NPC requirements.
The Philippine Data Privacy Act of 2012 establishes clear principles for the processing of personal information. Here is how each principle applies to oakplay's data practices.
You are informed of what data is collected, why it is collected, how it is used, and with whom it may be shared — through this Policy and through account notifications at the time of collection. No personal data is collected without disclosure to you of its purpose.
Every category of personal data collected by oakplay has a specific, documented legitimate purpose that relates directly to the provision of a licensed gaming service, regulatory compliance, or the protection of player safety. Data is not repurposed beyond its stated collection purpose without your consent.
oakplay collects only the minimum personal data necessary to fulfill each stated purpose. We do not request information that is excessive relative to the purpose for which it is collected. For example, KYC data is collected because PAGCOR licensing mandates it — not for marketing profiling.
For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), oakplay — the operator of the oakplay online gaming platform at oakplay.co — is the personal information controller of the personal data you provide when you register, verify, deposit, play, or otherwise interact with the Platform.
oakplay operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to all data protection and regulatory requirements applicable to PAGCOR-licensed online gaming operators in the Republic of the Philippines.
This Privacy Policy applies to all personal data processing activities undertaken by oakplay in connection with the provision of its gaming and related services. It applies to all users of the Platform regardless of the device or channel through which the Platform is accessed.
oakplay's Data Protection Officer (DPO) is registered with the National Privacy Commission of the Philippines in accordance with NPC Circular No. 17-01. The DPO oversees oakplay's compliance with RA 10173 and its Implementing Rules and Regulations. Contact details for the DPO are provided in Section 14 of this Policy.
oakplay collects the following categories of personal data in connection with the operation of its Platform. The specific data points collected within each category depend on how you interact with the Platform and the level of account verification achieved.
| Category | Data Points | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID type and number, ID photograph, selfie photograph | KYC / PAGCOR |
| Contact Data | Mobile number, email address, residential address (for enhanced KYC) | Account Management |
| Financial Data | GCash number, bank account details, deposit / withdrawal amounts, transaction history, cryptocurrency wallet address (USDT TRC20) | Payment Processing |
| Gaming Activity Data | Game sessions, wager amounts, bet outcomes, game history, bonus activity, session duration | PAGCOR / RG |
| Technical Data | IP address, device type, browser type and version, operating system, login timestamps, session identifiers | Security / Fraud |
| Communications Data | Live chat transcripts, support email correspondence, submitted complaint and feedback records | Customer Support |
| Responsible Gaming Data | Self-exclusion records, deposit / loss limit settings, responsible gaming tool usage history | RG / PAGCOR |
Certain data we collect — including government ID numbers, date of birth, and financial account details — constitutes "sensitive personal information" under the Philippine Data Privacy Act. This data is subject to stricter processing controls and higher security standards. Such data is processed only where expressly required for KYC compliance, payment processing, or PAGCOR regulatory reporting.
oakplay collects personal data through the following channels:
The majority of personal data held by oakplay is provided directly by you when you:
When you access the oakplay Platform, certain technical and behavioral data is collected automatically through cookies, server logs, and similar tracking technologies. This includes your IP address, device and browser information, login timestamps, pages visited, and in-Platform navigation behavior. See Section 9 (Cookies and Tracking Technologies) for full details.
In limited circumstances, oakplay may receive personal data from third parties, including:
oakplay processes your personal data for the following specific, documented purposes:
Under the Philippine Data Privacy Act of 2012, personal data processing must be based on one or more of the lawful criteria established under Section 12 (general personal information) and Section 13 (sensitive personal information) of the Act. oakplay's processing activities are grounded in the following lawful bases:
oakplay does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data is disclosed to third parties only in the following defined circumstances:
oakplay is legally required to disclose certain player data to PAGCOR as part of its licensing obligations, including responsible gaming and anti-money laundering reporting. Data may also be disclosed to the Anti-Money Laundering Council, the National Bureau of Investigation, the Philippine National Police, or any other competent authority when required by law or pursuant to a lawful court order or government directive.
Transaction data — including your GCash number, Maya account, or bank account details — is shared with the relevant payment service provider to the minimum extent necessary to process deposit and withdrawal requests. Each payment processor is bound by its own privacy and security obligations under applicable Philippine law.
To fulfill PAGCOR's mandatory identity verification requirements, oakplay uses third-party KYC technology providers. Your government ID image and selfie photograph are processed by these providers solely for the purpose of identity authentication. These providers are contractually bound to process your data only for the specified purpose and to comply with the Data Privacy Act.
Certain technical data — specifically anonymized or pseudonymized session and gameplay data — may be shared with oakplay's game provider partners (such as JILI Games, PG Soft, Pragmatic Play, or Evolution Gaming) for the purpose of game performance monitoring and certified game outcome auditing. These providers receive only the minimum data necessary for these technical purposes.
In the context of legal proceedings, regulatory investigations, or corporate transactions, personal data may be disclosed to legal counsel, auditors, or other professional advisers who are bound by confidentiality obligations under Philippine law.
oakplay does not participate in any data brokerage, behavioral advertising network, or third-party marketing profiling arrangement. Your personal data — including your gaming history, financial data, and identity documents — is never sold or disclosed to commercial third parties for advertising, marketing research, or any other commercial purpose not directly related to your use of the oakplay Platform.
oakplay retains your personal data for the minimum period necessary to fulfill the purposes for which it was collected, or as required by law, whichever is longer. The following general retention principles apply:
Upon the expiration of the applicable retention period, personal data is securely deleted or anonymized in accordance with oakplay's data destruction procedures. Anonymized or aggregated data that cannot be used to identify individual persons is not subject to these retention limits.
oakplay implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:
Cookies are small text files placed on your device by the oakplay Platform when you visit. They allow the Platform to recognize your device across visits and sessions, maintain your login state, and remember certain preferences. oakplay also uses session identifiers and server-side logs that serve similar functions.
You may control non-essential cookies through your browser settings. Disabling cookies may affect certain Platform features, including your ability to remain logged in across sessions. oakplay does not use third-party advertising or behavioral tracking cookies.
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by oakplay. To exercise any of these rights, please contact the oakplay Data Protection Officer using the contact details in Section 14.
The right to be informed that your personal data is being or will be processed, the purposes of processing, and the parties to whom it may be disclosed — covered by this Policy.
The right to request a copy of the personal data oakplay holds about you and information about how it is being processed. Requests are responded to within 15 business days.
The right to request correction of inaccurate personal data. Certain corrections (e.g., name or date of birth changes) require supporting documentary evidence due to KYC requirements.
The right to request deletion of your personal data where continued retention is no longer legally justified. This right is subject to legal retention obligations under PAGCOR and AMLC requirements.
The right to object to processing of your personal data on grounds relating to your particular situation, where processing is based on legitimate interests rather than legal obligation.
The right to receive a copy of personal data you have provided to oakplay in a structured, commonly used, and machine-readable format, where technically feasible.
The right to lodge a complaint with the National Privacy Commission if you believe oakplay has processed your personal data in violation of the Data Privacy Act.
The right to claim compensation for damages sustained as a result of inaccurate, incomplete, outdated, or unlawfully processed personal data — as provided under Section 16(f) of RA 10173.
Submit your data subject request in writing to the oakplay Data Protection Officer at the email address provided in Section 14. Clearly identify the right you wish to exercise, provide sufficient identifying information to allow oakplay to verify your identity, and describe the specific data to which your request relates. oakplay will respond within fifteen (15) business days of receipt of a complete and valid request.
The oakplay Platform is strictly for persons aged 21 years and older. This age requirement is mandated by PAGCOR for all casino gaming in the Philippines and is enforced through mandatory KYC identity verification at account registration.
oakplay does not knowingly collect personal data from persons under 21 years of age. If oakplay becomes aware that personal data has been collected from a person who is under 21 — whether through KYC verification failure detection, a complaint, or any other means — the associated Account is immediately suspended and the personal data is securely deleted to the extent permitted by applicable legal retention requirements.
If you have reason to believe that a person under 21 has registered on the oakplay Platform, please contact the oakplay Data Protection Officer or the Player Support team immediately so that the matter can be investigated and resolved without delay.
The primary processing of personal data by oakplay occurs within the Republic of the Philippines, consistent with its PAGCOR licensing obligations. Where the use of technology providers — including cloud infrastructure, KYC verification platforms, or game provider audit systems — involves the transfer of personal data to servers or entities outside the Philippines, such transfers are conducted in compliance with Section 21 of the Philippine Data Privacy Act.
Specifically, oakplay ensures that any transfer of personal data outside the Philippines is protected by one or more of the following safeguards:
oakplay reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or the platform's data processing practices. Where changes are material — affecting your rights or the manner in which your personal data is processed — oakplay will provide reasonable advance notice through one or more of the following channels: an in-Platform notification, an email to your registered email address, or a prominently displayed notice on oakplay.co.
The effective date of the current version of this Policy is displayed at the top of this page. The version of this Policy currently in force is always accessible at oakplay.co/privacy-policy. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgment of the amended Policy. If you do not agree with the amended Policy, you may close your Account before the changes take effect.
For all matters relating to this Privacy Policy, the exercise of your data subject rights, data breach notifications, or any other data protection concern, please contact the oakplay Data Protection Officer through the following channels:
If you are not satisfied with oakplay's response to your data protection concern, you have the right to escalate the matter to the National Privacy Commission of the Philippines through NPC's official complaint channels.
The National Privacy Commission (NPC) is the independent body established under the Data Privacy Act to administer and implement the Act's provisions in the Philippines. Players who believe their data protection rights have been violated may file a complaint with the NPC. Information on NPC complaint procedures is available through the NPC's official government channels.
PAGCOR-licensed and governed by Philippine law — oakplay handles your data with the care it deserves. One account, 500+ games, and a privacy framework built to protect Filipino players from Manila to Davao.