okganes Privacy Policy

1 Overview & Our Privacy Commitment

okganes takes the privacy of every Filipino player seriously. As a platform built around trust and financial transactions, we understand that the data you share with us — from your government ID to your GCash account details — is sensitive, and we treat it that way. Our core privacy commitments are:

• We collect only the data that is necessary for the services you use;
• We never sell your personal data to third parties for marketing purposes;
• We apply industry-standard encryption and access controls to all stored data;
• We give you meaningful control over your data through the rights described in Section 10; and
• We comply with the Data Privacy Act of 2012 and all relevant NPC issuances.

This Policy should be read alongside the okganes Terms & Conditions, which governs the overall use of the Platform, and our Responsible Gaming policy, which explains how we use certain data to protect vulnerable players.

2 Personal Data We Collect

okganes collects the following categories of personal data, depending on how you interact with our Platform:

3 How We Collect Your Data

okganes collects personal data through the following channels and mechanisms:

3.1 Direct Submission

Data you actively provide when you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or respond to a promotional survey or campaign.

3.2 Automated Technical Collection

When you visit or use the Platform, our servers automatically record technical data such as your IP address, browser type, device identifiers, referring URL, pages viewed, and session duration. This data is collected through server logs, cookies, and similar tracking technologies (see Section 9).

3.3 Payment Processors

When you transact via GCash, Maya, QR Ph, GrabPay, BPI, BDO, Metrobank, UnionBank, 7-Eleven CLiQQ, or USDT TRC20, our payment processing partners may share with us the account name, reference number, and transaction status associated with your payment. okganes does not receive your full payment credentials (e.g., full bank account numbers or e-wallet PINs) from payment processors.

3.4 Third-Party Identity Verification

okganes may use third-party KYC and identity verification service providers to assist in verifying the authenticity of government-issued identification documents and selfie photographs. These providers process your data solely on okganes' instructions and are bound by confidentiality and data processing agreements.

3.5 Anti-Fraud and Security Systems

Our fraud detection systems automatically analyse usage patterns, device fingerprints, and transaction behaviours to identify suspicious activity. This process involves automated processing of your usage data but does not produce legally binding decisions without human review.

4 Purpose of Data Processing

okganes processes your personal data for the following specific, legitimate purposes:

• Account Management — creating and maintaining your okganes player account, including authentication and password reset;
• KYC & Age Verification — verifying your identity and confirming that you meet the minimum age requirement of 21 years, as required by applicable Philippine gaming regulations;
• Payment Processing — facilitating deposits and withdrawals via your chosen payment method, and reconciling transactions in Philippine Peso (₱);
• Anti-Money Laundering (AML) Compliance — monitoring transactions for patterns consistent with money laundering, terrorist financing, or other financial crimes, as required under Republic Act No. 9160 (Anti-Money Laundering Act) and related AMLC regulations;
• Fraud Prevention & Platform Security — detecting and preventing unauthorised access, multi-accounting, bonus abuse, collusion, and other prohibited conduct;
• Responsible Gaming — monitoring gameplay patterns to identify indicators of problem gambling and administering self-exclusion, cooling-off, and deposit limit tools;
• Customer Support — responding to your enquiries, resolving disputes, and processing complaints;
• Legal Compliance — fulfilling our obligations under applicable Philippine law, including responding to lawful requests from regulatory authorities and law enforcement agencies; and
• Platform Improvement — analysing aggregated, anonymised usage data to improve game performance, interface design, and overall user experience.

5 Legal Basis for Processing

Under the Data Privacy Act of 2012, okganes relies on the following legal bases for processing your personal data:

• Contractual Necessity — processing required to perform the contract between you and okganes (i.e., your okganes account agreement), including KYC verification and payment processing;
• Consent — where you have given specific, informed, and freely given consent, such as opting in to promotional communications;
• Legal Obligation — processing required to comply with a legal obligation under Philippine law, including AML reporting and regulatory record-keeping requirements; and
• Legitimate Interests — processing that is necessary for okganes' legitimate interests in fraud prevention, platform security, and responsible gaming enforcement, provided those interests are not overridden by your fundamental rights and freedoms.

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Personal Data

okganes does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the minimum extent necessary:

6.1 Payment Service Providers

We share necessary transaction data with payment processors (e.g., GCash, Maya, BPI, BDO, Metrobank, UnionBank, GrabPay, and USDT TRC20 processing partners) to facilitate your deposits and withdrawals. These providers are subject to their own privacy policies and financial data security standards.

6.2 KYC and Identity Verification Partners

Your identity documents and selfie photographs may be shared with certified third-party KYC verification providers engaged by okganes. These providers act as data processors on our instructions and are prohibited from using your data for any other purpose.

6.3 Regulatory and Law Enforcement Authorities

okganes may disclose your personal data to the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Philippine National Police (PNP), the National Bureau of Investigation (NBI), or other competent Philippine government authorities where required by law, court order, or regulatory mandate.

6.4 Corporate Transactions

In the event of a merger, acquisition, sale of assets, or restructuring involving okganes, your personal data may be transferred to the successor entity, subject to that entity assuming the same privacy obligations described in this Policy. You will be notified of any such change.

6.5 With Your Consent

We may share your data with any other party where you have given your prior, explicit, and informed consent to such sharing.

7 Data Retention

okganes retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account data — retained for the duration of your active account and for a minimum of five (5) years after account closure;
• KYC documents — retained for a minimum of five (5) years from the date of submission, in compliance with AMLC record-keeping requirements;
• Transaction records — retained for a minimum of five (5) years from the date of each transaction;
• Customer support communications — retained for two (2) years from the date of the last interaction; and
• Technical and usage logs — retained for up to twelve (12) months, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised, unless a longer retention period is required by a specific legal obligation.

8 Security Measures

okganes implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption — all data transmitted between your browser or device and the okganes Platform is encrypted in transit using industry-standard SSL/TLS protocols;
• Encryption at Rest — sensitive personal data, including KYC documents and financial information, is stored in encrypted form on secured servers;
• Access Controls — access to personal data is restricted to okganes personnel and authorised service providers on a strictly need-to-know basis, with role-based access permissions enforced;
• Two-Factor Authentication — okganes supports two-factor authentication (2FA) for player accounts and enforces 2FA for internal administrative access to data systems;
• Penetration Testing — our Platform undergoes regular security assessments and vulnerability testing by qualified security professionals;
• Incident Response — okganes maintains a documented data breach response procedure. In the event of a personal data breach that poses a real risk to data subjects, we will notify the NPC within seventy-two (72) hours of discovery and notify affected players without undue delay, as required by the DPA.

9 Cookies & Tracking Technologies

The okganes Platform uses cookies and similar tracking technologies to enhance your experience, maintain your logged-in session, and collect analytical data about Platform usage. The types of cookies we use are as follows:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They maintain your login session, store your language preference, and support security features such as CSRF protection. These cookies cannot be disabled without impairing core Platform functionality.

9.2 Functional Cookies

These cookies remember your preferences and settings (such as preferred game categories or interface language) to provide a more personalised experience on your return visits.

9.3 Analytics Cookies

okganes uses internal analytics tools to collect aggregated, anonymised data about how players navigate and use the Platform. This data helps us identify performance issues, improve game loading times, and optimise the overall user interface. We do not use third-party advertising analytics networks.

9.4 Managing Cookies

You can control or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to log in and use core Platform features. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

10 Your Privacy Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okganes. You may exercise any of these rights by submitting a written request to [email protected]:

okganes will respond to all privacy rights requests within fifteen (15) calendar days of receipt of a complete request. In complex cases, this period may be extended by an additional fifteen (15) days with notice provided to you. We may require proof of identity before processing any rights request to prevent unauthorised disclosure.

11 Minors & Age Policy

The okganes Platform is strictly intended for individuals who are twenty-one (21) years of age or older. okganes does not knowingly collect personal data from individuals below this age. If you are under 21 years of age, you must not register an account or use the Platform in any capacity.

Where okganes discovers that personal data has been collected from an individual under 21 years of age — whether through a false age declaration during registration or otherwise — that account will be immediately suspended, all associated data will be deleted, and any funds deposited will be returned to the original payment method following investigation.

If you are a parent or guardian and believe that your child under the age of 21 has registered an account with okganes, please contact us immediately at [email protected] so we may take prompt action.

12 Cross-Border Data Transfers

Some of okganes' third-party service providers — including KYC verification partners, cloud infrastructure providers, and fraud detection vendors — may process or store data in jurisdictions outside the Philippines. Where such cross-border transfers occur, okganes ensures that appropriate safeguards are in place, including:

• Contractual data processing agreements that impose equivalent data protection obligations on the recipient;
• Transfers only to jurisdictions that the NPC has assessed as providing an adequate level of data protection; or
• Other legally recognised transfer mechanisms under the DPA and NPC guidelines.

okganes does not transfer your personal data to any country or entity that it has reason to believe provides inadequate protection for personal data.

13 Changes to This Policy

okganes may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes, we will update the "Last Updated" date at the top of this Policy and, where the changes are significant, provide a prominent notice on the Platform or direct notification to your registered email address or mobile number.

Your continued use of the okganes Platform after the effective date of any revised Policy constitutes your acknowledgement of, and agreement to, the updated terms. We encourage you to review this Policy periodically to stay informed about how we protect your data.

14 Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by okganes, please reach out to us using the following details:

• Privacy / Data Requests Email: [email protected]
• Subject Line: Please include "Privacy Request – [Your Name]" in the subject line of your email for faster routing;
• Response Time: We aim to acknowledge all privacy-related enquiries within 3 business days and resolve them within 15 calendar days;
• Operating Hours: Our support team operates on Philippine Standard Time (PST, UTC+8).

You also have the right to file a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights under RA 10173 have been violated. The NPC can be reached through their official government channels.