oklj Privacy Policy

1. Introduction

oklj ("oklj," "we," "us," or "our") is committed to protecting the privacy and personal data of all users of the oklj online gaming platform accessible at oklj.net (the "Platform"). This Privacy Policy ("Policy") describes how oklj collects, uses, stores, shares, and protects your personal information when you access or use the Platform, create an account, make transactions, or otherwise interact with oklj's services.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations. By using the oklj Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read together with oklj's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, oklj is the personal information controller responsible for your personal data collected through the Platform. oklj determines the purposes and means of processing your personal information.

If you have any questions about this Policy or wish to exercise your data subject rights, you may contact oklj's Data Protection Officer (DPO) using the contact details provided in Section 15 of this Policy.

3. Data We Collect

oklj collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Gender (optional, for personalization purposes)
• Nationality and country of residence
• Government-issued identification number (e.g., PhilSys National ID, passport number, driver's license number)

3.2 Contact Data

• Email address
• Philippine mobile number
• Residential address (barangay, city/municipality, province)

3.3 Financial & Transaction Data

• GCash or PayMaya account details (registered mobile number and account name)
• Philippine bank account details (bank name, account name, account number) for bank transfer transactions
• Debit card details (card number masked, expiry date, cardholder name)
• Transaction history: deposit amounts, withdrawal amounts, dates, and reference numbers
• Account balance history

3.4 Gaming Activity Data

• Games played, bet amounts, win/loss records, and session durations
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, loss limits, self-exclusion status)

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type and version
• Unique device identifiers
• Session logs, access timestamps, and page interaction data

3.6 Communications Data

• Records of your communications with oklj customer support (live chat transcripts, email correspondence)
• Survey responses and feedback you voluntarily provide

4. How We Collect Your Data

oklj collects your personal data through the following means:

• Directly from you: When you register for an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey.
• Automatically: When you access and use the Platform, oklj's systems automatically collect technical and device data, including IP address, session data, and cookies (see Section 8).
• From third parties: oklj may receive data from identity verification service providers, payment processors (GCash, PayMaya, Philippine banks), fraud detection services, and, where applicable, from PAGCOR or other regulatory bodies in connection with compliance obligations.

5. How We Use Your Data

oklj uses your personal data for the following purposes:

6. Legal Basis for Processing

oklj processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the contract between you and oklj — including account registration, KYC verification, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable Philippine laws, including anti-money laundering regulations, PAGCOR licensing requirements, and tax obligations.
• Legitimate interests: Processing necessary for oklj's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights.
• Consent: Where oklj relies on your consent — for example, for marketing communications — you may withdraw that consent at any time by contacting oklj support or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

7. Sharing Your Data

oklj does not sell your personal data to third parties. oklj may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, and Philippine banking partners, for the purpose of processing deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML service providers engaged to assist with identity verification and fraud detection.
• Game providers: Licensed third-party game software providers who supply games available on the Platform. These providers may receive limited technical and gaming activity data necessary to deliver their services.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where disclosure is required by law or regulatory obligation.
• Professional advisors: Legal counsel, auditors, and other professional advisors engaged by oklj, subject to professional confidentiality obligations.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers engaged to support the operation of the Platform, subject to contractual data protection obligations.

All third parties with whom oklj shares personal data are required to process that data in accordance with applicable Philippine data protection law and oklj's data protection standards.

8. Cookies & Tracking Technologies

oklj uses cookies and similar tracking technologies on the Platform to enhance your experience, maintain session security, and analyze Platform usage. The types of cookies oklj uses include:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences (such as language settings and responsible gaming limits) to provide a more personalized experience.
• Analytics cookies: Collect aggregated, anonymized data about how users interact with the Platform, helping oklj improve its services. No personally identifiable information is shared with analytics providers.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. oklj does not use cookies to serve third-party advertising or to track your activity across unrelated websites.

9. Data Security

oklj implements appropriate technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest, including financial account details and government ID information.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security assessments, vulnerability scanning, and penetration testing.
• Two-factor authentication (2FA) available for player accounts.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

While oklj takes data security seriously, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that is likely to result in serious harm to affected individuals, oklj will notify the National Privacy Commission and affected data subjects in accordance with the requirements of the DPA and its Implementing Rules.

10. Data Retention

oklj retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML and gaming regulatory requirements.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and PAGCOR regulations.
• Gaming activity data: Retained for three (3) years following account closure, or longer if required for dispute resolution or regulatory purposes.
• Customer support communications: Retained for two (2) years from the date of the last communication.
• Technical and device data: Retained for up to twelve (12) months from collection, unless required for longer periods for security or fraud investigation purposes.

Upon expiry of the applicable retention period, oklj will securely delete or anonymize your personal data in accordance with its data disposal procedures.

11. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by oklj:

• Right to be informed: The right to be informed of how your personal data is being collected and processed — which this Policy fulfills.
• Right of access: The right to request a copy of the personal data oklj holds about you and information about how it is processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to oklj's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe oklj has violated your data privacy rights.

To exercise any of these rights, please contact oklj's Data Protection Officer using the details in Section 15. oklj will respond to data subject requests within thirty (30) days of receipt, or within such extended period as permitted by the DPA where the request is complex.

Please note that certain rights are subject to limitations — for example, oklj may be unable to delete data that it is legally required to retain for AML or regulatory compliance purposes.

12. Children's Privacy

The oklj Platform is strictly intended for persons aged 21 years and above. oklj does not knowingly collect personal data from individuals under the age of 21. If oklj becomes aware that it has inadvertently collected personal data from a person under 21, it will promptly delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered on the oklj Platform, please contact oklj support immediately so that appropriate action can be taken.

13. Third-Party Links

The oklj Platform may contain links to third-party websites or services (for example, payment processor portals). oklj is not responsible for the privacy practices of those third-party sites. This Policy applies solely to data collected by oklj through the Platform. oklj encourages you to review the privacy policies of any third-party sites you visit.

14. Changes to This Policy

oklj reserves the right to update or amend this Privacy Policy at any time. Where changes are material, oklj will provide reasonable advance notice to registered players via email or a prominent notice on the Platform. The "Last Updated" date at the top of this Policy will reflect the date of the most recent revision.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you must cease using the Platform and may request closure of your account.

15. Contact & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or oklj's data processing practices, please contact oklj's Data Protection Officer:

Email: [email protected]

General Support: [email protected]

oklj aims to respond to all privacy-related inquiries within five (5) business days. For data subject access requests or erasure requests, oklj will respond within thirty (30) days as required by the DPA.

If you are not satisfied with oklj's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information about how to file a complaint with the NPC is available on the NPC's official website.

This Privacy Policy was last updated in May 2026 and supersedes all previous versions. Previous versions are available upon written request to oklj's Data Protection Officer.