OkayFun Privacy Policy

1 Introduction

OkayFun ("we", "us", "our") operates the online gaming platform accessible at okayfun.net and through the OkayFun mobile application (collectively, the "Platform"). We are committed to protecting the privacy and personal data of all users of the OkayFun Platform ("you", "your", "player").

This Privacy Policy describes how OkayFun collects, uses, stores, shares, and protects your personal data when you access or use the Platform. It also explains the rights you have in relation to your personal data and how you can exercise those rights.

This Privacy Policy should be read alongside OkayFun's Terms & Conditions, which govern your use of the Platform. By registering an account on OkayFun or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy.

If you do not agree with the practices described in this Privacy Policy, you should not use the OkayFun Platform.

2 Data Controller

OkayFun is the data controller responsible for the personal data collected through the Platform. As data controller, OkayFun determines the purposes and means of processing your personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

If you have any questions about how OkayFun processes your personal data, or if you wish to exercise any of your data rights, you may contact our Data Protection Officer using the contact details provided in Section 14 of this Policy.

3 Personal Data We Collect

OkayFun collects the following categories of personal data from players:

OkayFun does not intentionally collect sensitive personal data beyond what is required for identity verification and regulatory compliance. Where sensitive data is collected (such as a copy of a government-issued ID), it is handled with additional safeguards as described in Section 8.

4 How We Collect Your Data

OkayFun collects personal data through the following means:

• Direct collection: Information you provide when registering an OkayFun account, completing identity verification, making deposits or withdrawals, contacting our support team, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the OkayFun Platform, including through cookies, web beacons, and server logs. See Section 10 for more detail on cookies.
• Third-party sources: OkayFun may receive data about you from payment processors (such as GCash and PayMaya), identity verification service providers, and fraud prevention partners, where necessary to verify your identity or process transactions.
• Publicly available sources: In limited circumstances, OkayFun may verify information against publicly available records for compliance purposes.

5 Purpose & Legal Basis for Processing

OkayFun processes your personal data for the following purposes, each supported by a lawful basis under the Philippine Data Privacy Act of 2012:

• Account registration and management: To create and maintain your OkayFun account, verify your identity, and provide access to the Platform. Legal basis: performance of a contract.
• Payment processing: To process deposits and withdrawals through GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods. Legal basis: performance of a contract.
• Regulatory compliance: To comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and responsible gaming obligations. Legal basis: compliance with a legal obligation.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, and other prohibited conduct on the Platform. Legal basis: legitimate interests of OkayFun and protection of players.
• Responsible gaming: To monitor gaming activity and identify players who may be at risk of problem gambling, and to apply responsible gaming tools where appropriate. Legal basis: legitimate interests and legal obligation.
• Customer support: To respond to your enquiries, resolve disputes, and improve our support services. Legal basis: performance of a contract and legitimate interests.
• Marketing communications: To send you promotional offers, bonuses, and news about OkayFun, where you have provided your consent to receive such communications. You may withdraw consent at any time. Legal basis: consent.
• Platform improvement: To analyse usage patterns and improve the OkayFun Platform, games, and user experience. Legal basis: legitimate interests.

OkayFun will not process your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis.

6 Sharing Your Personal Data

OkayFun does not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC and identity verification service providers engaged by OkayFun to verify player identities and comply with regulatory requirements.
• Fraud prevention and security partners: Service providers that assist OkayFun in detecting and preventing fraudulent activity, money laundering, and other prohibited conduct.
• Regulatory and law enforcement authorities: Government agencies, regulatory bodies, and law enforcement authorities where OkayFun is required by law to disclose your information, or where disclosure is necessary to protect the rights, property, or safety of OkayFun, its players, or the public.
• IT and platform service providers: Cloud hosting, data storage, and technology service providers engaged by OkayFun to operate and maintain the Platform. These providers are bound by contractual obligations to process your data only on OkayFun's instructions and to maintain appropriate security standards.
• Professional advisers: Legal, accounting, and auditing professionals where necessary for OkayFun's business operations, subject to professional confidentiality obligations.

All third parties with whom OkayFun shares personal data are required to handle that data in accordance with applicable data protection laws and OkayFun's data processing requirements.

7 Data Retention

OkayFun retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

The following general retention periods apply:

• Account data and transaction records: Retained for a minimum of five (5) years following account closure, in accordance with applicable anti-money laundering regulations.
• Identity verification documents: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later.
• Customer support communications: Retained for three (3) years following the resolution of the relevant enquiry or dispute.
• Technical and usage data: Retained for up to two (2) years for security and analytics purposes.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, for compliance purposes.

When personal data is no longer required, OkayFun will securely delete or anonymise it in accordance with our data disposal procedures.

8 Data Security

OkayFun implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the OkayFun Platform.
• Encryption of sensitive data at rest, including identity documents and financial information.
• Access controls limiting access to personal data to authorised OkayFun personnel on a strict need-to-know basis.
• Regular security assessments and penetration testing of the OkayFun Platform.
• Multi-factor authentication options for player accounts.
• Continuous monitoring of the Platform for suspicious activity and potential security incidents.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, OkayFun will notify the relevant regulatory authority and, where required, affected players, in accordance with applicable law.

9 Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by OkayFun:

• Right to be informed: You have the right to be informed about how OkayFun collects and processes your personal data. This Privacy Policy fulfils that obligation.
• Right of access: You have the right to request a copy of the personal data OkayFun holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data OkayFun holds about you.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to OkayFun's legal obligations to retain certain records.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on OkayFun's legitimate interests in certain circumstances.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to withdraw consent: Where OkayFun processes your data on the basis of your consent (such as for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe OkayFun has processed your personal data in violation of the Data Privacy Act.

To exercise any of the above rights, please contact OkayFun's Data Protection Officer using the contact details in Section 14. OkayFun will respond to all valid requests within thirty (30) days. We may need to verify your identity before processing your request.

10 Cookies & Tracking Technologies

OkayFun uses cookies and similar tracking technologies on the Platform to enhance your experience, maintain session security, and analyse Platform usage. The following types of cookies are used:

• Essential cookies: These cookies are strictly necessary for the OkayFun Platform to function. They enable core features such as account login, session management, and security. These cookies cannot be disabled.
• Functional cookies: These cookies remember your preferences and settings (such as language and display preferences) to provide a more personalised experience on OkayFun.
• Analytics cookies: These cookies collect anonymised information about how players use the OkayFun Platform, such as which pages are visited most frequently and how players navigate between pages. This data helps OkayFun improve the Platform.
• Security cookies: These cookies help OkayFun detect and prevent fraudulent activity, bot access, and other security threats.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the OkayFun Platform. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.

OkayFun does not use third-party advertising cookies or allow third-party advertisers to place cookies on the Platform.

11 Minors

The OkayFun Platform is strictly intended for persons aged 21 years and above. OkayFun does not knowingly collect personal data from individuals under the age of 21. If OkayFun becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian and believe that your child has provided personal data to OkayFun, please contact us immediately using the details in Section 14 so that we can take appropriate action.

12 International Data Transfers

OkayFun primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to and processed in countries outside the Philippines — for example, where OkayFun uses cloud infrastructure or service providers with operations in other jurisdictions.

Where personal data is transferred outside the Philippines, OkayFun ensures that appropriate safeguards are in place to protect your data, including:

• Transferring data only to countries or organisations that provide an adequate level of data protection as recognised under Philippine law.
• Implementing contractual data processing agreements with international service providers that require them to protect your data to standards equivalent to those required under the Philippine Data Privacy Act.

By using the OkayFun Platform, you acknowledge that your personal data may be transferred internationally in accordance with the safeguards described above.

13 Changes to This Privacy Policy

OkayFun reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When material changes are made, OkayFun will notify registered players by email and/or by posting a prominent notice on the Platform prior to the changes taking effect.

The date at the top of this Privacy Policy indicates when it was last updated. We encourage you to review this Policy periodically to stay informed about how OkayFun protects your personal data. Your continued use of the OkayFun Platform following the posting of any changes constitutes your acknowledgment of the updated Policy.

14 Contact & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or OkayFun's handling of your personal data, please contact our Data Protection Officer:

OkayFun will acknowledge your request within five (5) business days and aim to resolve all data-related enquiries within thirty (30) days.

If you are not satisfied with OkayFun's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.