oklj Casino Privacy Policy

1.Introduction

This Privacy Policy ("Policy") sets out the data protection practices of oklj ("oklj," "we," "us," or "the Company") in relation to the personal data of users ("you," "the User," or "the Player") of the oklj online gaming platform accessible at oklj.org ("the Platform"). oklj is committed to handling your personal data responsibly, transparently, and in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, the National Privacy Commission's issuances, and PAGCOR's applicable data governance requirements.

By registering an account with oklj or continuing to use the Platform after this Policy has been published, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy is incorporated into and forms part of oklj's Terms & Conditions.

2.Data Controller

oklj is the data controller responsible for the personal data collected through the oklj Platform. As data controller, oklj determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with the DPA and applicable PAGCOR regulations. oklj has appointed a Data Protection Officer ("DPO") who can be reached via the contact details set out in Section 15 of this Policy.

3.Personal Data We Collect

oklj collects personal data from you directly (information you provide during registration or via our support channels) and automatically (information generated through your use of the Platform). The categories of personal data oklj processes are as follows:

oklj does not collect or process sensitive personal information — such as health data, religious or political views, or biometric data — beyond the identity verification photographs required by PAGCOR's KYC process. oklj does not collect data from or about individuals under 21 years of age knowingly.

4.How We Use Your Personal Data

oklj processes your personal data only for specific, legitimate purposes. The primary purposes for which oklj uses your data are:

• Account Management: Creating, maintaining, verifying, and administering your oklj account and oklj Login credentials.
• Identity Verification (KYC): Complying with PAGCOR's Know Your Customer requirements and confirming your eligibility (21+, Philippine residency, single account).
• Payment Processing: Facilitating deposits via GCash, Maya, BPI, BDO, Metrobank, and other accepted payment methods, and processing withdrawal requests to your verified accounts.
• Game Provision: Delivering gaming services — live casino, slot games, and bingo — and maintaining accurate game records.
• Regulatory Compliance: Meeting oklj's obligations under PAGCOR's licensing framework, the Anti-Money Laundering Act (RA 9160 as amended), and other applicable Philippine laws.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, multi-accounting, bonus abuse, and other prohibited conduct.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behaviour and administering player-initiated responsible gaming tools including deposit limits and self-exclusion.
• Customer Support: Responding to your enquiries, resolving disputes, and improving our support services.
• Marketing & Promotions: Sending promotional communications about oklj bonuses, events, and offers — subject to your communication preferences.
• Platform Improvement: Analysing usage patterns and technical data to improve the oklj Platform's performance, features, and user experience.

5.Legal Basis for Processing

oklj processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform oklj's contract with you (Terms & Conditions), including account management, game provision, and payment processing.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including PAGCOR's KYC and AML requirements under RA 9160.
• Legitimate Interest: Processing necessary for oklj's legitimate interests including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights.
• Consent: Marketing communications and certain optional data processing activities are conducted on the basis of your explicit consent, which you may withdraw at any time by contacting oklj or adjusting your account communication preferences.

6.Data Sharing & Disclosure

oklj does not sell your personal data to third parties. oklj may share your personal data with the following categories of recipients where necessary for the purposes described in this Policy:

• PAGCOR and Philippine Regulatory Authorities: oklj is legally required to share player data with PAGCOR and, in applicable circumstances, with the Anti-Money Laundering Council (AMLC) and other competent Philippine government authorities.
• Payment Processors: GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other payment service providers receive the minimum data necessary to process your transactions.
• KYC Verification Providers: Third-party identity verification services that assist oklj in processing government ID documents and confirming player eligibility.
• Game Software Providers: Live casino studio operators and slot game developers receive session data required to deliver games; they do not receive your full identity or financial data.
• IT Infrastructure Providers: Cloud hosting, server maintenance, and cybersecurity service providers operating under contractual data processing agreements with oklj.
• Legal and Professional Advisers: Lawyers, accountants, and auditors engaged by oklj who are bound by professional confidentiality obligations.

All third parties with whom oklj shares personal data are required to process such data only for specified purposes and in accordance with oklj's instructions and applicable Philippine data protection law.

7.Cookies & Tracking Technologies

oklj uses cookies and similar tracking technologies on the Platform to enable essential site functionality, improve user experience, and support fraud prevention. The categories of cookies oklj uses are:

• Strictly Necessary Cookies: Required for the Platform to function, including session management and oklj Login authentication. These cannot be disabled without preventing your use of the Platform.
• Functional Cookies: Remember your preferences — such as language settings, last game played, and responsible gaming tool configurations.
• Analytics Cookies: Collect anonymised data about how the Platform is used to help oklj identify technical issues and improve performance.
• Security Cookies: Support fraud detection and suspicious login activity monitoring.

You may manage cookie preferences via your browser settings. Note that disabling certain cookies may affect the functionality of your oklj account. oklj does not use third-party advertising cookies or share behavioural data with external advertising networks.

8.Data Retention

oklj retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, and audit obligations. The following standard retention periods apply:

• Account and identity data (KYC documents): Retained for a minimum of five (5) years following account closure, in accordance with PAGCOR and AMLC requirements.
• Transaction and financial records: Retained for a minimum of five (5) years following each transaction, as required under the Anti-Money Laundering Act.
• Gaming activity logs: Retained for a minimum of three (3) years following the last session date.
• Support communications: Retained for two (2) years following resolution of the relevant interaction.
• Marketing consent records: Retained for the duration of your account plus two (2) years.

Upon expiry of applicable retention periods, oklj will securely delete or anonymise your personal data in accordance with its data disposal procedures.

9.Data Security

oklj implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and oklj's servers.
• Encrypted storage of passwords using industry-standard salted hashing algorithms.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular security audits and penetration testing of the oklj Platform.
• Device recognition and anomalous login activity monitoring.
• Secure data centres with physical access controls and redundant infrastructure.

10.Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by oklj:

• Right to be Informed: The right to know what personal data oklj holds about you, how it is used, and with whom it is shared — as set out in this Policy.
• Right of Access: The right to request a copy of the personal data oklj holds about you, including your transaction history and gaming records.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data (subject to KYC verification requirements).
• Right to Erasure: The right to request deletion of your personal data, subject to oklj's legal retention obligations under PAGCOR and AMLC regulations.
• Right to Object: The right to object to processing based on legitimate interest, including direct marketing communications.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format and, where technically feasible, to have it transmitted to another data controller.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe oklj has processed your data unlawfully.

To exercise any of these rights, contact oklj's Data Protection Officer via live chat at oklj.org or by email at the address in Section 15. oklj will respond to verified data subject requests within thirty (30) days. oklj may need to verify your identity before processing your request.

11.Children's Privacy

The oklj Platform is strictly for adults aged 21 years and above. oklj does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. If oklj discovers or has reason to believe that a user is under 21, the account will be suspended immediately, all personal data will be deleted in accordance with applicable law, and any funds held in the account will be handled per PAGCOR's regulatory guidelines for underage gambling incidents. Parents or guardians who believe a minor has registered with oklj are encouraged to contact oklj's support team immediately via live chat.

12.Cross-Border Data Transfers

oklj may transfer your personal data to service providers operating outside the Philippines — including cloud infrastructure providers and live casino studio operators — where such transfers are necessary to deliver the services described in this Policy. Any cross-border transfer of personal data by oklj is conducted subject to appropriate safeguards, including contractual data processing agreements that impose data protection standards equivalent to those required by the Data Privacy Act of 2012. oklj does not transfer personal data to countries that do not provide adequate data protection without implementing compensating contractual safeguards.

13.Third-Party Services

The oklj Platform integrates with third-party payment services (GCash, Maya, BPI, BDO, Metrobank, etc.) and live casino game providers. These third parties operate their own privacy policies and data practices for which oklj is not responsible. oklj recommends that you review the privacy policies of these providers in relation to data processed in connection with your transactions and gaming sessions. oklj does not include third-party advertising networks, social media tracking pixels, or analytics tools that transmit your personal data to external advertising platforms.

14.Updates to This Policy

oklj may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR's regulatory requirements. Material changes will be communicated to registered oklj users via email or prominent notice on the Platform at least fourteen (14) days before taking effect. The "Last Updated" date at the top of this page indicates when the most recent revision was made. Continued use of the Platform following the effective date of any update constitutes your acceptance of the revised Policy.

15.Contact & Complaints

For questions about this Privacy Policy, to exercise your data subject rights, or to raise a data protection concern, please contact oklj's Data Protection Officer through the following channels:

• Live Chat: Available 24/7 at oklj.org — select "Privacy / Data Request" from the support menu.
• Email: [email protected] — include "Privacy Policy" in your subject line.

oklj will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) days. If you are not satisfied with oklj's response, you have the right to file a complaint with the National Privacy Commission of the Philippines (NPC) via their official channels.