okjil Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how okjil ("okjil," "we," "us," or "our") collects, uses, processes, stores, discloses, and protects the personal information of users ("User," "Player," "you," or "your") who access or use the okjil website, mobile applications, and associated gaming services (collectively, the "Platform"). This Policy applies to all personal data collected by okjil in connection with the provision of its services.

By registering an account on the okjil Platform, accessing our services, or providing personal information to us, you acknowledge that you have read, understood, and consent to the data processing practices described in this Privacy Policy. This Policy should be read in conjunction with the okjil Terms and Conditions, which are incorporated herein by reference.

okjil is committed to protecting your privacy and complying with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, as well as applicable international data protection standards where relevant.

2. Data Controller and Contact Information

okjil acts as the data controller with respect to the personal information collected through the Platform. For all privacy-related inquiries, data subject rights requests, or concerns regarding the processing of your personal data, you may contact our Data Protection Officer at:

• Email: [email protected] (subject line: "Data Privacy Inquiry")
• Live Chat: Available 24/7 on the okjil Platform
• Response Time: Within 24 hours for privacy-related inquiries; within 15 calendar days for formal data subject rights requests, in accordance with NPC guidelines

3. Personal Information We Collect

okjil collects various categories of personal information in order to operate the Platform, comply with legal obligations, and provide a secure and personalized gaming experience. The specific categories of personal data collected include:

3.1 Registration and Account Information

When you create an okjil account, we collect:

• Full legal name (as it appears on government-issued identification)
• Date of birth (for age verification and legal compliance)
• Email address and/or Philippine mobile telephone number
• Residential address (street, barangay, city/municipality, province, postal code)
• Username and encrypted password
• Preferred currency and language settings

3.2 Identity Verification (KYC) Documents

To comply with Philippine gaming regulations and anti-money laundering requirements, okjil collects identity verification documents, including:

• Government-issued photo identification (PhilSys National ID, UMID, passport, driver's license, SSS ID, etc.)
• Proof of address (utility bills, bank statements, government correspondence dated within the last three months)
• Facial verification photographs or video captures for biometric identity matching
• Additional documentation as may be required for enhanced due diligence in certain circumstances

3.3 Financial and Transaction Data

okjil collects information related to deposits, withdrawals, and gaming transactions, including:

• Payment method information (bank account details, GCash/PayMaya account identifiers, card last four digits and expiration date)
• Transaction amounts, dates, times, and status
• Deposit and withdrawal history
• Bonus claims, wagering progress, and promotional activity
• Betting and gaming history (games played, bet amounts, win/loss outcomes, timestamps)

Please note: okjil does not store full credit card numbers or CVV codes. Card processing is handled by certified third-party payment processors who maintain PCI-DSS Level 1 compliance.

3.4 Technical and Usage Data

When you access the okjil Platform, we automatically collect technical information, including:

• IP address, device type, operating system, and browser type
• Login timestamps and session duration
• Pages visited, features used, and clickstream data
• Referral source (how you arrived at the okjil Platform)
• Geolocation data (to verify Philippine jurisdiction and comply with licensing requirements)
• Cookies and similar tracking technologies (see Section 9 below)

3.5 Communications and Customer Support

When you contact okjil customer support or communicate with us via live chat, email, or telephone, we collect:

• The content of your communications and correspondence
• Chat transcripts and email exchanges
• Call recordings (with prior notice and consent, as required by law)
• Attachments or documents you provide to support your inquiry

4. How We Use Your Personal Information

okjil processes your personal data for the following lawful purposes:

4.1 Account Management and Service Provision

• To create, maintain, and administer your okjil account
• To authenticate your identity and verify your eligibility to use the Platform
• To process deposits, withdrawals, and other financial transactions
• To provide access to games, betting markets, bonuses, and promotional offers
• To maintain accurate transaction records and account balances

4.2 Legal and Regulatory Compliance

• To verify that you are at least 21 years of age and legally permitted to gamble in the Philippines
• To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations under Philippine law
• To prevent fraud, money laundering, terrorist financing, and other illicit activities
• To cooperate with law enforcement, regulatory authorities, and court orders as required by law
• To maintain records as required under gaming regulations and tax reporting obligations

4.3 Security and Risk Management

• To detect and prevent fraudulent account registrations, unauthorized access, and bonus abuse
• To monitor betting patterns for signs of collusion, syndicated betting, or other unfair play
• To identify and block access from prohibited jurisdictions
• To maintain the integrity and fairness of gaming outcomes
• To protect the security and stability of the okjil Platform infrastructure

4.4 Customer Support and Communications

• To respond to your inquiries, complaints, and support requests
• To send transactional notifications (deposit confirmations, withdrawal status updates, account alerts)
• To notify you of important changes to the Platform, Terms, or Policies
• To conduct customer satisfaction surveys and gather feedback for service improvement

4.5 Marketing and Personalization (With Consent)

Subject to your express consent, which may be withdrawn at any time, okjil may use your personal data to:

• Send promotional offers, bonus announcements, and marketing communications via email or SMS
• Personalize game recommendations and Platform features based on your gaming preferences and history
• Deliver targeted advertising on the okjil Platform and through third-party advertising networks
• Analyze user behavior to improve the Platform and develop new features

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email, adjusting your account notification preferences, or contacting customer support. Opting out of marketing communications will not affect transactional or account-related messages.

5. Legal Basis for Processing

okjil processes your personal data based on the following legal grounds under the Philippine Data Privacy Act:

• Consent: Where you have provided explicit, informed, and freely given consent for specific processing activities, particularly for marketing communications.
• Contract Performance: Processing is necessary to fulfill our contractual obligations to you under the Terms and Conditions, including account creation, transaction processing, and service delivery.
• Legal Obligation: Processing is required to comply with Philippine laws and regulations, including gaming regulations, AML/CFT obligations, tax reporting requirements, and court orders.
• Legitimate Interests: Processing is necessary for okjil's legitimate business interests, such as fraud prevention, security, Platform improvement, and analytics, provided such interests are not overridden by your fundamental rights and freedoms.

6. Disclosure and Sharing of Personal Information

okjil does not sell, rent, or trade your personal information to third-party marketers or data brokers. However, we may disclose your personal data to the following categories of recipients under specific circumstances:

6.1 Service Providers and Business Partners

okjil engages trusted third-party service providers to perform functions on our behalf, including:

• Payment processors (GCash, PayMaya, banks, card acquirers) for deposit and withdrawal transactions
• Identity verification and KYC service providers
• Game content providers and software platforms
• Cloud hosting and data storage providers
• Customer support and live chat service providers
• Marketing and email service platforms
• Analytics and performance monitoring tools

All third-party service providers are contractually obligated to process your personal data only on okjil's instructions, to maintain confidentiality, and to implement appropriate security measures.

6.2 Regulatory and Law Enforcement Authorities

okjil may disclose your personal data to government authorities, regulators, and law enforcement agencies when required or permitted by law, including:

• Philippine Amusement and Gaming Corporation (PAGCOR) for licensing and compliance purposes
• Anti-Money Laundering Council (AMLC) for suspicious transaction reporting
• National Privacy Commission (NPC) in connection with data protection inquiries or investigations
• Bureau of Internal Revenue (BIR) for tax reporting obligations
• Philippine National Police (PNP) or National Bureau of Investigation (NBI) pursuant to lawful warrants or court orders

6.3 Corporate Transactions

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your pers onal information may be transferred to the acquiring entity as part of the transaction. In such circumstances, okjil will notify affected Users via registered email and ensure that appropriate data protection safeguards are in place prior to any transfer.

7. Data Retention

okjil retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulation. The following retention periods apply:

Data Category	Retention Period	Legal Basis
Account registration information	Duration of account + 5 years after closure	Gaming regulation / AML compliance
KYC identity documents	Duration of account + 5 years after closure	AML Act / PAGCOR requirements
Financial transaction records	10 years from transaction date	AMLA / BIR tax regulations
Betting and gaming history	5 years from account closure	Legitimate interest / gaming compliance
Customer support communications	3 years from last interaction	Legitimate interest / dispute resolution
Marketing consent records	Until consent is withdrawn + 1 year	Consent / NPC guidelines
Technical and usage logs	13 months from collection	Legitimate interest / security

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with NPC-recommended data disposal standards. Where data must be retained beyond the standard period due to ongoing legal proceedings, regulatory investigations, or unresolved disputes, it will be retained until such matters are fully resolved.

8. Your Data Subject Rights

Under the Philippine Data Privacy Act and applicable regulations, you have the following rights with respect to your personal data held by okjil:

• Right to be Informed: The right to be informed of the nature, purpose, and extent of the processing of your personal data, including the identity of the data controller and the recipients of your data.
• Right to Access: The right to obtain a copy of the personal data okjil holds about you, together with information about how it is being processed, in a clear and accessible format.
• Right to Rectification: The right to correct any inaccurate, incomplete, or outdated personal data okjil holds about you without unreasonable delay.
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal data where it is no longer necessary for the purpose for which it was collected, where consent has been withdrawn, or where processing is unlawful — subject to legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation where processing is based on legitimate interests.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another service provider where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated. The NPC may be contacted through its official channels at privacy.gov.ph.

To exercise any of the above rights, please contact okjil's Data Protection Officer via the contact details provided in Section 2 of this Policy. We will respond to all data subject rights requests within fifteen (15) calendar days of receipt, or within such longer period as may be permitted by applicable law for complex requests, with prior notice to you.

9. Cookies and Tracking Technologies

The okjil Platform uses cookies and similar tracking technologies to enhance your user experience, analyze Platform performance, and deliver relevant content. The following categories of cookies may be used:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function properly and cannot be disabled. They include session authentication tokens, CSRF protection tokens, load-balancing cookies, and security cookies that protect against fraudulent activity. No personally identifiable information is stored in strictly necessary cookies beyond what is technically required for session management.

9.2 Functional Cookies

Functional cookies remember your preferences and settings to provide a more personalized experience. Examples include your preferred language, display settings, and whether you have previously acknowledged certain notices or notifications on the Platform. These cookies do not track your activity outside the okjil Platform.

9.3 Analytics Cookies

With your consent, okjil uses analytics cookies to collect aggregated and anonymized information about how Users interact with the Platform. This data helps us identify popular features, measure Platform performance, and improve the overall user experience. Analytics data is processed in aggregate form and is not used to identify individual Users.

9.4 Marketing Cookies

With your express consent, marketing cookies may be used to deliver personalized promotions and advertisements based on your gaming preferences and browsing behavior on the okjil Platform. You may withdraw consent for marketing cookies at any time through the cookie preference settings accessible in your account dashboard.

10. Data Security

okjil implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption: All data in transit is protected by 256-bit SSL/TLS encryption. Sensitive data at rest, including financial information and identity documents, is encrypted using AES-256 encryption.
• Access Controls: Strict role-based access controls limit employee access to personal data on a need-to-know basis. All access to personal data is logged and regularly audited.
• Two-Factor Authentication: okjil implements two-factor authentication for all internal systems and encourages all Users to enable 2FA on their accounts.
• Regular Security Audits: The Platform undergoes regular third-party penetration testing, vulnerability assessments, and security audits to identify and remediate potential weaknesses.
• Data Breach Response: okjil maintains a formal data breach response plan. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, okjil will notify the National Privacy Commission and affected Users within 72 hours of becoming aware of the breach, as required under the Data Privacy Act.
• Staff Training: All okjil employees and contractors who handle personal data are required to complete regular data protection and privacy training.

While okjil takes all reasonable measures to protect your data, no security system is completely impenetrable. You are encouraged to use a strong, unique password for your okjil account and to enable two-factor authentication to maximize your account security.

11. International Data Transfers

In the course of providing its services, okjil may transfer your personal data to third-party service providers or data processors located outside the Philippines. Such transfers occur only where necessary to deliver the services you have requested and are conducted in compliance with the Data Privacy Act and NPC regulations on cross-border data transfers. okjil ensures that any international data transfers are subject to appropriate contractual safeguards, including data processing agreements with standard contractual clauses that provide an equivalent level of data protection to that required under Philippine law.

12. Children's Privacy

The okjil Platform is strictly intended for individuals who are 21 years of age or older. okjil does not knowingly collect or process personal data from minors. If we become aware that personal data has been collected from an individual under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an account on the okjil Platform, please contact our customer support team immediately at [email protected].

13. Amendments to this Privacy Policy

okjil reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or regulatory obligations. Material changes to this Policy will be communicated to registered Users via email notification to the address on file, or via prominent notice on the Platform, no less than fourteen (14) days prior to the changes taking effect. Your continued use of the okjil Platform following the effective date of any amendments constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how okjil is protecting your personal information. The "Last Updated" date at the top of this document reflects the most recent revision.