okpun Privacy Policy
Your Data, Our Responsibility
At okpun, we take your privacy seriously. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you have as a Filipino player on our platform. We operate under Philippine law and PAGCOR regulations — which means your data is handled with full legal accountability.
Introduction
okpun ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every Filipino player who registers and plays on our platform at okpun.ws. This Privacy Policy is a formal legal document that describes in clear terms how we collect, process, store, share, and protect your personal information when you use the okpun website, mobile interface, games, and related services.
This Privacy Policy applies to all users of the okpun platform, including registered members, visitors who browse without an account, and any person who contacts our support team. It covers personal data collected via the website, live chat, email correspondence, payment processing, KYC verification, and any other interaction you may have with okpun.
By creating an account on okpun, making a deposit, or otherwise using our services, you acknowledge that you have read, understood, and agreed to this Privacy Policy and to the collection and use of your personal data as described herein. If you do not agree with any part of this policy, you must discontinue use of the platform.
This policy should be read alongside our Terms and Conditions and our Responsible Gaming page, both of which form part of the broader legal framework governing your use of okpun.
Data We Collect
okpun collects personal data that is necessary to provide you with a safe, secure, and fully functional online gaming experience. The categories of personal data we collect include:
A. Registration and Identity Data- Full legal name (as it appears on a government-issued ID)
- Date of birth (for 21+ age verification purposes)
- Gender
- Nationality and country of residence
- Residential address (street, city, province, ZIP code)
- Email address and mobile phone number
- Username and encrypted password
- Scanned or photographed copy of a government-issued Philippine ID (e.g., PhilSys, Passport, UMID, Driver's License, Voter's ID, PRC ID)
- Selfie or liveness verification image (for facial identity matching)
- Proof of address (e.g., utility bill, barangay certificate, bank statement — not older than 3 months)
- Source-of-funds declaration or supporting documentation (for AML compliance)
- GCash mobile number, Maya account reference, or bank account details (account name and number only — never full card numbers)
- Deposit and withdrawal history, including amounts, timestamps, and transaction reference numbers
- Bonus and promotional claim history
- Currency (Philippine Peso / PHP)
- Game sessions, including games played, bet amounts, results, and session duration
- Responsible gaming settings you have applied (deposit limits, session reminders, self-exclusion status)
- Customer support ticket history
- IP address and approximate geolocation (city/region level)
- Device type, operating system, and browser version
- Cookies and session identifiers (see Section 06)
- Log data including access timestamps, pages visited, and error logs
How We Use Your Data
okpun uses your personal data for specific, legitimate, and lawful purposes. We do not use your data for any purpose that is incompatible with the purposes disclosed in this Privacy Policy. The primary uses of your personal data are outlined in the table below:
| Purpose | Data Used | Basis |
|---|---|---|
| Account registration and login | Name, email, password, mobile number | Contract performance |
| KYC identity and age verification | ID documents, selfie, DOB, address | Legal obligation (DPA, PAGCOR) |
| Processing deposits and withdrawals | Payment details, transaction records | Contract performance |
| AML monitoring and reporting | Financial data, source-of-funds docs | Legal obligation (AMLA) |
| Providing customer support | Account data, communication history | Contract performance |
| Responsible gaming tools | Gaming activity, limit settings | Legal obligation / Legitimate interest |
| Fraud prevention and security | IP address, device data, behavior logs | Legitimate interest |
| Personalized promotions (opt-in) | Gaming activity, preferences | Consent |
| Regulatory reporting to PAGCOR / NPC | Account, financial, and gaming data | Legal obligation |
| Platform analytics and improvement | Aggregated, anonymized usage data | Legitimate interest |
Marketing Communications: okpun will only send you promotional emails, SMS, or in-platform notifications about bonuses, new games, or special events if you have explicitly opted in to receive such communications during registration or via your account settings. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account dashboard or by contacting our support team.
Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR), okpun is required to process personal data only when at least one lawful basis applies. The lawful bases we rely on are:
- Consent — You have given clear and specific consent to the processing of your personal data for a specific purpose (e.g., opting in to marketing emails, or agreeing to this Privacy Policy at the time of account registration). You may withdraw consent at any time, though this will not affect the lawfulness of processing carried out prior to withdrawal.
- Contract Performance — Processing is necessary for the performance of our contract with you, i.e., the Terms and Conditions you accepted when you registered your okpun account. This covers account management, deposits, withdrawals, game play, and customer support.
- Legal Obligation — Processing is necessary to comply with a legal obligation applicable to okpun as a PAGCOR-regulated operator. This includes KYC/AML obligations under the Anti-Money Laundering Act (AMLA), age verification under PAGCOR regulations, and reporting obligations to the National Privacy Commission (NPC).
- Legitimate Interest — Processing is necessary for the purposes of the legitimate interests pursued by okpun, such as fraud detection, platform security, responsible gaming monitoring, and service analytics — provided such interests are not overridden by your fundamental rights and freedoms.
Data Sharing and Disclosure
okpun does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We will never disclose your personal information to any third party without a lawful basis for doing so. The limited circumstances under which your data may be shared include:
A. Regulatory and Government AuthoritiesAs a PAGCOR-regulated platform, okpun is legally required to share certain player data with government agencies and regulators upon demand, including the Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies acting under a valid legal order or court process.
B. Identity Verification and KYC ProvidersWe engage third-party KYC and identity verification service providers to process and validate identity documents, perform facial liveness checks, and screen names against sanctions and politically exposed persons (PEP) lists. These providers are contractually bound to process your data only for the specific verification purpose and under strict confidentiality and data security obligations.
C. Payment Service ProvidersTo facilitate GCash, Maya, BPI, BDO, UnionBank, Coins.ph, and other payment transactions, okpun shares relevant financial data (such as account reference numbers and transaction amounts) with regulated payment processors. These entities process your payment data under their own privacy policies and applicable Philippine financial regulations.
D. Game Software ProvidersThe games on the okpun platform are powered by licensed third-party game software providers. These providers may receive anonymized or pseudonymized session data to support game integrity monitoring and RNG certification. No directly identifiable personal data (e.g., name or ID number) is shared with game providers beyond what is technically necessary for the game session.
E. Fraud Prevention and Security Servicesokpun may share device fingerprint data, IP addresses, and behavioral analytics with fraud detection partners to identify and prevent fraudulent activity on the platform. This data is processed on a pseudonymized basis wherever possible.
Cookies and Tracking Technologies
okpun uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate and improve the platform, personalize your experience, and ensure account and session security. Below is a breakdown of the types of cookies we use:
| Cookie Type | Purpose | Duration | Required? |
|---|---|---|---|
| Strictly Necessary | Session management, authentication tokens, CSRF protection | Session | Yes — cannot be disabled |
| Functional | Remembering your language, display, and responsible gaming preferences | 30 days | Recommended |
| Analytics | Anonymized traffic and behavior analytics to improve platform performance | 90 days | Optional (opt-out available) |
| Fraud Detection | Device fingerprinting and anomaly detection for account security | 365 days | Yes — required for security |
Managing Cookies: You may configure your browser to block or delete non-essential cookies at any time. Note that disabling strictly necessary or fraud detection cookies may impair your ability to log in or use certain platform features. Analytics cookies can be opted out of via the cookie preferences panel accessible in your account settings.
okpun does not use third-party advertising or retargeting cookies. We do not share cookie data with external advertising networks.
Data Retention
okpun retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law, whichever is longer. Our specific retention schedules are as follows:
- Account and identity data — Retained for the duration of your account's active status, plus a minimum of five (5) years after account closure, as required under PAGCOR regulations and the Anti-Money Laundering Act (AMLA).
- KYC documents — Retained for a minimum of five (5) years after your last transaction or account closure, consistent with AMLC reporting obligations.
- Transaction records — Retained for a minimum of five (5) years from the date of each transaction, in compliance with AML record-keeping requirements.
- Customer support communications — Retained for three (3) years from the date of the interaction, to support dispute resolution and service quality review.
- Analytics and log data — Retained for twelve (12) months from collection, after which it is aggregated and anonymized or deleted.
- Marketing consent records — Retained for the duration of your opt-in, plus two (2) years after withdrawal of consent to evidence compliance.
Your Privacy Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okpun. These rights are not absolute — some are subject to limitations based on legal obligations — but okpun is committed to honoring them to the fullest extent permitted by law:
- Right to be Informed — You have the right to know what personal data okpun collects about you, how it is used, and with whom it is shared. This Privacy Policy is our primary mechanism for fulfilling this right.
- Right of Access — You may request a copy of the personal data we hold about your okpun account at any time. We will respond to verified access requests within fifteen (15) business days.
- Right to Rectification — If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most account details directly from your profile settings, or contact our support team for assistance.
- Right to Erasure — Also known as the "right to be forgotten," you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, and where no overriding legal obligation requires us to retain it. Note that regulatory retention obligations (e.g., AML record-keeping) will take precedence.
- Right to Data Portability — You may request a copy of your personal data in a structured, commonly used, and machine-readable format (e.g., CSV) for transfer to another platform or service.
- Right to Object — You may object to the processing of your personal data based on legitimate interests, or object to receiving marketing communications at any time.
- Right to Lodge a Complaint — If you believe okpun has violated your data privacy rights under Philippine law, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
Data Security
okpun implements a multi-layered data security framework to protect your personal data from unauthorized access, accidental loss, alteration, or disclosure. Our security measures include both technical controls and organizational policies:
Technical Controls- 256-bit SSL/TLS encryption on all data transmitted between your device and our servers — look for the padlock icon and https:// in your browser address bar.
- AES-256 encryption at rest for all sensitive stored data, including KYC documents and payment references.
- Multi-factor authentication (MFA) via SMS OTP for all player logins and high-value transactions.
- Intrusion detection and prevention systems (IDS/IPS) monitoring real-time traffic for anomalous patterns.
- Regular penetration testing conducted by independent third-party security firms.
- Database access controls ensuring that only authorized personnel can access personal data, on a need-to-know basis.
- All okpun staff who handle personal data undergo mandatory data privacy training upon onboarding and annually thereafter.
- A designated Data Privacy Officer (DPO) oversees all data protection activities and ensures ongoing DPA compliance.
- Strict access control policies limit internal access to player data to authorized roles only.
- Third-party vendors are subject to data processing agreements that mandate equivalent security standards.
Children and Minors
okpun is strictly for adults aged 21 and above. In compliance with Philippine law and PAGCOR regulations, we do not knowingly collect personal data from individuals under the age of 21. The collection of data from minors is not a function of our platform at any stage of the registration, verification, or gameplay process.
Parents and legal guardians are strongly encouraged to implement device-level parental controls and monitor online access to prevent underage individuals from accessing gambling platforms. If you believe that a minor in your household has accessed or attempted to access okpun, please contact us immediately at [email protected] so we can take appropriate action.
Third-Party Services
The okpun platform integrates with a limited number of third-party service providers to deliver a complete, functional gaming experience. Each of these providers operates under their own privacy policies and data protection obligations. okpun is not responsible for the privacy practices of third-party providers, but we take reasonable steps to ensure that any provider we engage meets acceptable data security and privacy standards under Philippine law.
The categories of third-party services integrated into the okpun platform include:
- Payment Gateways — GCash, Maya, BPI Online, BDO, UnionBank, Coins.ph, and 7-Eleven payment kiosks. These providers process your financial transactions under their own licensing and data protection obligations as regulated Philippine financial service providers.
- KYC and Identity Verification Providers — Third-party eKYC platforms that perform document scanning, facial recognition, and sanctions screening. All such providers are contractually bound to use your data exclusively for the identity verification purpose.
- Game Software Providers — Licensed game studios whose software powers the slots, live dealer, bingo, and other game categories on the platform. Game providers receive only the session and outcome data necessary to operate the game and comply with their own licensing requirements.
- Platform Analytics — Aggregated, anonymized usage data may be processed by analytics tools to measure platform performance and user experience. No personally identifiable information is shared in this context.
- Customer Support Infrastructure — Our live chat and ticketing system is powered by a third-party customer support platform. Support agents operate within this platform under strict data access controls and confidentiality agreements.
Policy Updates
okpun reserves the right to update, revise, or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or the technical architecture of the platform. All changes to this policy are effective upon posting to this page at okpun.ws/privacy-policy, unless a later effective date is specified.
When we make material changes to this Privacy Policy — such as changes to the categories of data we collect, new third-party sharing arrangements, or changes to your data rights — we will notify you through one or more of the following channels:
- A prominent notice on the okpun homepage or within your account dashboard
- An email notification to your registered email address
- An in-platform notification upon your next login
Your continued use of the okpun platform after a policy update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated terms, you must discontinue use of the platform and may request account closure by contacting our support team.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to how okpun handles your personal data, you may contact our Data Privacy Officer through the following channels:
Email: [email protected]
Subject line: "Data Privacy Request — [Your Specific Request]"
Response time: Within 15 business days of receipt of a verified request.
If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the national data protection supervisory authority. The NPC can be reached through its official government channels.
For general customer support inquiries unrelated to data privacy — such as account issues, game questions, or payment concerns — please contact our 24/7 Filipino support team via live chat on the okpun platform or at [email protected].
How okpun Protects You
Six pillars of our data protection commitment — built into every layer of the okpun platform for Filipino players.
Every data transfer between your device and okpun servers is protected by enterprise-grade 256-bit SSL/TLS encryption. Your login credentials, KYC documents, and payment details are never transmitted in plain text — they're fully encrypted end-to-end, whether you're on mobile data in Cebu or broadband in Makati.
okpun is fully compliant with Republic Act No. 10173 — the Philippine Data Privacy Act of 2012. We maintain a registered Data Privacy Officer, implement required privacy-by-design principles, and file all necessary registrations with the National Privacy Commission (NPC). Your rights under Philippine law are real and enforceable here.
okpun does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances. Your data is used exclusively to operate your account, comply with PAGCOR and AML regulations, and improve the platform experience for Filipino players. That's it — nothing more.
okpun enforces SMS OTP multi-factor authentication on all account logins and high-value transactions. Even if your password were somehow compromised, an attacker cannot access your account without the one-time code sent to your registered Philippine mobile number. Your account security is layered by design.
We keep your data only as long as legally required or operationally necessary. Gaming logs, KYC records, and transaction data are retained for the minimum period mandated by PAGCOR and AMLA regulations — after which they are securely deleted or anonymized. You always know how long we hold your data and why.
Under the Data Privacy Act of 2012, you have the right to access, correct, delete, and port your personal data held by okpun. You can also object to certain types of processing and withdraw marketing consent at any time. Our Data Privacy Officer is available via [email protected] to handle all rights requests promptly.
Play with Confidence on okpun
Your privacy is protected, your data is secure, and your rights are guaranteed under Philippine law. Now explore everything okpun has to offer — from live dealer tables to slots, bingo, and more. Trusted by Filipino players across Manila, Cebu, Davao, and beyond.
Play responsibly. 21+ only. PAGCOR regulated. Gambling involves financial risk.