okayfun Casino Privacy Policy

okayfun ("okayfun," "we," "us," or "our") is committed to protecting the privacy and personal data of all players who register and use the okayfun online casino platform accessible at okayfun.org ("Platform"). This Privacy Policy explains how okayfun collects, uses, stores, discloses, and protects personal information provided by or obtained about players and visitors ("you" or "Data Subject") in the course of operating the Platform.

This Privacy Policy is drafted in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC") of the Philippines. It also reflects applicable requirements imposed by PAGCOR (Philippine Amusement and Gaming Corporation) in connection with okayfun's online gaming operations.

By registering an account on okayfun, using the Platform, or submitting personal data through any okayfun channel, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please discontinue use of the Platform and contact us to arrange for deletion of any data we hold about you.

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, okayfun is the Personal Information Controller ("PIC") in respect of personal data collected and processed through the Platform. As PIC, okayfun is responsible for determining the purposes and means of processing your personal data and for ensuring that such processing is carried out lawfully, fairly, and transparently.

okayfun has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with the DPA and this Privacy Policy, responding to data subject requests, and liaising with the National Privacy Commission. Contact details for the DPO are set out in Section 15 of this Policy.

okayfun collects personal data in the following categories, depending on the nature of your interaction with the Platform:

okayfun does not intentionally collect sensitive personal information (as defined under Section 3(l) of the DPA) unless strictly required for KYC compliance or responsible gaming verification. Where sensitive data is collected, explicit consent will be obtained.

okayfun processes your personal data only for the following purposes:

• Account creation and management: To register your okayfun account, verify your identity (KYC), maintain your account profile, and manage your login credentials;
• Service delivery: To provide you with access to casino games, sportsbook, live dealer tables, bonuses, promotions, and all other okayfun platform services;
• Payment processing: To process deposits and withdrawal requests via GCash, Maya, BPI, BDO, Metrobank, Coins.ph, 7-Eleven, and other accepted payment channels;
• Regulatory compliance: To comply with PAGCOR licensing requirements, Anti-Money Laundering Act obligations, and any other applicable Philippine laws;
• Responsible gaming: To monitor gaming behaviour, apply responsible gaming tools, enforce self-exclusion requests, and identify players who may need support;
• Customer support: To respond to your queries, complaints, and requests submitted via live chat, email, or Telegram;
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct;
• Platform improvement: To analyse usage patterns, improve platform performance, and personalise your experience on okayfun;
• Marketing communications: To send promotional offers, bonuses, and updates to players who have opted in to marketing communications (see Section 12).

okayfun processes personal data on the following legal bases under the Data Privacy Act of 2012:

• Consent: Where you have provided explicit consent for processing, including for marketing communications and certain sensitive data. You may withdraw consent at any time by contacting our DPO, subject to the impact on your ability to use the Platform;
• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions applicable to your okayfun account, including account management, payment processing, and service delivery;
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, the Anti-Money Laundering Act, and the Data Privacy Act itself;
• Legitimate interests: Processing for purposes of security, fraud prevention, platform improvement, and responsible gaming, where okayfun's interests are balanced against and do not override your fundamental rights.

okayfun uses cookies and similar tracking technologies on the Platform to provide, maintain, and improve services. Cookies are small text files stored on your device when you visit okayfun.org. The following types of cookies are used:

• Essential cookies: Required for the Platform to function, including maintaining your login session and storing your game preferences. These cannot be disabled without affecting core functionality;
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the Platform — including pages visited, session duration, and navigation paths — to help okayfun improve user experience;
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and device fingerprinting for login security purposes.

okayfun does not currently use third-party advertising or retargeting cookies that share your data with external advertisers. You may adjust your browser settings to refuse or delete cookies, although this may affect your ability to access certain Platform features.

okayfun does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and under binding confidentiality obligations:

• Game providers: JILI, PG Soft, Pragmatic Play, and other licensed game studios receive technical data (session data, bet records) necessary to operate the games you access on okayfun;
• Payment service providers: GCash, Maya, and our bank partners receive financial data necessary to process deposit and withdrawal transactions on your behalf;
• Identity verification providers: Third-party KYC and AML screening services used to verify player identities and screen against regulatory watchlists;
• PAGCOR and regulatory authorities: As required by applicable law, PAGCOR licensing conditions, or pursuant to a valid legal order, court judgment, or subpoena;
• IT and cloud service providers: Data hosting, security, and infrastructure providers who process data on okayfun's behalf under Data Processing Agreements ("DPA Agreements").

Where personal data is transferred to recipients outside the Philippines, okayfun will ensure that appropriate safeguards are in place as required by the Data Privacy Act and NPC guidelines, including contractual protections.

okayfun retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active okayfun account plus five (5) years after account closure, in compliance with PAGCOR and AML record-keeping requirements;
• Transaction and financial data: Retained for ten (10) years from the date of transaction in accordance with Anti-Money Laundering Act obligations;
• Customer support records: Retained for three (3) years from the date of the last interaction, or longer where the communication relates to a dispute or legal proceeding;
• Technical and analytics data: Retained in anonymised or aggregated form for up to two (2) years for platform improvement purposes.

Following the applicable retention period, okayfun will securely delete or anonymise your personal data in accordance with its data destruction procedures.

okayfun implements comprehensive technical and organisational measures to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and okayfun servers;
• Encrypted storage of sensitive personal data and financial information at rest;
• Role-based access controls limiting employee access to personal data to those with a verified operational need;
• Multi-factor authentication for administrative access to okayfun's internal systems;
• Regular penetration testing and security audits by qualified independent security professionals;
• Incident response procedures to detect, contain, and notify affected players and the NPC of any personal data breach within 72 hours of discovery, as required under the DPA.

Despite these measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your okayfun login credentials and for promptly notifying us of any suspected unauthorised account access.

Under the Data Privacy Act of 2012, you have the following rights in relation to personal data held by okayfun:

• Right to be informed: To be notified of the processing of your personal data prior to collection, including the purposes for which it is being collected;
• Right of access: To obtain confirmation of whether okayfun holds personal data about you and to receive a copy of that data;
• Right to rectification: To request correction of inaccurate or incomplete personal data held by okayfun;
• Right to erasure: To request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to object: To object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to data portability: To receive a structured, machine-readable copy of personal data you have provided to okayfun, where technically feasible;
• Right to lodge a complaint: To lodge a complaint with the National Privacy Commission if you believe okayfun has processed your data in violation of the DPA.

To exercise any of these rights, please contact okayfun's Data Protection Officer using the details in Section 15. We will respond to verified data subject requests within thirty (30) calendar days, as required under the DPA and its IRR.

okayfun services are strictly for persons aged 21 years and above in accordance with PAGCOR regulations and Philippine law. okayfun does not knowingly collect personal data from any person under 21 years of age. If okayfun becomes aware that personal data has been collected from a person under 21, such data will be deleted immediately and the account permanently closed.

Parents or guardians who believe that a minor has registered an okayfun account or provided personal data to okayfun should contact our support team immediately via live chat or at the contact details in Section 15.

okayfun may send promotional offers, bonus notifications, and platform updates to players who have opted in to marketing communications at registration or through their account settings. Marketing communications are sent via SMS to your registered Philippine mobile number and/or via Telegram.

You may opt out of marketing communications at any time by updating your communication preferences in your okayfun account settings, or by requesting opt-out via live chat support. Opting out of marketing will not affect transactional communications related to your account (e.g., deposit confirmations, withdrawal notifications, security alerts).

okayfun does not share your contact details with third-party marketers for their own marketing purposes.

The okayfun Platform may contain links to or integrations with third-party services such as GCash, Maya, and game provider platforms. okayfun is not responsible for the privacy practices or content of these third-party services. We encourage you to review the privacy policies of any third-party service you interact with in connection with your okayfun account.

okayfun reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data practices. Material changes will be communicated to registered players via the Platform notification system or by SMS to your registered mobile number at least fourteen (14) days before the change takes effect.

Your continued use of the okayfun Platform following the effective date of any change constitutes your acceptance of the updated Privacy Policy. The "last updated" date at the top of this page indicates when this Policy was most recently revised.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by okayfun, please contact our Data Protection Officer through the following channels:

• Live Chat: Available 24/7 on the okayfun Platform — fastest response
• Email: [email protected] — Subject line: "Privacy / DPO Request"
• Telegram: @okayfunsupport

okayfun will acknowledge all privacy-related correspondence within seventy-two (72) hours and aim to resolve data subject requests within thirty (30) calendar days. If you are not satisfied with our response, you have the right to file a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.