oakplay Privacy Policy — Your Data, Explained

This Privacy Policy ("Policy") describes how oakplay ("we," "us," "our," or "the Platform") collects, uses, stores, discloses, and protects the personal information of individuals ("you," "the User," "the Player") who access or use the oakplay platform at oakplay.vip and its associated services.

This Policy applies to all personal data processed in connection with your use of oakplay, whether provided directly by you during registration, collected automatically through your use of the Platform, or obtained from third parties in connection with identity verification and payment processing.

By registering for an oakplay account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must not use the oakplay platform.

oakplay collects the following categories of personal data in connection with your account and use of the Platform:

We do not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Special categories of data (such as health data or racial origin) are not collected by oakplay.

oakplay collects personal data through the following means:

• Directly from you: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automatically: Technical and usage data collected through cookies, web beacons, server logs, and analytics tools when you access the Platform. This includes IP address, device characteristics, and browsing behaviour on oakplay.vip.
• From payment processors: Transaction confirmation data received from GCash, Maya, BDO, BPI, UnionBank, and other payment service providers when you initiate or complete a financial transaction.
• From identity verification services: Where oakplay uses third-party KYC providers to verify your identity, we may receive verification results and document metadata from those services.
• From other players or third parties: In the context of fraud investigation or responsible gaming management, we may receive information about you from other users or referral sources, where permitted by applicable law.

oakplay processes your personal data for the following specific purposes:

• Account creation and management: Registering your account, verifying your identity and age, and maintaining accurate records of your account status.
• Platform operation: Processing gameplay, calculating and crediting winnings, managing your PHP balance, and enabling all features of the oakplay platform.
• Payment processing: Processing your deposits and withdrawal requests via GCash, Maya, BDO, BPI, and other supported payment methods.
• Regulatory compliance: Meeting our obligations under anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and applicable gaming regulations.
• Fraud prevention and security: Detecting, investigating, and preventing fraud, abuse, unauthorised access, and other illegal or prohibited activities on the Platform.
• Customer support: Responding to your queries, resolving disputes, and providing technical assistance.
• Responsible gaming: Monitoring gameplay patterns to identify indicators of problem gambling and administering responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion.
• Marketing communications: Sending promotional offers, news, and updates where you have provided consent to receive such communications.
• Platform improvement: Analysing usage patterns to improve platform performance, game selection, and user experience.
• Legal proceedings: Defending or pursuing legal claims, responding to court orders, and cooperating with regulatory investigations.

oakplay processes your personal data on the following legal grounds under the Data Privacy Act of 2012 and applicable regulations:

• Contract performance: Processing necessary to perform the contract between you and oakplay, including operating your account, processing transactions, and delivering platform services.
• Legal obligation: Processing required to comply with applicable laws, including AML obligations, KYC requirements, gaming regulations, and tax reporting requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, dispute resolution, and platform improvement, where such interests do not override your fundamental rights.
• Consent: Processing for marketing communications and certain cookie placements, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

oakplay does not sell, rent, or commercially exploit your personal data. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment service providers: We share transaction data with GCash, Maya, BDO, BPI, UnionBank, and other payment processors strictly for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Where third-party KYC services are used, we share identity documents and personal details required to complete verification. These providers are bound by data processing agreements.
• Game providers: Technical data necessary to operate licensed games (e.g., player session tokens) is shared with game software providers. Game providers do not receive personally identifiable information beyond what is required for game delivery.
• Regulatory authorities: We may be required by law or regulatory directive to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), law enforcement agencies, or courts of competent jurisdiction.
• Professional advisors: Legal counsel, auditors, and other professional advisors may access personal data in the course of providing professional services to oakplay, subject to professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to a successor entity, subject to the same privacy protections described in this Policy.

oakplay retains personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with our legal and regulatory obligations. The following general retention periods apply:

• Account data and transaction records: Retained for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements under Philippine law.
• Identity verification documents: Retained for five (5) years after the completion of the business relationship, or longer if required by applicable regulatory guidance.
• Customer support communications: Retained for three (3) years from the date of the communication, or longer where relevant to an active dispute.
• Technical and usage data (logs): Retained for up to twelve (12) months from collection, except where retained for longer in connection with fraud investigation or legal proceedings.
• Marketing consent records: Retained until consent is withdrawn or the account is closed, whichever occurs first.

Following the expiry of applicable retention periods, personal data will be securely deleted or anonymised in accordance with our internal data management procedures.

oakplay implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include, but are not limited to:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the oakplay platform.
• Encryption of sensitive data at rest, including payment information and identity document stores.
• Strict access controls limiting personal data access to authorised personnel on a need-to-know basis.
• Secure hashing of account passwords — oakplay does not store passwords in plaintext form.
• Regular security assessments, vulnerability scanning, and penetration testing of Platform infrastructure.
• Incident response procedures for detecting, reporting, and responding to personal data breaches within required timeframes.

Despite these measures, no electronic system is entirely immune to security threats. oakplay cannot guarantee absolute security, and you should take reasonable precautions to protect your account credentials, including using a strong and unique password and not sharing your login details with anyone.

oakplay uses cookies and similar tracking technologies to operate the Platform, improve your experience, and collect usage analytics. Cookies are small text files placed on your device by the Platform when you visit.

oakplay uses the following categories of cookies:

• Essential cookies: Necessary for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences, such as language settings and game display options, to personalise your experience.
• Analytics cookies: Collect anonymised data about how users interact with the Platform — pages visited, time on page, click paths — to help us improve the user experience and technical performance.
• Marketing cookies: Used only with your explicit consent to deliver relevant promotional content. You may opt out of marketing cookies at any time through your browser settings or by contacting support.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the oakplay platform, including your ability to log in or access games.

Under the Philippine Data Privacy Act of 2012 and applicable regulations, you have the following rights in relation to your personal data held by oakplay:

• Right to be Informed: The right to be notified about how your personal data is being collected and processed. This Privacy Policy fulfils that obligation.
• Right to Access: The right to request a copy of the personal data oakplay holds about you and information about how it is being processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You can update basic account information directly from your account settings.
• Right to Erasure: The right to request deletion of your personal data, subject to legal retention obligations. Certain data must be retained for regulatory compliance and cannot be deleted upon request.
• Right to Object: The right to object to processing carried out on the basis of legitimate interests, including direct marketing.
• Right to Data Portability: The right to receive a structured, commonly used, and machine-readable copy of the personal data you have provided to oakplay, where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data rights have been violated.

To exercise any of the above rights, contact oakplay's Data Privacy team via the support email address listed in Section 16. We will respond to all valid requests within thirty (30) calendar days of receipt.

The oakplay platform is strictly intended for individuals who are 21 years of age or older. oakplay does not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory step in the oakplay registration process, and we implement reasonable technical and procedural measures to prevent underage access.

If oakplay becomes aware that it has inadvertently collected personal data from a person under the age of 21, we will take immediate steps to delete such data and close the associated account. Any balances held in an underage account will be returned to the verified payment method after deducting any gameplay winnings.

In the course of operating the oakplay platform, personal data may be transferred to, stored in, or processed in countries other than the Philippines. This may occur when payment processors, game providers, or infrastructure providers operate servers or offices outside the Philippines.

Where such transfers occur, oakplay ensures that appropriate safeguards are in place to protect your personal data in accordance with the requirements of the Data Privacy Act of 2012, including:

• Data processing agreements with overseas providers that impose data protection obligations consistent with Philippine law.
• Transfer only to jurisdictions that provide an adequate level of data protection, or with appropriate contractual safeguards in place.
• Limiting the scope of data transferred to what is strictly necessary for the stated processing purpose.

With your explicit consent, oakplay may send you promotional communications about bonuses, new game launches, special events, and other platform news via email or in-platform notifications. Your consent to receive marketing communications is requested separately during registration and can be managed at any time from your account notification settings.

If you no longer wish to receive marketing communications from oakplay, you may:

• Update your notification preferences in your account settings.
• Contact oakplay support via live chat or email requesting removal from marketing lists.

Opting out of marketing communications will not affect the delivery of transactional messages necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, security alerts, and mandatory policy updates.

The oakplay platform may integrate with or reference third-party services, including payment processors, game software providers, analytics tools, and identity verification services. Each third-party provider operates under its own privacy policy and data processing terms.

oakplay is not responsible for the privacy practices of third-party providers. However, we select third-party providers carefully and require them to demonstrate adequate data protection standards through contractual commitments. Our principal third-party service categories include:

• Payment processors: GCash (Mynt / Globe Fintech), Maya Philippines, BDO, BPI, UnionBank, and associated financial institutions. These entities process transaction data in accordance with their own privacy policies and Bangko Sentral ng Pilipinas (BSP) regulations.
• Game software providers: Pragmatic Play, PG Soft, Habanero, CQ9, and others. Game providers receive technical session data necessary to deliver game content.
• Analytics providers: Web analytics tools used to monitor Platform performance and user experience in aggregated, anonymised form.

oakplay reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players through at least one of the following channels: a notification within the Platform, an email to your registered address, or a prominent notice on oakplay.vip.

The revised Policy will display the updated effective date at the top of the document. Your continued use of the oakplay platform following the publication of a revised Privacy Policy constitutes your acceptance of that revised Policy.

If you do not agree with any amendment to this Privacy Policy, you have the right to close your account and request deletion of your personal data (subject to legal retention obligations). Please contact support to exercise this right.

If you have any questions, concerns, or requests regarding this Privacy Policy or oakplay's handling of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 within the oakplay platform. Average response time under 90 seconds.
• Data Privacy Email: [email protected] (plain text — not a clickable link). Please include "Data Privacy Request" in the subject line. Responses within 5 business days during core hours (8:00 AM – 2:00 AM PHT).

Formal data subject requests (access, rectification, erasure, portability, objection) should be submitted in writing via the support email address above. oakplay will acknowledge receipt within three (3) business days and respond substantively within thirty (30) calendar days.

If you are unsatisfied with oakplay's response to a privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. Information about filing a complaint with the NPC is available through official Philippine government channels.