okjli Privacy Policy

1 Who We Are

okjli ("okjli," "we," "us," or "our") operates the online gaming platform accessible at https://okjli.net and through any associated mobile applications (collectively, the "Platform"). okjli is the data controller responsible for the personal data of players and visitors collected through the Platform.

okjli operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC).

This Privacy Policy applies to all personal data collected from registered players, prospective players, and visitors to the Platform. By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

2 Personal Data We Collect

okjli collects the following categories of personal data, depending on how you interact with the Platform:

3 How We Collect Your Data

okjli collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting our support team, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, log files, and similar tracking technologies. See Section 9 (Cookies) for more details.
• Third-Party Sources: Identity verification data from accredited KYC service providers; fraud and anti-money laundering screening data from compliance databases; payment confirmation data from GCash, PayMaya, BPI, BDO, and Metrobank.
• Regulatory Sources: Self-exclusion status and related data from PAGCOR's exclusion registers, where applicable.

okjli does not purchase personal data from data brokers or any other commercial data sources.

4 How We Use Your Personal Data

okjli uses your personal data for the following purposes:

• Account Management: To create, maintain, verify, and administer your okjli player account, including processing your registration, verifying your identity, and managing your account settings.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank, and to maintain accurate transaction records in Philippine Peso (PHP).
• Regulatory Compliance: To comply with PAGCOR licensing requirements, anti-money laundering (AML) obligations under Republic Act No. 9160 (as amended), and other applicable Philippine laws and regulations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on the Platform.
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling, to administer deposit limits, self-exclusion requests, and cooling-off periods, and to fulfil our responsible gaming obligations under PAGCOR's framework.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the features, performance, and security of the Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about okjli, where you have provided your consent to receive such communications. You may withdraw this consent at any time.
• Legal Proceedings: To establish, exercise, or defend legal claims in connection with your use of the Platform.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, okjli processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — specifically, to operate your player account, process transactions, and deliver gaming services.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, AML obligations, and tax reporting requirements.
• Legitimate Interests: Processing necessary for okjli's legitimate business interests, including fraud prevention, platform security, and improving our services, where these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

okjli does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Regulatory Authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other Philippine government agencies, where required by law or regulatory obligation.
• Payment Processors: GCash (Mynt), PayMaya (Voyager Innovations), BPI, BDO, and Metrobank, solely for the purpose of processing your deposits and withdrawals.
• Identity Verification Providers: Accredited KYC and AML screening service providers engaged to verify your identity and screen against sanctions and watchlists, as required by Philippine law.
• Technology Service Providers: Cloud hosting providers, cybersecurity firms, and software vendors who process data on okjli's behalf under strict data processing agreements that prohibit independent use of your data.
• Game Content Providers: Third-party game studios whose games are available on the Platform may receive limited technical data (such as session tokens) necessary to deliver their games. They do not receive your identity or financial data.
• Legal and Professional Advisers: Lawyers, auditors, and other professional advisers engaged by okjli, subject to professional confidentiality obligations.
• Law Enforcement: Philippine law enforcement agencies, where okjli is legally required or permitted to disclose data in connection with a criminal investigation or court order.

All third parties with whom okjli shares personal data are required to handle that data in accordance with the Data Privacy Act and okjli's data protection standards.

7 Data Retention

okjli retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account and for a period of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements and AML obligations.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• KYC Documents: Identity verification documents are retained for five (5) years following account closure or the last transaction, whichever is later.
• Support Communications: Customer support records are retained for three (3) years from the date of the last interaction.
• Marketing Data: Where you have consented to marketing communications, your contact details for this purpose are retained until you withdraw your consent or for two (2) years of inactivity, whichever comes first.
• Technical Logs: Server and access logs are retained for up to twelve (12) months for security and fraud prevention purposes.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be associated with you.

8 Data Security

okjli implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the okjli Platform is encrypted using Transport Layer Security (TLS). Sensitive data stored on our servers is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to okjli personnel and authorised third parties who have a legitimate need to access it. All access is logged and subject to regular review.
• Two-Factor Authentication: okjli supports and encourages the use of two-factor authentication (2FA) for player accounts to provide an additional layer of security against unauthorised access.
• Penetration Testing: okjli's systems are subject to regular security assessments and penetration testing by independent cybersecurity professionals.
• Incident Response: okjli maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, okjli will notify the National Privacy Commission and affected players in accordance with the Data Privacy Act's breach notification requirements.

9 Cookies & Tracking Technologies

okjli uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device when you visit a website. Cookies help us recognise you, remember your preferences, and understand how you use the Platform.

okjli uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. These cookies cannot be disabled.
• Functional Cookies: Remember your preferences, such as your preferred language and display settings, to provide a more personalised experience.
• Analytics Cookies: Help us understand how players use the Platform — which pages are visited most, where players encounter difficulties, and how we can improve the overall experience. Analytics data is aggregated and anonymised where possible.
• Marketing Cookies: Used to deliver relevant promotional content to you based on your interests and gaming activity. These cookies are only placed with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For strictly necessary cookies, no consent is required as they are essential to the operation of the service.

10 Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okjli:

• Right to Be Informed: The right to be informed of how your personal data is being collected and processed — which is the purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data okjli holds about you, along with information about how it is being used.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you. You can update many of your account details directly through your account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to okjli's legal retention obligations.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, subject to okjli's overriding legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe okjli has violated your data privacy rights.

To exercise any of these rights, please contact okjli's Data Protection Officer using the contact details in Section 13. okjli will respond to all verified requests within fifteen (15) business days, in accordance with the Data Privacy Act.

11 Children and Minors

The okjli Platform is strictly intended for adults aged 21 years and above. okjli does not knowingly collect personal data from any person under the age of 21. The minimum age requirement of 21 years is a strict legal requirement under Philippine gambling regulations enforced by PAGCOR.

If okjli discovers or is notified that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete the associated personal data, and report the matter to PAGCOR as required.

If you are a parent or guardian and believe that your child has registered an account with okjli, please contact our support team immediately at [email protected] so that we can take prompt action.

okjli recommends that parents and guardians install parental control software on shared devices to prevent minors from accessing online gambling platforms.

12 Changes to This Privacy Policy

okjli reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When we make material changes to this Policy, we will notify registered players by email or through a prominent notice on the Platform prior to the changes taking effect.

The effective date at the top of this Policy will be updated whenever changes are made. We encourage you to review this Privacy Policy periodically to stay informed about how okjli protects your personal data.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the revised Policy, you should cease using the Platform and may request account closure by contacting our support team.

13 Contact & Data Protection Officer

okjli has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act. If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our DPO through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the okjli Platform
• Office Address: Manila, Philippines

Please mark your correspondence clearly as a "Data Privacy Request" to ensure it is directed to the DPO promptly. okjli aims to acknowledge all data privacy enquiries within two (2) business days and to provide a substantive response within fifteen (15) business days.

If you are not satisfied with okjli's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.