Privacy Policy

1. Who We Are and How to Contact Us

okayfun ("okayfun," "we," "us," or "our") operates the online gaming platform accessible at okayfun.app (the "Platform"). okayfun acts as the personal information controller in respect of the personal data collected through the Platform, as defined under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA").

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, you may contact our Data Protection Officer (DPO) at:

• Email: [email protected]
• Live Chat: Available 24/7 via the Platform

We aim to respond to all privacy-related enquiries within fifteen (15) business days of receipt.

2. Scope of This Policy

This Privacy Policy applies to all personal data collected by okayfun in connection with your use of the Platform, including when you register an account, make a deposit or withdrawal, play games, contact customer support, participate in promotions, or browse the Platform as a visitor.

This Policy should be read together with our Terms & Conditions, which govern your use of the Platform generally. In the event of any conflict between this Policy and the Terms & Conditions on a privacy matter, this Policy shall prevail.

This Policy does not apply to third-party websites or services that may be referenced on the Platform. okayfun is not responsible for the privacy practices of any third party.

3. Personal Data We Collect

okayfun collects the following categories of personal data, depending on how you interact with the Platform:

okayfun does not collect sensitive personal information (as defined under the DPA, such as health data, political opinions, or religious beliefs) unless strictly required by law or with your explicit consent.

4. How We Collect Your Data

okayfun collects personal data through the following means:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or update your account settings.
• Automatically — through cookies, server logs, and similar technologies when you access or use the Platform. This includes your IP address, device identifiers, and browsing behaviour on the Platform.
• From third-party service providers — including payment processors (GCash, Maya, banks) who confirm transaction details, and identity verification providers who assist with KYC compliance.
• From regulatory authorities — where required by PAGCOR or other Philippine regulatory bodies in connection with our licensing obligations.

5. Legal Bases for Processing

okayfun processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity — processing required to perform our contract with you, including operating your account, processing transactions, and providing gaming services.
• Legal obligation — processing required to comply with applicable Philippine law, including anti-money laundering regulations, PAGCOR licensing requirements, and tax obligations.
• Legitimate interests — processing necessary for okayfun's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights.
• Consent — where we rely on your consent for specific processing activities, such as sending you promotional communications. You may withdraw your consent at any time by updating your account settings or contacting our support team, without affecting the lawfulness of processing carried out before withdrawal.

6. How We Use Your Personal Data

okayfun uses your personal data for the following purposes:

• Creating and managing your okayfun account, including identity verification and age confirmation (21+ requirement);
• Processing deposits and withdrawals through GCash, Maya, bank transfer, and debit card;
• Providing access to games and platform features, and maintaining your gaming history;
• Detecting and preventing fraud, money laundering, collusion, and other prohibited conduct;
• Complying with PAGCOR licensing conditions and other applicable Philippine regulatory requirements;
• Administering responsible gaming tools, including deposit limits, cooling-off periods, and self-exclusion;
• Responding to your customer support enquiries and resolving disputes;
• Sending you transactional communications (account confirmations, withdrawal notifications, security alerts);
• Sending you promotional communications about okayfun offers and new games, where you have opted in;
• Analysing platform usage to improve the okayfun experience for all players;
• Enforcing our Terms & Conditions and other applicable policies.

7. Sharing and Disclosure of Personal Data

okayfun does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors — GCash, Maya/PayMaya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process your financial transactions;
• Identity verification providers — third-party KYC service providers who assist us in verifying your identity and age in compliance with Philippine law;
• Game providers — licensed game studios whose titles are available on the Platform, to the extent necessary to deliver gameplay and resolve game-related disputes;
• IT and security service providers — cloud hosting, cybersecurity, and fraud detection providers who process data on our behalf under strict data processing agreements;
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government bodies where disclosure is required by law or court order;
• Professional advisers — lawyers, auditors, and accountants, subject to professional confidentiality obligations.

All third-party service providers who process personal data on behalf of okayfun are required to enter into data processing agreements that impose obligations consistent with the Data Privacy Act of 2012.

8. International Data Transfers

Some of okayfun's service providers may be located outside the Philippines. Where personal data is transferred to a country that does not provide an equivalent level of data protection, okayfun will implement appropriate safeguards — such as standard contractual clauses approved by the National Privacy Commission — to ensure that your data remains protected to the standard required by the Data Privacy Act.

By using the Platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines, subject to the safeguards described above.

9. Data Retention

okayfun retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data — retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with PAGCOR and AMLC requirements;
• Financial transaction records — retained for a minimum of five (5) years from the date of the transaction, as required by anti-money laundering regulations;
• Gaming history — retained for a minimum of three (3) years from the date of the gaming session;
• Customer support communications — retained for two (2) years from the date of the last communication;
• Technical and log data — retained for up to twelve (12) months, unless required for longer for security or legal purposes.

When personal data is no longer required, okayfun will securely delete or anonymise it in accordance with our data disposal procedures.

10. Cookies and Tracking Technologies

okayfun uses the following types of cookies and similar technologies on the Platform:

• Strictly necessary cookies — essential for the Platform to function, including session management and security tokens. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings and responsible gaming limits.
• Analytics cookies — help us understand how players use the Platform so we can improve it. Data collected is aggregated and anonymised where possible.

okayfun does not use third-party advertising or retargeting cookies. You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform.

11. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by okayfun:

• Right to be informed — to know what personal data we collect and how we use it (fulfilled by this Privacy Policy);
• Right to access — to request a copy of the personal data we hold about you;
• Right to correction — to request correction of inaccurate or incomplete personal data;
• Right to erasure — to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to object — to object to processing based on legitimate interests, including direct marketing;
• Right to data portability — to receive your personal data in a structured, commonly used format;
• Right to lodge a complaint — to file a complaint with the National Privacy Commission if you believe your data rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond within fifteen (15) business days. We may need to verify your identity before processing your request.

12. Children and Minors

The okayfun Platform is strictly restricted to individuals aged 21 years and above, in accordance with Philippine gaming regulations. okayfun does not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete the personal data, and report the matter to the relevant authorities where required. If you believe a minor has registered on the Platform, please contact us immediately at [email protected].

13. Security Measures

okayfun implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• AES-256 encryption for data at rest;
• TLS 1.3 encryption for all data in transit;
• Multi-factor authentication for account access;
• Regular penetration testing and vulnerability assessments;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• 24/7 security monitoring and intrusion detection systems;
• Regular staff training on data protection and information security.

While okayfun takes all reasonable steps to protect your personal data, no system is completely immune to security risks. You are responsible for keeping your okayfun login credentials confidential and for notifying us immediately if you suspect unauthorised access to your account.

14. Changes to This Privacy Policy

okayfun may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. When we make material changes, we will update the "Last Updated" date at the top of this page and, where practicable, notify registered players via email or in-platform notification.

Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this page periodically to stay informed about how okayfun protects your personal data.

15. Complaints and the National Privacy Commission

If you have a concern about how okayfun handles your personal data, we encourage you to contact us first so we can try to resolve the matter directly:

• Email: [email protected]
• Response target: Within fifteen (15) business days

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the independent regulatory body responsible for administering and enforcing the Data Privacy Act of 2012. Information on how to file a complaint is available on the NPC's official website.