Ok Laro Privacy Policy — Your Data, Handled With Care

1. Overview

Ok laro operates as an online gaming platform serving Filipino players across the Philippines. To provide our services — account management, game access, payment processing, customer support, and regulatory compliance — we need to collect and process certain personal information about you.

This Privacy Policy tells you exactly what personal data we collect, how we collect it, why we use it, who we share it with, and how long we keep it. It also tells you what rights you have over your own data and how to exercise them.

We operate in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. Our data processing activities are also guided by the requirements of the Philippine Amusement and Gaming Corporation (PAGCOR) under whose license ok laro operates.

If you have any questions about this policy that aren't answered here, you can reach our Data Protection Officer at support@oklaro.best at any time.

2. Data We Collect

Ok laro collects only the data necessary to operate your account and meet our legal obligations. Here's a breakdown of what that includes:

3. How We Collect Your Data

Ok laro collects your personal data through several channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey or promotion.
• Automatically — through cookies, session logs, and analytics tools when you browse or interact with the ok laro platform. Technical data like your IP address and device information is captured automatically when your browser connects to our servers.
• From payment providers — when you process a transaction via GCash, Maya, GrabPay, Coins.ph, or a Philippine bank, we receive transaction confirmation data including timestamps and reference numbers. We do not receive your full account credentials from these providers.
• From identity verification services — during KYC, we may use third-party identity verification tools that cross-reference your submitted documents with national databases to confirm authenticity.
• From fraud detection systems — automated systems may flag your activity for review based on patterns. This process does not involve manual profiling based on ethnicity, religion, or other protected characteristics.

4. Why We Use Your Data

Ok laro uses your personal data for specific, legitimate purposes. We do not use your data for anything beyond what is necessary to operate the platform and meet our legal obligations.

• To operate your account — creating and managing your ok laro player account, processing logins, and maintaining your game history and wallet balance.
• To process payments — facilitating deposits via GCash, Maya, InstaPay, and other supported methods, and processing withdrawal requests to your nominated payment account.
• To verify your identity — completing KYC verification as required by PAGCOR and Philippine anti-money laundering regulations. This is not optional for withdrawal eligibility.
• To provide customer support — reviewing your account history to diagnose issues and resolving queries raised through email or live chat.
• To comply with legal and regulatory requirements — reporting to PAGCOR, complying with the Anti-Money Laundering Act (AMLA), and responding to lawful requests from Philippine law enforcement or regulatory bodies.
• To prevent fraud and protect platform integrity — detecting duplicate accounts, identifying suspicious transaction patterns, and protecting against unauthorized access.
• To improve the ok laro platform — analyzing aggregated, anonymized usage data to understand which features players use most and where the experience can be improved. This analysis does not involve making automated decisions about individual players.
• To send you relevant communications — if you have opted in, sending promotional emails or SMS about bonuses, new games, or platform updates. You can unsubscribe at any time.

5. Sharing Your Data

Ok laro does not sell your personal data to third parties. We share your data only where necessary to operate the platform or where required by law. Third parties who receive your data include:

• Payment processors — GCash (GXI), Maya (Voyager Innovations), GrabPay, Coins.ph, and partner banks receive the minimum data required to execute your transactions. Each provider has their own privacy policy governing data they hold.
• Identity verification partners — KYC service providers who verify your government-issued ID documents. These partners are bound by confidentiality agreements and are not permitted to use your data for any purpose other than verification.
• Game content providers — third-party game studios whose titles are available on ok laro may receive anonymised session data (e.g., game rounds played, bet amounts) to support game performance and dispute resolution. They do not receive your name, contact information, or payment details.
• PAGCOR and regulatory bodies — ok laro is required by its license to report certain player activity data to PAGCOR. We are also legally obligated to respond to lawful requests from the Anti-Money Laundering Council (AMLC) and other Philippine government agencies.
• Technology and infrastructure providers — cloud hosting, cybersecurity, and analytics providers who support our platform operations. These providers process data only on ok laro's instructions and under strict data processing agreements.

All third parties with whom ok laro shares personal data are required to maintain appropriate security measures and to use the data only for the purposes for which it was shared. We conduct due diligence on data processors before engaging them.

6. Data Retention

Ok laro retains your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable law. Here's a practical overview of our retention periods:

• Active account data — kept for as long as your ok laro account remains active and for a minimum of five years after account closure, as required by AMLA regulations.
• KYC and identity documents — retained for five years from the date of account closure or last transaction, whichever is later, to meet PAGCOR and AMLA requirements.
• Transaction records — all deposit and withdrawal records are retained for five years to comply with financial record-keeping requirements under Philippine law.
• Support communications — retained for two years from the date of the last interaction, to allow resolution of follow-up queries and disputes.
• Technical logs — server logs containing IP addresses and session data are retained for 12 months and then automatically deleted, unless retained longer in connection with a specific security investigation.
• Marketing consent records — if you have opted in to marketing communications, a record of your consent is retained until you withdraw it plus 12 months thereafter.

When data is no longer required, ok laro securely deletes or anonymises it so that it can no longer be linked to an individual. Anonymised data may be retained indefinitely for aggregate analytics purposes.

7. Security Measures

Protecting your data is one of ok laro's core operational priorities. We implement multiple layers of technical and organisational security to keep your personal information safe:

• 256-bit SSL/TLS encryption — all data transmitted between your device and the ok laro platform is encrypted using industry-standard TLS encryption. This includes your login credentials, payment details, and personal information.
• Secure data storage — personal data is stored in encrypted databases hosted on infrastructure that is protected by firewalls, intrusion detection systems, and access controls limiting which employees can view sensitive data.
• Access controls — ok laro staff access to player data is limited on a strict need-to-know basis. Access logs are maintained and audited regularly. No staff member has unrestricted access to the full player database.
• Regular security audits — ok laro conducts periodic penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.
• Two-factor authentication (2FA) — players are encouraged to enable 2FA on their ok laro accounts for an added layer of login protection. 2FA can be activated through your account settings.
• Data breach response — ok laro has a documented incident response plan. In the event of a data breach affecting your personal information, we will notify you and the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required by RA 10173.

8. Cookies and Tracking Technologies

Ok laro uses cookies and similar tracking technologies to make the platform work, to understand how players use it, and in some cases, to deliver relevant promotional information. Here's what we use and why:

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to log in and use core platform features. Ok laro does not currently use cookies to track your activity across other websites.

9. Your Rights Under RA 10173

As a data subject under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by ok laro. These rights can be exercised by contacting our Data Protection Officer at support@oklaro.best.

10. Children and Minors

Ok laro is strictly an adults-only platform for players aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21.

During registration, players are required to confirm their age and to complete KYC verification using government-issued ID. Any account found to belong to a person under 21 will be immediately closed, all funds withheld pending investigation, and the matter reported to the relevant regulatory authority.

If you are a parent or guardian and believe a minor has created an ok laro account using your personal information or their own, please contact us immediately at support@oklaro.best. We will investigate promptly and take appropriate action.

11. Third-Party Links and Services

The ok laro platform may contain links to third-party services — such as payment providers' own portals or regulatory body websites. These third-party services have their own privacy policies and data practices that are entirely separate from ok laro's.

Ok laro is not responsible for the privacy practices of any third-party website or service, even if accessed through a link on our platform. We recommend reviewing the privacy policy of any third-party service before providing them with your personal information.

Game content provided by third-party studios on the ok laro platform is subject to data-sharing arrangements described in Section 5. Players do not have a direct relationship with game providers from a data perspective — ok laro remains the data controller for all player information.

12. Changes to This Privacy Policy

Ok laro may update this Privacy Policy periodically to reflect changes in our data practices, changes in applicable law, or improvements to the platform. When we make material changes, we will notify active players via the email address registered to their account or through a prominent notice on the ok laro website.

The effective date at the top of this policy reflects when it was last revised. Your continued use of ok laro after a policy update constitutes your acknowledgment of the revised terms.

We recommend revisiting this page occasionally, especially after receiving a notification of changes. If you have questions about any update, contact our Data Protection Officer before continuing to use the platform.

13. Contact Our Data Protection Officer

Ok laro has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and with RA 10173. If you have any question, concern, or rights request relating to your personal data, please contact the DPO directly: