Privacy Policy — Okjil Gaming Platform

1 Introduction

Okjil ("okjil," "we," "us," or "our") operates the online gaming platform available at okjil.net (the "Platform"). We are committed to protecting the privacy and personal data of all users ("you," "Player," or "User") who access or use the Platform.

This Privacy Policy describes how okjil collects, uses, stores, shares, and protects your personal information in connection with your use of the Platform. It also describes the rights you have with respect to your personal data and how you can exercise those rights.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations. Okjil acts as the personal information controller in respect of the data described in this Policy.

This Privacy Policy should be read together with the okjil Terms and Conditions, which govern your use of the Platform generally. Defined terms used but not defined in this Policy have the meanings given to them in the Terms and Conditions.

2 Personal Data We Collect

Okjil collects the following categories of personal data from players and prospective players:

Okjil does not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Where sensitive data is collected — such as government ID numbers — it is handled with heightened security controls and access restrictions.

3 How We Collect Your Data

Okjil collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser information, and session activity logs.
• Payment processors: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers when you make deposits or withdrawals.
• Identity verification providers: Data received from third-party KYC (Know Your Customer) service providers used to verify your identity and age during the registration or withdrawal process.
• Cookies and similar technologies: Data collected through cookies, web beacons, and local storage as described in Section 8 of this Policy.

4 How We Use Your Personal Data

Okjil uses the personal data we collect for the following purposes:

• Account management: To create, maintain, and administer your okjil player account, including processing your registration, verifying your identity, and managing your account settings.
• Platform operation: To provide access to games, process bets, calculate and credit winnings, and operate the loyalty program.
• Payment processing: To process deposits and withdrawals via your chosen payment method, and to maintain accurate financial records.
• Regulatory compliance: To comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and responsible gaming obligations.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and violations of the okjil Terms and Conditions.
• Responsible gaming: To monitor gaming patterns, enforce deposit limits and self-exclusion requests, and identify players who may need responsible gaming support.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Platform improvement: To analyze usage patterns, identify technical issues, and improve the performance and features of the okjil Platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may opt out at any time.

5 Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, okjil processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms and Conditions, including account management, game operation, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws, including AML regulations, KYC requirements, and gaming regulatory obligations.
• Legitimate interests: Processing necessary for okjil's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent, including the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing and Disclosure

Okjil does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly as necessary to operate the Platform and comply with applicable law:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors, for the purpose of processing deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers used to verify your identity and age as required by Philippine regulations.
• Technology and infrastructure providers: Cloud hosting, platform software, and security service providers who process data on our behalf under strict data processing agreements.
• Game content providers: Game studios and software providers whose titles are available on the okjil Platform, to the extent necessary to operate those games and resolve disputes.
• Regulatory and law enforcement authorities: Philippine government agencies, regulators, and law enforcement bodies where disclosure is required by law, court order, or regulatory direction, including mandatory AML reporting obligations.
• Professional advisers: Lawyers, auditors, and accountants, where necessary for the conduct of okjil's business and subject to professional confidentiality obligations.

All third parties with whom okjil shares personal data are required to handle that data in accordance with applicable Philippine data protection law and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

Okjil does not transfer personal data outside the Philippines except where necessary to operate the Platform and where appropriate safeguards are in place in accordance with the DPA and its Implementing Rules and Regulations.

7 Data Retention

Okjil retains your personal data for as long as your account remains active and for such additional period as is necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with applicable AML and gaming regulatory requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine AML regulations.
• Gaming activity data: Retained for the duration of your account and for two (2) years following account closure, unless a longer period is required for dispute resolution or regulatory compliance.
• Technical and session logs: Retained for up to twelve (12) months from the date of collection, unless required for longer periods for security investigations.
• Marketing consent records: Retained for the duration of your account and for one (1) year following withdrawal of consent or account closure.

When personal data is no longer required for the purposes for which it was collected and no legal obligation requires its retention, okjil will securely delete or anonymize that data.

8 Cookies and Tracking Technologies

Okjil uses cookies and similar technologies — including web beacons, local storage, and session tokens — to operate and improve the Platform. The following types of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without affecting Platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalized experience.
• Analytics cookies: Used to collect aggregated, anonymized data about how players use the Platform, including pages visited, session duration, and navigation paths. This data helps okjil identify performance issues and improve the user experience.

Okjil does not use third-party advertising or tracking cookies. No data collected through okjil cookies is shared with advertising networks or used for behavioral advertising purposes.

You can manage or disable cookies through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use the Platform, including your ability to log in and maintain a session.

9 Data Security

Okjil implements a range of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the okjil Platform.
• Encryption of sensitive data at rest, including identity documents and financial records.
• Role-based access controls limiting access to personal data to authorized okjil personnel on a need-to-know basis.
• Regular security assessments, vulnerability scanning, and penetration testing of the Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Incident response procedures for detecting, reporting, and responding to personal data breaches in accordance with the DPA.

While okjil takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying okjil immediately if you suspect unauthorized access to your account.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, okjil will notify the National Privacy Commission and affected players in accordance with the requirements of the DPA and its Implementing Rules and Regulations.

10 Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okjil:

• Right to be informed: The right to be informed of how your personal data is collected, used, and processed, as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data okjil holds about you, along with information about how it is being processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data held by okjil. You may update certain account details directly through your account settings.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to okjil's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time through your account settings or by contacting support.
• Right to data portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that okjil has processed your personal data in violation of the DPA.

To exercise any of these rights, please contact the okjil Data Privacy Officer at the contact details provided in Section 13. Okjil will respond to all verified data rights requests within fifteen (15) business days of receipt. We may request proof of identity before processing your request.

11 Children's Privacy and Age Restriction

The okjil Platform is strictly intended for adults aged 21 years and above. Okjil does not knowingly collect personal data from individuals under the age of 21. The minimum age of 21 applies in accordance with applicable Philippine regulations governing participation in casino-style online gaming.

During registration, okjil requires all players to confirm that they are at least 21 years of age and to provide government-issued identification for age verification purposes. Where okjil discovers or has reasonable grounds to believe that a registered account belongs to a person under the age of 21, the account will be immediately suspended, all pending transactions will be placed on hold, and the matter will be investigated in accordance with okjil's internal procedures.

If you are a parent or guardian and believe that a minor has registered an account on the okjil Platform, please contact okjil support immediately so that the account can be reviewed and appropriate action taken.

12 Changes to This Privacy Policy

Okjil reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. The date of the most recent revision is displayed at the top of this page.

When material changes are made to this Policy, okjil will notify registered players via the email address associated with their account and/or by displaying a prominent notice on the Platform prior to the changes taking effect. We encourage you to review this Policy periodically to stay informed about how okjil protects your personal data.

Your continued use of the okjil Platform following the publication of any amendment to this Privacy Policy constitutes your acknowledgment of the updated Policy. If you do not agree to the revised Policy, you must cease using the Platform and may request account closure by contacting okjil support.

13 Contact Us and Data Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by okjil, please contact our Data Privacy Officer:

Data Privacy Officer — Okjil
Email: [email protected]

For general platform support inquiries, you may also contact our customer support team at: [email protected]

Okjil aims to respond to all privacy-related inquiries within fifteen (15) business days. For complaints that cannot be resolved directly with okjil, you have the right to escalate your concern to the National Privacy Commission of the Philippines.