This Privacy Policy describes how oakplay collects, processes, stores, uses, and protects the personal information of players and visitors who access the oakplay platform at oakplay.club. This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations, and applies to all personal data processed in connection with your use of our services.
Before you read the full legal text, here's a plain-English overview of oakplay's core data privacy commitments to every Filipino player on the platform.
oakplay collects personal information strictly for the purposes of account registration, KYC verification, payment processing, fraud prevention, responsible gaming monitoring, and compliance with PAGCOR and Philippine anti-money laundering regulations. We do not collect personal data speculatively or for resale.
All personal data processed by oakplay is protected using 256-bit SSL encryption in transit and AES-256 encryption at rest. Access to personal data is restricted to authorized oakplay personnel on a strict need-to-know basis. We conduct regular security audits and penetration testing to maintain system integrity.
oakplay does not sell, rent, or lease your personal information to any third party for commercial purposes. Disclosure of your data to third parties is limited to regulated service providers (payment processors, KYC verification partners) and Philippine regulatory authorities where legally required — never for advertising or data brokerage.
Under the Philippine Data Privacy Act of 2012, you have the right to access, correct, object to the processing of, and request erasure of your personal data. You can exercise these rights by contacting the oakplay Data Privacy Officer. Requests are processed within thirty (30) days of receipt in most circumstances.
Personal data collected from Filipino players on the oakplay platform is processed and stored on servers operating in compliance with Philippine data sovereignty standards. Any cross-border data transfer, where technically necessary for payment processing or game delivery, is subject to contractual safeguards consistent with RA 10173.
In the event of a personal data breach that is likely to result in risk to your rights and freedoms, oakplay is obligated under RA 10173 to notify the National Privacy Commission and affected players within seventy-two (72) hours of becoming aware of the breach. We maintain an incident response plan for this purpose.
The Data Privacy Act of 2012 (RA 10173) grants all data subjects specific enforceable rights over their personal information. As an oakplay player, these rights apply to all personal data we hold about you.
You may request a copy of the personal data oakplay holds about you, including how it is being used and with whom it has been shared.
If any personal data we hold about you is inaccurate, incomplete, or outdated, you have the right to request its correction or update.
You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
You may object to the processing of your personal data for purposes other than those strictly necessary for regulatory compliance and service delivery.
You may request your personal data in a structured, commonly used, machine-readable format for the purpose of transmitting it to another data controller.
If you suffer actual damage resulting from a breach of your rights under RA 10173, you are entitled to seek compensation through the National Privacy Commission or Philippine courts.
1.1 For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, the Personal Information Controller in respect of personal data processed through the oakplay platform is oakplay, the operator of the website accessible at oakplay.club, a platform regulated by the Philippine Amusement and Gaming Corporation (PAGCOR).
1.2 oakplay has appointed a Data Privacy Officer (DPO) responsible for overseeing compliance with RA 10173 and this Policy. The DPO can be contacted through the details provided in Section 15 of this Policy.
1.3 This Policy covers personal data processing activities conducted by oakplay in its capacity as Personal Information Controller. Where oakplay engages third-party Personal Information Processors (such as payment service providers or KYC verification platforms), those processors are bound by contractual data processing agreements that require them to process personal data only on oakplay's documented instructions and in compliance with RA 10173.
2.1 oakplay collects the following categories of personal data in connection with the provision of its online gaming platform services to Filipino players:
| Data Category | Specific Data Elements |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender, government-issued ID type and number, photographic identification documents submitted for KYC. |
| Contact Data | Philippine residential address, email address, Philippine mobile telephone number registered with the account. |
| Financial Data | GCash account identifier, PayMaya account identifier, bank account details (BPI, BDO, Metrobank) used for deposits and withdrawals, transaction history, wallet balance, cryptocurrency wallet addresses where applicable. |
| Technical Data | IP address, device type and identifier, operating system, browser type and version, session timestamps, login history, geographic location data (city/region level, not GPS-precise). |
| Usage Data | Game history, wagering patterns, bet amounts, win/loss records, session durations, feature usage within the platform, pages visited, and navigation paths. |
| Communications Data | Records of communications with the oakplay customer support team via live chat or email, including timestamps, subject matter, and resolution records. |
| Responsible Gaming Data | Self-imposed deposit limits, cooling-off periods, self-exclusion elections, session time alert configurations, and responsible gaming assessment responses. |
| Compliance Data | Source of funds declarations, enhanced due diligence documentation, politically exposed person (PEP) screening results, and anti-money laundering monitoring records. |
2.2 oakplay does not collect special categories of sensitive personal data (as defined under RA 10173) except where strictly required for legal compliance purposes — for example, Philippine government ID photographs required by PAGCOR for KYC verification.
3.1 Directly from You. The majority of personal data oakplay holds about you is provided directly by you during the account registration process, KYC verification, deposit and withdrawal transactions, customer support interactions, and through your voluntary configuration of responsible gaming tools.
3.2 Automatically. When you access the oakplay platform, certain technical data is collected automatically through the platform's server infrastructure and, where applicable, browser-based technologies including cookies and similar tracking technologies. This includes IP address, device identifiers, and session data. Please refer to Section 9 for details on cookie usage.
3.3 From Third Parties. oakplay may receive personal data about you from the following categories of third parties, in each case only to the extent necessary for a specified legitimate purpose:
4.1 oakplay processes personal data for the following specified, explicit, and legitimate purposes:
5.1 Under Section 12 of RA 10173, personal data processing is permitted where at least one of the following criteria is satisfied. oakplay relies on the following legal bases for its processing activities:
6.1 oakplay does not sell, rent, lease, or otherwise commercially transfer your personal data to any third party. Disclosure of personal data to third parties is limited to the following categories of recipients and circumstances:
7.1 oakplay retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention schedules apply:
7.2 Upon expiry of the applicable retention period, personal data is securely deleted, anonymized, or pseudonymized in accordance with oakplay's data destruction procedures. Anonymized or aggregated data that can no longer identify an individual may be retained indefinitely for statistical and platform improvement purposes.
8.1 oakplay has implemented technical and organizational security measures appropriate to the sensitivity of the personal data it processes. These measures include but are not limited to:
9.1 The oakplay platform uses cookies and similar browser-based technologies to support platform functionality, maintain session state, and collect technical usage data. The following categories of cookies are used:
9.2 oakplay does not use third-party advertising or retargeting cookies. No cross-site tracking technology is deployed on the platform for the purpose of serving targeted advertising to oakplay users on other websites.
9.3 You can manage cookie preferences through your browser settings. Instructions for managing cookies are available in the help documentation of major browsers (Chrome, Safari, Firefox). Note that disabling strictly necessary cookies will impair your ability to access the platform.
10.1 The oakplay platform is strictly intended for individuals who are twenty-one (21) years of age or older, in accordance with PAGCOR regulations governing online gambling in the Philippines. oakplay does not knowingly collect personal data from individuals under the age of 21.
10.2 Age verification is conducted as a mandatory component of the KYC process. Where oakplay determines, through KYC verification or other means, that a player is under the age of 21, the Account will be immediately suspended, all associated personal data will be flagged for regulatory review, and the matter will be referred to PAGCOR in accordance with licensing obligations.
10.3 If you are a parent or guardian and have reason to believe that your child has provided personal data to oakplay without your consent, please contact the oakplay Data Privacy Officer at the details provided in Section 15. oakplay will take prompt action to delete any such data and close the associated account.
11.1 oakplay's primary data processing infrastructure is located in server environments operating in compliance with Philippine data protection standards. The platform is designed and operated for the Philippine market, and the majority of personal data processing occurs within or in direct connection with Philippine-based infrastructure.
11.2 In certain limited circumstances, the provision of platform services may necessitate the transfer of personal data to service providers operating outside the Philippines — specifically in connection with game content delivery from international game development studios, fraud screening services, or cloud infrastructure components.
11.3 Where cross-border data transfers occur, oakplay ensures that adequate safeguards are in place consistent with Section 21 of RA 10173, including contractual data transfer agreements that impose data protection obligations on recipient entities equivalent to those applicable under Philippine law.
11.4 Cross-border transfers of personal data are limited to the minimum data elements necessary for the specified service purpose and are not used for any purpose beyond that for which the transfer was authorized.
12.1 To exercise any of your data subject rights under RA 10173 — including the right to access, correction, erasure, objection, or data portability — you may submit a written request to the oakplay Data Privacy Officer via email at the address provided in Section 15.
12.2 Your request should include: (a) your full name and registered email address; (b) a description of the right you wish to exercise; (c) sufficient detail to allow oakplay to identify and locate the personal data to which your request relates; and (d) a copy of a valid Philippine government-issued ID for identity verification purposes.
12.3 oakplay will acknowledge receipt of your request within five (5) business days and will provide a substantive response within thirty (30) calendar days of receipt. Where the request is complex or voluminous, this period may be extended by a further thirty (30) days with prior written notification to you.
12.4 oakplay will not charge a fee for processing data subject rights requests unless they are manifestly unfounded, repetitive, or excessive, in which case a reasonable administrative fee may be applied or the request refused, with written justification provided.
12.5 Where oakplay declines to act on a data subject rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Details of the NPC's complaint process are available on the NPC's official government website.
13.1 In the event of a personal data breach that is reasonably likely to give rise to a real risk of serious harm to affected data subjects, oakplay will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03.
13.2 Where the breach is likely to adversely affect your rights and freedoms, oakplay will notify you as a potentially affected data subject without undue delay, providing: (a) a description of the nature of the breach; (b) the categories and approximate number of data subjects affected; (c) the likely consequences of the breach; and (d) the measures taken or proposed to address the breach and mitigate its effects.
13.3 Breach notifications to affected players will be delivered via the email address registered to your oakplay account. You are responsible for ensuring your registered email address remains accurate and accessible.
13.4 oakplay maintains a register of all personal data breaches, including those that are not reportable to the NPC, in accordance with its accountability obligations under RA 10173.
14.1 oakplay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or PAGCOR regulatory guidance. The effective date at the top of this Policy will be updated to reflect the date of the most recent revision.
14.2 Where changes to this Policy are material — meaning they significantly affect your rights as a data subject or substantively alter how your personal data is processed — oakplay will notify you by email to your registered address at least fourteen (14) days prior to the changes taking effect.
14.3 We encourage you to review this Privacy Policy periodically to stay informed about how your personal data is being protected. The current version of this Policy is always accessible at oakplay.club/privacy-policy.
15.1 For all privacy-related inquiries, data subject rights requests, or to contact the oakplay Data Privacy Officer, please use the following contact details. All email addresses are displayed as plain text only in accordance with oakplay's communication policy — they are not clickable links.
15.2 Complaints and formal data privacy concerns should be submitted to the DPO email address with the subject line "DATA PRIVACY COMPLAINT" for priority handling. oakplay's DPO will acknowledge receipt within two (2) business days and provide a substantive response within thirty (30) calendar days.
15.3 If you are not satisfied with oakplay's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. Information about lodging a complaint with the NPC is available through the NPC's official Philippine government channels.
Every Filipino player at oakplay is protected by the full framework of RA 10173. We take your privacy seriously — because trust is the foundation of everything we've built. 21+ only. PAGCOR regulated.