Data Protection & Privacy

OkayLaro Privacy Policy – How We Protect Your Data

Your personal information matters, and okaylaro takes the responsibility of handling it seriously. This Privacy Policy explains clearly what data we collect from Filipino players, how we use it, who we share it with, and what rights you have over your own information.

Last Updated: January 2025
okaylaro

Six Things OkayLaro Commits to on Privacy

Before getting into the full details, here's the short version of what okaylaro's approach to your data actually means in practice.

Your Data Is Encrypted End-to-End

All personal data transmitted between your device and okaylaro's servers is protected by SSL/TLS encryption. Financial transaction data is handled through certified, secured payment gateways — no card or bank details are stored on okaylaro's own servers.

We Don't Sell Your Information

Okaylaro does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Your information is used to provide and improve okaylaro's services — not to generate revenue through data brokerage.

You Control Your Own Data

Filipino players have specific rights over their personal data at okaylaro — including the right to access, correct, and request deletion of their information. These rights are explained in full in this policy and can be exercised by contacting our support team.

We Only Collect What We Need

Okaylaro follows a data minimisation principle — we collect only the personal information required to operate a safe, compliant gaming platform. We don't ask for information we don't need, and we don't retain data longer than required by law or operational necessity.

Compliant With Philippine Data Laws

Okaylaro's privacy practices are designed to comply with the Republic Act 10173 — the Data Privacy Act of 2012 of the Philippines. This means your data rights as a Filipino player are protected under local law, not just internal policy.

We Notify You of Material Changes

If okaylaro updates this Privacy Policy in a way that materially affects your rights or how your data is used, you will be notified via your registered email address and through an on-platform notice before the change takes effect.

01 Introduction

This Privacy Policy describes how okaylaro ("we," "us," or "our") collects, uses, stores, and protects the personal information of players who register and use the okaylaro online casino and sportsbook platform, accessible at okaylaro.com.

Okaylaro is committed to handling your personal data responsibly and in accordance with the Republic Act 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its implementing rules and regulations. This policy applies to all individuals who interact with okaylaro — whether as registered players, visitors to our website, or people who contact our customer support team.

By registering an account at okaylaro, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein. If you do not agree with any part of this policy, please do not create an account or continue to use the okaylaro platform.

This policy applies specifically to Filipino players using the okaylaro platform. All data processing is conducted in accordance with Philippine law. All monetary references in this policy are in Philippine Pesos (₱).

02 Data Controller

Okaylaro acts as the data controller for the personal information of its registered players and website visitors. This means okaylaro is responsible for determining why and how your personal data is processed.

Okaylaro has appointed a Data Protection Officer (DPO) in compliance with the Data Privacy Act of 2012. If you have concerns about how your personal data is being handled, you may contact the DPO directly at the email address provided in the Contact Us section of this policy.


okaylaro

03 What Personal Data We Collect

Okaylaro collects personal data from players through several means: directly from you when you register or interact with the platform, automatically when you use the platform, and from third-party service providers such as payment processors and identity verification services.

Information You Provide Directly

  • Full legal name, date of birth, gender
  • Mobile phone number and email address
  • Home address, city, province, and postal code
  • Government-issued ID number (e.g., PhilSys, UMID, passport, driver's licence number) for identity verification
  • Payment method information — e.g., GCash mobile number, Maya account reference, bank account name — sufficient to process transactions but not stored in a way that enables direct access to your financial accounts
  • Messages and communications you send to okaylaro's customer support team

Information Collected Automatically

  • IP address and approximate geographic location derived from IP
  • Device type, operating system, browser type and version
  • Session data — pages visited, time spent, actions taken, and bet history within the platform
  • Cookies and similar tracking technologies (see Section 07 for full details)
Sensitive personal data: Okaylaro does not intentionally collect sensitive personal data (as defined under the Data Privacy Act of 2012) unless specifically required for compliance purposes, such as identity verification. Where such data is collected, it is handled with heightened security and limited access controls.

04 How OkayLaro Uses Your Personal Data

Okaylaro uses your personal data for specific, legitimate purposes. The table below summarises the primary purposes and the type of data involved for each:

Purpose Data Used Basis
Account registration and management Name, email, mobile number, date of birth Contract
Identity verification (KYC) Government ID, name, date of birth, address Legal obligation
Processing deposits and withdrawals Payment method reference, transaction amounts Contract
Customer support and dispute resolution Account details, communication logs Contract / Legitimate interest
Fraud prevention and AML compliance Transaction data, device data, IP address, ID Legal obligation
Responsible gaming monitoring Betting behaviour, session data, account history Legal obligation / Legitimate interest
Platform improvement and analytics Session data, device data, game interaction Legitimate interest
Promotional communications (with consent) Email address, mobile number, preferences Consent

Okaylaro will not use your personal data for any purpose not listed above without first notifying you and, where required, obtaining your consent.


05 Legal Basis for Processing

Under the Data Privacy Act of 2012 of the Philippines, okaylaro processes personal data on the following legal grounds:

  • Contract: Processing is necessary to fulfil the agreement between you and okaylaro — including creating your account, processing your transactions, and providing access to games.
  • Legal obligation: Okaylaro is subject to anti-money laundering regulations, responsible gaming obligations, and tax reporting requirements that necessitate certain data collection and retention.
  • Consent: For marketing communications and non-essential cookies, okaylaro relies on your freely given, specific, informed consent. You may withdraw this consent at any time.
  • Legitimate interest: Okaylaro may process data for fraud prevention, platform security, and service improvement where these interests do not override your rights and freedoms.

okaylaro

06 Who We Share Your Data With

Okaylaro does not sell your personal information. However, to operate a licensed, compliant gaming platform in the Philippines, we do share data with specific third parties in limited, controlled circumstances:

Payment Service Providers

To process your deposits and withdrawals, okaylaro shares relevant transaction data with Philippine payment processors including GCash, Maya, GrabPay, Coins.ph, and banking institutions. These providers receive only the information necessary to execute your specific transaction and are bound by their own data protection obligations under Philippine law.

Identity Verification Partners

Okaylaro works with third-party KYC (Know Your Customer) service providers to verify the identity of players. These providers process your identity documents under strict security protocols and data processing agreements. They do not retain your data beyond the verification process unless required by law.

Regulatory and Law Enforcement Authorities

Okaylaro is legally obligated to share information with Philippine regulatory bodies and law enforcement agencies when required to do so — for example, in relation to anti-money laundering investigations, tax reporting, or responses to lawful court orders. These disclosures are made only to the extent required by applicable Philippine law.

Technology and Infrastructure Partners

Okaylaro uses third-party service providers for hosting, security, analytics, and customer support tools. These providers act as data processors under agreements that require them to handle your data securely and in accordance with okaylaro's instructions. They are not permitted to use your data for their own purposes.

International transfers: Where data is processed outside the Philippines — for example, by a cloud infrastructure provider — okaylaro ensures adequate protections are in place through contractual safeguards consistent with the Data Privacy Act of 2012.

07 Cookies and Tracking Technologies

Okaylaro uses cookies and similar technologies on its website and platform. Cookies are small text files stored on your device that help us recognise you, remember your preferences, and understand how you interact with the platform.

Types of Cookies Used by OkayLaro

  • Strictly necessary cookies: Required for the platform to function — login sessions, security tokens, and language preferences. These cannot be disabled without breaking the platform.
  • Analytics cookies: Help okaylaro understand how players use the platform — which pages are visited, how long sessions last, and where errors occur. Used in aggregate and anonymised form to improve the service.
  • Marketing cookies (with consent): Used to deliver relevant promotions and measure the effectiveness of marketing campaigns. These are only active if you have given explicit consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the okaylaro platform. For marketing cookies, you may also withdraw consent at any time by contacting support.


08 How Long We Keep Your Data

Okaylaro retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Philippine law. The following general retention periods apply:

  • Account information and KYC documents: Retained for the duration of the account plus a minimum of 5 years after closure, as required by anti-money laundering regulations
  • Transaction records: Retained for a minimum of 5 years from the date of the transaction for audit and compliance purposes
  • Customer support communications: Retained for 3 years from the date of the interaction
  • Session and gameplay logs: Retained for 2 years for dispute resolution and platform improvement purposes
  • Marketing consent records: Retained until consent is withdrawn plus 1 year

When data is no longer required for any legitimate purpose and no legal retention obligation applies, okaylaro securely destroys or anonymises it.


09 Your Data Rights as a Filipino Player

Under the Data Privacy Act of 2012 of the Philippines, you have specific rights in relation to your personal data held by okaylaro. These rights are summarised below. To exercise any of them, contact okaylaro's support team or Data Protection Officer.

Right to Access

Request a copy of the personal data okaylaro holds about you, along with information about how it is being used.

Right to Rectification

Request correction of any inaccurate or incomplete personal data. Most basic account details can be updated directly in your account settings.

Right to Erasure

Request deletion of your personal data where there is no legitimate reason for okaylaro to continue holding it. Note that legal retention obligations may limit this right.

Right to Restrict Processing

Request that okaylaro limits how your data is used in certain circumstances — for example, while the accuracy of data is being disputed.

Right to Data Portability

Request your personal data in a structured, commonly used, machine-readable format so you can transfer it to another service provider.

Right to Object

Object to the processing of your personal data where okaylaro relies on legitimate interest as its legal basis, including for marketing communications.

Okaylaro will respond to data rights requests within 30 calendar days of receipt. Requests that are complex or numerous may take longer, in which case we will inform you within the initial 30-day window. There is no charge for exercising your data rights unless requests are manifestly unfounded or excessive.

If you believe okaylaro has not handled your data rights request appropriately, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.


10 How OkayLaro Keeps Your Data Secure

Okaylaro implements technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

  • SSL/TLS encryption for all data transmitted between your browser and okaylaro's servers
  • Encrypted storage for sensitive data at rest, including identity documents and financial reference information
  • Role-based access controls ensuring that okaylaro employees can only access the data necessary for their specific job functions
  • Regular security audits and penetration testing by independent third-party security firms
  • Automated fraud detection and anomaly alerting systems that flag unusual account activity for review
  • Regular staff training on data handling best practices and obligations under the Data Privacy Act of 2012

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, okaylaro will notify affected players and the National Privacy Commission within 72 hours of becoming aware of the breach, in accordance with the requirements of the Data Privacy Act of 2012.

Your role in security: Okaylaro's security measures are most effective when players also take steps to protect their own accounts — including using a strong, unique password and not sharing login credentials with others. If you suspect your account has been compromised, contact support immediately.

11 Children's Privacy

Okaylaro's platform is strictly for adults aged 21 and above. Okaylaro does not knowingly collect or process personal data from anyone under the age of 21. The platform implements age verification measures at registration to prevent underage access.

If okaylaro becomes aware that it has inadvertently collected personal data from a person under the age of 21, that data will be deleted immediately, the associated account will be closed, and any funds deposited will be returned to the original payment method.

If you are a parent or guardian and believe your child has registered at okaylaro, please contact support immediately with relevant details so the matter can be investigated and resolved promptly.


12 Updates to This Privacy Policy

Okaylaro reviews and updates this Privacy Policy periodically to reflect changes in the platform, applicable Philippine law, or okaylaro's data processing practices. The date of the most recent revision is shown at the top of this page.

Where changes are material — meaning they significantly affect your rights or how your data is processed — okaylaro will notify you in advance via your registered email address and through a prominent notice on the platform. You will have the opportunity to review the updated policy before the changes take effect.

Continued use of the okaylaro platform after an updated Privacy Policy has been communicated constitutes your acceptance of the revised policy. If you do not agree with any change, you should stop using the platform and may request account closure by contacting support.


13 Contact Us — Privacy Enquiries

If you have any questions about this Privacy Policy, want to exercise your data rights, or wish to raise a concern about how okaylaro handles your personal information, you can reach us through the following channels:

  • Email: support@okaylaro.com
  • Live Chat: Available 24/7 through the okaylaro platform once you are logged in
  • Data Protection Officer: Available by email at the same address, marked for the attention of the DPO

Okaylaro aims to respond to all privacy-related enquiries within 5 business days and to resolve data rights requests within 30 calendar days, as required by the Data Privacy Act of 2012.

If you feel that okaylaro has not adequately addressed your privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines.

Comfortable With How OkayLaro Handles Your Data?

Register your free account today — your personal information is protected under the Data Privacy Act of 2012, and your winnings go straight to GCash. Built for Filipino players, every step of the way.