01 Who We Are
Okolay is an online sports betting and casino platform operating at okolay.best, primarily serving players based in the Philippines. Okolay holds the necessary gaming licences to operate in the Philippine market and complies with all applicable regulatory requirements, including data protection obligations under the Philippine Data Privacy Act of 2012.
For the purposes of this Privacy Policy, Okolay is the data controller of the personal information you provide when using the platform. This means we are the entity responsible for determining how and why your data is processed.
If you have any questions about data privacy or wish to exercise any of your rights described in this policy, you can reach our Data Privacy Officer at support@okolay.best or through the live chat function available on-site.
02 What Personal Data We Collect
Okolay collects only the personal data that is necessary to operate your account, process transactions, comply with legal requirements, and provide you with a functioning platform experience. Here is a breakdown of the categories of data we collect:
| Category |
Examples |
When Collected |
| Identity Data |
Full legal name, date of birth, nationality, government ID type and number |
Registration and KYC verification |
| Contact Data |
Email address, Philippine mobile number, residential address |
Registration and account updates |
| Financial Data |
GCash number, Maya account, bank account details (name, account number), card last four digits |
First deposit and subsequent transactions |
| Transaction Data |
Deposit and withdrawal history, bet amounts, bet outcomes, game history |
Ongoing platform use |
| Technical Data |
IP address, device type, browser type and version, operating system, session duration |
Every platform visit |
| Verification Documents |
Scans or photos of government-issued ID (PhilSys card, passport, driver's licence, etc.) |
KYC verification requests |
| Communications Data |
Support chat transcripts, emails, feedback submissions |
When you contact Okolay support |
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification purposes under applicable gaming regulations.
03 How We Collect Your Data
Okolay collects personal data through the following means:
- Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, place bets, contact customer support, or submit any form on the Okolay platform.
- Automatically: Technical data such as IP address, device information, and session activity is collected automatically when you access and use the Okolay platform.
- From payment providers: When you make a deposit or withdrawal using GCash, Maya, BDO, BPI, or another payment method, we receive confirmation data from the payment provider to verify the transaction.
- From identity verification partners: Okolay may use third-party KYC and identity verification services to assist in confirming the identity and age of players. These partners are bound by strict data protection obligations.
- From fraud prevention services: We may receive data from fraud detection systems that help us identify suspicious account activity or protect players from unauthorised access.
04 Why We Use Your Personal Data
Okolay uses your personal data for clearly defined purposes. We do not use your data for anything not listed here without obtaining your separate consent:
- Account management: To create, maintain, and administer your Okolay account, including processing logins, password resets, and account updates.
- Transaction processing: To process your deposits, withdrawals, and bet settlements. We need your financial data to send and receive money on your behalf.
- Identity verification: To verify that you are who you say you are, that you are at least 21 years old, and that your payment methods are registered in your own name. This is both a legal and regulatory requirement for gaming operators.
- Customer support: To respond to your enquiries, resolve disputes, and improve our service based on feedback.
- Legal and regulatory compliance: To meet our obligations under Philippine gaming law, anti-money laundering regulations, the Data Privacy Act, and other applicable legislation.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account breaches, and other suspicious activity that could harm you or other players on the platform.
- Platform improvement: To analyse usage patterns and technical data in order to improve the performance, usability, and feature set of the Okolay platform.
- Responsible gaming: To monitor player activity for signs of problematic gambling behaviour and provide appropriate interventions, as required under responsible gaming obligations.
- Marketing communications: To send you promotions, bonus offers, and platform updates – but only if you have opted in to receive these communications. You can opt out at any time.
05 Legal Basis for Processing
Under the Philippine Data Privacy Act and applicable data protection principles, Okolay processes your personal data on the following legal bases:
- Contractual necessity: Processing is necessary to perform the contract between you and Okolay (i.e., operating your betting account, processing transactions, settling bets).
- Legal obligation: Processing is required to comply with applicable law – including anti-money laundering regulations, gaming licence conditions, and age verification requirements.
- Legitimate interests: Processing is necessary for Okolay's legitimate interests, such as fraud prevention, platform security, and improving the product, provided these interests are not overridden by your privacy rights.
- Consent: Where processing is not justified by the above bases – for example, sending marketing communications – we will obtain your explicit consent first. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
06 How We Share Your Data
Okolay does not sell your personal data to any third party for commercial purposes. We share data only in the following limited circumstances:
- Payment processors: GCash, Maya, GrabPay, InstaPay, and banking partners need certain transaction and account data to process your deposits and withdrawals. They are independently regulated and bound by their own privacy obligations.
- KYC and identity verification providers: Third-party services used to verify the authenticity of identity documents and confirm age. These providers process only the data necessary for verification and are under contractual data protection obligations.
- Fraud prevention and AML screening: We may share data with screening services used to detect money laundering, fraud, or sanctions list matches. This is a regulatory requirement for licensed gaming operators.
- Game technology providers: Live casino and virtual sports content is provided by third-party platforms. These providers may receive technical data necessary to deliver the game stream to your device. They do not receive unnecessary personal account data.
- Regulatory and legal authorities: Okolay will disclose personal data to Philippine regulatory bodies, law enforcement, or courts when required to do so by law or valid legal process.
- Corporate transfers: In the event of a merger, acquisition, or sale of Okolay's business, player data may be transferred to the acquiring entity. You will be notified in advance of any such transfer that affects your personal data.
Partner Accountability: All third-party service providers with whom Okolay shares personal data are required to process that data only for the specified purpose, maintain appropriate security standards, and comply with applicable data protection law. We do not permit them to use your data for their own marketing purposes.
07 How Long We Keep Your Data
Okolay retains personal data for as long as it is needed to fulfil the purpose for which it was collected, or as required by law. Below are the general retention periods we apply:
- Account data: Retained for the duration of your active account and for a period of at least five years following account closure, in line with anti-money laundering and gaming regulatory requirements.
- Transaction and betting records: Retained for a minimum of five years from the date of each transaction, as required by applicable financial and gaming regulations.
- KYC and identity documents: Retained for the duration of the account and for at least five years after closure, in compliance with AML regulations.
- Support communications: Retained for up to three years from the date of the last interaction, to assist with future queries and dispute resolution.
- Marketing consent records: Retained for as long as you have an active account or until you withdraw consent, plus a reasonable period afterward to demonstrate compliance.
When data is no longer required and no legal retention obligation applies, Okolay will securely delete or anonymise it in a way that prevents reconstruction.
08 How We Protect Your Data
Data security is taken seriously at Okolay. We have implemented a range of technical and organisational measures designed to protect your personal information against unauthorised access, alteration, disclosure, or destruction:
- Encryption: All data transmitted between your device and Okolay's servers is encrypted using TLS (Transport Layer Security). Stored personal data is encrypted at rest using industry-standard algorithms.
- Access controls: Access to personal data within Okolay's systems is restricted on a need-to-know basis. Only staff with a legitimate reason to access specific data categories can do so, and access is logged.
- Secure payment handling: Okolay does not store full payment card numbers. Payment processing is handled by PCI DSS-compliant providers. GCash and Maya transaction credentials are not stored on Okolay's servers.
- Account security: Player accounts are protected by password authentication. We recommend using a strong, unique password. Two-factor authentication options may be available for additional account protection.
- Monitoring: Okolay monitors its systems for unusual activity, potential breaches, and suspicious access attempts. Our security team responds to identified threats promptly.
- Incident response: In the event of a data breach that poses a risk to your rights, Okolay will notify affected players and the relevant data protection authority within the timeframes required by law.
While we take all reasonable precautions, no digital system can guarantee 100% security. We encourage you to protect your own account by using a strong password, not sharing your login credentials, and logging out of shared devices after each session.
09 Cookies and Tracking Technologies
Okolay uses cookies and similar tracking technologies on its platform. Cookies are small text files placed on your device when you visit a website. They help us provide you with a functioning, personalised, and secure experience.
The types of cookies Okolay uses:
- Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that help protect your account. These cannot be disabled without breaking core platform functionality.
- Functional cookies: Remember your preferences, such as your preferred language or display settings, so you don't need to re-enter them on every visit.
- Analytics cookies: Help us understand how players use the platform – which sections are visited most, how long sessions last, and where players encounter issues. This data is used in aggregate to improve the platform. We do not use analytics data to identify individual players.
- Security cookies: Used to detect and prevent fraudulent access attempts and to protect the integrity of betting sessions.
Okolay does not use third-party advertising cookies or allow external advertisers to place tracking cookies on your device through our platform. You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core betting and gaming features of Okolay.
10 Your Data Privacy Rights
Under the Philippine Data Privacy Act and applicable principles, you have the following rights with respect to your personal data held by Okolay:
