Privacy Policy

When you create an h5.okplay account, we collect the following information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Philippine mobile number
• Email address
• Chosen username and encrypted password
• Residential address (province, city/municipality)
• Nationality

To comply with PAGCOR regulations and anti-money laundering requirements, we collect:

• Copies of government-issued identification documents (e.g., Philippine passport, SSS ID, PhilHealth ID, UMID, driver's license, Postal ID)
• Selfie or live photo for identity matching
• Proof of address (e.g., utility bill, bank statement) where required
• Source of funds declaration for high-value accounts

When you make deposits or withdrawals, we collect:

• GCash or PayMaya/Maya mobile number
• Bank account name and number (for bank transfer transactions)
• Debit card details (card number is tokenized and never stored in plain text)
• Transaction history, including deposit amounts, withdrawal amounts, dates, and reference numbers

We record your gaming activity on the h5.okplay platform, including games played, wagers placed, game outcomes, session durations, bonus usage, and responsible gaming tool activations (such as deposit limits and self-exclusion requests). This data is used for account management, dispute resolution, and responsible gaming monitoring.

When you access h5.okplay, our systems automatically collect certain technical information:

• IP address and approximate geolocation (country/region level)
• Device type, operating system, and browser version
• Session timestamps and duration
• Pages visited and features used within the platform
• Referral source (how you arrived at h5.okplay)

If you contact h5.okplay's customer support team via live chat, email, or any other channel, we retain records of those communications, including the content of messages, timestamps, and the resolution of any issues raised. This data is used for quality assurance, dispute resolution, and training purposes.

h5.okplay collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you access the platform
• From third-party payment providers — GCash, PayMaya/Maya, and banking partners share transaction confirmation data with us to process your deposits and withdrawals
• From identity verification services — third-party KYC providers may share verification results with us as part of the identity check process
• From fraud prevention services — we may receive risk signals from fraud detection partners to protect the integrity of the platform

Purpose	Data Used
Account creation and management	Registration data, contact details
Age and identity verification (KYC)	Date of birth, government ID, selfie
Processing deposits and withdrawals	Financial data, transaction records
Anti-money laundering compliance	KYC data, transaction history, source of funds
Fraud detection and prevention	Device data, IP address, transaction patterns
Responsible gaming monitoring	Gaming activity, session data, limit settings
Customer support and dispute resolution	Communications data, account history
Platform improvement and analytics	Technical data, usage patterns (aggregated)
Promotional communications (with consent)	Contact details, gaming preferences
Legal and regulatory compliance	All categories as required by law

h5.okplay processes your personal data on the following lawful bases under the Data Privacy Act of 2012:

• Consent — for optional communications such as promotional emails and SMS notifications. You may withdraw consent at any time by contacting support.
• Contractual necessity — processing required to fulfill our obligations under the Terms & Conditions you agreed to upon registration, including account management and payment processing.
• Legal obligation — processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act (RA 9160), the Data Privacy Act (RA 10173), and other applicable Philippine laws.
• Legitimate interests — processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights and freedoms.

h5.okplay shares personal data with carefully selected third-party service providers who assist in operating the platform. These include:

• Payment processors — GCash, PayMaya/Maya, and banking partners, solely for the purpose of processing your transactions
• KYC and identity verification providers — to verify your identity and age in compliance with regulatory requirements
• Game software suppliers — licensed third-party providers whose games are hosted on the h5.okplay platform may receive session data necessary to operate their games
• Fraud prevention and security services — to detect and prevent fraudulent activity on the platform
• Cloud hosting and infrastructure providers — who store and process data on our behalf under strict data processing agreements

All third-party service providers are contractually bound to process your data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable Philippine privacy law.

h5.okplay may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities where required by law, court order, or regulatory directive. Such disclosures will be made only to the extent required and will be documented in accordance with our internal compliance procedures.

h5.okplay does not sell, rent, lease, or otherwise commercially transfer your personal data to any third party for their own marketing or commercial purposes. Your data is not a product at h5.okplay.

h5.okplay retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law:

• Account data — retained for the duration of your account and for five (5) years after account closure, in compliance with PAGCOR record-keeping requirements
• KYC and identity documents — retained for a minimum of five (5) years after the end of the business relationship, as required by the Anti-Money Laundering Act
• Transaction records — retained for five (5) years from the date of the transaction
• Gaming activity logs — retained for three (3) years for dispute resolution and responsible gaming purposes
• Customer support communications — retained for two (2) years from the date of the last interaction
• Technical and device logs — retained for ninety (90) days for security and fraud prevention purposes

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data disposal procedures.

h5.okplay implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• SSL/TLS encryption for all data transmitted between your device and our servers
• AES-256 encryption for sensitive data stored in our databases
• Password hashing using industry-standard algorithms — your password is never stored in plain text
• Payment card tokenization — debit card details are tokenized and never stored in raw form on h5.okplay systems
• Access controls — strict role-based access controls limit which staff members can access personal data, on a need-to-know basis
• Regular security audits and penetration testing of the platform
• Two-factor authentication options for player accounts
• 24/7 security monitoring for suspicious activity and intrusion attempts

While h5.okplay takes all reasonable precautions to protect your data, no system is completely immune to security risks. In the event of a personal data breach that is likely to result in serious harm to your rights and freedoms, h5.okplay will notify you and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by the Data Privacy Act.

h5.okplay uses cookies and similar tracking technologies to operate and improve the platform. The types of cookies we use include:

• Strictly necessary cookies — essential for the platform to function, including session management and security tokens. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings and game display options.
• Analytics cookies — collect aggregated, anonymized data about how players use the platform, helping us identify areas for improvement.
• Security cookies — used for fraud detection and to protect the integrity of the platform.

You can manage non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the h5.okplay platform. h5.okplay does not use third-party advertising or behavioral tracking cookies.

h5.okplay's services are strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR regulations and Philippine law. h5.okplay does not knowingly collect personal data from individuals under the age of 21.

If h5.okplay becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on h5.okplay, please contact our Data Protection Officer immediately.

Some of h5.okplay's third-party service providers (such as cloud infrastructure and game software suppliers) may process your personal data outside the Philippines. Where such cross-border transfers occur, h5.okplay ensures that appropriate safeguards are in place, including contractual clauses that require the recipient to provide a level of data protection equivalent to that required under Philippine law. h5.okplay will not transfer your personal data to a country that does not provide adequate data protection without your explicit consent or a lawful basis under RA 10173.

h5.okplay reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Material changes will be communicated to registered players via a notice on the platform or by notification to the contact details on file, at least seven (7) days before the changes take effect. The current version of this Policy is always available on this page, with the effective date clearly indicated at the top. Your continued use of h5.okplay following the effective date of any amendment constitutes your acceptance of the revised Policy.