okada5 Privacy Policy

This Privacy Policy ("Policy") describes how okada5 ("we", "us", "our", "the Platform") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "your", "Player", "User") who access or use the okada5 website, mobile interface, gaming services, sportsbook, and all associated features available at okada5.net.

okada5 is committed to respecting your privacy and safeguarding your personal data. We operate in accordance with the Republic of the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable regulations issued by the National Privacy Commission (NPC) and the Philippine Amusement and Gaming Corporation (PAGCOR).

Please read this Policy carefully before using the okada5 Platform. By registering an account, making a deposit, or otherwise accessing any part of the okada5 Platform, you confirm that you have read and understood this Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.

This Policy should be read alongside our Terms & Conditions and any other policies referenced herein, all of which together govern your relationship with okada5.

For the purposes of applicable Philippine data protection law, okada5 acts as the personal information controller in respect of the personal data processed through the Platform. This means that okada5 determines the purposes for which and the manner in which your personal data is processed.

Where okada5 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, or cloud infrastructure partners — those providers act as personal information processors operating under okada5's instructions and are bound by contractual obligations requiring them to process your data only as directed and to maintain appropriate security standards.

For all privacy-related enquiries, including the exercise of your data subject rights, you may contact our Data Protection Officer (DPO) at: [email protected]

okada5 collects the following categories of personal data in connection with your use of the Platform:

3.1 Identity and Registration Data

When you create an account, we collect: your full legal name, date of birth, gender, nationality, and government-issued identification details (e.g., PhilSys National ID number, passport number, or driver's license number). This data is required to verify your identity and confirm that you meet the 21+ age requirement.

3.2 Contact Data

We collect your email address, Philippine mobile number, and residential address (including city, province, and postal code). Contact data is used for account communications, transaction notifications, and identity verification.

3.3 Financial and Transaction Data

We collect records of your deposits, withdrawals, and gaming transactions on the Platform, including payment method details (e.g., GCash account reference, BPI/BDO bank account number — masked where possible), transaction amounts in Philippine Peso (PHP), timestamps, and transaction identifiers. We do not store full card numbers or complete bank credentials on our servers.

3.4 KYC and Verification Documents

As required by PAGCOR regulations and Philippine anti-money laundering (AML) law, we may collect copies of government-issued photo identification, proof of address documents (e.g., utility bills, bank statements), and selfie/biometric verification images to confirm your identity prior to processing withdrawals or as part of periodic account reviews.

3.5 Gaming and Behavioral Data

We collect records of your gaming activity on okada5, including: games played, bet amounts and outcomes, session duration, game preferences, bonus usage history, and responsible gaming tool settings. This data is used for account management, fraud detection, regulatory reporting, and personalisation of your experience.

3.6 Technical and Device Data

We automatically collect technical data when you access the Platform, including: IP address, browser type and version, operating system, device type and identifiers, screen resolution, time zone, and referring URL. This information is used for security monitoring, fraud prevention, and Platform optimization.

3.7 Communications Data

If you contact our customer support team via email, live chat, or any other channel, we retain records of that correspondence — including any personal information you provide within those communications — for quality assurance, dispute resolution, and regulatory compliance purposes.

3.8 Marketing Preferences

Where you have provided consent, we hold a record of your marketing preferences, including your choices regarding promotional emails, SMS notifications, and in-platform offers.

okada5 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, participate in promotions, or contact customer support.
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies as you navigate and interact with the Platform.
• From third-party verification providers — identity verification services and KYC/AML screening platforms may provide us with enriched identity or sanctions-screening data to supplement information you have provided directly.
• From payment processors — GCash, Maya, BPI, BDO, Metrobank, and other payment partners may transmit transaction confirmation data and account reference information to okada5 as part of payment processing.
• From fraud prevention and security partners — we may receive risk signals or device fingerprint data from specialist fraud detection services.

okada5 processes your personal data for the following specific purposes:

Under the Data Privacy Act of 2012, okada5 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to fulfil our contract with you — that is, to operate your account, provide gaming services, and process financial transactions.
• Legal obligation: Processing required to comply with Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and NPC regulations.
• Legitimate interests: Processing necessary for fraud prevention, security monitoring, Platform integrity, and responsible gaming oversight, where these interests are not overridden by your data protection rights.
• Consent: Where you have given explicit consent — specifically for marketing communications and optional profiling for personalised offers. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

okada5 does not sell your personal data. We share your data only in the circumstances described below, and only to the extent necessary for the stated purpose:

7.1 Service Providers and Processors

We engage carefully selected third-party service providers who process data on our behalf under strict contractual obligations. These include: KYC and AML verification platforms, payment gateway and e-wallet partners (GCash, Maya, BPI, BDO, Metrobank, USDT processors), fraud detection services, cloud hosting and infrastructure providers, and customer support platform operators.

7.2 Regulatory and Law Enforcement Authorities

We are required by Philippine law to disclose certain player information to regulatory bodies and law enforcement agencies where lawfully requested. This includes PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and duly authorised law enforcement agencies. Such disclosures are made in strict compliance with applicable legal requirements.

7.3 Game Providers

Third-party game providers whose content is available on the okada5 Platform may receive limited technical data (such as a player session token or anonymised player identifier) necessary to deliver their game software and record game outcomes. These providers are contractually prohibited from using such data for any purpose other than delivering their services to okada5.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of okada5's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide reasonable notice of any such transfer and ensure the receiving party assumes equivalent data protection obligations.

7.5 With Your Consent

We may share your data with other parties where you have provided explicit, informed consent for us to do so. You may withdraw such consent at any time by contacting us.

okada5 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account, plus a minimum of five (5) years following account closure — as required by PAGCOR licensing conditions and AMLA record-keeping obligations.
• Financial and transaction records: Retained for a minimum of five (5) years in compliance with the Anti-Money Laundering Act and its implementing rules.
• KYC documents: Retained for a minimum of five (5) years following the end of the customer relationship or the date of the last transaction, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the last communication, unless a longer retention period is required for ongoing dispute resolution or regulatory purposes.
• Marketing preference data: Retained until you withdraw consent or opt out, after which it is deleted or anonymised within 30 days.
• Technical and device data (logs): Retained for up to twelve (12) months, after which it is aggregated or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

okada5 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• Transport Layer Security (TLS/SSL): All data in transit between your browser or app and okada5 servers is encrypted using 256-bit TLS encryption.
• Data at rest encryption: Sensitive data stored in okada5 databases — including identity and financial information — is encrypted at the storage layer.
• Access controls: Access to personal data within okada5's internal systems is restricted on a strict need-to-know basis. Staff access is controlled by role-based permissions, and all access is logged and audited.
• Two-factor authentication: Player accounts support two-factor authentication (2FA) to reduce the risk of unauthorised account access.
• Penetration testing and vulnerability management: okada5 conducts regular security assessments of its Platform infrastructure to identify and remediate vulnerabilities.
• Incident response: We maintain a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission within 72 hours and affected players as required by the Data Privacy Act.

okada5 uses cookies and similar tracking technologies (such as web beacons and local storage objects) to operate the Platform, improve your experience, and support security and analytics functions. The following categories of cookies are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They enable core features such as maintaining your login session, remembering your language and display preferences, and processing secure transactions. These cookies cannot be disabled without seriously impairing your ability to use the Platform.

10.2 Performance and Analytics Cookies

These cookies collect aggregated, anonymised information about how visitors use the Platform — such as which pages are visited most frequently and how users navigate between sections. This data helps us improve the Platform's performance and user experience. No personally identifiable information is collected by these cookies.

10.3 Functional Cookies

These cookies allow the Platform to remember choices you make — such as your preferred game lobby view, notification settings, or responsible gaming tool configuration — and provide a more personalised experience during and between sessions.

10.4 Security Cookies

Security cookies support fraud detection, bot prevention, and account protection functions. They may collect device fingerprint signals and session behaviour data to identify anomalous activity patterns that could indicate unauthorised access or abuse.

10.5 Managing Cookies

You can control or disable non-essential cookies through the cookie preference centre accessible via the Platform, or through your browser settings. Please note that disabling certain cookies may affect the functionality of the okada5 Platform. Strictly necessary and security cookies cannot be disabled through the preference centre as they are required for the Platform to operate safely.

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by okada5:

• Right to be Informed: The right to be informed that your personal data is being or will be processed, including the purposes and extent of processing. This Policy fulfils that obligation.
• Right to Access: The right to request a copy of the personal data okada5 holds about you, along with information about how it is used and with whom it is shared.
• Right to Correction: The right to request correction of inaccurate or incomplete personal data. You can update basic profile information directly via your account settings; for identity and KYC data, contact our support team.
• Right to Erasure / Right to be Forgotten: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to overriding legal retention obligations (e.g., AMLA record-keeping requirements).
• Right to Object: The right to object to the processing of your personal data where that processing is based on legitimate interests or for direct marketing purposes.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another personal information controller, where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe that okada5 has violated your data protection rights.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Subject Rights Request". We will acknowledge your request within five (5) business days and respond substantively within fifteen (15) business days, as required by NPC regulations. We may require identity verification before fulfilling requests involving sensitive personal data.

okada5 is strictly intended for use by individuals who are at least 21 years of age, as required under Philippine gaming regulations. The Platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21.

All new accounts are subject to mandatory age and identity verification as part of our KYC process. Where okada5 discovers or has reason to believe that personal data has been collected from a person under the age of 21, we will immediately:

• Suspend the relevant account pending investigation.
• Void any transactions and return any deposited funds via the original payment method where possible.
• Permanently delete the personal data of the underage individual from our systems once the account closure process is complete, subject to any mandatory regulatory retention requirements.
• Report the matter to relevant regulatory authorities where required by law.

If you believe that a minor may have registered on the okada5 Platform, please contact us immediately at [email protected] so we can take prompt action.

Some of okada5's service providers and technology infrastructure partners may be located in jurisdictions outside the Republic of the Philippines. Where personal data is transferred internationally — for example, to cloud infrastructure providers or third-party game studios — okada5 ensures that such transfers are subject to appropriate contractual safeguards equivalent to the protections afforded under Philippine data protection law.

Specifically, okada5 uses data processing agreements with international processors that require them to: process data only on okada5's documented instructions; implement appropriate technical and organisational security measures; not transfer data to further sub-processors without okada5's prior written authorisation; and cooperate with okada5 in responding to data subject rights requests.

By using the okada5 Platform, you acknowledge that your personal data may be processed in jurisdictions outside the Philippines, subject to the safeguards described above.

okada5 may update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent in-platform notice to registered players upon their next login following the update.
• Where the changes are particularly significant, send a notification to your registered email address.

Your continued use of the okada5 Platform after the effective date of any revised Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

If you disagree with any material change to this Policy, you have the right to close your account and withdraw from the Platform. Any verified real-money balance will be returned to you via your last verified withdrawal method upon account closure.

If you have any questions, concerns, or complaints about this Privacy Policy or about how okada5 handles your personal data, please contact our Data Protection Officer:

Email: [email protected]

We will acknowledge all privacy-related enquiries within five (5) business days. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.

For questions relating to responsible gaming, self-exclusion, or problem gambling support resources available to Filipino players, please visit our dedicated Responsible Gaming page.