Oklaro 5 Privacy Policy – Philippines

Oklaro 5 ("we," "us," "our") is the data controller responsible for the personal information you provide when using the oklaro 5 platform at https://oklaro5.com. As data controller, oklaro 5 determines the purposes and means of processing your personal data in accordance with the Philippine Data Privacy Act of 2012 (RA 10173) and all applicable regulations issued by the National Privacy Commission (NPC).

Our designated Data Protection Officer (DPO) can be reached at support@oklaro5.com. Any enquiry, request, or complaint relating to how oklaro 5 handles your personal data should be directed to this address. We aim to respond to all privacy-related communications within 15 business days.

Oklaro 5 collects personal data from you in the following categories, depending on how you interact with the platform:

Registration and Identity Data

• Full legal name
• Date of birth
• Philippine mobile phone number
• Email address
• Username and encrypted password
• Government-issued ID details (collected during KYC verification)
• Proof of address documentation

Financial and Transaction Data

• GCash, Maya, GrabPay, or Coins.ph account details (reference numbers, not full credentials)
• Bank account details for transfer-based transactions (BDO, BPI, UnionBank)
• Visa/Mastercard card type and last four digits (full card numbers are processed by payment providers, not stored by oklaro 5)
• Deposit and withdrawal history
• Transaction amounts and timestamps

Gameplay and Activity Data

• Games played, bet amounts, game outcomes, session durations
• Bonus claims and wagering activity
• Referral programme activity
• Login history and timestamps

Technical and Device Data

• IP address and general geographic location (region/province level)
• Device type, operating system, and browser
• Session identifiers and cookies
• Platform interaction logs

Communications Data

• Content of support communications (chat, email)
• Marketing communication preferences and consent records

Oklaro 5 uses your personal data only for specific, documented purposes. We do not use your data for purposes incompatible with those listed here, and we do not process more data than is necessary for each purpose.

Under the Philippine Data Privacy Act, oklaro 5 must have a legitimate legal basis for processing your personal data. The bases we rely on are:

• Contract performance: Processing necessary to fulfil your oklaro 5 account agreement — creating and managing your account, processing transactions, and providing gaming services.
• Legal obligation: Processing required to comply with Philippine law — including KYC identity verification, anti-money laundering reporting, responsible gaming obligations, and regulatory recordkeeping.
• Legitimate interest: Processing for fraud prevention, platform security, and analytical improvements to the oklaro 5 product, where those interests are balanced against your rights and do not override them.
• Consent: Processing for marketing communications — email newsletters, promotional SMS, push notifications. You may withdraw this consent at any time without affecting your account or other services.

Oklaro 5 does not sell or rent your personal data. We share data only with the following categories of third parties, and only to the extent necessary for the stated purpose:

Payment Service Providers

GCash, Maya, GrabPay, Coins.ph, InstaPay, PESONet, and card network processors receive transaction reference data necessary to process your deposits and withdrawals. These providers process data under their own privacy policies and Philippine regulatory obligations.

KYC and Identity Verification Partners

Third-party identity verification services may process your ID documents and personal details to complete KYC checks required by Philippine gaming regulations. These partners are contractually bound to process your data only for verification purposes and to maintain appropriate data security standards.

Technology and Infrastructure Providers

Cloud infrastructure, data storage, and security monitoring providers who host or support the oklaro 5 platform. These providers are data processors acting under our instruction and are bound by data processing agreements consistent with the Data Privacy Act.

Regulatory and Law Enforcement Authorities

Oklaro 5 will disclose personal data to the National Privacy Commission, Philippine gaming regulatory authorities, AMLC, or law enforcement agencies when required to do so by law, court order, or regulatory directive. We will notify you of such disclosures where legally permitted to do so.

Professional Advisers

Legal, accounting, and auditing professionals who require access to specific data in connection with their professional engagement with oklaro 5, subject to strict confidentiality obligations.

The oklaro 5 platform uses cookies and similar tracking technologies to enable core functionality, improve performance, and — with your consent — deliver relevant promotional content. Here is what each category of cookie does:

• Strictly necessary cookies: Required for the platform to function — session management, login persistence, security tokens. These cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences — language settings, game display preferences, notification settings. Disabling these may affect your experience but will not prevent access to oklaro 5.
• Analytics cookies: Aggregate, anonymised data on how players navigate the oklaro 5 platform — which pages are visited, where players encounter errors, how long sessions last. Used to improve the platform; no individual player is identified in this analysis.
• Marketing cookies: Only activated with your explicit consent. Used to track which promotions drove registrations, enabling oklaro 5 to improve its promotional campaigns. These are not used for cross-site tracking.

You can manage cookie preferences through your browser settings or via the cookie consent panel presented when you first visit oklaro 5. Withdrawing consent for non-essential cookies does not affect your ability to use the platform.

Oklaro 5 retains your personal data for only as long as necessary to fulfil the purposes it was collected for, or to comply with legal and regulatory retention obligations. Below are the key retention periods that apply:

• Active account data: Retained for the duration of your account's active status plus 5 years following account closure, as required by Philippine gaming and anti-money laundering regulations.
• Transaction and financial records: Retained for 5 years after the transaction date in accordance with AMLC and BSP requirements.
• KYC documents: Retained for 5 years after account closure or the date of last transaction, whichever is later.
• Support communications: Retained for 2 years from the date of the last communication in the thread.
• Marketing consent records: Retained for 3 years from the date of last consent action (grant or withdrawal) as evidence of compliance.
• Technical logs: Retained for 12 months for security monitoring and fraud investigation purposes, then deleted or anonymised.

When a retention period expires and there is no other legal basis for continued retention, oklaro 5 will securely delete or anonymise the relevant data. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical purposes.

Oklaro 5 implements a multi-layered approach to data security that covers technical, organisational, and procedural controls:

• Encryption: All data in transit is encrypted using TLS 1.2 or higher. Sensitive data at rest — including identity documents, financial records, and authentication credentials — is encrypted using industry-standard algorithms.
• Access controls: Role-based access control limits employee access to player data on a need-to-know basis. All access is logged and audited. Privileged access requires multi-factor authentication.
• Network security: The oklaro 5 infrastructure is protected by firewalls, intrusion detection systems, and regular vulnerability assessments. Penetration testing is conducted periodically by qualified independent security professionals.
• Incident response: Oklaro 5 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights, we will notify the National Privacy Commission within 72 hours and notify affected players without undue delay, as required by Philippine law.
• Staff training: All oklaro 5 employees with access to player data receive data privacy training as part of onboarding and on a recurring annual basis.

While oklaro 5 employs strong security measures, no digital platform can guarantee 100% security against all threats. We encourage you to protect your account by using a strong unique password and enabling two-factor authentication where available.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by oklaro 5. You can exercise any of these rights by contacting support@oklaro5.com:

To exercise any of these rights, send your request to support@oklaro5.com with the subject line "Data Subject Request" and include your full name and account username. We will verify your identity before processing the request and respond within 15 business days. There is no charge for exercising your rights, though repeated or manifestly unfounded requests may be subject to a reasonable administrative fee.

If you are not satisfied with oklaro 5's response to a data privacy request or complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph.

The oklaro 5 platform is strictly intended for users who are 18 years of age or older. Oklaro 5 does not knowingly collect personal data from individuals under 18. If you believe a minor has registered an account at oklaro 5, please notify us immediately at support@oklaro5.com. We will investigate and take appropriate action, which will include closing the account and deleting any personal data collected, in accordance with the Data Privacy Act.

Oklaro 5 uses age verification as part of the KYC process and applies automated age checks during registration. If an account is flagged as potentially belonging to a minor, it is suspended pending verification before any real-money gameplay is permitted.

Some of the third-party service providers used by oklaro 5 — including cloud infrastructure providers — may process or store data on servers located outside the Philippines. When such international transfers occur, oklaro 5 ensures that appropriate safeguards are in place consistent with the requirements of the Data Privacy Act and NPC regulations, including contractual protections requiring the receiving party to maintain data protection standards equivalent to Philippine law.

Oklaro 5 does not transfer Philippine player personal data to jurisdictions that do not provide an adequate level of data protection without implementing additional contractual or technical safeguards. If you have questions about specific international transfers of your data, contact our DPO at support@oklaro5.com.

Oklaro 5 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or regulatory guidance from the National Privacy Commission. Material changes to this Privacy Policy will be communicated to registered oklaro 5 players via email notification and a prominent notice on the platform at least 7 days before the changes take effect.

The "Effective" date at the top of this Privacy Policy indicates when the current version entered into force. We recommend reviewing this page periodically. The current version of this Privacy Policy is always accessible at https://oklaro5.com/privacy-policy.

Your continued use of the oklaro 5 platform after an updated Privacy Policy takes effect constitutes your acknowledgment of the updated policy. If you do not agree with a material change, you may close your account before the effective date without penalty.

If you have any questions about this Privacy Policy, want to exercise your data subject rights, or wish to raise a concern about how oklaro 5 handles your personal data, please contact our Data Protection Officer:

• Email: support@oklaro5.com (subject: "Privacy / Data Protection")
• Response time: Within 15 business days for all data subject requests
• Live chat: Available 24/7 from within your logged-in oklaro 5 account

We take every privacy concern seriously and will investigate all complaints thoroughly. If you are not satisfied with our response, you may escalate your complaint to the National Privacy Commission of the Philippines.