ok77 Privacy Policy
ok77 is committed to protecting the privacy and personal data of every Filipino player on our platform. This Privacy Policy explains what data we collect, how we use it, and the rights you hold under Philippine law.
Last Updated: January 1, 2026 · Effective: January 1, 2026
How ok77 Handles Your Data
Before reading the full legal text, here are the six core principles that guide every data decision ok77 makes about your personal information.
Purpose Limitation
ok77 collects only the data we actually need to operate the platform, verify your identity, process payments, and comply with PAGCOR and Philippine law. We do not collect data speculatively or for purposes beyond what is disclosed in this policy.
Security by Design
All personal data stored by ok77 is protected through 256-bit SSL encryption in transit and AES-256 encryption at rest. Access to player data is restricted to authorised personnel on a strict need-to-know basis, with full audit logging of every access event.
Your Rights Are Real
Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have enforceable rights over your personal data — including access, correction, deletion, and portability. ok77 honours these rights in full, with a dedicated Data Privacy Officer to handle your requests.
No Sale of Your Data
ok77 does not sell, rent, or trade your personal information to third parties for commercial purposes — ever. Data shared with third parties is limited to what is legally required by PAGCOR, financial institutions, and Philippine law enforcement authorities.
Data Minimisation & Retention
ok77 retains your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable Philippine law. Account data is retained for a minimum of five years following account closure to satisfy AMLA reporting obligations.
Breach Notification
In the event of a personal data breach that poses a real risk of harm to affected players, ok77 will notify the National Privacy Commission of the Philippines within seventy-two (72) hours and will promptly communicate directly with affected players as required by law.
Contents
- 1. Controller Identity
- 2. Data We Collect
- 3. How We Collect Data
- 4. Legal Basis
- 5. How We Use Your Data
- 6. Data Sharing
- 7. Cookies & Tracking
- 8. Data Security
- 9. Data Retention
- 10. Your Rights
- 11. Children's Privacy
- 12. Cross-Border Transfers
- 13. Third-Party Links
- 14. Policy Updates
- 15. Contact & DPO
1. Identity of the Data Controller
ok77 (operated at ok77.cam) is the personal information controller responsible for the processing of your personal data in connection with your use of the ok77 online gaming platform. ok77 operates under a license granted by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules and regulations, and the orders and circulars issued by the National Privacy Commission of the Philippines.
Questions or concerns relating to the processing of your personal data may be directed to the ok77 Data Privacy Officer at the contact details set out in Section 15 of this policy.
2. Categories of Personal Data We Collect
ok77 collects and processes the following categories of personal data about you, depending on your interaction with the platform:
2.1 Identity and Contact Data
- Full legal name as it appears on a valid Philippine government-issued identification document;
- Date of birth and age verification documentation;
- Residential address within the Philippines;
- Philippine mobile number;
- Email address;
- Copies of government-issued photo identification provided for KYC purposes (e.g., passport, driver's license, SSS, UMID, PhilHealth ID, voter's ID).
2.2 Financial and Transaction Data
- GCash mobile number and transaction reference numbers;
- PayMaya account details used for deposit and withdrawal;
- Bank account numbers and bank names for BPI, BDO, and Metrobank transfers;
- Visa and Mastercard partial card details (last four digits only — full card numbers are never stored by ok77 and are handled exclusively by our PCI-DSS-compliant payment processors);
- Complete history of deposit, withdrawal, and wager transactions on the ok77 platform.
2.3 Account and Gaming Data
- ok77 username and encrypted password hash;
- Account registration date and KYC verification status;
- Game history, wager amounts, session durations, and gaming patterns;
- Bonus redemptions, tournament participation, and VIP tier status;
- Responsible gaming settings, deposit limits, and any self-exclusion records.
2.4 Technical and Device Data
- IP address and approximate geolocation derived therefrom;
- Device type, operating system, and browser version;
- Session timestamps and login history;
- Cookie identifiers and similar tracking technologies as described in Section 7.
2.5 Communications Data
- Records of communications between you and ok77 support, including live chat transcripts, email correspondence, and any documentation submitted in connection with a complaint or dispute;
- Survey responses and feedback submitted voluntarily through the platform.
3. How We Collect Your Data
ok77 collects personal data through the following channels:
- Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or responding to promotions;
- Automated collection: Technical data collected automatically through cookies, server logs, and similar technologies when you access and interact with the ok77 platform;
- Payment processors: Transaction confirmation data received from GCash, PayMaya, and bank transfer intermediaries following successful payment events;
- Identity verification services: Where ok77 uses third-party KYC service providers to verify the authenticity of identification documents submitted by players, those providers may transmit verification results to ok77;
- PAGCOR and regulatory databases: ok77 may cross-reference player data against regulatory databases maintained by PAGCOR in connection with licensing compliance, responsible gaming mandates, and self-exclusion programs.
4. Legal Basis for Processing
ok77 processes your personal data on the following legal bases under the Philippine Data Privacy Act:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Contractual necessity — performance of our agreement with you |
| KYC / identity verification | Legal obligation (PAGCOR licensing requirements, AMLA) |
| Payment processing and transaction records | Contractual necessity; legal obligation (AMLA reporting) |
| Responsible gaming monitoring | Legal obligation (PAGCOR directive); legitimate interest |
| Fraud prevention and security | Legitimate interest; legal obligation |
| Marketing communications (opt-in) | Consent — you may withdraw at any time |
| Platform analytics and improvement | Legitimate interest (non-identifying aggregated data) |
| Legal claims and dispute resolution | Legal obligation; legitimate interest |
5. How We Use Your Personal Data
ok77 uses the personal data we collect for the following specific purposes:
5.1 Platform Operations
To create and maintain your ok77 account, verify your identity and age, process deposit and withdrawal transactions, deliver the gaming products and services you request, and communicate important account-related information to you.
5.2 Regulatory Compliance
To fulfil ok77's obligations as a PAGCOR-licensed operator, including Know Your Customer (KYC) checks, Anti-Money Laundering Act (AMLA) transaction monitoring, suspicious transaction reporting to the Anti-Money Laundering Council (AMLC), and responding to lawful requests from Philippine government authorities.
5.3 Security and Fraud Prevention
To detect, investigate, and prevent fraudulent activity, account compromise, bonus abuse, collusion, and other prohibited conduct on the ok77 platform. ok77 employs automated and manual review processes that analyse account behaviour patterns for this purpose.
5.4 Responsible Gaming
To monitor gaming activity for patterns associated with problem gambling, to apply protective restrictions where warranted, to administer player self-exclusion requests, and to comply with PAGCOR's responsible gaming directives. Player welfare is a lawful basis for certain processing activities under Philippine regulatory requirements.
5.5 Marketing and Promotions
Where you have opted in to receiving promotional communications, ok77 may use your contact details and gaming behaviour to send you personalised bonus offers, tournament invitations, and platform updates. You may withdraw your marketing consent at any time by updating your communication preferences in your account settings or by contacting the ok77 Data Privacy Officer.
5.6 Platform Improvement
To analyse aggregated and de-identified usage data for the purpose of improving the ok77 platform, identifying technical issues, optimising the gaming experience, and developing new features. This analysis does not involve singling out or profiling individual players beyond what is necessary for the purposes described above.
6. Sharing of Personal Data
ok77 does not sell, rent, or commercially transfer your personal data to third parties. We share personal data only in the following limited circumstances:
6.1 Regulatory and Law Enforcement Authorities
ok77 is obligated to share player data with PAGCOR, the Anti-Money Laundering Council, the National Privacy Commission, and other Philippine government bodies when required by law, court order, or valid regulatory demand. ok77 will, where legally permissible, notify you of such disclosures.
6.2 Payment Service Providers
ok77 shares the minimum data necessary with GCash, PayMaya, and banking partners to process your deposits and withdrawals. These providers are contractually bound to process your data solely for payment fulfilment purposes and in compliance with applicable data protection laws.
6.3 KYC and Identity Verification Providers
Where third-party KYC providers are used, ok77 shares the identity documents and personal data you submit for verification. These providers operate under data processing agreements with ok77 and may not use your data for any purpose other than identity verification on ok77's behalf.
6.4 Game Providers
Third-party game providers (such as Pragmatic Play, NetEnt, and similar software suppliers) receive limited technical session data necessary to deliver their games. These providers do not receive your financial or identity data and are contractually prohibited from using any shared data for purposes beyond game delivery.
7. Cookies and Tracking Technologies
ok77 uses cookies and similar technologies on the platform. Cookies are small text files stored on your device that enable certain platform functions. The cookies used by ok77 fall into the following categories:
7.1 Strictly Necessary Cookies
These cookies are essential for the ok77 platform to function and cannot be disabled without impairing core functionality. They include session authentication cookies that maintain your login state, security tokens that protect against cross-site request forgery, and cookies that retain your responsible gaming settings between sessions.
7.2 Performance and Analytics Cookies
ok77 uses first-party analytics cookies to collect aggregated, de-identified information about how players navigate the platform — which game categories are most accessed, where players experience technical difficulties, and how long average sessions last. This data is used exclusively to improve the ok77 experience and is not linked to individual player identities in any reporting.
7.3 Functionality Cookies
These cookies remember your preferences — such as your preferred language, display settings, and most recently played game categories — to provide a more personalised experience on return visits to ok77.
7.4 Managing Cookies
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to remain logged in and may affect the security features of your ok77 account. ok77 does not use third-party advertising or cross-site tracking cookies.
8. Data Security
ok77 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and ok77's servers;
- AES-256 encryption for sensitive personal and financial data stored at rest;
- Strict role-based access controls limiting personnel access to player data on a need-to-know basis;
- Comprehensive audit logging of all access to player account data by ok77 staff;
- Regular penetration testing and vulnerability assessments by qualified third-party security specialists;
- Two-factor authentication available and encouraged for all player accounts;
- PCI-DSS compliant payment processing infrastructure through certified payment service partners.
While ok77 takes every reasonable precaution, no security system is entirely impenetrable. Players are encouraged to protect their own account credentials and to notify ok77 support immediately upon becoming aware of any suspicious activity on their account.
9. Data Retention
ok77 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods mandated by Philippine law:
- Account and KYC records: Retained for a minimum of five (5) years following account closure, in compliance with AMLA and PAGCOR record-keeping requirements;
- Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
- Support communications: Retained for three (3) years from the date of the communication, or longer if related to an unresolved dispute;
- Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal, for compliance documentation purposes;
- Security and fraud investigation records: Retained for such period as is necessary to complete the relevant investigation and satisfy any associated reporting obligations.
Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that renders re-identification impossible.
10. Your Data Privacy Rights
Under the Philippine Data Privacy Act of 2012 and its implementing rules, you have the following rights with respect to your personal data held by ok77:
Right to Access
Request a copy of the personal data ok77 holds about you and information about how it is being processed. ok77 will respond within fifteen (15) working days of a valid request.
Right to Rectification
Request correction of inaccurate or incomplete personal data held by ok77. Some corrections may require submission of updated KYC documentation for verification.
Right to Erasure
Request deletion of your personal data where ok77 no longer has a legal basis for retaining it. Note that statutory retention obligations under AMLA and PAGCOR rules may prevent immediate deletion of certain records.
Right to Object
Object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where your individual circumstances justify it.
Right to Data Portability
Request your personal data in a structured, commonly used, machine-readable format for transfer to another service provider, where technically feasible and where processing is based on consent or contractual necessity.
Right to Lodge a Complaint
If you believe ok77 has processed your data in breach of the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission of the Philippines through its official channels.
11. Children's Privacy
ok77 is strictly an adult platform. The minimum age for registration and real-money play is twenty-one (21) years, in accordance with Philippine law and PAGCOR regulations. ok77 does not knowingly collect personal data from individuals under the age of 21. If ok77 becomes aware that personal data has been collected from a minor, that account will be immediately terminated and the data will be deleted in accordance with applicable law.
Parents or guardians who believe a minor may have registered on ok77 are encouraged to contact the Data Privacy Officer immediately using the contact details in Section 15.
12. Cross-Border Data Transfers
ok77's primary data processing infrastructure is located in the Philippines. However, certain service providers — including third-party game software suppliers and cloud infrastructure partners — may process data in servers located outside the Philippines.
Where cross-border data transfers occur, ok77 ensures that appropriate safeguards are in place in accordance with Section 21 of the Data Privacy Act, including contractual data transfer agreements that impose Philippine-equivalent data protection standards on the receiving party.
ok77 does not transfer your personal data to countries that do not provide an adequate level of data protection without implementing appropriate supplementary measures to protect your rights.
13. Links to Third-Party Content
The ok77 platform may contain links to third-party game providers' informational content or to PAGCOR's official website. ok77 is not responsible for the privacy practices of any third-party websites or services. This Privacy Policy applies solely to data processed by ok77 directly. Players are encouraged to review the privacy policies of any third-party services they access independently of the ok77 platform.
14. Updates to This Privacy Policy
ok77 may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material changes will be communicated to registered players via email or in-platform notification at least fourteen (14) days before the amended policy takes effect, except where immediate amendment is required by law or a binding PAGCOR directive.
The current version of this Privacy Policy is always accessible at ok77.cam/privacy-policy. The "Last Updated" date at the top of this document reflects the date of the most recent revision. Continued use of the ok77 platform after the effective date of any amendment constitutes acknowledgment of the revised policy.
15. Contact Details & Data Privacy Officer
ok77 has designated a Data Privacy Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and for handling player data rights requests. To exercise any of the rights described in Section 10, to raise a data protection concern, or to submit any other privacy-related inquiry, please contact ok77 using the following:
Email: [email protected]
Subject Line: "Data Privacy Request — [Your Account Username]"
ok77 will acknowledge your request within five (5) working days and will provide a substantive response within fifteen (15) working days of receiving a valid and complete request. Where additional time is required due to complexity, ok77 will notify you of the extended timeline and its reason.
If you are not satisfied with ok77's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.