octoplay Privacy Policy

1. Introduction

octoplay is committed to protecting the privacy and personal data of every Filipino player who uses our platform. We understand that trust is the foundation of any lasting relationship between a gaming platform and its players, and we take our data protection responsibilities seriously.

This Privacy Policy applies to all personal data collected through the octoplay website at octoplay.one, our mobile-optimized platform, customer support channels, and any other services operated under the octoplay brand. It applies to all registered players, prospective players, and visitors to the platform, regardless of whether they are located in Metro Manila, Cebu, Davao, Quezon City, or anywhere else in the Philippines.

This policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together form the complete framework governing your use of octoplay.

2. Data Controller

For the purposes of the Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, octoplay acts as the Personal Information Controller in respect of the personal data it collects from players and visitors.

octoplay is responsible for determining the purposes and means of processing your personal data. If you have any questions or concerns about how your data is handled, you may contact our Data Protection Officer using the contact details provided in Section 15 of this policy.

3. Personal Data We Collect

octoplay collects the following categories of personal data from players and visitors:

4. How We Collect Your Data

octoplay collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the octoplay platform, including through cookies, web beacons, server logs, and similar tracking technologies.
• Third-party sources: Identity verification data from government ID databases or third-party KYC providers; payment data from GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank during transaction processing; fraud prevention data from security service providers.
• Publicly available sources: In limited circumstances, octoplay may verify information against publicly available records to comply with anti-money laundering obligations.

5. How We Use Your Personal Data

octoplay uses the personal data it collects for the following purposes:

• Account management: To create, maintain, and administer your octoplay player account, including verifying your identity and age (21+) as required under Philippine gaming regulations.
• Service delivery: To provide access to games, process bets, credit winnings, and deliver all features of the octoplay platform to you.
• Financial transactions: To process deposits and withdrawals via your chosen payment method, and to maintain accurate transaction records.
• Legal compliance: To comply with applicable Philippine laws and regulations, including anti-money laundering (AML) requirements, know-your-customer (KYC) obligations, and responsible gaming mandates.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats to the platform and its players.
• Customer support: To respond to your inquiries, resolve disputes, and provide assistance through live chat, email, and auto-assist channels.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behavior, and to administer self-exclusion, deposit limits, and other responsible gaming tools.
• Marketing and promotions: To send you relevant promotional offers, bonuses, and platform updates, where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time.
• Platform improvement: To analyze usage patterns, conduct research, and improve the performance, features, and user experience of the octoplay platform.

6. Legal Basis for Processing

octoplay processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual necessity: Processing required to fulfill our obligations under the Terms & Conditions you agreed to upon registration, including account management, game delivery, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws, including AML regulations, KYC requirements, tax obligations, and gaming regulatory requirements.
• Legitimate interests: Processing carried out for octoplay's legitimate business interests, such as fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent, particularly in relation to direct marketing communications. You may withdraw consent at any time by contacting support.

7. Data Sharing & Disclosure

octoplay does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly as necessary:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other payment service providers, solely to process your financial transactions.
• Identity verification providers: Third-party KYC and age verification service providers engaged to verify your identity and comply with regulatory requirements.
• Technology and platform partners: Game providers, software vendors, and IT service providers who support the operation of the octoplay platform under strict data processing agreements.
• Regulatory and law enforcement authorities: Philippine government agencies, regulatory bodies, and law enforcement authorities where disclosure is required by law, court order, or regulatory mandate.
• Fraud prevention services: Third-party security and fraud detection providers engaged to protect the platform and its players from fraudulent activity.
• Professional advisers: Legal counsel, auditors, and other professional advisers engaged by octoplay in the ordinary course of business, subject to confidentiality obligations.

8. Data Retention

octoplay retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account data: Retained for the duration of your active account relationship with octoplay, and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required under Philippine AML regulations.
• KYC and identity verification documents: Retained for the duration of your account and for five (5) years following account closure.
• Customer support communications: Retained for up to three (3) years from the date of the interaction, or longer where required for dispute resolution or legal proceedings.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter to demonstrate compliance.
• Technical and usage data: Retained for up to two (2) years for analytics and security purposes, after which it is anonymized or deleted.

When personal data is no longer required, octoplay will securely delete or anonymize it in accordance with our internal data disposal procedures.

9. Cookies & Tracking Technologies

octoplay uses cookies and similar tracking technologies to enhance your experience on the platform, analyze usage patterns, and support security functions. The following types of cookies may be used:

• Strictly necessary cookies: Essential for the platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against fraudulent activity. These cannot be disabled.
• Performance and analytics cookies: Used to collect anonymized data about how players use the platform, helping us identify areas for improvement. These are only set with your consent.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalized experience.
• Marketing cookies: Used to deliver relevant promotional content based on your interests and platform activity. These are only set where you have provided consent.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some platform features. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.

10. Data Security

octoplay implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the octoplay platform is encrypted using industry-standard SSL/TLS protocols.
• Secure data storage: Personal and financial data is stored on secure, access-controlled servers with restricted physical and logical access.
• Access controls: Access to personal data within octoplay is restricted to authorized personnel on a strict need-to-know basis, with role-based access controls enforced.
• Regular security assessments: octoplay conducts periodic security reviews and vulnerability assessments to identify and address potential risks to the platform.
• Incident response: octoplay maintains a data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission and affected players in accordance with applicable Philippine law.

11. Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by octoplay:

• Right to be informed: The right to be notified of how your personal data is collected, used, and processed – which this Privacy Policy fulfills.
• Right of access: The right to request a copy of the personal data octoplay holds about you, along with information about how it is being processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data held about you. You may update basic account information directly through your account settings.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to octoplay's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time by contacting support.
• Right to data portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of the above rights, please contact octoplay's Data Protection Officer using the contact details in Section 15. We will respond to all verified requests within thirty (30) days of receipt, in accordance with applicable law.

12. Children's Privacy

The octoplay platform is strictly intended for adults aged 21 years and older, in accordance with Philippine gambling regulations. octoplay does not knowingly collect personal data from individuals under the age of 21.

If octoplay becomes aware that personal data has been collected from a person under 21 years of age, the relevant account will be immediately suspended, all associated data will be deleted, and any funds held in the account will be handled in accordance with applicable regulatory requirements.

If you are a parent or guardian and believe that a minor has registered an account on octoplay, please contact our support team immediately at [email protected] so that we can take prompt action.

13. Third-Party Links

The octoplay platform may contain references to third-party services such as payment providers. Please note that once you leave the octoplay platform and access a third-party service, this Privacy Policy no longer applies. octoplay is not responsible for the privacy practices or content of any third-party websites or services.

We encourage you to review the privacy policies of any third-party services you use in connection with your octoplay account, including your chosen payment provider (GCash, PayMaya, BPI, BDO, Metrobank, or UnionBank), before providing them with your personal information.

14. Changes to This Privacy Policy

octoplay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via email or an in-platform notification prior to the changes taking effect.

The revised Privacy Policy will be published on this page with an updated "Last updated" date. Your continued use of the octoplay platform after the effective date of any amendment constitutes your acceptance of the updated policy.

We encourage you to review this Privacy Policy periodically to stay informed about how octoplay protects your personal data.

15. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by octoplay, please contact us through the following channels:

• Email: [email protected]
• Live Chat: Available daily from 8:00 AM to 12:00 MN PHT via the octoplay platform
• Auto-Assist: Available 24/7 for common privacy-related queries

octoplay aims to acknowledge all privacy-related inquiries within two (2) business days and to resolve them within thirty (30) days of receipt. For complaints that cannot be resolved directly with octoplay, you have the right to escalate your concern to the National Privacy Commission (NPC) of the Philippines.