Your privacy matters to oxoplay. This Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you hold as a registered player on our platform in the Philippines.
This Privacy Policy ("Policy") describes how oxoplay ("oxoplay," "we," "us," or "our") — the operator of the online gaming platform accessible at oxoplay.club (the "Platform") — collects, uses, stores, shares, and protects personal data relating to individuals who access or register on the Platform ("you" or "the player").
This Policy is prepared in compliance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA) of the Philippines, its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC). oxoplay processes personal data in a manner consistent with Philippine data protection standards and the principles of transparency, legitimate purpose, and proportionality.
Scope: This Policy applies to all personal data processed by oxoplay in connection with the operation of the Platform — whether data is provided directly by you at registration, collected automatically through your use of the site, or obtained from third-party verification service providers.
By registering an account or continuing to use the oxoplay Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with the terms of this Policy, you must not use the Platform.
oxoplay is the personal information controller in respect of all personal data collected through the Platform. As the controller, oxoplay determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out in accordance with applicable Philippine data protection law.
oxoplay has designated a Data Protection Officer (DPO) responsible for overseeing compliance with data protection obligations and serving as the primary point of contact for data subjects who wish to exercise their rights under the DPA. The DPO may be contacted at [email protected] with the subject line "Data Protection — Privacy Inquiry."
oxoplay collects the following categories of personal data from and about its registered players and site visitors. Collection is limited to data that is necessary for the purposes described in this Policy.
| Category | Data Elements | Required / Optional |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number, ID document type and images, selfie photograph | Required (KYC) |
| Contact Data | Philippine mobile number, email address | Required |
| Account Data | Username, encrypted password hash, account creation date, account status, VIP tier | Required |
| Financial Data | Deposit and withdrawal history, transaction amounts, GCash/Maya mobile number, bank account details (last 4 digits), currency holdings | Required |
| Gaming Data | Game session logs, wager amounts, win/loss records, bonus activity, game preference history | Automatic |
| Technical Data | IP address, device type and model, operating system, browser type and version, session timestamps, connection logs | Automatic |
| Communications Data | Live chat transcripts, support ticket content, email correspondence with oxoplay | Contextual |
| Marketing Preferences | Opt-in/opt-out status for promotional communications, communication channel preferences | Optional |
oxoplay does not collect sensitive personal information as defined under the DPA (such as racial origin, political affiliation, health or medical records, or religious beliefs) unless specifically required to fulfill a legal obligation — for example, if a player discloses a gambling-related health concern in the context of a responsible gaming interaction.
oxoplay collects personal data through the following mechanisms:
Direct CollectionData you provide when you register an account on oxoplay, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to a survey, or participate in a promotion. This includes all form submissions, uploaded identification documents, and communications sent to oxoplay staff.
Automated CollectionData collected automatically when you access and use the Platform, including IP address, device identifiers, browser information, session duration, pages visited, game sessions initiated, and click-stream data. This data is collected through server logs, session management systems, and cookies (see Section 8 for cookie details).
Third-Party CollectionData received from third-party identity verification service providers used to conduct KYC and AML checks, as required by applicable regulations. oxoplay may also receive data from payment service providers (GCash, Maya, BPI, BDO) in the course of processing deposits and withdrawals — limited to transaction confirmation data necessary for account crediting and fraud prevention.
One-time OTP data: One-time passwords sent to your registered Philippine mobile number are used only for authentication and are not stored after the verification session expires. oxoplay does not retain OTP values after transmission.
oxoplay processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012 and its IRR:
oxoplay uses the personal data it collects for the following specific purposes, consistent with the legal bases identified in Section 5:
No automated profiling for adverse decisions: oxoplay does not use fully automated decision-making that produces significant legal or similarly significant effects on players without human review. Where automated fraud detection flags an account, a human review is conducted before any adverse action is taken.
oxoplay does not sell, rent, or trade your personal data to third parties. Personal data is shared only in the following circumstances and only to the extent necessary for the stated purpose:
Service Providers (Processors)oxoplay engages third-party service providers — including payment processors (GCash, Maya, BPI, BDO), identity verification services, cloud infrastructure providers, and customer support platform vendors — who process personal data on oxoplay's behalf under data processing agreements that require them to maintain appropriate security and use data only for the specified purpose.
Regulatory and Law Enforcement Authoritiesoxoplay will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other competent Philippine government authorities where required by law, court order, or binding regulatory direction. oxoplay will, where legally permissible, notify the affected player of such disclosure.
Game Content ProvidersGame developers and live dealer studio operators who provide game content to the Platform may receive anonymized or pseudonymized session data for licensing compliance, game analytics, and fairness auditing purposes. These providers are contractually prohibited from using this data for independent marketing or commercial purposes.
Business TransactionsIn the event of a merger, acquisition, or sale of all or part of oxoplay's business, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations.
oxoplay uses cookies and similar tracking technologies on the Platform to maintain session integrity, enable core functionality, and analyze usage patterns. The following categories of cookies are used:
oxoplay does not use third-party advertising cookies or cross-site tracking technologies to build behavioral profiles of players for the benefit of external advertisers. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform.
oxoplay implements technical and organizational security measures appropriate to the nature of the personal data processed and the risks associated with its processing. These measures include, but are not limited to:
Your role in security: oxoplay's security measures protect data at rest and in transit, but the security of your account credentials on your own device is your responsibility. Use a strong, unique password for your oxoplay account and keep your registered Philippine mobile number secure, as it is the destination for account recovery OTPs.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, oxoplay will notify the National Privacy Commission within 72 hours of discovery and will notify affected players without undue delay, in accordance with NPC Circular requirements.
oxoplay retains personal data for as long as necessary to fulfill the purposes for which it was collected, and in accordance with applicable legal and regulatory retention requirements. The following retention periods apply as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account plus 5 years after closure | PAGCOR / AML regulatory requirements |
| Financial / Transaction Data | 10 years from transaction date | AMLC reporting obligations |
| KYC Documents | Duration of account plus 5 years | PAGCOR compliance |
| Gaming Activity Logs | 3 years from session date | Dispute resolution & fairness audit |
| Customer Support Records | 3 years from last interaction | Legitimate interest / dispute resolution |
| Marketing Preferences | Until consent is withdrawn | Consent-based processing |
| Technical / Session Logs | 90 days | Security monitoring |
After the applicable retention period expires, personal data is securely deleted or anonymized such that it can no longer be associated with an identifiable individual.
As a data subject under the Data Privacy Act of 2012 of the Philippines, you have the following rights in respect of your personal data held by oxoplay. You may exercise these rights by contacting our Data Protection Officer at [email protected] with the subject line "Data Rights Request."
You have the right to be informed that your personal data is being processed, and the right to access this Privacy Policy at any time. This Policy serves as oxoplay's primary transparency document.
You have the right to request a copy of the personal data oxoplay holds about you, along with information about how it is being used. Data access requests will be fulfilled within 30 days of receipt.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Minor contact details may be updated directly via Account Settings.
You may request deletion of your personal data. Erasure requests will be assessed against applicable legal retention obligations — data subject to PAGCOR or AMLC retention requirements cannot be deleted until the mandatory retention period expires.
You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to oxoplay's assessment of compelling grounds.
If you believe oxoplay has violated your data privacy rights, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph.
The oxoplay Platform is strictly intended for persons aged 21 years and above in the Philippines. oxoplay does not knowingly collect personal data from individuals under the age of 21, and the Platform is not directed at or designed for use by minors.
If oxoplay discovers — through KYC verification, a complaint, or any other means — that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the collected data to the extent permitted by law, and take steps to prevent further access. Any funds held in such an account will be dealt with in accordance with applicable regulations.
If you have reason to believe that a minor has registered on the oxoplay Platform, please notify us immediately at [email protected].
The oxoplay Platform may contain references to or integrations with third-party service providers — such as GCash or Maya payment portals — that operate under their own privacy policies. When you navigate away from the oxoplay Platform to a third-party service, oxoplay's Privacy Policy no longer applies.
oxoplay is not responsible for the privacy practices, content, or security measures of third-party platforms. We encourage you to review the privacy policies of any third-party services you interact with in connection with your oxoplay account.
oxoplay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance from the National Privacy Commission. The effective date at the top of this page will be updated whenever material changes are made.
For material changes that affect your rights or how we process data you have already provided, oxoplay will notify registered players by email and/or in-platform notification at least fourteen (14) days before the amended Policy takes effect. Continued use of the Platform after the effective date of any amendment constitutes acceptance of the updated Policy.
Stay informed: We recommend reviewing this Privacy Policy periodically. The "Last Updated" date at the top of the page tells you when the most recent revision was made.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a privacy concern, please contact the oxoplay Data Protection Officer through the following channels:
oxoplay is committed to responding to all legitimate privacy inquiries fairly, promptly, and in accordance with the requirements of the Data Privacy Act of 2012. This Privacy Policy was last reviewed and is effective as of 1 January 2026.
Your Data, Protected
These six principles reflect how oxoplay approaches data protection in practice — not just as a compliance exercise, but as a genuine commitment to every Filipino player on the Platform.
All data moving between your device and oxoplay is protected by TLS/SSL encryption. Your login credentials, transaction details, and personal information travel over an encrypted channel — the same standard used by Philippine banks and financial institutions.
oxoplay does not sell, rent, or commercially transfer your personal data to any third party. Data sharing is limited to service providers who need it to operate the Platform, and regulatory bodies where disclosure is legally required. Your information is not a product.
oxoplay processes personal data in compliance with Republic Act No. 10173 — the Data Privacy Act of 2012 — and the issuances of the National Privacy Commission. Your rights as a Filipino data subject are fully recognized and respected.
oxoplay collects only the personal data that is genuinely necessary to operate your account, comply with PAGCOR and AMLC requirements, and deliver gaming services. We do not collect data for the sake of it — each data point serves a defined and documented purpose.
Every oxoplay player has the right to access, correct, or request deletion of their personal data. Rights requests are responded to within 30 days. You also have the right to object to marketing communications at any time and the right to escalate to the NPC if needed.
oxoplay maintains an incident response plan aligned with NPC breach notification requirements. In the event of a data breach that poses risk to your rights, you will be notified without undue delay — not weeks later, not after a PR strategy is drafted.
oxoplay takes your data seriously — encrypted sessions, no data selling, full DPA compliance. Now that you know how we protect your information, create your free account and experience the platform built for Filipino players.
oxoplay is restricted to players aged 21 and above in the Philippines per PAGCOR regulations. Gambling involves financial risk. Please play responsibly.