okcards Privacy Policy

1. Introduction

1.1 okcards operates as an online casino and sports betting platform serving Filipino players under the regulatory framework of the Philippine Amusement and Gaming Corporation (PAGCOR). In the course of providing its services, okcards necessarily collects and processes personal information about its registered players and website visitors.

1.2 okcards is committed to protecting the privacy and security of all personal data it holds. This Policy sets out in clear terms what data okcards collects, why it collects it, how it uses and protects it, with whom it shares it, how long it keeps it, and what rights you have in relation to your personal data.

1.3 This Policy is to be read together with the okcards Terms & Conditions and the okcards Responsible Gaming Policy, both of which are incorporated herein by reference. In the event of any inconsistency between this Policy and any other document, this Policy shall prevail with respect to privacy matters.

2. Data Controller Identity

2.1 For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, okcards acts as the Personal Information Controller in respect of all personal data collected through the okcards platform.

2.2 okcards operates under the PAGCOR regulatory framework and is subject to the oversight of both PAGCOR and the National Privacy Commission (NPC) of the Philippines with respect to its data handling practices.

2.3 Contact details for data privacy inquiries are set out in Section 14 of this Policy.

3. Personal Data We Collect

okcards collects the following categories of personal data from registered players and platform users:

3.1 Registration and Identity Data:

• Full legal name as appearing on your government-issued Philippine ID;
• Date of birth (for age verification — players must be 21 or older);
• Email address and mobile phone number (Philippine number);
• Username and encrypted password;
• Residential address in the Philippines;
• Government-issued Philippine ID type and number (e.g., passport, driver's license, UMID, PhilSys ID).

3.2 Financial and Transaction Data:

• GCash account details and/or PayMaya account details linked to your okcards account;
• Bank account details (BPI, BDO, Metrobank, or other Philippine bank) where bank transfer is selected;
• Partial credit/debit card details (card type, last four digits, expiry — full card numbers are processed by PCI-DSS compliant payment processors and are not stored by okcards);
• Deposit and withdrawal transaction history denominated in Philippine Peso (₱ PHP);
• Bonus and promotional transaction records.

3.3 Gaming Activity Data:

• Game session logs, including games played, wager amounts, and outcomes;
• Responsible gaming settings and self-imposed limits applied to your okcards account;
• Customer support interaction records.

3.4 Technical and Usage Data:

• IP address and approximate geographic location derived therefrom;
• Device type, operating system, and browser information;
• Pages visited on okcards.co, time spent on pages, and navigation patterns;
• Cookie identifiers and session tokens (see Section 7).

4. How okcards Uses Your Personal Data

okcards uses the personal data it collects for the following purposes:

• Account creation and management: To register your okcards account, authenticate your identity at login, and manage your account settings and preferences;
• Age and identity verification (KYC): To comply with PAGCOR's mandatory Know Your Customer requirements and to verify that you are 21 years of age or older before permitting access to real-money gaming;
• Payment processing: To process deposits and withdrawals via GCash, PayMaya, and Philippine bank transfers, and to maintain accurate transaction records in Philippine Peso;
• Regulatory compliance: To fulfill okcards' obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws, including the filing of required reports with PAGCOR and the Anti-Money Laundering Council (AMLC);
• Customer support: To respond to your inquiries, resolve complaints, and provide live chat and email support;
• Responsible gaming: To monitor gaming activity for signs of problem gambling, to enforce player-set limits and self-exclusion requests, and to comply with PAGCOR's responsible gaming requirements;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeovers, money laundering, and other prohibited conduct on the okcards platform;
• Platform improvement: To analyze aggregated usage data (in anonymized form where practicable) to improve the okcards user experience, game library, and technical performance;
• Communications: To send you account-related notifications, security alerts, and, where you have provided your consent, promotional communications about okcards offers and promotions.

5. Legal Basis for Processing

5.1 Under the Data Privacy Act of 2012, okcards processes your personal data on the following legal bases:

• Consent: Where you have given explicit consent to the processing of your data for a specific purpose, such as receiving promotional communications from okcards;
• Contractual necessity: Processing is necessary for the performance of the contract between you and okcards (i.e., the Terms & Conditions), including account management, KYC verification, and payment processing;
• Legal obligation: Processing is necessary to comply with a legal obligation applicable to okcards under Philippine law, including PAGCOR regulations, AMLA reporting obligations, and NPC data protection requirements;
• Legitimate interests: Processing is necessary for the legitimate interests of okcards, including fraud prevention, platform security, and the improvement of okcards services, where such interests are not overridden by your data protection rights.

6. Sharing Your Personal Data

6.1 okcards does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes.

6.2 okcards may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment processors: GCash (Mynt — Globe Fintech Innovations, Inc.), PayMaya (Voyager Innovations, Inc.), and participating Philippine banks and card networks, for the purpose of processing your deposits and withdrawals;
• Game providers: Licensed third-party game studios (such as Pragmatic Play, JILI, and PG Soft) whose games are hosted on the okcards platform, to the extent necessary to authenticate your session and record game outcomes;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where disclosure is required by applicable law or regulation;
• KYC/AML service providers: Third-party identity verification and anti-money laundering screening services engaged by okcards to assist with KYC compliance;
• Technology and infrastructure providers: Cloud hosting providers, cybersecurity firms, and IT service providers engaged by okcards under data processing agreements that include appropriate data protection obligations;
• Professional advisors: Legal counsel, auditors, and compliance consultants engaged by okcards on a confidential basis.

6.3 All third parties with whom okcards shares personal data are required to handle such data in accordance with applicable Philippine data protection laws and the terms of their data processing agreements with okcards.

7. Cookies and Tracking Technologies

7.1 The okcards platform uses cookies and similar tracking technologies to enhance your user experience, maintain your login session, prevent fraud, and analyze platform usage.

7.2 Types of cookies used by okcards:

• Strictly necessary cookies: Required for the okcards platform to function. These include session authentication tokens and security cookies. These cannot be disabled without affecting platform functionality.
• Functional cookies: Used to remember your preferences on okcards, such as your preferred language and display settings.
• Analytics cookies: Used to collect anonymized data about how players navigate the okcards platform, enabling okcards to improve its design and user experience. Analytics data is aggregated and does not identify individual users.

7.3 You may control cookie settings through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the okcards platform, including the ability to maintain a login session.

8. Data Security

8.1 okcards implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and okcards servers;
• Encryption of sensitive data at rest, including financial information and government ID details;
• Multi-factor authentication requirements for okcards account access;
• Access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular penetration testing and vulnerability assessments of the okcards platform;
• 24/7 automated fraud detection and suspicious activity monitoring;
• Formal incident response procedures for personal data breaches, including notification to the NPC as required by the Data Privacy Act.

8.2 Notwithstanding the above, no online platform can guarantee absolute security. okcards encourages all players to use strong, unique passwords for their okcards accounts and to enable two-factor authentication.

9. Data Retention

9.1 okcards retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by applicable Philippine law.

9.2 The following retention periods apply to key categories of data held by okcards:

• KYC and identity documents: Retained for a minimum of five (5) years following account closure, as required by the Anti-Money Laundering Act;
• Financial transaction records: Retained for a minimum of five (5) years following each transaction, in accordance with AMLA and PAGCOR record-keeping requirements;
• Game session logs: Retained for a period of two (2) years following each session, for dispute resolution and regulatory audit purposes;
• Customer support records: Retained for two (2) years following the resolution of the relevant support inquiry;
• Technical/usage data: Retained in anonymized, aggregated form for platform analytics purposes; individual-level data retained for no more than thirteen (13) months.

9.3 Upon expiry of the applicable retention period, okcards will securely delete or irreversibly anonymize the relevant personal data.

10. Your Data Subject Rights

10.1 Under the Data Privacy Act of 2012, as a data subject you have the following rights in relation to personal data held by okcards:

• Right to be informed: You have the right to be informed of how okcards collects and processes your personal data, as set out in this Policy;
• Right of access: You have the right to request a copy of the personal data okcards holds about you;
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data okcards holds about you;
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to okcards' legal and regulatory retention obligations;
• Right to object: You have the right to object to the processing of your personal data where okcards relies on legitimate interests as the legal basis for processing;
• Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format;
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe okcards has handled your personal data in a manner that violates the Data Privacy Act.

10.2 To exercise any of the above rights, please contact the okcards Data Protection Officer using the contact details in Section 14. okcards will respond to all data subject access requests within thirty (30) calendar days of receipt.

11. Children and Minors

11.1 The okcards platform is strictly for individuals aged 21 years and above. okcards does not knowingly collect personal data from any individual under 21 years of age.

11.2 If okcards becomes aware that personal data has been collected from an individual under 21 years of age, it will promptly delete such data and permanently close the relevant account.

11.3 If you are a parent or guardian and believe that a person under 21 has registered an okcards account, please contact okcards support immediately using the contact details in Section 14.

12. Cross-Border Data Transfers

12.1 okcards is a Philippines-focused platform and processes the personal data of its players primarily within the Philippines. However, certain third-party technology and infrastructure providers engaged by okcards may process data in data centers located outside the Philippines.

12.2 Where personal data is transferred outside the Philippines, okcards takes appropriate steps to ensure that the receiving party provides an adequate level of data protection consistent with the Data Privacy Act of 2012, including through the use of contractual safeguards such as data processing agreements incorporating the NPC's standard contractual clauses.

13. Amendments to This Privacy Policy

13.1 okcards reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or okcards data practices. When material changes are made, okcards will publish the updated Policy on this page and update the "Last Updated" date at the top of the Policy.

13.2 Where required by the Data Privacy Act, okcards will notify registered players of material changes to this Policy by email to the registered email address associated with their okcards account, or through a notice on the okcards platform.

13.3 Continued use of the okcards platform following publication of an updated Policy constitutes your acceptance of the revised Policy.

14. Contact Information & Data Protection Officer

If you have any questions, concerns, or requests in relation to this Privacy Policy or okcards' handling of your personal data, please contact the okcards Data Protection Officer:

• Data Protection Officer — okcards
• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Data Privacy Request — [Your Name]"
• Live Chat: Available 24/7 on the okcards platform
• Platform: okcards.co

This Privacy Policy was last reviewed and updated in June 2026. okcards operates under the PAGCOR regulatory framework and complies with the Data Privacy Act of 2012 (R.A. No. 10173). 21+ only.