okcards Privacy Policy

1. Introduction

okcards ("okcards," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses the okcards online gaming platform (the "Platform"). This Privacy Policy describes how okcards collects, uses, stores, shares, and protects your personal information when you visit our website, register an account, make deposits or withdrawals, play games, or otherwise interact with the okcards Platform.

This Privacy Policy applies to all users of the okcards Platform, including registered players, visitors who browse without registering, and individuals who contact our customer support team. It should be read together with our Terms & Conditions, which govern your use of the Platform.

okcards operates in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. Where applicable, okcards also observes the data protection standards required by its gaming regulatory obligations under PAGCOR.

By using the okcards Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you should discontinue use of the Platform.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and applicable data protection regulations, okcards is the Personal Information Controller (PIC) in respect of the personal data collected through the Platform. This means okcards determines the purposes and means of processing your personal information.

okcards has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. You may contact the okcards DPO at any time using the contact details provided in Section 14 of this Policy.

3. Personal Data We Collect

okcards collects personal data from you in several ways: directly when you provide it to us, automatically when you use the Platform, and from third parties such as payment processors and identity verification providers. The categories of personal data we collect include:

3.1 Registration and Account Data

• Full legal name as it appears on your government-issued ID;
• Date of birth (for age verification — you must be 21 or older);
• Email address and mobile number;
• Username and encrypted password;
• Residential address (city, province, postal code);
• Nationality and country of residence.

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., Philippine passport, SSS ID, UMID, driver's license, PhilSys National ID);
• Proof of address documents (e.g., utility bill, bank statement, barangay certificate);
• Selfie or liveness check images used for biometric identity verification;
• Source of funds documentation where required by AML regulations.

3.3 Financial and Transaction Data

• GCash or PayMaya account details (registered name and mobile number);
• Philippine bank account details (bank name, account name, account number);
• Debit card details (card number is tokenized and never stored in plain text);
• Deposit and withdrawal history, transaction amounts, and timestamps;
• Wagering history, game results, and account balance information.

3.4 Technical and Usage Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Session duration, pages visited, and features used on the Platform;
• Login timestamps and access logs;
• Cookie identifiers and similar tracking technologies (see Section 7).

3.5 Communications Data

• Records of your communications with okcards customer support (live chat transcripts, email correspondence);
• Feedback, survey responses, and complaints submitted to okcards;
• Marketing preferences and communication opt-in/opt-out records.

4. How We Use Your Personal Data

okcards uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and manage your okcards player account, including processing your registration, verifying your identity, and enabling you to log in securely;
• Service Delivery: To provide you with access to okcards games, process your deposits and withdrawals, calculate and credit winnings, and deliver the core features of the Platform;
• Identity Verification and KYC: To verify your age (21+), identity, and source of funds as required by PAGCOR licensing conditions and Philippine AML regulations;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other illegal or prohibited conduct on the Platform;
• Regulatory Compliance: To comply with our obligations under Philippine law, including the Data Privacy Act, Anti-Money Laundering Act (AMLA), and PAGCOR regulatory requirements;
• Customer Support: To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance;
• Responsible Gaming: To monitor gaming patterns, enforce deposit and loss limits, process self-exclusion requests, and fulfill our responsible gaming obligations;
• Platform Improvement: To analyze usage patterns, conduct research, and improve the features, performance, and user experience of the okcards Platform;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given your consent or where we have a legitimate interest to do so. You may opt out at any time.

5. Legal Basis for Processing

okcards processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform our contract with you — i.e., to operate your okcards account and deliver the gaming services you have requested;
• Legal Obligation: Processing is required to comply with applicable Philippine laws and regulations, including KYC/AML obligations and PAGCOR licensing conditions;
• Legitimate Interests: Processing is necessary for okcards' legitimate interests, including fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and freedoms;
• Consent: For certain processing activities — such as sending marketing communications or using non-essential cookies — okcards relies on your consent. You may withdraw consent at any time by contacting us or updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Data Sharing and Disclosure

okcards does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, PayMaya/Maya, and Philippine banking partners require certain personal and financial data to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine financial regulations;
• Identity Verification Providers: Third-party KYC and AML screening services that assist okcards in verifying your identity and complying with regulatory obligations;
• Game Software Providers: Licensed game studios and platform providers that supply the games available on okcards may receive anonymized or pseudonymized session data necessary to deliver game functionality;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law or regulatory order;
• Law Enforcement: Philippine law enforcement agencies where disclosure is required by a valid court order, subpoena, or other legal process;
• IT and Security Service Providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on okcards' behalf under strict data processing agreements.

All third parties with whom okcards shares personal data are required to implement appropriate technical and organizational security measures and to process your data only for the specified purpose and in accordance with okcards' instructions.

7. Cookies and Tracking Technologies

okcards uses cookies and similar technologies to operate the Platform, remember your preferences, and analyze how players use our services. The types of cookies we use are:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled;
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gaming limits you have set;
• Analytics Cookies: Help okcards understand how players navigate the Platform so we can improve the user experience. Data collected is aggregated and anonymized where possible;
• Security and Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, bot access, and unauthorized account access.

okcards does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair Platform functionality.

8. Data Retention

okcards retains your personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, and in accordance with applicable legal and regulatory retention requirements. Specifically:

• Account Data: Retained for the duration of your active account and for a minimum of five (5) years after account closure, as required by PAGCOR licensing conditions and Philippine AML regulations;
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later, in compliance with AMLA record-keeping requirements;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction;
• Customer Support Records: Retained for three (3) years from the date of the last interaction;
• Technical and Usage Logs: Retained for up to twelve (12) months for security and fraud prevention purposes, after which they are anonymized or deleted.

When personal data is no longer required for any lawful purpose, okcards will securely delete or anonymize it in accordance with our data disposal procedures.

9. Data Security

okcards implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the okcards Platform;
• Encryption of sensitive data at rest, including payment details and identity documents;
• Two-factor authentication (2FA) available for all player accounts;
• Role-based access controls ensuring that only authorized okcards personnel can access player data, and only to the extent required for their specific job function;
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent security professionals;
• Intrusion detection systems and 24/7 security monitoring of the Platform infrastructure;
• Secure data backup and disaster recovery procedures.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, okcards will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by okcards:

• Right to be Informed: The right to be informed about how your personal data is collected and processed — which is the purpose of this Privacy Policy;
• Right of Access: The right to request a copy of the personal data okcards holds about you, along with information about how it is being processed;
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you;
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to okcards' legal retention obligations;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe okcards has violated your data privacy rights.

To exercise any of these rights, please contact the okcards Data Protection Officer using the contact details in Section 14. okcards will respond to all data subject requests within thirty (30) days of receipt. We may need to verify your identity before processing your request.

11. Children's Privacy and Age Restriction

The okcards Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gambling regulations. okcards does not knowingly collect personal data from individuals under the age of 21.

During the registration process, okcards requires all players to confirm that they are at least 21 years of age. Age verification is conducted as part of the KYC process, and any account found to belong to a person under 21 will be immediately suspended, all funds returned, and the account permanently closed.

If you are a parent or guardian and believe that a minor has registered an okcards account or provided personal data to okcards without your consent, please contact us immediately at the details provided in Section 14. okcards will take prompt action to investigate and, where confirmed, delete the minor's data and close the account.

12. Third-Party Links

The okcards Platform may contain links to third-party websites or services for informational purposes. okcards has no control over the content, privacy practices, or data handling of any third-party website, and this Privacy Policy does not apply to those sites.

okcards encourages you to review the privacy policy of any third-party website you visit. The inclusion of a link on the okcards Platform does not constitute an endorsement of that website or its privacy practices.

13. Updates to This Privacy Policy

okcards reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, okcards will post a notice on the Platform and, where practicable, notify registered players by email.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Your continued use of the okcards Platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. We recommend reviewing this page periodically to stay informed about how okcards protects your data.

14. Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise your data privacy rights, or want to raise a concern about how okcards handles your personal data, please contact our Data Protection Officer:

If you are not satisfied with okcards' response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.