okcards.ph Privacy Policy

01 Who We Are — The Data Controller

1.1  The data controller responsible for your personal data is okcards.ph, the operator of the online casino platform accessible at okcardsph.net (the "Platform"). References to "okcards.ph," "we," "us," and "our" in this Privacy Policy refer to the data controller entity.

1.2  okcards.ph operates under a licence issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to PAGCOR's data handling requirements in addition to the requirements of the Data Privacy Act of 2012.

1.3  okcards.ph has appointed a Data Privacy Officer (DPO) responsible for overseeing compliance with this Privacy Policy and Republic Act 10173. The DPO can be contacted via the details in Section 15 of this Privacy Policy.

02 Personal Data We Collect

2.1  okcards.ph collects the following categories of personal data from registered Players and Platform visitors:

2.2  okcards.ph does not collect sensitive personal information as defined under Section 3(l) of RA 10173 (such as health data, religious beliefs, sexual orientation, or political affiliations) unless such data is voluntarily disclosed by a Player in the context of a responsible gaming or support interaction, in which case it is handled with the highest standard of confidentiality.

03 How We Collect Your Data

3.1  okcards.ph collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions;
• Automated Collection: Technical data collected automatically when you access the Platform, including IP addresses, device identifiers, session logs, and cookie data (see Section 7);
• Payment Processors: Transaction confirmation data received from GCash, Maya, BPI, BDO, Metrobank, GrabPay, 7-Eleven CLiQQ, InstaPay, and PesoNet when you use these channels to transact on the Platform;
• Identity Verification Partners: Confirmation data from third-party KYC verification service providers used to validate the authenticity of identity documents submitted by Players;
• PAGCOR & Regulatory Databases: Exclusion list and watch-list checks performed as required under PAGCOR licensing conditions and AMLC compliance obligations.

04 How We Use Your Personal Data

4.1  okcards.ph processes your personal data for the following specific purposes:

• To create, manage, and operate your okcards.ph account;
• To verify your identity and age (confirming you are 21 years of age or older) as required by PAGCOR and Philippine law;
• To process deposits and withdrawals via your registered Philippine payment accounts (GCash, Maya, bank accounts);
• To provide customer support via live chat and email;
• To deliver transaction notifications, security alerts, and account communications via SMS and email to your registered Philippine mobile number and email address;
• To detect and prevent fraud, money laundering, account takeovers, bonus abuse, and other prohibited conduct;
• To monitor gaming activity for responsible gaming purposes, including identifying indicators of problem gambling behaviour;
• To operate and improve the Platform, including analysing gameplay patterns and platform performance data in aggregate and anonymised form;
• To comply with applicable laws and regulatory obligations, including PAGCOR licensing requirements, AMLC reporting obligations, and NPC data subject rights requests;
• To send promotional communications where you have opted in to receive them (see Section 13).

05 Legal Basis for Processing

5.1  Under Republic Act 10173, okcards.ph processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between okcards.ph and you as a registered Player — including account management, payment processing, and customer support;
• Legal Obligation: Processing required to comply with applicable laws and regulations, including PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), and NPC directives;
• Legitimate Interests: Processing for okcards.ph's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, provided such interests do not override your fundamental rights and freedoms;
• Consent: Processing for purposes not covered by the above bases, such as the sending of marketing communications, where we have obtained your explicit prior consent. You may withdraw consent at any time as described in Section 13.

06 Data Sharing & Disclosure

6.1  okcards.ph shares personal data only in the following circumstances and with the following categories of recipients:

• Payment Processors: GCash (Mynt/Globe), Maya Philippines, BPI, BDO, Metrobank, GrabPay, and other payment channel operators — solely for the purpose of processing your deposit and withdrawal transactions;
• KYC & Identity Verification Partners: Third-party identity verification service providers engaged by okcards.ph to perform document authentication and age verification — bound by confidentiality and data processing agreements;
• Game Content Providers: Third-party game studios (including but not limited to JILI, Pragmatic Play, PG Soft) receive anonymised session and wager data as required for game delivery — they do not receive personally identifiable information;
• PAGCOR: As the licensing authority, PAGCOR may require okcards.ph to provide Player account data, game records, and financial transaction data as part of its regulatory oversight and audit functions;
• Anti-Money Laundering Council (AMLC): Transaction data and Player identity information are reported to the AMLC as required under Republic Act 9160 (Anti-Money Laundering Act) and its implementing regulations;
• National Privacy Commission (NPC): Personal data may be disclosed to the NPC in connection with data subject rights requests, breach notifications, or regulatory inquiries;
• Law Enforcement: Personal data will be disclosed to Philippine law enforcement authorities upon receipt of a valid court order, subpoena, or other lawful process;
• IT Infrastructure Providers: Cloud hosting, database management, and cybersecurity service providers who process data on behalf of okcards.ph under strict contractual data processing agreements that prohibit independent use of Player data.

6.2  All third-party service providers who receive personal data from okcards.ph are required to maintain appropriate technical and organisational security measures and to process the data solely in accordance with okcards.ph's instructions and the requirements of RA 10173.

07 Cookies & Tracking Technologies

7.1  okcards.ph uses cookies and similar tracking technologies (including local storage and session tokens) on the Platform for the following purposes:

• Essential Cookies: Required for the Platform to function — including session management, okcards.ph login authentication tokens, and security features. These cannot be disabled without impairing Platform functionality;
• Functional Cookies: Store your preferences such as language settings, game lobby view configurations, and responsible gaming reminder settings;
• Analytics Cookies: Used in aggregate, anonymised form to understand how Players navigate the Platform, which games are most visited, and where usability improvements are needed. No individually identifiable information is used for analytics;
• Security Cookies: Used for fraud detection, bot identification, and session integrity verification.

7.2  okcards.ph does not use third-party advertising cookies or tracking pixels that serve personalised advertising from external networks on the Platform.

7.3  You may manage cookie preferences through your browser settings. Disabling essential cookies will prevent you from logging in to your okcards.ph account and using the Platform's core functions.

08 Data Security

8.1  okcards.ph implements the following technical and organisational security measures to protect your personal data:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the okcards.ph Platform;
• Encryption at rest for all personally identifiable information and financial data stored on okcards.ph servers;
• Multi-factor authentication and role-based access controls limiting internal staff access to personal data;
• Regular third-party penetration testing and vulnerability assessments;
• Comprehensive security event logging, monitoring, and incident response procedures;
• Payment Card Industry (PCI-DSS) standards applied to all payment processing infrastructure;
• Staff training on data privacy obligations and secure data handling practices under RA 10173.

8.2  In the event of a personal data breach that poses a real risk of serious harm to affected data subjects, okcards.ph will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected Players without undue delay, as required under NPC Circular 16-03.

09 Data Retention

9.1  okcards.ph retains personal data for the following periods:

• Active Account Data: Retained for the duration of your account with okcards.ph, plus five (5) years following account closure — in compliance with PAGCOR record-keeping requirements and AML obligations under RA 9160;
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of the transaction, as required by the Bureau of Internal Revenue (BIR) and AMLC regulations;
• KYC Documents: Retained for five (5) years following account closure;
• Customer Support Records: Retained for three (3) years from the date of the interaction;
• Marketing Opt-in Records: Retained until you withdraw consent or close your account, whichever is earlier;
• Server Access Logs: Retained for twelve (12) months for security monitoring purposes.

9.2  Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with NPC-approved data destruction procedures. Where anonymisation is used, the resulting data cannot be used to identify any individual and is no longer considered personal data under RA 10173.

10 Your Data Subject Rights

10.1  Under Republic Act 10173 and its Implementing Rules and Regulations, you have the following rights as a data subject. All requests should be directed to the okcards.ph Data Privacy Officer as described in Section 15.

11 Children, Minors & the 21+ Requirement

11.1  If you are a parent or legal guardian and believe that a person under your care has registered on okcards.ph, please contact the Data Privacy Officer immediately at the contact details in Section 15. We will investigate and take appropriate action within five (5) business days of receiving your notification.

11.2  okcards.ph conducts age verification on all new accounts as part of the KYC process. Age verification failure results in immediate account suspension pending documentary verification of age eligibility.

12 Cross-Border Data Transfers

12.1  okcards.ph primarily stores and processes personal data within the Republic of the Philippines. However, certain service providers engaged by okcards.ph — including cloud infrastructure providers and game content delivery networks — may process data on servers located in other countries, including but not limited to Singapore, Japan, and Ireland.

12.2  Where personal data is transferred outside the Philippines, okcards.ph ensures that adequate protection is in place through one or more of the following mechanisms:

• Contractual data processing agreements incorporating standard contractual clauses approved by or consistent with NPC guidelines;
• Transfer to countries or organisations recognised by the NPC as providing an adequate level of data protection;
• Binding corporate rules where the recipient is part of the same corporate group as okcards.ph.

12.3  You may request information about the specific cross-border transfer safeguards in place for your data by contacting the Data Privacy Officer.

13 Marketing Communications

13.1  okcards.ph may send you promotional communications — including bonus offers, new game announcements, and special promotions — via SMS to your registered Philippine mobile number and via email, subject to the following conditions:

• You have explicitly opted in to receive marketing communications during account registration or through your Account Settings;
• You are a registered Player with an active okcards.ph account and the communication relates to similar services to those you have used.

13.2  You may withdraw your consent to receive marketing communications at any time by:

• Updating your notification preferences in your okcards.ph Account Settings under the Communications section;
• Clicking the unsubscribe link at the bottom of any marketing email sent by okcards.ph;
• Contacting okcards.ph customer support via live chat or support email with a written request to opt out.

13.3  Opting out of marketing communications does not affect your receipt of transactional and security messages (such as deposit confirmations, withdrawal notifications, OTP codes, and security alerts), which are sent as part of the core Platform service and are not optional while your account remains active.

13.4  okcards.ph does not share your contact details with third-party marketing companies or affiliate networks for the purpose of sending you marketing communications on their behalf.

14 Changes to This Privacy Policy

14.1  okcards.ph may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. The date of the most recent update is displayed at the top of this policy.

14.2  Where material changes are made to this Privacy Policy — particularly changes that affect your rights or the manner in which we use your personal data — okcards.ph will notify registered Players via email and/or a prominent notice on the Platform prior to the changes taking effect.

14.3  Your continued use of the okcards.ph Platform following notification of material changes constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account in accordance with the Terms and Conditions.

14.4  The current version of this Privacy Policy is always available at okcardsph.net/privacy-policy. This policy was last updated on January 1, 2026.

15 Contact Us & Data Privacy Officer

15.1  For all data privacy-related inquiries, data subject rights requests, or concerns regarding this Privacy Policy, please contact the okcards.ph Data Privacy Officer using the following details:

15.2  If you are not satisfied with okcards.ph's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC can be reached through its official website and contact channels as published by the Philippine government.

15.3  This Privacy Policy was last reviewed and updated on January 1, 2026. The version published at okcardsph.net/privacy-policy is the current, authoritative version of this document.