okcards.ph Privacy Policy

1Introduction

okcards.ph ("the Platform", "we", "us", "our") is committed to protecting the personal data of all registered players and website visitors. This Privacy Policy ("Policy") describes how okcards.ph collects, processes, stores, shares, and protects personal information in connection with your use of the okcards.ph website and gaming services accessible at okcardsph.vip.

This Policy is issued in compliance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). It also reflects applicable obligations under PAGCOR's technical and compliance requirements for licensed online gaming operators.

This Policy applies to all personal data collected by okcards.ph through: account registration, deposits and withdrawals, gameplay and transaction records, customer support interactions, and your general use of the Platform including cookies and device data.

2Data Controller

okcards.ph acts as the Personal Information Controller ("PIC") as defined under the Philippine Data Privacy Act for all personal data collected in connection with your use of the Platform. As PIC, okcards.ph determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with the DPA.

For all privacy-related inquiries, data subject requests, or concerns, you may contact our designated Data Protection Officer using the contact information provided in Section 13 of this Policy.

3Personal Data We Collect

okcards.ph collects only the personal data necessary to provide, operate, and improve our gaming services. The categories of personal data we collect include:

okcards.ph does not collect sensitive personal data as defined under the DPA (such as health records, political opinions, or religious beliefs) unless expressly required for responsible gaming assessments with your consent.

4How We Use Your Personal Data

okcards.ph uses your personal data for the following purposes:

• Account management: Creating, verifying, and maintaining your okcards.ph account, including identity verification (KYC) and age confirmation (21+ requirement).
• Service provision: Processing deposits and withdrawals through GCash, PayMaya, and bank channels; enabling access to all game categories on the Platform.
• Regulatory compliance: Fulfilling obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (Republic Act No. 9160), and the Data Privacy Act of 2012.
• Responsible gaming: Monitoring gaming patterns to identify at-risk players and applying self-exclusion, deposit limits, or account restrictions where appropriate.
• Security and fraud prevention: Detecting, investigating, and preventing unauthorized account access, payment fraud, collusion, and other prohibited conduct.
• Customer support: Responding to your inquiries, resolving account disputes, and providing technical assistance.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the okcards.ph user experience, game lobby, and mobile performance.

5Legal Basis for Processing

okcards.ph processes your personal data on the following legal bases as recognised under the Philippine Data Privacy Act:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to at registration — including account operation, payment processing, and game access.
• Legal obligation: Processing required to comply with PAGCOR licensing requirements, anti-money laundering regulations, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Consent: Processing for optional marketing communications and certain responsible gaming assessments, which you may withdraw at any time without affecting the lawfulness of prior processing.

6Data Sharing and Third Parties

okcards.ph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with third parties only in the following circumstances:

• Payment processors: GCash (G-Xchange Inc.), PayMaya (PayMaya Philippines Inc.), BPI, BDO, Metrobank, and other payment service providers solely to process transactions on your behalf.
• Game providers: Licensed game studios (including JILI Technology and other certified providers) receive anonymised session data to operate game functionality. They do not receive your identity or financial data.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government bodies where disclosure is required by law.
• IT and security service providers: Cloud hosting, cybersecurity, fraud detection, and KYC verification vendors engaged under data processing agreements that bind them to confidentiality and DPA-equivalent standards.
• Legal proceedings: Where disclosure is required by court order, legal process, or to protect the rights and safety of okcards.ph or third parties.

7Cookies and Tracking Technologies

okcards.ph uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies used include:

• Strictly necessary cookies: Required for the Platform to function — session management, login state, and security tokens. These cannot be disabled without breaking core platform functionality.
• Analytical cookies: Used to understand how players navigate the Platform — page views, session lengths, game category preferences — in aggregate and anonymised form to guide product improvements.
• Functional cookies: Remember your preferences such as language settings and previously visited game categories to personalise your experience on return visits.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using okcards.ph but may affect certain personalisation features. okcards.ph does not use third-party advertising cookies or permit ad networks to place tracking cookies on the Platform.

8Data Retention

okcards.ph retains personal data only for as long as necessary to fulfil the purposes described in this Policy or as required by applicable law:

• Active accounts: Personal and gaming data is retained for the full duration of your account's active status.
• Closed accounts: Following account closure, identity, financial, and gaming records are retained for a minimum of five (5) years in compliance with PAGCOR requirements and the Anti-Money Laundering Act's record-keeping obligations.
• Support communications: Chat transcripts and support emails are retained for two (2) years from the date of the interaction.
• Marketing data: Email marketing preferences and opt-in records are retained until you withdraw consent or for one (1) year following account inactivity, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders re-identification impossible.

9Data Security

okcards.ph implements technical and organisational security measures appropriate to the risk level of the personal data processed. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the okcards.ph servers.
• Encrypted storage of passwords using industry-standard hashing algorithms. okcards.ph does not store passwords in plaintext and no employee can retrieve your password.
• Access controls limiting internal access to personal data to authorised personnel on a need-to-know basis.
• Regular security audits, penetration testing, and vulnerability assessments of the Platform's infrastructure.
• Incident response procedures in place to detect, contain, and notify affected players of personal data breaches within the timeframes required by the NPC under the DPA.

10Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okcards.ph:

• Right to be Informed: The right to know how your personal data is collected, used, and shared — as set out in this Policy.
• Right to Access: The right to request a copy of the personal data okcards.ph holds about you and to verify that it is being processed lawfully.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected without undue delay.
• Right to Erasure (Right to be Forgotten): The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to retention obligations under Philippine law.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Data Portability: The right to receive personal data you have provided to okcards.ph in a structured, commonly used, machine-readable format.
• Right to Damages: The right to be indemnified for damages sustained as a result of inaccurate, incomplete, or unlawfully obtained personal data processed by okcards.ph.

To exercise any of these rights, please contact our Data Protection Officer at the email address in Section 13. okcards.ph will respond to all data subject requests within fifteen (15) business days of receipt. We may request verification of your identity before processing your request.

11Minors

okcards.ph does not knowingly collect personal data from individuals under the age of 21. Access to the okcards.ph platform is strictly prohibited for persons below the minimum age requirement of 21 years as mandated by PAGCOR for all licensed Philippine online gaming operators.

If okcards.ph discovers that personal data has been collected from a person under 21, that account will be immediately suspended, any balance held will be frozen pending investigation, and the personal data will be deleted in accordance with our data retention procedures. If you believe that a minor has registered on okcards.ph, please notify our Data Protection Officer immediately.

12Changes to This Privacy Policy

okcards.ph may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform features. Material changes will be communicated to registered players via the email address on file and/or through a prominent notice on the Platform at least fourteen (14) days before the changes take effect.

Your continued use of okcards.ph following the effective date of any revision constitutes your acceptance of the updated Policy. The date of the most recent revision is indicated at the top of this page. We encourage you to review this Policy periodically.

13Contact — Data Protection Officer

For all data privacy inquiries, data subject access requests, complaints, or to exercise any of your rights under the Philippine Data Privacy Act, please contact the okcards.ph Data Protection Officer:

• Email: [email protected] (subject line: "Data Privacy Request")
• Response time: Within 15 business days for formal data subject requests
• Language: Requests accepted in English and Filipino (Tagalog)

If you are not satisfied with okcards.ph's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.