This Privacy Policy explains how okcards collects, uses, stores, and protects the personal information of players and visitors. We are committed to safeguarding your privacy in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).
Your data flows — and stays — under our protection.
okcards processes all personal data in compliance with the Philippine Data Privacy Act of 2012 and the regulations of the National Privacy Commission (NPC). Your rights as a data subject are fully recognised and enforceable.
okcards does not sell, rent, or lease your personal data to third parties for their own marketing purposes under any circumstances. Data shared with third parties is limited strictly to what is necessary for platform operations and legal obligations.
All data transmitted between your device and okcards servers is protected by 256-bit SSL encryption — the same standard used by Philippine banks. Your personal and financial data is never transmitted in plain text.
As a data subject under RA 10173, you have the right to access, correct, delete, object to, and port your personal data. okcards provides a clear process for exercising all of these rights directly through your account or via our support team.
okcards retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by Philippine law. Retention periods for each category of data are defined in our internal data retention policy and summarised in this Privacy Policy.
In the event of a personal data breach that poses a real risk of serious harm to affected individuals, okcards will notify the NPC and affected data subjects within the timeframes required by RA 10173 and NPC Circular 16-03.
For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, the data controller responsible for the personal data of okcards users is the entity operating the okcards platform at okcards.vip (referred to in this Policy as "okcards", "we", "us", or "our").
okcards determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with RA 10173 and the regulations of the National Privacy Commission of the Philippines.
The okcards platform is operated for and directed at users in the Republic of the Philippines. By accessing okcards.vip and creating an account, you acknowledge that your personal data will be processed as described in this Privacy Policy.
okcards collects the following categories of personal data from users. The specific data points collected depend on the nature of your interaction with the platform:
| Category | Data Points Collected | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number, ID document images | Registration & KYC verification |
| Contact Data | Email address, mobile number, residential address (city, province) | Registration |
| Financial Data | GCash / Maya account reference, bank account details (for bank transfer), transaction history, deposit and withdrawal records | First deposit & ongoing transactions |
| Gaming Activity Data | Bet history, game session records, win/loss records, bonus usage, session duration | Ongoing platform use |
| Technical Data | IP address, device type, operating system, browser type, session identifiers, geolocation (country/region level) | Every site visit |
| Communications Data | Support chat transcripts, email correspondence, complaint records | When you contact support |
| Preference Data | Communication preferences, responsible gaming limit settings, favourite games | Account settings interactions |
okcards does not collect sensitive personal information as defined under RA 10173 (such as health data, religious beliefs, or political affiliations) except where specifically required by law — for example, information necessary to process a responsible gaming self-exclusion request. Where sensitive data is collected, explicit consent is obtained.
okcards collects personal data through the following channels and methods:
Under the Philippine Data Privacy Act of 2012, okcards processes your personal data on the following legal bases:
okcards uses your personal data for the following specific purposes:
okcards does not sell, rent, or trade your personal data. Data is shared with third parties only in the following limited circumstances and only to the minimum extent necessary:
All third parties who receive personal data from okcards are required, by contract or by law, to handle that data securely and in accordance with the Philippine Data Privacy Act of 2012. okcards does not authorise any third party to use your personal data for their own marketing purposes.
okcards uses cookies and similar tracking technologies on the okcards.vip website for the following purposes:
okcards does not use third-party advertising cookies or cross-site tracking pixels that would allow advertising networks to build a profile of your browsing behaviour across websites outside of okcards.vip. You can manage cookie preferences through your browser settings, though disabling essential cookies may prevent certain platform features from functioning correctly.
okcards retains personal data for the following periods, which are determined by the purpose of processing and applicable legal requirements:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account identity & KYC records | 5 years after account closure | PAGCOR / AML regulatory requirement |
| Transaction & financial records | 7 years from transaction date | Philippine tax and financial law |
| Gaming activity & bet history | 3 years after account closure | Dispute resolution & regulatory audit |
| Customer support records | 3 years from ticket closure | Legitimate interest / dispute resolution |
| Marketing consent records | Until consent withdrawn + 2 years | Consent compliance evidence |
| Technical & access logs | 12 months | Security monitoring |
| Self-exclusion records | Permanent (or duration of exclusion + 5 years) | Responsible gaming obligation |
Upon expiry of the applicable retention period, okcards will securely delete or anonymise personal data in a manner that prevents re-identification. Where data must be retained beyond the standard period due to an ongoing legal dispute, regulatory investigation, or law enforcement request, the data will be retained until the relevant matter is resolved.
okcards implements technical and organisational security measures appropriate to the nature of the personal data we hold and the risks associated with its processing. These measures include:
Important: While okcards takes all reasonable technical and organisational measures to protect your data, no transmission over the internet is 100% secure. You are responsible for maintaining the security of your own okcards account credentials. okcards will never ask for your password via email, chat, or phone.
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okcards:
Request a copy of the personal data okcards holds about you, the purposes for which it is used, and the third parties it has been shared with.
Request correction of any inaccurate or incomplete personal data in your okcards account record.
Request deletion of personal data that is no longer necessary for the purposes for which it was collected, subject to retention obligations under Philippine law.
Object to processing of your personal data based on legitimate interests or direct marketing, including profiling for direct marketing purposes.
Receive a copy of personal data you have provided to okcards in a structured, commonly used, machine-readable format.
Request restriction of processing in specified circumstances, including where the accuracy of data is contested or processing is unlawful.
Withdraw consent for marketing communications at any time. Withdrawal does not affect the lawfulness of prior processing based on that consent.
Lodge a complaint with the National Privacy Commission of the Philippines if you believe okcards has processed your data in violation of RA 10173.
To exercise any of the above rights, contact the okcards Data Protection Officer at the contact details provided in Section 15 of this Policy. okcards will respond to data subject requests within 30 calendar days. Where a request is complex or numerous, the response period may be extended by a further 30 days, of which you will be notified.
Exercising your data subject rights will not result in any detriment to your okcards account or the services available to you, except where your request necessarily requires account closure or restriction of processing that is integral to service delivery.
The okcards platform is strictly for individuals who are at least 21 years of age. okcards does not knowingly collect, process, or store personal data from individuals under the age of 21. The collection of personal data from individuals under 21 is a violation of these okcards policies and of applicable Philippine gaming regulations.
If okcards becomes aware that personal data has been collected from an individual under 21, that data will be deleted immediately and the associated account will be permanently closed. If you are a parent or guardian and believe your child has registered on okcards, please contact us immediately at the details in Section 15 so that we can take appropriate action.
okcards' primary data processing infrastructure is located within the Philippines. However, certain service providers — particularly specialist KYC verification platforms, fraud detection services, and cloud infrastructure providers — may process data in jurisdictions outside the Philippines.
Where such cross-border transfers occur, okcards ensures that:
For a list of countries to which your data may be transferred, or for more information about the safeguards in place for any specific transfer, please contact the okcards Data Protection Officer.
okcards will only send you marketing emails, SMS messages, or in-platform promotional notifications if you have provided your explicit opt-in consent to receive such communications. You can provide or withdraw this consent at any time through your okcards account notification settings.
Transactional and account-related communications — such as deposit confirmations, withdrawal notifications, account security alerts, and support responses — are not marketing communications and will be sent regardless of your marketing preferences, as they are necessary for account management and service delivery.
If you wish to opt out of all marketing communications, you may:
Opting out of marketing communications will not affect the delivery of transactional or account-related notifications, nor will it affect your ability to use the okcards platform in any way.
okcards may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance from the NPC. When material changes are made, okcards will notify you through one or more of the following channels: a prominent notice on okcards.vip, an email notification to your registered address, or an in-platform notification on your next login.
The date at the top of this Privacy Policy indicates when it was last updated. We encourage you to review this Policy periodically to stay informed about how okcards protects your data. Your continued use of the okcards platform following notification of any changes constitutes your acknowledgment of the revised Policy.
If you have questions about this Privacy Policy, wish to exercise a data subject right, or have a concern about how okcards handles your personal data, please contact the okcards Data Protection Officer (DPO) through the following channel:
When contacting the okcards DPO regarding a data subject rights request, please include your registered account username or email address and a clear description of the request. This helps us process your request efficiently and verify your identity before disclosing or acting on any personal data.
Response time: Within 30 calendar days of receipt of a verifiable data subject request.
If you are unsatisfied with okcards' response to a privacy concern, you have the right to escalate the matter to the National Privacy Commission of the Philippines — the independent regulatory body responsible for enforcing RA 10173 in the Philippines.
You've read how okcards handles your data — with transparency, security, and full compliance with Philippine law. Create your account knowing that your personal information is in safe hands. For players 21 and above only.
By creating an account you confirm you are 21 years of age or older and agree to the Terms & Conditions and this Privacy Policy. Please gamble responsibly.