At oklotto, your privacy is not an afterthought — it is built into how we operate. This Privacy Policy explains what personal data oklotto collects from you, why we collect it, how we use and protect it, and what rights you have over your own information as a player on the oklotto platform.
Plain-language summary: oklotto collects only the data it needs to run your account, verify your identity, process payments, and keep the platform safe. We do not sell your personal data to third parties. We comply with Philippine data protection law and PAGCOR's regulatory requirements.
Six core privacy commitments that define how oklotto handles your personal information.
All data transmitted between your device and the oklotto platform is protected by TLS encryption. Sensitive data stored on oklotto's servers — including payment details and identity documents — is encrypted at rest using industry-standard protocols.
oklotto does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your information is used solely to operate your oklotto account and comply with our legal obligations under Philippine law.
oklotto collects only the personal data that is strictly necessary for account registration, identity verification, payment processing, and regulatory compliance. We do not collect data beyond what is required for these purposes.
Under the Philippine Data Privacy Act of 2012 (Republic Act 10173), you have the right to access, correct, and request deletion of your personal data held by oklotto. oklotto has a dedicated process for handling data subject requests promptly.
oklotto retains your personal data only for as long as it is needed to fulfill the purposes for which it was collected, or as required by PAGCOR regulations and Philippine law. Data is securely deleted or anonymized once the retention period expires.
oklotto's data practices comply with the Philippine Data Privacy Act of 2012, the implementing rules of the National Privacy Commission (NPC), and PAGCOR's data governance requirements for licensed online gaming operators.
This Privacy Policy is issued by oklotto ("oklotto," "we," "us," or "our"), the operator of the online casino platform accessible at oklotto.live. oklotto operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to the laws of the Republic of the Philippines.
For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), oklotto acts as the Personal Information Controller in respect of the personal data of players and visitors to the oklotto platform. This means oklotto determines the purposes and means by which your personal data is processed.
If you have any questions about this Privacy Policy or about how oklotto handles your personal data, you may contact our Data Protection Officer at: [email protected]
oklotto collects the following categories of personal data from players and platform visitors. The specific data collected depends on how you interact with the oklotto platform.
When you create an oklotto account, we collect:
As required by PAGCOR regulations and our anti-money laundering obligations, oklotto collects:
To process deposits and withdrawals, oklotto collects:
Note: oklotto does not store full payment card numbers on its servers. Payment data is processed through secure, PCI-DSS compliant payment processors. oklotto does not accept cryptocurrency or credit card deposits.
oklotto records data about your gaming activity on the platform, including:
When you access the oklotto platform, we automatically collect:
If you contact oklotto's customer support team, we retain records of your communications, including live chat transcripts, email correspondence, and support ticket history.
oklotto collects personal data through the following means:
oklotto uses your personal data for the following purposes:
| Purpose | Data Used |
|---|---|
| Creating and managing your oklotto account | Registration data, contact details |
| Verifying your identity and age (KYC) | Identity documents, selfie, date of birth |
| Processing deposits and withdrawals | Financial data, KYC data |
| Providing customer support | Account data, communications data |
| Detecting and preventing fraud and money laundering | All categories, including technical data |
| Complying with PAGCOR and legal obligations | All categories as required by law |
| Sending account notifications and service updates | Contact details, account data |
| Sending promotional communications (with consent) | Contact details, gaming preferences |
| Responsible gaming monitoring and intervention | Gaming activity data, account data |
| Improving the oklotto platform | Technical data, gaming activity data (anonymized) |
oklotto will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.
Under the Philippine Data Privacy Act of 2012, oklotto processes your personal data on the following legal bases:
oklotto does not sell your personal data. oklotto may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Privacy Policy:
oklotto is required by law to share player data with PAGCOR and other Philippine government authorities (including the Anti-Money Laundering Council, the Bureau of Internal Revenue, and law enforcement agencies) upon lawful request or as required by applicable regulations.
oklotto engages trusted third-party service providers to assist in operating the platform. These include:
All third-party service providers engaged by oklotto are contractually required to process your personal data only on oklotto's instructions and to maintain appropriate security measures. oklotto does not permit service providers to use your data for their own purposes.
In the event of a merger, acquisition, or sale of all or part of oklotto's business, your personal data may be transferred to the acquiring entity as part of that transaction. oklotto will notify affected players by email prior to any such transfer and will ensure that the acquiring entity is bound by privacy obligations no less protective than those in this Privacy Policy.
oklotto may disclose your personal data where required to do so by law, court order, or in response to a lawful request from a competent Philippine government authority.
Cookies are small text files placed on your device when you visit the oklotto platform. oklotto uses cookies and similar tracking technologies to keep you logged in, remember your preferences, analyze platform usage, and support fraud prevention.
You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the oklotto platform. oklotto does not use cookies to serve third-party advertising.
oklotto retains your personal data for the following periods:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account plus 5 years after closure |
| KYC / identity verification documents | Duration of account plus 5 years after closure (PAGCOR requirement) |
| Financial transaction records | 10 years (Anti-Money Laundering Act requirement) |
| Gaming activity logs | 5 years after account closure |
| Customer support communications | 3 years after last interaction |
| Technical / device logs | 12 months on a rolling basis |
| Self-exclusion records | Indefinitely (to prevent re-registration during exclusion) |
After the applicable retention period, oklotto will securely delete or anonymize your personal data so that it can no longer be associated with you.
oklotto implements a range of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, oklotto will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay where required by the DPA.
Your role in security: oklotto's security measures are most effective when combined with good security practices on your part. Please use a strong, unique password for your oklotto account, enable any available two-factor authentication, and never share your login credentials with anyone.
Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by oklotto:
To exercise any of the above rights, please contact oklotto's Data Protection Officer at [email protected]. oklotto will respond to all data subject requests within 15 business days of receipt.
The oklotto platform is strictly intended for individuals aged 21 years and above. oklotto does not knowingly collect personal data from persons under 21 years of age. If oklotto becomes aware that personal data has been collected from a person under 21, that account will be immediately closed and all associated data will be deleted, except where retention is required by law.
If you believe that a person under 21 has registered an oklotto account, please contact us immediately at [email protected].
oklotto's primary data processing infrastructure is located within the Philippines. Where oklotto engages service providers whose systems are located outside the Philippines (for example, cloud infrastructure providers or game software providers), oklotto ensures that appropriate safeguards are in place to protect your personal data in accordance with the DPA and NPC regulations.
Such safeguards may include contractual clauses requiring the overseas recipient to apply data protection standards equivalent to those required under Philippine law. oklotto will not transfer your personal data to a jurisdiction that does not provide an adequate level of data protection without first implementing appropriate safeguards and, where required, obtaining your consent.
oklotto may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. Material changes will be communicated to registered players via email to the address on file and/or via a prominent notice on the oklotto platform at least 7 days before the changes take effect.
The date of the most recent revision is displayed at the top of this page. Your continued use of the oklotto platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree to the revised policy, you may request account closure in accordance with the Terms & Conditions.
If you have any questions, concerns, or requests relating to this Privacy Policy or oklotto's handling of your personal data, please contact our Data Protection Officer:
If you are not satisfied with oklotto's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the independent authority responsible for enforcing the Data Privacy Act of 2012.
Your privacy is protected every step of the way. Join thousands of Filipino players who trust oklotto for a secure, fair, and exciting online casino experience — backed by PAGCOR regulation and Philippine data protection law.
21+ only · PAGCOR regulated · Gambling is addictive. Know when to stop.