1 Who We Are
This Privacy Policy applies to 24oklaro, operating the online gaming platform accessible at https://24oklaro.net. For the purposes of data protection, 24oklaro acts as the data controller — meaning we determine how and why your personal data is collected and processed.
We are licensed to operate online gaming services in the Philippines and are subject to applicable Philippine data privacy laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations issued by the National Privacy Commission (NPC).
This Privacy Policy describes our practices in connection with all personal data collected through the 24oklaro website, account registration process, customer support interactions, payment transactions, and any other means by which you interact with our platform. It should be read alongside our Terms and Conditions.
By registering and using 24oklaro, you agree to the collection and use of your information as described in this Privacy Policy.
2 Data We Collect
The personal information 24oklaro collects falls into several categories depending on how you interact with the platform. We do not collect information that is unnecessary or disproportionate to the purposes described in this policy.
Information You Provide Directly
- Registration data: Full legal name, date of birth, email address, mobile number, and preferred payment method
- Identity verification documents: Government-issued photo ID (passport, driver's license, UMID, PhilSys ID), proof of address, and selfie verification when required for KYC
- Payment information: GCash or Maya account number, bank account details, or card information used for deposits and withdrawals — processed securely through our payment partners
- Communications: Messages sent to 24oklaro via live chat, email, or support tickets
Information Collected Automatically
- Device and browser data: IP address, device type, operating system, browser type and version
- Usage data: Pages visited, games played, session duration, click behavior, and feature interactions on the platform
- Transaction records: Deposit and withdrawal history, bet history, game outcomes, and bonus activity
- Cookies and similar technologies: As described in Section 6 of this policy
| Data Category | Examples | Why We Collect It |
|---|---|---|
| Identity | Full name, date of birth, government ID | KYC compliance, age verification |
| Contact | Email address, mobile number | Account access, notifications, support |
| Financial | GCash number, bank account, card details | Processing deposits and withdrawals |
| Technical | IP address, device type, browser | Security, fraud detection, platform performance |
| Behavioral | Games played, session data, bet history | Platform improvement, responsible gaming monitoring |
3 How We Use Your Data
24oklaro uses the personal data we collect to operate the platform effectively, comply with our legal obligations, and provide a safe and personalized gaming experience for our Filipino players. Specifically, your data is used to:
- Create, verify, and maintain your 24oklaro account
- Process deposits, withdrawals, and financial transactions in Philippine Peso
- Verify your identity in compliance with KYC and anti-money laundering (AML) requirements
- Detect, investigate, and prevent fraud, cheating, and other prohibited activities
- Provide 24/7 customer support and respond to your inquiries
- Monitor for problem gambling behavior as part of our responsible gaming obligations
- Administer bonuses, promotions, and the VIP Club program
- Improve platform performance, fix technical issues, and develop new features
- Send you transactional communications (e.g., deposit confirmations, withdrawal status updates)
- Send you promotional communications where you have given consent
- Comply with applicable Philippine laws, regulatory requirements, and legal processes
We do not use automated decision-making that produces legal effects on your account without the involvement of a human reviewer where the stakes are significant, such as account closure or payout decisions.
4 Legal Basis for Processing
Under the Data Privacy Act of 2012, 24oklaro processes your personal data based on the following legal grounds:
- Contractual necessity: Processing required to perform our agreement with you — meaning operating your account, processing payments, and delivering the gaming services you signed up for
- Legal obligation: Processing necessary to comply with applicable laws and regulations, including KYC, AML, and gaming license requirements
- Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and platform improvement — in each case balanced against your privacy interests
- Consent: Where we send marketing communications or use non-essential cookies, we rely on your explicit consent, which you may withdraw at any time
5 Data Sharing and Third Parties
24oklaro does not sell, rent, or trade your personal data to third parties for commercial purposes. We do share data with trusted partners where necessary to operate the platform, and only under strict confidentiality and data security requirements.
Categories of Authorized Recipients
- Payment processors: GCash, Maya, BDO, BPI, UnionBank, and other payment partners receive the financial data necessary to process your transactions. These partners operate under their own privacy policies and are subject to applicable financial regulations.
- Identity verification providers: KYC service providers that assist in verifying government-issued IDs and confirming identity documents as required by our licensing obligations
- Technology partners: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on our behalf under data processing agreements
- Regulatory and law enforcement authorities: Where required by Philippine law, court order, or a valid request from a competent authority, 24oklaro may be required to disclose your information. We will notify you of such requests where permitted by law.
- Game content providers: Licensed game software providers may receive anonymized or pseudonymized data related to game performance. They do not receive your identity or financial data.
All third-party partners engaged by 24oklaro are bound by confidentiality obligations and are prohibited from using your data for any purpose other than what is specified in their agreement with us.
6 Cookies and Tracking Technologies
24oklaro uses cookies and similar tracking technologies to make the platform work properly, understand how players use the site, and where you've given consent, deliver relevant promotions.
Types of Cookies We Use
- Essential cookies: Required for the platform to function — including keeping you logged in, maintaining your session across pages, and enabling the cashier to work correctly. These cannot be disabled without breaking core functionality.
- Analytics cookies: Help us understand how players navigate the platform — which games are popular, where users encounter issues, and how the site performs across different devices. This data is aggregated and anonymized.
- Preference cookies: Remember your language, region, and display settings so you don't have to reconfigure them on each visit.
- Marketing cookies: Used only with your consent to track whether promotional campaigns are reaching the right audience. You can opt out of these at any time through your browser settings or account preferences.
You can manage your cookie preferences through your browser settings. Note that disabling essential cookies will affect the functionality of 24oklaro and may prevent you from logging in or processing transactions.
7 Data Retention
24oklaro retains your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by applicable Philippine law and our gaming license conditions.
In practice, this means:
- Account data and transaction history are retained for a minimum of five years following account closure, as required by anti-money laundering regulations
- KYC and identity verification documents are retained for the duration of your account plus five years after closure
- Communications with customer support are retained for a period of two years from the date of the interaction
- Technical and usage data (such as IP logs and session data) is typically retained for 12 months, unless retained longer for security investigation purposes
- Marketing consent records are retained for as long as your account is active and for one year following withdrawal of consent
When your data is no longer required, 24oklaro will securely delete or anonymize it in accordance with our internal data retention schedule.
8 Security Measures
Protecting your data is something 24oklaro takes seriously — not just as a regulatory requirement but as a basic obligation to the Filipino players who trust us with their information. We implement the following security measures across the platform:
- TLS encryption: All data transmitted between your device and the 24oklaro platform is protected by Transport Layer Security (TLS), the same standard used by banks and major e-commerce platforms
- Data encryption at rest: Sensitive data stored on our servers — including identity documents and payment information — is encrypted using industry-standard encryption algorithms
- Access controls: Internal access to your personal data is restricted to authorized personnel on a need-to-know basis. All access is logged and audited.
- Fraud detection systems: Automated systems monitor for unusual account activity, irregular betting patterns, and suspicious login attempts in real time
- Two-factor authentication: 24oklaro supports two-factor authentication for account logins. We strongly encourage all players to enable this feature.
- Regular security reviews: Our technical infrastructure is subject to regular security assessments to identify and address vulnerabilities
No system is perfectly impenetrable. If you suspect unauthorized access to your 24oklaro account, contact our support team immediately at support@24oklaro.net or via live chat. Quick action significantly limits any potential harm.
9 Your Data Rights
Under the Data Privacy Act of 2012, you have specific rights regarding your personal data that 24oklaro is committed to upholding. These are not theoretical rights — here's how you actually exercise each one: