Privacy Policy

otso88 is committed to protecting the privacy and personal data of all users in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Republic of the Philippines, its implementing rules and regulations, and the policies of the National Privacy Commission (NPC). This Privacy Policy complies with the requirements for data controllers under Philippine law and applies to all personal data processed by otso88 in connection with the provision of online gaming and sports betting services to Filipino players.

otso88 processes your personal data based on the following lawful grounds:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and otso88, including account creation, payment processing, and delivery of gaming services;
• Legal Obligation: Processing is required to comply with applicable Philippine laws and regulations, including anti-money laundering (AML) requirements, tax obligations, and PAGCOR regulatory standards;
• Legitimate Interest: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and customer service improvement, provided such interests do not override your fundamental rights and freedoms;
• Consent: Where required by law, we obtain your explicit consent before processing certain categories of personal data, such as marketing communications.

otso88 collects the following categories of personal data from Filipino players during account registration, use of the Platform, and processing of transactions:

2.1 Account Registration Data

• Full legal name (as it appears on your Philippine government-issued ID)
• Date of birth (for age verification purposes — you must be 21 years or older)
• Email address
• Philippine mobile number (for two-factor authentication and account recovery)
• Username and password (passwords are encrypted and not stored in plain text)
• Residential address within the Philippines

2.2 Identity Verification (KYC) Data

To comply with PAGCOR regulations and Philippine anti-money laundering laws, otso88 requires all players to complete Know Your Customer (KYC) verification before processing withdrawals. This may include:

• Copy of a valid Philippine government-issued photo ID (UMID, PhilSys National ID, driver's licence, passport)
• Proof of address (utility bill, bank statement, government correspondence issued within the last three months)
• Selfie photograph holding your ID (for biometric verification)
• Source of funds documentation (in cases where enhanced due diligence is required)

2.3 Payment and Transaction Data

• Payment method information (GCash mobile number, Maya account, bank account name for BPI/BDO/Metrobank/UnionBank, cryptocurrency wallet address for USDT TRC20)
• Transaction history (deposits, withdrawals, transfer amounts, dates, and times)
• Payment processor transaction IDs and confirmation codes

2.4 Gaming Activity Data

• Game play history (games played, bets placed, win/loss records)
• Sports betting history (events wagered on, odds, stake amounts, outcomes)
• Bonus and promotion participation records
• Responsible gaming settings (deposit limits, session time limits, self-exclusion status)

2.5 Technical and Usage Data

• IP address and geolocation data (to verify you are accessing the Platform from within the Philippines)
• Device information (operating system, browser type, device model)
• Login timestamps and session duration
• Cookies and tracking technologies (see Section 8 for details)

otso88 uses the personal data we collect for the following purposes, all of which are necessary for the provision of our services or required by applicable law:

3.1 Account Management and Service Delivery

• Creating and maintaining your otso88 player account
• Authenticating your identity when you log in (including two-factor authentication via SMS)
• Processing deposits and withdrawals to and from your account wallet
• Providing access to games, live casino tables, sports betting markets, and bingo rooms
• Tracking game play, managing your balance, and processing winning payouts
• Administering bonuses, promotions, and VIP loyalty programs

3.2 Regulatory Compliance and Legal Obligations

• Verifying your age (you must be 21 years or older to use otso88)
• Completing KYC verification in accordance with PAGCOR requirements
• Complying with Philippine anti-money laundering (AML) and counter-terrorism financing (CTF) laws
• Maintaining transaction records for tax reporting and regulatory reporting purposes
• Responding to lawful requests from Philippine government authorities, courts, or law enforcement agencies

3.3 Fraud Prevention and Platform Security

• Detecting and investigating suspicious account activity, bonus abuse, and fraudulent transactions
• Preventing money laundering, identity theft, and other financial crimes
• Monitoring for multiple account creation and enforcing our one-account-per-player policy
• Protecting the integrity of our games and sportsbook markets

3.4 Customer Support

• Responding to your inquiries, complaints, and support requests via live chat and email
• Processing responsible gaming requests including deposit limit changes and self-exclusion applications
• Communicating account-related notices such as verification requests, transaction confirmations, and security alerts

3.5 Marketing Communications

With your explicit consent, otso88 may send you promotional communications about new games, bonus offers, and platform updates via email or SMS. You may withdraw your consent to marketing communications at any time by updating your communication preferences in your account settings or by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before such withdrawal.

3.6 Platform Improvement

• Analysing aggregated usage data to improve game selection, platform performance, and user experience
• Conducting internal research and analytics to better understand the preferences of Filipino players
• Testing new features, promotions, and platform updates before full deployment

otso88 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We may share your personal data only in the following limited circumstances:

4.1 Service Providers and Data Processors

otso88 works with carefully selected third-party service providers who process personal data on our behalf under strict contractual data protection obligations. These include:

• KYC and identity verification providers — to process your government ID documents and complete age and identity verification
• Payment processors — GCash, Maya, BPI, BDO, Metrobank, UnionBank, and other approved payment partners require your payment account details to process deposits and withdrawals
• Game software providers — providers such as JILI Gaming, Evolution Gaming, Pragmatic Play, and PG Soft receive limited gameplay data necessary for game delivery and RNG certification purposes
• Cloud hosting and infrastructure providers — for secure data storage and platform operation
• Customer support technology providers — to deliver live chat and ticketing support services
• Fraud detection and analytics platforms — to monitor for suspicious activity and protect the security of the Platform

All service providers are contractually required to process your data only for the purposes specified by otso88, to maintain appropriate security standards, and to comply with applicable Philippine data protection law.

4.2 Regulatory and Legal Disclosure

otso88 may disclose your personal data to the following bodies where required or permitted by Philippine law:

• PAGCOR (Philippine Amusement and Gaming Corporation) — for regulatory oversight and compliance reporting
• The Anti-Money Laundering Council (AMLC) — for suspicious transaction reporting and AML compliance
• The National Privacy Commission (NPC) — in connection with data protection inquiries or breach notifications
• Philippine courts, law enforcement agencies, and government bodies — in response to lawful court orders, subpoenas, or official requests
• The Bureau of Internal Revenue (BIR) — for tax reporting obligations applicable to Philippine gaming operators

4.3 Business Transfers

In the event that otso88's business is subject to a merger, acquisition, or transfer of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to data processing practices that arise as a result, in accordance with Philippine data protection requirements.

otso88 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal obligations. The following retention periods apply:

• Account and registration data: Retained for the duration of your active account relationship with otso88, plus a minimum of five (5) years following account closure, in accordance with Philippine AML record-keeping requirements
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of collection, as required under the Philippine Anti-Money Laundering Act and PAGCOR regulations
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction for regulatory compliance and dispute resolution purposes
• Gaming activity logs: Retained for a minimum of two (2) years for operational purposes, fraud detection, and responsible gaming monitoring
• Customer support records: Retained for three (3) years from the date of the support interaction
• Marketing preference records: Retained until you withdraw your marketing consent, plus a reasonable period to demonstrate compliance

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Anonymised data may be retained indefinitely for aggregated analytics purposes.

Under the Philippine Data Privacy Act of 2012 and applicable data protection law, you have the following rights with respect to your personal data held by otso88:

• Right to Access: You have the right to request a copy of the personal data otso88 holds about you, together with information about how that data is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by otso88. For account information updates, you may make changes directly via your account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under Philippine law.
• Right to Data Portability: You may request a copy of the personal data you have provided to otso88 in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data for marketing purposes or where we are relying on our legitimate interests as the legal basis for processing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been infringed.

otso88 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:

• Encryption in transit: All data transmitted between your device and otso88 servers is encrypted using 256-bit SSL/TLS encryption
• Encryption at rest: Sensitive personal data stored on otso88 servers is encrypted at the database level
• Two-factor authentication: All player accounts are protected by two-factor authentication via SMS OTP to your registered Philippine mobile number
• Access controls: Access to personal data within otso88's systems is restricted on a strict need-to-know basis, with role-based access controls and audit logging
• Regular security audits: otso88 conducts periodic vulnerability assessments and security reviews of its infrastructure
• Incident response: We maintain documented incident response procedures and will notify affected players and the NPC within 72 hours in the event of a data breach that poses risk to your rights and freedoms

While otso88 implements industry-standard security measures, no data transmission over the internet or electronic storage system is 100% secure. You are responsible for keeping your account credentials confidential and for notifying otso88 immediately if you suspect unauthorised access to your account.

otso88 uses cookies and similar tracking technologies to operate the Platform, improve your user experience, and gather analytics data. The following types of cookies are used:

8.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They enable core functions such as session management, login authentication, and security. These cookies cannot be disabled without significantly impairing the functionality of the Platform.

8.2 Performance and Analytics Cookies

These cookies collect aggregated information about how players use the Platform — such as which pages are visited most frequently and how long sessions last. This data helps us improve platform performance and user experience. The data collected is anonymised and cannot be used to identify individual players.

8.3 Functional Cookies

These cookies remember your preferences — such as your preferred language, game lobby filters, and display settings — so that you do not need to re-enter them on each visit. They enhance the personalisation of your otso88 experience.

8.4 Managing Cookies

You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies. Please note that blocking certain categories of cookies may affect the functionality of the otso88 Platform. For full instructions on managing cookies in your specific browser, refer to your browser's help documentation.

The otso88 Platform incorporates games and services provided by third-party game developers and technology providers. When you interact with these third-party game environments, your gameplay data is processed by those providers in accordance with their own privacy policies and data protection practices. otso88 selects providers who maintain appropriate data protection standards, but we are not responsible for the privacy practices of third-party software providers operating within their own game environments.

The otso88 Platform does not contain links to external third-party websites. Should you navigate away from otso88.cam via any browser bookmark or address bar entry, any personal data you provide to external websites is subject to those websites' own privacy policies, for which otso88 accepts no responsibility.

If otso88 becomes aware that personal data has been collected from a player who is under 21 years of age, we will immediately close the associated account, delete or securely destroy the collected personal data, and report the matter to relevant authorities if required by law. Any deposits made by an underage player will be returned to the payment source following identity verification of the account holder's legal guardian.

If you are a parent or guardian and believe that a minor under your care has registered an account with otso88, please contact our support team immediately at [email protected] or via live chat. We will investigate and take prompt corrective action.

We encourage parents and guardians who share devices with minors to implement parental control software to prevent access to online gaming platforms including otso88.

otso88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. We will notify registered players of material changes to this Policy by sending a notification to your registered email address or via a prominent notice on the Platform at least 14 days before the changes take effect.

The date of the most recent update to this Privacy Policy is displayed at the top of this page. Continued use of the otso88 Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically to stay informed about how otso88 protects your personal data.

All previous versions of this Privacy Policy are archived and available upon request by contacting our Data Protection Officer.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by otso88, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the otso88.cam website — the fastest way to reach our team for data rights requests and privacy concerns
• Email: [email protected] — for formal data access, correction, deletion, or portability requests, please include "Data Privacy Request" in the subject line

All data protection inquiries will be handled by otso88's designated Data Protection Officer, who is responsible for ensuring compliance with the Philippine Data Privacy Act. We aim to respond to all privacy-related requests within 30 days of receipt.

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.