This Privacy Policy explains what personal information otso collects from players in the Philippines, how that information is used, and what rights you have over your own data. Reading this page before you register helps you make an informed decision about using the platform.
A clear breakdown of the personal information we gather, the reasons we need it, and how it is kept safe for every registered player in the Philippines.
When you register an account on the otso platform, we collect the personal details you provide directly, including your full name, date of birth, email address, mobile number, and residential address in the Philippines. We also collect a copy of a valid government-issued ID as part of our identity verification process, which is required under applicable Philippine regulations before withdrawals can be processed. During your use of the platform, we automatically gather technical data such as your device type, operating system, browser or app version, IP address, and session activity logs. Payment-related information — including the payment method you use and transaction reference numbers — is recorded for every deposit and withdrawal you make, though full card or account numbers are never stored directly on our servers. We may also collect information about how you interact with specific features, such as which games you play, how long sessions last, and which promotions you view, in order to improve the platform experience. If you contact our support team, the content of those communications is retained so we can follow up accurately and maintain a record of any issues raised. All data collection is carried out in accordance with the Philippine Data Privacy Act of 2012 and its implementing rules.
The primary purpose for collecting your personal data is to operate your account securely and to deliver the services you have signed up for, including access to the Game Lobby, Sports section, and VIP programme. Your identity information is used to verify that you meet the minimum age requirement of 18 years and to confirm that you are a legitimate player based in the Philippines, as required by our operating licence. Transaction data is used to process deposits and withdrawals accurately, to detect and prevent fraudulent activity, and to comply with anti-money laundering obligations that apply to licensed gaming platforms. Technical and behavioural data helps us identify and fix platform issues, optimise the mobile experience, and ensure that the app and browser versions perform reliably across the range of devices used by Filipino players. We may use your contact details to send you important account notifications, security alerts, or updates about changes to our terms or policies — these communications are not optional as they relate directly to your account. Where you have given explicit consent, we may also send you information about promotions or new features available on the platform, and you can withdraw that consent at any time through your account settings. We do not use your personal data to make automated decisions that produce legal or similarly significant effects without human review.
otso does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes, and this commitment applies regardless of the circumstances. We share data only with carefully selected service providers who assist us in operating the platform — for example, payment processors who handle PHP transactions, identity verification partners, and cloud infrastructure providers who store data securely. All third-party partners who handle personal data on our behalf are bound by strict data processing agreements that prohibit them from using your information for any purpose other than the specific service they provide to us. In certain circumstances, we are legally required to disclose personal information to regulatory authorities, law enforcement agencies, or courts in the Philippines, and we will comply with such obligations while notifying you where the law permits us to do so. If the otso business is restructured or transferred in whole or in part, your personal data may be transferred to the new entity, but only under the same privacy protections described in this policy. We do not transfer personal data outside the Philippines unless the destination country provides an adequate level of data protection or appropriate safeguards are in place. Any disclosure beyond what is described here would require your explicit prior consent.
Under the Philippine Data Privacy Act, you are entitled to a number of rights regarding the personal information we hold about you.
You have the right to request a copy of the personal data we hold about you at any time. To make an access request, contact our support team with your registered account details and we will respond within the timeframe required by Philippine law. We may ask you to verify your identity before releasing any information to ensure that data is only disclosed to the account holder. Access requests are processed free of charge in most circumstances, though a reasonable fee may apply for repeated or excessive requests. We will provide the information in a clear and understandable format, and we will explain how it is being used.
If any of the personal information we hold about you is inaccurate, incomplete, or out of date, you have the right to request that we correct it without undue delay. You can update basic account details such as your contact number or address directly through your account settings on the platform. For changes to identity documents or other verified information, please contact the support team and provide the relevant updated documentation. We will confirm once the correction has been made and will notify any third parties who received the incorrect data where this is practicable. Keeping your information accurate helps ensure that payments and account communications reach you without disruption.
You may request the deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected or when you withdraw consent and there is no other legal basis for processing. However, we are required by Philippine law and our operating licence to retain certain records — including transaction histories and identity verification documents — for a minimum period after account closure, and erasure requests cannot override these legal obligations. Where erasure is possible, we will action your request promptly and confirm once the data has been removed from our active systems. Residual copies in backup systems are deleted in line with our standard data retention schedule. If your erasure request cannot be fulfilled in full, we will explain the specific legal reason for retaining the relevant data.
You have the right to object to the processing of your personal data in situations where we are relying on legitimate interests as the legal basis, including any profiling carried out for that purpose. You may also withdraw consent for marketing communications at any time without affecting the lawfulness of processing that took place before the withdrawal. To exercise your right to object, contact the support team with a clear description of the processing activity you are objecting to and the reasons for your objection. We will review your request and either cease the processing or provide compelling legitimate grounds that override your interests. Objecting to certain types of processing may affect your ability to use some features of the platform, and we will inform you of any such impact before acting on your request.
We retain personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine laws and regulations. Account information and transaction records are typically retained for a minimum of five years following account closure, in line with anti-money laundering and gaming regulatory requirements. Identity verification documents are held for the same minimum period to support any regulatory audit or investigation that may arise after an account is closed. Technical logs and session data are retained for shorter periods — generally between three and twelve months — depending on their operational purpose. Marketing consent records are kept for as long as you remain a registered player and for a reasonable period after account closure to demonstrate compliance. Once the applicable retention period has expired, personal data is securely deleted or anonymised so that it can no longer be linked to you. If you have questions about the specific retention period for any category of data, please contact the support team.
The otso platform uses cookies and similar tracking technologies to maintain your session, remember your preferences, and gather anonymised analytics that help us improve performance for players across the Philippines. Essential cookies are required for the platform to function and cannot be disabled, while optional analytics cookies can be managed through your browser settings. We implement industry-standard security measures including data encryption in transit and at rest, access controls, and regular security assessments to protect your personal information from unauthorised access, disclosure, or loss. Despite these measures, no online platform can guarantee absolute security, and you are encouraged to use a strong, unique password and to log out of your account when using shared devices. This Privacy Policy may be updated from time to time to reflect changes in our practices, legal requirements, or platform features, and the revised version will be published on this page with the effective date clearly indicated. Continued use of the platform after a policy update constitutes your acceptance of the revised terms. If you have any concerns about how your data is handled, you may also lodge a complaint with the National Privacy Commission of the Philippines.
If you have any questions about this Privacy Policy or how otso handles your personal information, visit our FAQ page for plain-language answers or log in to manage your account settings directly.