otso888 Privacy Policy

Welcome to the otso888 Privacy Policy. otso888 is a PAGCOR-regulated online gaming platform operating under Philippine law and accessible at otso888.net. We understand that your personal information is sensitive, and we take our obligations as a data controller very seriously.

This Privacy Policy describes in clear, plain language how otso888 collects, processes, stores, shares, and protects your personal data when you access or use our platform — whether you are browsing anonymously, registering a new account, depositing funds via GCash or Maya, placing bets on JILI slots or live casino games, or contacting our Filipino support team.

This policy applies to all Filipino players and visitors across Metro Manila, Cebu, Davao, Quezon City, Makati, and every region of the Philippines who interact with the otso888 website or any related service. It should be read alongside our Terms & Conditions and Responsible Gaming Policy.

For the purposes of the Data Privacy Act of 2012 and all applicable Philippine data protection regulations, the data controller responsible for your personal information is:

As data controller, otso888 determines the purposes and means by which your personal data is processed. We have appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and liaising with the National Privacy Commission on all data protection matters. You may contact the DPO directly at the email address shown above.

otso888 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with our platform, and in limited cases from third-party verification and payment providers. The categories of personal data we collect are set out in the table below.

otso888 processes your personal data only for specific, legitimate purposes that are directly related to the operation of our PAGCOR-regulated gaming platform and our obligations under Philippine law. We do not process your data for any purpose incompatible with those listed below.

• Account Registration & Verification: To create and manage your otso888 player account, verify your identity and age (21+ requirement), and authenticate your login sessions.
• KYC & AML Compliance: To fulfill our Know Your Customer obligations and comply with the Anti-Money Laundering Act (AMLA) of the Philippines as administered by the Anti-Money Laundering Council (AMLC), and PAGCOR's AML program requirements.
• Payment Processing: To process deposits via GCash, Maya, QR Ph, GrabPay, BPI, BDO, Metrobank, InstaPay, and 7-Eleven, and to process withdrawal requests to your verified payment method.
• Platform Operations: To provide, maintain, and improve the gaming platform, including game delivery, session management, wallet balance maintenance, and customer support.
• Responsible Gaming: To monitor gaming behavior for signs of problem gambling, enforce self-exclusion requests, apply deposit and session limits, and comply with PAGCOR responsible gaming mandates.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, multi-accounting, bonus abuse, and other prohibited conduct described in our Terms & Conditions.
• Legal & Regulatory Obligations: To comply with requests from PAGCOR, the AMLC, the NPC, and any other competent Philippine regulatory or law enforcement authority.
• Marketing Communications (with consent): To send you promotional offers, bonus notifications, and platform updates via email or SMS, where you have opted in. You may withdraw this consent at any time through your account settings or by contacting support.
• Analytics & Platform Improvement: To analyze aggregated, anonymized usage data for purposes of improving the user experience, game selection, and platform performance.

otso888 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your data only in the following limited circumstances, and only to the extent necessary for each specific purpose:

• Payment Processors: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, Metrobank, GrabPay, InstaPay network operators, and 7-Eleven CLiQQ — to process your deposits and withdrawals. Each processor operates under their own privacy policy and Philippine BSP regulations.
• Game Providers: JILI Games, PG Soft, Pragmatic Play, Evolution Gaming, and other certified studios — limited technical session data is shared to facilitate game delivery and resolve game outcome disputes.
• Identity Verification Providers: Third-party KYC and AML screening services used to verify government-issued Philippine IDs and screen against sanctions lists and politically exposed persons (PEP) databases.
• Regulatory Authorities: PAGCOR, AMLC, the National Privacy Commission (NPC), and any competent Philippine court or law enforcement body, where disclosure is required by law, regulation, or a valid legal order.
• IT & Cloud Service Providers: Hosting, cloud infrastructure, cybersecurity, and analytics service providers that support the operation of the otso888 platform under strict data processing agreements (DPAs) consistent with the Data Privacy Act of 2012.
• Professional Advisors: Legal counsel, auditors, and compliance consultants where necessary for the protection of otso888's legal rights and regulatory obligations.

All third parties with whom otso888 shares personal data are required to handle that data in accordance with the Data Privacy Act of 2012 and applicable Philippine data protection standards. We do not authorize third parties to use your personal data for their own independent commercial purposes.

otso888 retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, and to comply with our legal and regulatory obligations under Philippine law. Specific retention periods are outlined below:

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymized in a manner that ensures it can no longer be linked to you as an individual. Anonymized, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

otso888 implements industry-standard technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security framework includes, but is not limited to:

• Encryption in Transit: All data transmitted between your device and the otso888 platform is encrypted using TLS 1.2 / 1.3 protocols, ensuring that your login credentials, financial data, and personal information cannot be intercepted in transit.
• Encryption at Rest: Sensitive personal data stored on otso888 servers, including KYC documents and financial records, is encrypted using AES-256 encryption at rest.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Only authorized otso888 personnel with legitimate operational or compliance needs may access personal data, under mandatory confidentiality obligations.
• Two-Factor Authentication (2FA): Available for player accounts and mandatory for all administrative staff accessing backend systems containing personal data.
• Penetration Testing & Vulnerability Scanning: Regular third-party security assessments are conducted to identify and remediate vulnerabilities in the platform infrastructure.
• Incident Response: otso888 maintains a data breach response plan in compliance with the NPC's mandatory breach notification requirements under the Data Privacy Act of 2012. In the event of a breach affecting your personal data, you will be notified within the timeframes prescribed by Philippine law.

otso888 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyze usage patterns, and support security functions. Cookies are small text files stored on your device when you access the platform. The types of cookies we use are as follows:

You may control non-essential cookies through your browser settings. Note that disabling essential cookies will affect the functionality of the platform and may prevent you from logging in or placing bets. otso888 does not use cookies for cross-site behavioral advertising or third-party retargeting purposes.

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal data held by otso888. These rights may be exercised at any time by contacting our Data Protection Officer at [email protected].

otso888 strictly complies with PAGCOR's minimum age requirement of 21 years old for online gaming in the Philippines. The platform is not directed at, and does not knowingly collect personal data from, any individual under the age of 21.

All new registrations are subject to mandatory age verification through our KYC process, which requires submission of a valid Philippine government-issued ID confirming the player's date of birth. Registration is blocked where age cannot be confirmed or where the applicant is identified as being below 21 years of age.

Parents and guardians who believe their child may have accessed the otso888 platform should contact our support team immediately at [email protected] so that appropriate action can be taken without delay.

The otso888 platform is operated primarily from and for the Philippines. However, certain service providers used in our operations — such as cloud infrastructure providers, game studios, and cybersecurity vendors — may be located outside the Philippines. Where personal data is transferred to a country outside the Philippines, otso888 ensures that such transfers comply with Section 21 of the Data Privacy Act of 2012 and NPC guidelines on cross-border data flows.

Specifically, we require that all international data recipients:

• Are located in a country deemed by the NPC to provide an adequate level of data protection; or
• Have entered into a Data Processing Agreement (DPA) with otso888 that incorporates NPC-approved standard contractual clauses; or
• Are subject to binding corporate rules or equivalent protections recognized under Philippine data protection law.

You may request details of the safeguards applied to any specific cross-border data transfer by contacting our Data Protection Officer at [email protected].

otso888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine laws and regulations, PAGCOR licensing requirements, or NPC guidance. All amendments will be posted on this page with a revised "Last Updated" date.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will provide advance notice via email to your registered address and/or a prominent notice on the platform at least 14 days before the changes take effect. Your continued use of the otso888 platform after that notice period constitutes acceptance of the updated Privacy Policy.

If you do not agree with any amendment to this Privacy Policy, you must discontinue use of the platform and may request account closure by contacting our support team. Account closure requests are processed in accordance with our Terms & Conditions.

For all privacy-related inquiries, requests to exercise your data rights, or to report a suspected data breach or privacy concern, please contact the otso888 Data Protection Officer using the details below. All communications are handled in English and Filipino.

If you are not satisfied with our response to your privacy request, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for administering and enforcing the Data Privacy Act of 2012.

• NPC Website: privacy.gov.ph (official Philippine government resource)
• NPC Complaints: Filed through the NPC's online complaints portal at privacy.gov.ph
• PAGCOR Responsible Gaming: otso888 Responsible Gaming page