At otso, protecting the personal information of every Filipino player is a core responsibility. This Privacy Policy explains what data we collect, why we collect it, how it is used, and what rights you have over your own information when you use otso.bar.
A clear look at the data otso gathers, the purpose behind each type, and how it keeps your account running safely.
When you sign up on otso, we collect your full name, date of birth, email address, mobile number, and a username of your choice. This information is required to create and verify your account, confirm that you meet the minimum age requirement of 21 years, and ensure that only one account is registered per person. Your date of birth is used strictly for age verification and is never shared with third parties for marketing purposes. We may also ask for your preferred payment method details at the point of registration to streamline your first deposit experience. All registration data is stored securely using industry-standard encryption and is accessible only to authorised otso personnel. You can review and update most of your registration details at any time through your account dashboard.
To process deposits and withdrawals in Philippine pesos, otso collects payment-related information including your GCash number, Maya account details, or bank account information depending on the method you choose. We do not store full card numbers or complete banking credentials on our servers — payment processing is handled through secure, encrypted channels. Transaction records including deposit amounts, withdrawal requests, timestamps, and reference numbers are retained for regulatory compliance and to help resolve any disputes that may arise. This data is also used to detect unusual financial activity and protect your account from unauthorised transactions. You can view your full transaction history at any time from within your account. If you have questions about a specific transaction, the support team can assist you through your account dashboard.
When you access otso through your mobile browser or any other device, we automatically collect certain technical information such as your device type, operating system, browser version, IP address, and session duration. This data helps us optimise the platform for the devices most commonly used by Filipino players and identify any technical issues that may affect your experience. Usage data — including which pages you visit, how long you spend on each section, and which features you interact with — is analysed in aggregate to improve the platform's layout, navigation, and content. We do not use this data to build individual behavioural profiles for sale to advertisers. IP address information may be used to verify your location for compliance purposes and to detect suspicious login attempts. Device data is retained for a limited period and is not linked to your personal identity beyond what is necessary for security and platform improvement.
As part of our Know Your Customer (KYC) obligations, otso may request a copy of a government-issued ID — such as a Philippine passport, driver's licence, or SSS/UMID card — to verify your identity before processing large withdrawals or when flagged by our compliance system. These documents are handled with the highest level of care and are stored in an encrypted, access-controlled environment. Verification documents are used solely for identity confirmation and regulatory compliance, and are never shared with third parties except where required by Philippine law or a lawful regulatory request. Once verification is complete, documents are retained only for as long as required by applicable regulations. You will be notified through your account if a document submission is required, and the process is designed to be straightforward and completed entirely through your mobile browser.
When you contact the otso support team or submit a query through your account, we retain a record of the communication including the content of your message, the date and time it was sent, and the resolution provided. These records help us maintain consistency in the support we provide and allow us to follow up on unresolved issues effectively. Communication data is accessible only to the support and compliance teams and is not used for any marketing purpose without your explicit consent. If you have opted in to receive promotional communications from otso, you can withdraw that consent at any time through your account notification settings. We do not send unsolicited messages to players who have not opted in, and we will never ask for your password or full payment details through any communication channel. All communication records are stored securely and retained in line with our data retention policy.
If you use any of the responsible gaming tools available on otso — such as deposit limits, session reminders, or self-exclusion — we record your preferences and the dates on which they were set or modified. This data is used exclusively to enforce the limits you have chosen and to ensure that the platform respects your self-imposed restrictions at all times. Responsible gaming records are treated with particular sensitivity and are accessible only to the compliance team. If you request self-exclusion, your account status and the exclusion period are logged to prevent re-registration during that time. This information is never used for profiling or marketing purposes, and it will not affect your account standing once an exclusion period has ended and you choose to return. We encourage all players to make use of these tools — more information is available on the Responsible Gaming page.
As a player based in the Philippines, you have clear rights regarding the personal information otso holds about you.
You have the right to request a copy of the personal data that otso holds about you at any time. This includes your registration details, transaction history, communication records, and any verification documents on file. If you believe that any information we hold is inaccurate or out of date, you can request a correction through your account dashboard or by contacting the support team. We will process access and correction requests within a reasonable timeframe and will notify you once the update has been made. In cases where a correction affects your account verification status, we may need to carry out a brief re-verification process before the change takes effect. Your right to access your data is not conditional on any minimum activity level or account standing — it applies to all registered players equally.
You may request the deletion of your personal data from otso's systems, subject to our legal and regulatory obligations to retain certain records for a defined period. Where deletion is not immediately possible due to retention requirements, we will restrict the use of your data to compliance purposes only and delete it as soon as the retention period expires. You also have the right to request a portable copy of your data in a commonly used format, which you can then transfer to another service if you choose. Data portability requests will be fulfilled within a reasonable timeframe, and you will be notified when your data package is ready. Please note that requesting deletion of your account data will result in the closure of your otso account, and any remaining balance will be processed in accordance with our withdrawal policy. To submit a deletion or portability request, contact the support team through your account dashboard.
otso uses industry-standard security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. All data transmitted between your device and our servers is encrypted using secure protocols, and sensitive information such as payment details and identity documents is stored in access-controlled, encrypted environments. Our internal access controls ensure that only authorised personnel can view personal data, and only to the extent necessary for their role. We conduct regular security reviews and update our systems to address emerging threats. In the unlikely event of a data breach that affects your personal information, we will notify you promptly and take immediate steps to contain and remediate the incident in accordance with applicable Philippine data protection regulations. You can help keep your account secure by using a strong, unique password and never sharing your login credentials with anyone — otso will never ask for your password through any channel outside the secure login page.
If you have any questions about how otso handles your personal data, or if you would like to exercise any of your data rights, the support team is ready to help. You can also visit the FAQ for quick answers to common privacy and account questions.