otsobet Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how otsobet ("the Platform," "we," "us," "our") collects, uses, stores, shares, and protects the personal information of individuals ("you," "Player," "User") who access or use the otsobet website at otsobet.club and any associated services.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations. By registering an account or using any service on the otsobet platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside the Terms & Conditions, which govern your use of the Platform. In the event of any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall prevail.

2. Data Controller

otsobet is the data controller responsible for the personal information collected through the Platform. As data controller, we determine the purposes and means of processing your personal data and are accountable for ensuring that such processing complies with applicable Philippine data privacy laws.

For all data privacy inquiries, requests, and complaints, you may contact us at: [email protected]

3. Personal Data We Collect

otsobet collects the following categories of personal data, depending on how you interact with the Platform:

We do not collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance. We do not collect information about your religious beliefs, political opinions, or health status unless directly relevant to a responsible gaming assessment you have voluntarily initiated.

4. How We Collect Your Data

otsobet collects personal data through the following means:

• Direct interactions: Information you provide when registering an account, completing KYC, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including via cookies, web beacons, and server logs.
• Third-party sources: Identity verification providers, payment processors (e.g., GCash, Maya, partner banks), and fraud prevention services may share data with us as part of their service delivery.
• Publicly available sources: In limited circumstances, we may verify information against publicly available Philippine government databases for KYC purposes.

5. How We Use Your Personal Data

otsobet uses your personal data for the following purposes:

• To create, manage, and maintain your player account on the Platform
• To verify your identity and age (21+ requirement) in compliance with Philippine gaming regulations
• To process deposits and withdrawals via approved Philippine payment methods
• To detect, investigate, and prevent fraud, money laundering, and other illegal activities
• To comply with anti-money laundering (AML) obligations under Philippine law
• To provide customer support and resolve disputes
• To monitor gameplay for responsible gaming purposes and apply account restrictions where necessary
• To send transactional communications (account confirmations, withdrawal notifications, security alerts)
• To send marketing communications, where you have provided explicit consent
• To improve Platform performance, user experience, and game offerings through aggregated analytics
• To comply with orders or requests from PAGCOR, the National Privacy Commission, or other competent Philippine authorities

6. Legal Basis for Processing

Under the Data Privacy Act of 2012, otsobet processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfill our obligations under the Terms & Conditions, including account management, payment processing, and KYC verification.
• Legal obligation: Processing required to comply with Philippine laws, including AML regulations, PAGCOR licensing requirements, and tax reporting obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and optional personalization features, where you have provided freely given, specific, and informed consent. You may withdraw this consent at any time.

7. Data Sharing & Disclosure

otsobet does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, Maya, BPI, BDO, UnionBank, Metrobank, Landbank, PNB, Security Bank, and other approved Philippine payment partners, for the purpose of processing your financial transactions.
• Identity verification providers: Third-party KYC and AML compliance service providers who assist in verifying your identity and screening against watchlists.
• Technology and hosting providers: Cloud infrastructure and software vendors who process data on our behalf under strict data processing agreements.
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other competent Philippine government bodies, where required by law or court order.
• Professional advisors: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third-party service providers who process personal data on behalf of otsobet are bound by data processing agreements that require them to maintain appropriate security measures and process data only for the specified purpose.

8. Data Retention

otsobet retains your personal data for as long as your account is active and for a period thereafter as required by applicable Philippine law. Specific retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• KYC documents: Retained for a minimum of five (5) years after the end of the business relationship.
• Customer support communications: Retained for three (3) years from the date of the interaction.
• Marketing consent records: Retained for the duration of your consent and for one (1) year after withdrawal of consent.
• Technical and usage logs: Retained for up to twelve (12) months for security and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our internal data disposal procedures.

9. Security Measures

otsobet implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at rest: Sensitive personal data stored in our databases is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data is restricted to authorized personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Intrusion detection: Our infrastructure is monitored 24/7 for suspicious activity using automated intrusion detection and prevention systems.
• Regular security audits: We conduct periodic security assessments and penetration testing to identify and remediate vulnerabilities.
• Staff training: All otsobet personnel with access to personal data receive regular data privacy and security training.

While we take all reasonable precautions to protect your data, no system is completely immune to security risks. In the event of a personal data breach that is likely to result in harm to affected individuals, otsobet will notify the National Privacy Commission and affected players in accordance with the Data Privacy Act of 2012 and NPC Circular No. 16-03.

10. Cookies & Tracking Technologies

otsobet uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit our website. We use the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences (e.g., language, display settings) to improve your experience. These are enabled by default but can be disabled.
• Analytics cookies: Collect aggregated, anonymized data about how players use the Platform to help us improve performance and content. These require your consent.
• Responsible gaming cookies: Track session duration and activity to support responsible gaming features such as reality checks and session time limits.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. otsobet does not use third-party advertising cookies or cross-site tracking technologies.

11. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by otsobet:

• Right to be informed: The right to know what personal data we collect, how we use it, and with whom we share it — as set out in this Policy.
• Right of access: The right to request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. You may update most account information directly through your account dashboard.
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations (e.g., AML record-keeping requirements).
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our support team at [email protected]. We will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request.

12. Minors and Age Restriction

Parents and guardians who believe that a minor may have registered on the otsobet Platform are encouraged to contact us immediately at [email protected] so that we can take prompt action.

13. Changes to This Privacy Policy

otsobet reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. Material changes will be communicated to registered players via email or an in-platform notification at least seven (7) days before the changes take effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically.

14. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by otsobet, please contact us:

Data Privacy Officer — otsobet
Email: [email protected]
Available 24/7. Typical response time: within 24 hours for privacy-related requests.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the government body responsible for administering and implementing the Data Privacy Act of 2012.