Privacy Policy

1 Introduction

olxtoto ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of all users who access or use the olxtoto website and associated services (collectively, the "Platform"). This Privacy Policy describes our practices regarding the collection, use, storage, sharing, and protection of your personal information.

This Privacy Policy applies to all registered users, visitors, and any other individuals whose personal data is processed by olxtoto in connection with the Platform. It should be read alongside our Terms & Conditions, which govern your use of the Platform.

By registering for an olxtoto account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform.

olxtoto operates in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC).

2 Personal Data We Collect

olxtoto collects the following categories of personal data, depending on how you interact with the Platform:

olxtoto does not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, unless specifically required for responsible gaming assessments or regulatory compliance.

3 How We Collect Your Data

olxtoto collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs. See Section 8 for full details on our cookie practices.
• Third-Party Sources: Identity verification data from KYC service providers; fraud prevention data from anti-fraud partners; payment confirmation data from GCash, PayMaya, BPI, BDO, and Metrobank; and analytics data from platform performance tools.
• Publicly Available Sources: In limited circumstances, olxtoto may verify information against publicly available records to confirm identity or detect fraud.

4 How We Use Your Personal Data

olxtoto uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and manage your olxtoto account, including verifying your identity and age (21+) during registration and KYC processes.
• Service Delivery: To process deposits and withdrawals, settle bets, credit winnings, and provide access to all games and features available on the Platform, including slots, bingo, Teen Patti, Phoenix Rises, and live casino.
• Regulatory Compliance: To fulfill our obligations under Philippine law, including anti-money laundering (AML) requirements under Republic Act No. 9160, PAGCOR licensing conditions, and reporting obligations to the Anti-Money Laundering Council (AMLC).
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance through our 24/7 live chat and email support channels.
• Responsible Gaming: To monitor gaming patterns, enforce deposit and loss limits, process self-exclusion requests, and identify users who may be at risk of problem gambling.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given your explicit consent. You may opt out at any time through your account settings.
• Platform Improvement: To analyze usage patterns, conduct A/B testing, and improve the overall performance, design, and features of the olxtoto Platform.
• Legal Proceedings: To establish, exercise, or defend legal claims in connection with disputes or regulatory investigations.

5 Legal Basis for Processing

olxtoto processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual Necessity: Processing is necessary to perform the contract between you and olxtoto — specifically, to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Processing is required to comply with applicable Philippine laws and regulations, including AML obligations, PAGCOR licensing requirements, and tax reporting duties.
• Legitimate Interests: Processing is necessary for olxtoto's legitimate interests in preventing fraud, ensuring platform security, improving our services, and conducting responsible gaming monitoring — provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and non-essential cookies, olxtoto relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing & Disclosure

olxtoto does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and age verification services used to confirm your identity and comply with regulatory requirements.
• Fraud Prevention Partners: Anti-fraud and risk management service providers who help olxtoto detect and prevent unauthorized or suspicious activity on the Platform.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where disclosure is required by law, court order, or regulatory directive.
• Technology Service Providers: Cloud hosting, data storage, analytics, and customer support platform providers who process data on our behalf under strict data processing agreements.
• Legal Advisors: External legal counsel engaged by olxtoto in connection with disputes, regulatory matters, or corporate transactions, subject to professional confidentiality obligations.

All third parties with whom olxtoto shares personal data are required to handle that data in accordance with applicable Philippine data protection law and olxtoto's data security standards. olxtoto remains responsible for ensuring that such third parties provide adequate protections for your personal information.

7 Data Retention

olxtoto retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements under Philippine law.
• Transaction & Gaming Records: Retained for a minimum of five (5) years from the date of each transaction, as required by PAGCOR licensing conditions and AML regulations.
• KYC Documents: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by a specific regulatory directive.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing Consent Records: Retained for as long as you remain subscribed to marketing communications, plus three (3) years following opt-out, to demonstrate compliance with consent requirements.
• Technical & Usage Data: Typically retained for up to thirteen (13) months for analytics purposes, after which it is aggregated or deleted.

When personal data is no longer required, olxtoto will securely delete or anonymize it in accordance with our internal data disposal procedures.

8 Cookies & Tracking Technologies

olxtoto uses cookies and similar tracking technologies to enhance your experience on the Platform, remember your preferences, and analyze how the Platform is used. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Used to remember your preferences, such as language settings, display options, and previously viewed games, so you don't have to reconfigure them on each visit.
• Analytics Cookies: Used to collect aggregated, anonymized data about how users interact with the Platform — such as which pages are visited most frequently and where users encounter errors. This helps olxtoto improve the Platform over time.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of olxtoto's marketing campaigns. These are only set with your explicit consent.

You can manage or disable non-essential cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

9 Data Security

olxtoto implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and the olxtoto Platform is encrypted using 256-bit SSL/TLS technology. Sensitive data stored in our systems is encrypted at rest.
• Access Controls: Access to personal data is restricted to olxtoto personnel and authorized third parties who have a legitimate need to access it. All access is logged and regularly audited.
• Firewalls & Intrusion Detection: olxtoto's infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems that monitor for suspicious activity.
• Penetration Testing: olxtoto conducts regular security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Staff Training: All olxtoto personnel who handle personal data receive regular training on data protection obligations and security best practices.
• Incident Response: olxtoto maintains a documented data breach response plan. In the event of a breach affecting your personal data, we will notify you and the National Privacy Commission (NPC) within the timeframes required by the Data Privacy Act of 2012.

While olxtoto takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You also play an important role in keeping your account safe — please use a strong, unique password for your olxtoto account and never share your login credentials with anyone.

10 Your Data Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by olxtoto:

• Right to Be Informed: You have the right to be informed about how olxtoto collects and uses your personal data — which is the purpose of this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data olxtoto holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You can update most of your account information directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to olxtoto's legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to olxtoto's overriding legitimate grounds.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Lodge a Complaint: If you believe olxtoto has not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, please contact our Data Protection Officer (DPO) using the details provided in Section 14. olxtoto will respond to all valid requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further sixty (60) days, with prior notice to you.

11 Children & Minors

The olxtoto Platform is strictly intended for adults who are 21 years of age or older, in accordance with Philippine gambling regulations. olxtoto does not knowingly collect personal data from individuals under the age of 21.

If olxtoto discovers that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, void any transactions, and delete the personal data in question in accordance with our data retention procedures.

12 Third-Party Links

The olxtoto Platform may contain links to third-party websites or services, such as payment provider portals. This Privacy Policy applies solely to the olxtoto Platform and does not cover the privacy practices of any third-party websites or services.

olxtoto is not responsible for the content, privacy policies, or data practices of any third-party websites. We encourage you to review the privacy policy of any third-party site you visit before providing any personal information.

13 Changes to This Privacy Policy

olxtoto reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will notify registered users via email or a prominent notice on the Platform at least seven (7) days before the changes take effect, where practicable.

The updated Privacy Policy will be posted on this page with a revised "Last Updated" date. Your continued use of the olxtoto Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how olxtoto protects your personal data.

14 Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the way olxtoto handles your personal data, please contact our Data Protection Officer (DPO):

If you are not satisfied with olxtoto's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.

For questions about responsible gaming or self-exclusion, please visit our Responsible Gaming page. For the full terms governing your use of the Platform, please review our Terms & Conditions.