As part of twitch's spam protection, by default, a user has to be following the user/bot for them to receive whispers that from that user/bot. That is: For UserA to receive whispers from UserB, UserA must be following UserB.
Users can toggle this in their setting:
https://www.twitch.tv/settings/security