nusstar Privacy Policy

This Privacy Policy applies to all personal data collected and processed by nusstar in connection with the operation of the nusstar online gaming platform accessible at nusstar.net and any associated mobile-optimised pages or services (collectively, "the Platform").

nusstar acts as the data controller in respect of all personal data collected through the Platform. As data controller, nusstar is responsible for determining the purposes and means of processing your personal data and for ensuring that such processing is carried out lawfully, fairly, and transparently.

This Privacy Policy should be read alongside the nusstar Terms and Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and nusstar. Capitalised terms not defined herein have the meanings given to them in the Terms and Conditions.

If you have any questions about this Privacy Policy or about how nusstar handles your personal data, please contact us at [email protected].

nusstar collects the following categories of personal data from Players:

nusstar does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data unless specifically required by law and with your explicit consent.

nusstar collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access and use the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Data received from payment processors (such as GCash and Maya) for transaction verification, and from identity verification service providers for KYC compliance purposes.
• Regulatory sources: Data received from regulatory authorities, law enforcement agencies, or other government bodies where required by applicable Philippine law.

nusstar uses your personal data for the following purposes:

• To create, verify, and manage your nusstar account
• To process deposits, withdrawals, and other financial transactions
• To verify your identity and age in compliance with KYC and AML obligations
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities
• To provide customer support and resolve disputes
• To send you account-related communications, including transaction confirmations, security alerts, and policy updates
• To monitor your gaming activity for responsible gaming purposes and to apply any limits or restrictions you have requested
• To personalise your experience on the Platform, including game recommendations and promotional offers where you have consented to receive them
• To analyse Platform usage and improve our services, security, and user experience
• To comply with applicable Philippine laws, regulations, and regulatory requirements

nusstar will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable law.

nusstar processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012 (Republic Act 10173):

• Contractual necessity: Processing required to perform our contract with you, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including AML obligations, KYC requirements, and gaming regulatory requirements.
• Legitimate interests: Processing necessary for nusstar's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, such as for marketing communications and optional personalisation features. You may withdraw your consent at any time by contacting us at [email protected].

nusstar does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors: GCash, Maya, and Philippine banking partners, for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers engaged to assist with age and identity verification in compliance with regulatory requirements.
• IT and platform service providers: Cloud hosting, data storage, and cybersecurity providers who process data on our behalf under strict data processing agreements.
• Regulatory authorities: PAGCOR and other Philippine government agencies, where disclosure is required by law or regulatory instruction.
• Law enforcement: Philippine law enforcement agencies, where disclosure is required by a valid legal order or where necessary to prevent or investigate criminal activity.

All third-party service providers who process personal data on behalf of nusstar are required to implement appropriate technical and organisational security measures and are prohibited from using your data for any purpose other than those specified in their agreements with nusstar.

nusstar uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. We use the following types of cookies:

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform. For instructions on managing cookies in your specific browser, please refer to your browser's help documentation.

nusstar implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform
• Encryption of sensitive data at rest, including financial data and identity documents
• Multi-factor authentication options for Player accounts
• Regular security audits and penetration testing by independent security professionals
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Real-time intrusion detection and monitoring systems
• Secure data backup and disaster recovery procedures

While nusstar takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, nusstar will notify you and the National Privacy Commission in accordance with the requirements of the Philippine Data Privacy Act.

You also have a role to play in keeping your account secure. Please use a strong, unique password for your nusstar account, enable multi-factor authentication where available, and never share your login credentials with anyone.

nusstar retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, as required by Philippine AML regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with Philippine financial record-keeping requirements.
• KYC and identity verification documents: Retained for the duration of your account and for five (5) years following account closure.
• Customer support communications: Retained for three (3) years from the date of the communication, or longer if related to an ongoing dispute or regulatory matter.
• Technical and usage data: Retained for up to two (2) years from the date of collection, unless required for longer for security or fraud investigation purposes.

Upon expiry of the applicable retention period, nusstar will securely delete or anonymise your personal data in accordance with industry best practices. Where data is anonymised rather than deleted, the anonymised data may be retained indefinitely for analytical purposes as it can no longer be linked to you as an individual.

Under the Philippine Data Privacy Act of 2012 (Republic Act 10173), you have the following rights in respect of your personal data held by nusstar:

To exercise any of these rights, please contact nusstar at [email protected] with the subject line "Data Rights Request". nusstar will respond to all verified requests within thirty (30) days of receipt. We may need to verify your identity before processing your request.

If you are not satisfied with nusstar's response to your data rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

nusstar is strictly an adult gaming platform. The minimum age to register and use nusstar is 21 years, in accordance with Philippine gaming regulations. nusstar does not knowingly collect personal data from individuals under the age of 21.

If nusstar becomes aware that personal data has been collected from a person under the age of 21, the relevant account will be immediately suspended, all personal data associated with that account will be securely deleted, and any funds deposited will be returned to the payment source.

If you believe that a person under the age of 21 has registered on nusstar, please notify us immediately at [email protected] so that we can take appropriate action without delay.

nusstar's primary data processing operations are conducted within the Philippines. Where it is necessary to transfer personal data outside the Philippines — for example, to cloud infrastructure providers or international payment processors — nusstar ensures that appropriate safeguards are in place.

Such safeguards may include contractual clauses approved by the National Privacy Commission, adequacy decisions, or other mechanisms recognised under the Philippine Data Privacy Act and its implementing rules and regulations. nusstar will not transfer your personal data to a jurisdiction that does not provide an adequate level of data protection without first implementing appropriate safeguards and, where required, obtaining your consent.

nusstar reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The effective date at the top of this page will be updated whenever a material change is made.

Where changes are material, nusstar will notify you via the email address registered to your account and/or by displaying a prominent notice on the Platform prior to the changes taking effect. We encourage you to review this Privacy Policy periodically to stay informed about how nusstar protects your personal data.

Your continued use of the nusstar Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you must cease using the Platform and may request account closure in accordance with the nusstar Terms and Conditions.

If you have any questions, concerns, or complaints about this Privacy Policy or about how nusstar handles your personal data, please contact our Data Protection team:

Email: [email protected]
Subject line: Privacy Enquiry

nusstar will acknowledge all privacy-related enquiries within 48 hours and will provide a substantive response within thirty (30) days of receipt. For complex requests, we may require additional time and will notify you accordingly.

If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. Information about how to file a complaint with the National Privacy Commission is available on their official website.