nustargames.com Privacy Policy

1Introduction

This Privacy Policy ("Policy") explains how nustargames.com ("the Platform," "we," "us," or "our"), operated via the domain nustargamescom.app, collects, processes, stores, and protects the personal data of individuals who register as players, visit the website, or interact with any of the Platform's services ("you," "User," or "Data Subject").

nustargames.com is a Philippine-focused online casino and gaming platform serving players across Manila, Cebu, Davao, Quezon City, and the rest of the Philippines. The Platform operates with a commitment to responsible data handling that reflects both the letter and the spirit of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, hereinafter "DPA") and the implementing rules and regulations issued by the National Privacy Commission ("NPC").

This Policy applies to all personal data collected through the nustargamescom.app website, any associated mobile-optimized web interfaces, email and live chat communications with the Platform, and any other channel through which you interact with nustargames.com. By registering an account, making a deposit, or continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood its contents.

This Policy should be read in conjunction with the nustargames.com Terms & Conditions. Capitalized terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

2Data Controller Identity

For the purposes of the Philippine Data Privacy Act of 2012, nustargames.com is the Personal Information Controller responsible for the personal data collected from users of the Platform. The Platform determines the purposes for which, and the means by which, personal data is processed.

All data-related inquiries, requests to exercise data subject rights, and formal complaints regarding the handling of personal data should be directed to the Platform's designated data protection contact as specified in Section 16 of this Policy.

3Personal Data We Collect

nustargames.com collects personal data that is necessary for the provision of its services, compliance with legal obligations, and the improvement of the user experience. The categories of data collected are described below.

3.1 Registration and Account Data

When you create an account on nustargames.com, we collect:

• Full legal name
• Date of birth (for age verification in compliance with the 21+ requirement)
• Residential address in the Philippines
• Email address
• Mobile phone number
• Chosen username and encrypted password

3.2 Identity Verification (KYC) Data

Prior to processing your first withdrawal, we collect:

• Copy or photograph of a valid Philippine government-issued identification document (e.g., UMID, Driver's License, Philippine Passport, PhilSys National ID, Voter's ID, or PRC ID)
• Selfie or live photo for liveness verification where required
• Proof of address documents where additional verification is necessary

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records including amounts, timestamps, and payment channel references
• GCash account reference number or other payment method identifiers linked to your account
• Bank account details where bank transfer is the selected payment method
• Transaction history including game wagers, wins, losses, and bonus activity

3.4 Gaming and Behavioral Data

• Game session logs including games played, wager amounts, session durations, and outcomes
• Responsible gaming tool activations (deposit limits, session reminders, cooling-off periods, self-exclusion records)
• Bonus and promotion activity including offers accepted, wagering progress, and fulfillment status

3.5 Technical and Device Data

• IP address and approximate geographic location at the time of login and transaction
• Device type, operating system, and browser version
• Session identifiers and authentication tokens
• Cookies and similar tracking data as described in Section 11

3.6 Communications Data

• Content of live chat sessions with the support team
• Email correspondence with the Platform
• Complaint and dispute records

4How We Collect Your Data

nustargames.com collects personal data through the following means:

• Directly from you — through account registration forms, KYC document uploads, deposit and withdrawal requests, live chat conversations, and email correspondence.
• Automatically — through cookies, session tracking technologies, server logs, and device fingerprinting during your use of the Platform.
• From payment providers — GCash, Maya, BPI, BDO, Metrobank, and other payment channels provide transaction confirmation data necessary for processing your deposit or withdrawal.
• From identity verification services — where the Platform uses a third-party KYC provider to verify the authenticity of identity documents, that provider returns a verification result to us.
• From fraud and compliance screening tools — automated systems may check your data against relevant databases as part of our anti-money laundering and responsible gaming compliance processes.

5Purposes of Processing

nustargames.com processes personal data for the following specific purposes:

Purpose	Data Used
Account registration and management	Registration data, email, mobile number
Age and identity verification (21+ compliance)	Date of birth, government ID, selfie
Processing deposits and withdrawals	Financial data, payment method identifiers
Providing and operating gaming services	Gaming session logs, account balance data
Anti-money laundering (AML) compliance	KYC data, transaction history, IP address
Fraud prevention and security monitoring	Device data, IP address, session logs
Responsible gaming monitoring and tool activation	Gaming behavior data, self-exclusion records
Customer support and dispute resolution	Communications data, account and transaction records
Promotional communications (with consent)	Email, mobile number, gaming preference data
Platform analytics and improvement	Aggregated, anonymized behavioral and technical data
Legal and regulatory compliance	All categories as required by applicable law

6Legal Bases for Processing

Under the Philippine Data Privacy Act of 2012, nustargames.com processes personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between you and nustargames.com — i.e., to provide the gaming services you have registered for, process your transactions, and manage your account.
• Legal obligation: Processing is required to comply with applicable Philippine laws, including anti-money laundering obligations, PAGCOR-aligned responsible gaming requirements, and the Data Privacy Act itself.
• Legitimate interests: Processing is necessary for the Platform's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your rights and interests as a data subject.
• Consent: For specific processing activities — principally the sending of promotional and marketing communications — we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

7Data Sharing and Third Parties

7.1 Categories of Recipients

nustargames.com may share your personal data with the following categories of third parties, strictly on a need-to-know basis:

• Payment service providers: GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other Philippine payment processors receive transaction data necessary to process your deposit or withdrawal. These providers operate under their own privacy policies and are responsible for data they control.
• Identity verification providers: Third-party KYC service providers that process your government ID and liveness data for age and identity verification. These providers act as processors under contract with nustargames.com and may only use the data for the verification purpose.
• Game studio partners: Certified game studios providing the games available on nustargames.com receive your account session token and wager data necessary to operate the game and record the outcome. They do not receive your full identity data.
• Fraud and AML screening services: Automated compliance tools used to screen transactions and accounts against relevant regulatory databases, as required under applicable Philippine law.
• Customer support platforms: Third-party live chat or ticketing tools used to provide customer support services on behalf of nustargames.com. Data shared is limited to information necessary to resolve your support query.
• Legal and regulatory authorities: Government agencies, law enforcement bodies, or courts with jurisdiction over nustargames.com's operations when disclosure is required by law or pursuant to a valid legal order.

7.2 Processors and Sub-Processors

Where nustargames.com shares personal data with third-party service providers acting as processors, we require those providers to maintain appropriate technical and organizational security measures and to process your data only on our documented instructions. We do not authorize processors to use your personal data for their own independent purposes.

8KYC Data and Identity Documents

Identity verification documents submitted to nustargames.com as part of the KYC process are treated with an elevated standard of care as sensitive personal information under the DPA. These documents are used exclusively for age and identity verification purposes. They are stored in encrypted form, accessible only to authorized compliance team members, and are not used for any other purpose without your explicit consent.

The Platform will notify you if any additional document submission is required beyond the initial KYC review. Once KYC is successfully completed, documents are retained only for as long as required by applicable regulatory obligations (see Section 9). You will not be asked to re-submit identity documents unless account details change in a way that necessitates re-verification.

9Data Retention

nustargames.com retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of the account relationship and for a period of five (5) years following account closure, in accordance with standard financial record-keeping obligations under Philippine law.
• KYC and identity documents: Retained for a minimum of five (5) years following the date of verification, or longer if required by AML regulations or a specific regulatory instruction.
• Transaction records: Retained for five (5) years following the date of each transaction, consistent with Philippine financial record-keeping requirements.
• Gaming session logs: Retained for a rolling period of two (2) years from the date of each session, unless a longer period is required for an active dispute or investigation.
• Communications records: Live chat transcripts and email correspondence are retained for two (2) years from the date of the communication unless related to an unresolved dispute or legal proceeding.
• Technical and device data: Retained for up to twelve (12) months from the date of collection for security and fraud prevention purposes, after which it is aggregated or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be attributed to you as an individual. Anonymized or aggregated data derived from your activity may be retained indefinitely for statistical and analytical purposes.

10Security Measures

nustargames.com implements appropriate technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your browser and nustargames.com servers is encrypted using Transport Layer Security (TLS), the same protocol used by Philippine banking applications.
• Encrypted data storage: Sensitive data categories — including identity documents, payment information, and passwords — are stored in encrypted form in access-controlled server environments.
• Password security: Account passwords are stored as cryptographic hashes. Plain-text passwords are never stored or transmitted by nustargames.com. The Platform will never ask you for your password via email or chat.
• Access controls: Internal access to personal data is restricted to authorized personnel with a defined operational need. Access logs are maintained and reviewed regularly.
• Two-factor authentication: 2FA is available to all account holders as an additional layer of account security and is strongly recommended.
• Penetration testing and security audits: The Platform's security posture is reviewed periodically by qualified security professionals.
• Incident response procedures: The Platform maintains documented procedures for identifying, responding to, and notifying affected parties of personal data breaches in accordance with NPC requirements under the DPA.

11Cookies and Similar Technologies

11.1 What Cookies Are

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function correctly, to remember your preferences, and to provide aggregated information to site operators about how visitors use their services. nustargames.com uses cookies and similar technologies (including session tokens and local storage) for the following purposes:

11.2 Types of Cookies Used

• Strictly necessary cookies: These are essential for the Platform to function. They maintain your login session, preserve your language and currency settings, and enable secure account access. These cookies cannot be disabled without impairing the Platform's functionality.
• Functional cookies: These remember choices you have made — such as your last-played game category or notification preferences — to provide a more personalized experience.
• Analytics cookies: Aggregated, anonymized data about how visitors navigate the Platform is used to identify usability issues and improve the service. This data does not identify you personally.
• Security cookies: Used to detect and prevent fraudulent login attempts and to validate session integrity.

11.3 Managing Cookies

Most modern browsers allow you to manage cookie settings, including blocking or deleting cookies. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. For functional and analytics cookies, your browser settings or any consent mechanism presented on the Platform can be used to limit their use.

nustargames.com does not use third-party advertising cookies or sell cookie-derived data to advertising networks.

12Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by nustargames.com. These rights are not absolute and may be subject to limitations under applicable law or where their exercise would conflict with other legal obligations of the Platform.

• Right to Access: You may request a copy of the personal data nustargames.com holds about you, together with information about how it is being processed. Requests will be responded to within fifteen (15) business days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account details directly from your account profile settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to our legal retention obligations as described in Section 9.
• Right to Object: You may object to processing based on the Platform's legitimate interests where you have grounds relating to your particular situation. You also have an unconditional right to object to the use of your data for direct marketing at any time.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent (principally promotional communications), you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting support.
• Right to Lodge a Complaint: If you believe that nustargames.com has handled your personal data in a manner inconsistent with this Policy or the DPA, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of the above rights, please submit a written request to the data protection contact listed in Section 16. We may need to verify your identity before processing your request to protect against unauthorized access to another person's data.

13Children and Minors

nustargames.com is strictly an adult platform. The Services are available exclusively to individuals who are twenty-one (21) years of age or older, in compliance with PAGCOR regulations governing online gaming in the Philippines. The Platform does not knowingly collect personal data from individuals under the age of 21.

Age verification is a mandatory step in the account registration and KYC process. Where the Platform becomes aware that personal data has been collected from an individual who is under 21 years of age, that data will be deleted promptly, the associated account will be closed, and any funds held in the account will be handled in accordance with the nustargames.com Terms & Conditions.

14International Data Transfers

nustargames.com is a Philippine-focused platform and processes the majority of personal data within the Philippines or through service providers with operations in the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines — for example, internationally-operated game studio servers or KYC verification platforms — such transfers are conducted with appropriate safeguards to ensure that your data continues to receive a level of protection consistent with the DPA and the National Privacy Commission's requirements.

Safeguards for international transfers may include: contractual data protection clauses incorporated into agreements with service providers; ensuring that recipient countries have been assessed as providing adequate data protection; or obtaining your explicit consent for the specific transfer where required.

15Changes to This Privacy Policy

nustargames.com reserves the right to update or revise this Privacy Policy at any time in response to changes in applicable law, the Platform's data processing activities, or best practices in data protection. Material changes to this Policy will be communicated to registered Account Holders via email notification to the registered email address on file, and via a prominent notice displayed on the Platform at the time the updated Policy takes effect.

The "Last Updated" date at the top of this Policy reflects when the most recent revision was made. We encourage you to review this Policy periodically. Your continued use of nustargames.com following notification of a Policy change constitutes your acceptance of the updated terms.

16Contact & Data Protection Officer

For all data privacy-related inquiries, requests to exercise your data subject rights, or to report a suspected privacy concern, please contact the nustargames.com data protection contact using the following details:

• Email: [email protected] (plain text — not a clickable link; please include "Privacy Request" in the subject line)
• Live Chat: Available 24/7 from your logged-in nustargames.com account dashboard
• Platform: nustargamescom.app

We will acknowledge receipt of your privacy request within three (3) business days and will respond substantively within fifteen (15) business days of receiving a complete and verifiable request. Where the nature of the request requires additional time, we will notify you of the extended timeline and the reason for it.

If you are not satisfied with the response you receive from nustargames.com, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.