Privacy Policy – www nustar Philippines

1. Introduction

Welcome to the www nustar Privacy Policy. This document describes how www nustar ("we," "us," "the Platform") collects, uses, stores, and protects the personal information of players who register and use our online casino and sports betting services in the Philippines.

This Privacy Policy applies to all users of the www nustar platform, including visitors who browse without registering, players who create accounts, and players who have since closed their accounts but whose data is retained for regulatory compliance purposes.

This policy is written to comply with Republic Act 10173, the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations, which govern the processing of personal data of individuals in the Philippines. Where additional obligations arise from other applicable regulations — such as anti-money laundering rules requiring identity verification — this policy reflects those requirements as well.

If you have questions about how www nustar handles your personal data before you register, the support team at support@wwwnustar.com or the Data Privacy Officer contact in Section 16 are available to help.

2. Who Controls Your Data

www nustar is the data controller for all personal data collected from players through the platform. As data controller, www nustar determines the purposes and means of processing your personal information and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently in accordance with applicable Philippine law.

www nustar has appointed a Data Privacy Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Privacy Policy. Contact details for the DPO are provided in Section 16 of this document.

3. Personal Data We Collect

www nustar collects personal data in the following categories. We only collect information that is necessary for the purposes described in Section 5.

3.1 Registration and identity data

• Full legal name as it appears on a government-issued Philippine ID
• Date of birth (to verify the minimum age requirement of 21 years)
• Email address
• Mobile number registered in your name
• Username and encrypted password
• Residential address in the Philippines

3.2 Identity verification (KYC) documents

• Government-issued Philippine ID images (UMID, SSS ID, PhilHealth ID, Pag-IBIG ID, driver's licence, voter's ID, or passport)
• Proof of address documents where requested
• Source of funds documentation where required under AML obligations

3.3 Payment and financial data

• GCash or Maya account numbers registered in your name
• Bank account details for InstaPay and PESONet transfers (account name, account number, bank name)
• Masked card details for Visa and Mastercard transactions (last four digits only — full card numbers are processed by our payment processors and are not stored by www nustar)
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method used

3.4 Gaming and betting activity

• Game session history: games played, stakes placed, outcomes, timestamps
• Sports betting history: markets bet on, stake amounts, odds accepted, settlement results
• Bonus and promotion history
• Responsible gaming settings applied to your account (deposit limits, session reminders, self-exclusion status)

3.5 Technical and device data

• IP address at time of login and during active sessions
• Device type, operating system, and browser type
• Session duration and navigation data within the platform
• Geolocation data (country-level only, used to verify Philippine access)

3.6 Communications data

• Records of support conversations (live chat, email) for quality assurance and dispute resolution
• Feedback and survey responses where voluntarily provided

4. How We Collect Your Data

4.1 Data you provide directly

Most of the personal data www nustar holds about you comes directly from you — through the registration form, the KYC document upload process, the cashier when making deposits or requesting withdrawals, and your communications with the support team.

4.2 Data collected automatically

When you use the www nustar platform — whether on a browser or mobile app — certain technical data is automatically generated and recorded. This includes session logs, IP addresses, device identifiers, and in-platform navigation data. This data is collected through server logs, cookies, and similar tracking technologies described in Section 11.

4.3 Data from third parties

www nustar may receive data about you from licensed third-party identity verification providers engaged to support the KYC process, from payment processors when verifying transaction details, and from fraud detection services that cross-reference account data against known fraud patterns. Data received from third parties is treated with the same protections as data provided directly by you.

5. Why We Use Your Personal Data

www nustar uses the personal data collected for the following purposes:

• Account creation and management: Setting up your www nustar account, verifying your identity, and maintaining accurate account records.
• Transaction processing: Processing PHP deposits and withdrawals through GCash, Maya, InstaPay, bank transfer, and card payment channels.
• Identity verification (KYC) compliance: Meeting obligations under Philippine anti-money laundering law and related regulations that require www nustar to verify the identity of players before processing withdrawals and when unusual account activity is detected.
• Fraud prevention and security: Detecting and preventing fraudulent account use, payment fraud, bonus abuse, and other activities that violate the Terms and Conditions.
• Responsible gaming: Monitoring account activity to identify patterns that may indicate problem gambling behaviour, applying player-set deposit limits and self-exclusion settings, and complying with responsible gaming obligations.
• Customer support: Responding to support queries, resolving disputes, and maintaining records of communications relevant to account and transaction history.
• Platform improvement: Analysing aggregate, anonymised usage data to understand how players use the platform and improve game selection, navigation, and overall user experience.
• Legal and regulatory compliance: Retaining records as required by applicable Philippine law, responding to lawful requests from regulatory authorities, courts, and law enforcement agencies.
• Marketing communications (with consent): Sending promotional emails, bonus offers, and platform updates to players who have opted in to receive marketing communications from www nustar.

6. Legal Basis for Processing

Under Republic Act 10173, all processing of personal data must have a valid legal basis. www nustar processes your data under the following lawful bases:

• Contractual necessity: Processing required to fulfil the contract formed when you register and agree to the Terms and Conditions — including operating your account, processing deposits and withdrawals, and settling bets.
• Legal obligation: Processing required to comply with Philippine law — including AML obligations that require identity verification and transaction record-keeping.
• Legitimate interest: Processing conducted for the legitimate interests of www nustar that do not override your rights as a data subject — such as fraud detection, security monitoring, and platform analytics.
• Consent: Processing based on your freely given, specific, and informed consent — specifically for marketing communications. You can withdraw this consent at any time by updating your communication preferences in your account settings or by contacting support.

7. Who We Share Your Data With

www nustar does not sell your personal data to any third party. We share data only with the following categories of recipients, and only to the extent necessary for the purposes described in this policy:

7.1 Payment processors

Licensed payment service providers who process your GCash, Maya, InstaPay, PESONet, and card transactions. These providers receive the minimum data necessary to process your transaction — typically your account name, payment method identifier, and transaction amount. They operate under their own privacy policies and are bound by their own data protection obligations.

7.2 Identity verification providers

Licensed third-party KYC and identity verification services who cross-reference the ID documents you upload against authoritative data sources. These providers receive your name, date of birth, and ID document images for verification purposes only and may not use this data for any other purpose.

7.3 Regulatory and law enforcement authorities

Philippine government agencies, regulatory bodies, courts, and law enforcement agencies where disclosure is required by applicable law, court order, or lawful direction. www nustar will not proactively share your data with authorities beyond what is legally required.

7.4 Fraud prevention and security services

Third-party fraud detection and information security services that help www nustar identify and respond to fraudulent activity. Data shared with these providers is used solely for fraud prevention and security purposes.

7.5 IT and infrastructure providers

Hosting, cloud infrastructure, and technical support providers who may have incidental access to personal data in the course of providing services to www nustar. All such providers are contractually bound to treat your data with appropriate security measures and to use it only as directed by www nustar.

8. Cross-Border Data Transfers

Some of the third-party service providers used by www nustar may be located or operate infrastructure outside the Philippines. Where your personal data is transferred to a country other than the Philippines, www nustar takes appropriate safeguards to ensure that the transfer is conducted in accordance with Republic Act 10173 and the standards set by the National Privacy Commission.

Safeguards applied to cross-border transfers include contractual data processing agreements that bind the recipient to data protection standards equivalent to those required under Philippine law, and where available, transfers to jurisdictions that the National Privacy Commission recognises as providing an adequate level of data protection.

If you would like more information about specific cross-border transfers and the safeguards in place, you may contact the www nustar Data Privacy Officer at the details in Section 16.

9. How Long We Keep Your Data

www nustar retains your personal data for as long as is necessary to fulfil the purposes described in this policy, comply with applicable legal obligations, resolve disputes, and enforce agreements. The following retention principles apply:

• Active account data: Retained for the duration of your registration with www nustar, updated as your account information changes.
• Transaction records: Retained for a minimum of five years from the date of each transaction to comply with Philippine AML record-keeping requirements.
• KYC documents: Retained for a minimum of five years after the closure of your account or the completion of the relevant transaction, whichever is later.
• Support communications: Retained for a minimum of three years to support dispute resolution and quality assurance review.
• Marketing consent records: Retained for as long as necessary to demonstrate that your consent was properly obtained, and for a reasonable period after consent is withdrawn.
• Technical and log data: Generally retained for 12 months unless a specific security investigation requires longer retention.

When data is no longer required for any active purpose and the applicable retention period has expired, www nustar will securely delete or anonymise the data. Anonymised data that can no longer identify you individually may be retained for longer periods for aggregate analytical purposes.

10. How We Protect Your Data

www nustar applies technical and organisational security measures appropriate to the nature and volume of personal data it holds. These measures include:

• Encryption in transit: All data transmitted between your device and the www nustar platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Never access your www nustar account over an unsecured public Wi-Fi connection without a VPN.
• Encryption at rest: Sensitive personal data stored in www nustar systems — including ID document images and financial data — is encrypted at rest using strong encryption standards.
• Access controls: Access to personal data within www nustar is restricted to staff with a documented need to process that data for their specific role. Access is managed through role-based permissions and logged for audit purposes.
• Regular security reviews: The www nustar platform and its data infrastructure are subject to regular security assessments to identify and address vulnerabilities before they can be exploited.
• Incident response: www nustar maintains a documented data breach response procedure. In the event of a security incident that affects your personal data, www nustar will notify the National Privacy Commission and affected players in accordance with the timelines required under Republic Act 10173.

11. Cookies & Tracking Technologies

www nustar uses cookies and similar technologies to operate the platform, improve your experience, and support security functions. The table below describes the categories of cookies used.

Most browsers allow you to manage cookie settings — refer to your browser's help documentation for instructions. Note that disabling essential cookies will prevent you from logging in to your www nustar account.

12. Your Data Rights Under Philippine Law

As a data subject under Republic Act 10173, you have the following rights with respect to your personal data held by www nustar. To exercise any of these rights, contact the Data Privacy Officer at the details in Section 16.

If you are not satisfied with how www nustar has handled a data rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph).

13. Minors

www nustar does not knowingly collect personal data from persons under the age of 21. The platform is intended exclusively for adults who meet the minimum age requirement. If www nustar becomes aware that a registered account is operated by a person under 21, the account will be immediately suspended and the matter will be handled in accordance with the Terms and Conditions and applicable regulations.

If you believe that a minor may have registered an account at www nustar or may be accessing your account, contact support immediately at support@wwwnustar.com. The team will prioritise the review and take appropriate action.

14. Marketing Communications

www nustar may send you promotional emails, SMS notifications, and in-platform messages about new games, sports betting markets, promotions, and platform updates — but only if you have given your consent to receive these communications during registration or subsequently in your account settings.

You can withdraw consent for marketing communications at any time by:

• Updating your communication preferences in your www nustar account settings
• Clicking the unsubscribe link in any marketing email
• Contacting support at support@wwwnustar.com with a clear request to unsubscribe

Withdrawing consent for marketing communications does not affect transactional messages — www nustar will continue to send you messages directly related to your account activity, such as deposit confirmations, withdrawal notifications, and account security alerts, regardless of your marketing preferences. These messages are essential to the operation of your account.

15. Changes to This Privacy Policy

www nustar may update this Privacy Policy from time to time to reflect changes in how we collect or use personal data, new legal or regulatory requirements, or changes to the platform. When we make material changes to this policy, we will:

• Post the updated policy on this page with a revised effective date
• Notify registered players via the email address on their www nustar account
• Display a notice on the platform at login where the changes are significant

We encourage you to review this Privacy Policy periodically. Continued use of the www nustar platform after the effective date of an updated policy constitutes acceptance of the changes. If you have concerns about a proposed change, contact the Data Privacy Officer before the effective date.

16. Contact Us & Data Privacy Officer

For any questions, concerns, or requests related to this Privacy Policy or your personal data held by www nustar, contact the Data Privacy Officer directly:

• Email: privacy@wwwnustar.com
• General support email: support@wwwnustar.com
• Response timeframe: Within 5 business days for general enquiries; statutory timeframes apply for formal rights requests (see Section 12)
• Language: English and Tagalog

When contacting the Data Privacy Officer about a specific rights request, include your registered email address, the nature of your request, and any relevant account reference numbers so the team can locate your records efficiently and respond within the applicable timeframe.

If you believe your data privacy rights have been violated and are not satisfied with our response, you have the right to file a complaint with the National Privacy Commission of the Philippines.