nusstar Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how nusstar ("nusstar," "we," "us," "our"), the operator of the online gaming platform accessible at nusstar.vip, collects, uses, stores, shares, and protects personal data relating to individuals who visit, register on, or use the nusstar platform ("Users," "Players," "you").

This Policy applies to all personal data processing activities carried out by nusstar in connection with the provision of gaming services, wallet management, customer support, promotional activities, and regulatory compliance functions. It covers data collected through the nusstar website, mobile browser access, and any associated communication channels including email and SMS.

This Policy is to be read in conjunction with nusstar's Terms & Conditions and Responsible Gaming Policy, both of which form part of nusstar's overall framework governing the player relationship.

By accessing or using the nusstar platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, nusstar acts as the personal information controller with respect to the personal data of its registered players and website visitors.

nusstar's designated Data Protection Officer (DPO) may be contacted at [email protected] for all privacy-related inquiries, requests, and complaints. Correspondence marked for the attention of the DPO will be prioritised and responded to within ten (10) business days.

3. Personal Data We Collect

nusstar collects personal data in the following categories, depending on the nature of your interaction with the platform:

nusstar does not intentionally collect sensitive personal information (as defined under RA 10173) beyond what is strictly required for identity verification and regulatory compliance purposes. nusstar does not collect biometric data.

4. How nusstar Uses Your Personal Data

nusstar processes personal data for the following specific purposes:

• Account Registration and Management: Creating and maintaining your nusstar player account, verifying your identity, and enabling nusstar Login access.
• KYC and Age Verification: Confirming that you meet the minimum age requirement of 21 years as mandated by PAGCOR regulations and applicable Philippine law.
• Payment Processing: Facilitating deposits via GCash, Maya, BPI, BDO, Metrobank, UnionBank, 7-Eleven Cliqq, USDT TRC20, and Coins.ph, and processing withdrawal requests to your registered payment account.
• Regulatory Compliance: Meeting obligations under PAGCOR licensing conditions, Anti-Money Laundering Council (AMLC) reporting requirements, and the Data Privacy Act. This includes transaction monitoring and suspicious activity reporting.
• Game Provision and Integrity: Delivering gaming services from our provider partners, maintaining game fairness logs, and investigating disputes.
• Customer Support: Responding to queries, complaints, and account issues submitted via email or support channels.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling indicators and administering self-exclusion, cooling-off, and deposit limit tools.
• Promotional Communications: Sending bonus offers, promotions, and platform updates to players who have consented to receive such communications. You may withdraw consent at any time.
• Platform Security and Fraud Prevention: Detecting and preventing unauthorised access, account fraud, bonus abuse, money laundering, and other prohibited activities.

5. Legal Bases for Processing

nusstar processes personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing necessary for the performance of the agreement between nusstar and the player — including account creation, gaming services, and payment processing.
• Legal Obligation: Processing required to comply with PAGCOR regulations, AMLC reporting obligations, and other applicable Philippine legal requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and analytics, where these interests are not overridden by the player's rights.
• Consent: Processing for direct marketing communications, where you have provided explicit opt-in consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Third-Party Disclosure

nusstar does not sell, rent, or trade your personal data to any third party for commercial purposes. nusstar shares personal data only in the following limited circumstances:

• Game Providers: Licensed third-party game studios (including JILI, PG Soft, Pragmatic Play, and others) receive limited technical data (session tokens, bet data) necessary to deliver game services. These providers are bound by confidentiality obligations and applicable data protection requirements.
• Payment Processors: GCash, Maya, BPI, BDO, and other payment providers receive the transaction data necessary to process deposits and withdrawals. All payment partners operate under their own privacy policies and applicable Bangko Sentral ng Pilipinas (BSP) regulations.
• Regulatory Authorities: nusstar may disclose personal data to PAGCOR, the AMLC, the National Privacy Commission, law enforcement agencies, and other competent Philippine government authorities when required by law, court order, or regulatory directive.
• Professional Advisers: Legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations and who require access to data in the performance of their services.
• Service Providers: Cloud hosting, IT infrastructure, and cybersecurity service providers who process data on nusstar's behalf under data processing agreements that impose obligations equivalent to those in this Policy.

7. Cookies & Tracking Technologies

nusstar uses cookies and similar tracking technologies on the nusstar.vip website. These technologies serve the following functions:

• Essential Cookies: Required for the platform to function. These maintain your nusstar Login session, remember language preferences, and enable security features. They cannot be disabled without affecting platform functionality.
• Analytics Cookies: Used to understand how players interact with the platform — which pages are visited most frequently, how players navigate between sections, and where errors occur. This data is aggregated and anonymised.
• Functionality Cookies: Remember your preferences (e.g., preferred game category, display settings) to enhance your experience across sessions.

You may control cookie preferences through your browser settings. Blocking essential cookies will impair platform functionality including nusstar Login sessions. nusstar does not use cookies for third-party advertising targeting.

8. Data Security

nusstar implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• HTTPS/TLS encryption for all data transmitted between your device and the nusstar platform
• Encrypted storage of passwords and sensitive account credentials using industry-standard hashing algorithms
• Two-factor authentication (SMS OTP) available for nusstar Login sessions
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Regular security assessments and vulnerability testing of platform infrastructure
• Incident response procedures for data breach detection, containment, and notification

In the event of a personal data breach that is likely to prejudice your rights and freedoms, nusstar will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players as required by RA 10173.

While nusstar employs robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your nusstar Login credentials and for notifying nusstar promptly if you suspect unauthorised account access.

9. Data Retention

nusstar retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal and regulatory retention requirements:

• Account Data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, as required by AMLC record-keeping regulations.
• Transaction and Financial Records: Retained for a minimum of five (5) years in compliance with AMLC reporting obligations under Republic Act No. 9160 (Anti-Money Laundering Act) as amended.
• KYC Documents: Retained for five (5) years following the end of the player relationship or as otherwise required by applicable PAGCOR conditions.
• Support Correspondence: Retained for two (2) years following resolution of the relevant query or complaint.
• Technical and Analytics Data: Retained in anonymised or aggregated form for platform improvement purposes, with personally identifiable elements deleted after thirteen (13) months.

10. Children's and Minors' Privacy

The nusstar platform is strictly intended for individuals aged 21 years and older, as required by Philippine law and PAGCOR regulations governing online gaming. nusstar does not knowingly collect personal data from individuals under the age of 21.

Age verification is conducted as part of the KYC process for all nusstar accounts. Accounts found to belong to individuals under 21 years of age will be immediately closed, any deposits returned to the funding source, and all associated data deleted except where retention is required for regulatory reporting purposes.

If you have reason to believe that a minor has registered on the nusstar platform, please contact us immediately at [email protected].

11. Exercising Your Privacy Rights

To exercise any of your rights under the Philippine Data Privacy Act of 2012, submit a written request to nusstar's Data Protection Officer at [email protected]. Include in your request: your full name as registered on your nusstar account, your registered mobile number, and a description of the right you wish to exercise.

For security purposes, nusstar may require identity verification before processing privacy rights requests. nusstar will respond to all rights requests within thirty (30) calendar days of receipt. Where a request is particularly complex or requires coordination with third-party processors, nusstar may extend this period by a further thirty (30) days with written notice to the requester.

12. Cross-Border Data Transfers

nusstar's primary data processing infrastructure is operated within the Philippines. Certain data processing activities — including cloud hosting services and game provider integrations — may involve transfer of personal data to servers or processors located outside the Philippines.

Where such cross-border transfers occur, nusstar ensures that adequate data protection safeguards are in place, consistent with the requirements of the Data Privacy Act and relevant NPC issuances. This may include contractual data processing agreements, adequacy determinations, or other appropriate transfer mechanisms recognised under Philippine data protection law.

13. Amendments to This Policy

nusstar reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, or nusstar's data processing practices. Material amendments will be communicated to registered players via the registered email address or an in-platform notification at least fourteen (14) days before taking effect.

The effective date of the current version of this Policy is stated at the top of this page. Continued use of the nusstar platform following the effective date of any amendment constitutes acceptance of the updated Policy.

14. Contact & Data Protection Officer

For all privacy-related inquiries, rights requests, or complaints, please contact nusstar's Data Protection Officer:

If you are not satisfied with nusstar's response to a privacy complaint, you may escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the competent supervisory authority for data privacy matters under RA 10173.