nusstar Casino Privacy Policy

1 Overview & Scope

This Privacy Policy ("Policy") describes how nusstar Casino ("nusstar", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of individuals ("you", "your", "Data Subject") who access or use the nusstar platform at nusstar.org and any related mobile application or service.

This Policy is issued in compliance with the Republic Act No. 10173 — Data Privacy Act of 2012 (DPA) of the Philippines and its Implementing Rules and Regulations (IRR), as administered by the National Privacy Commission (NPC). As a PAGCOR-regulated operator, nusstar also adheres to applicable data protection requirements under PAGCOR's licensing framework.

This Policy applies to all personal data processed by nusstar in connection with the registration, operation, support, and marketing of the nusstar Casino platform for Filipino players across the Philippines, including players in Metro Manila, Cebu, Davao, Quezon City, and elsewhere in the country.

By using the nusstar platform, you acknowledge that you have read, understood, and consent to the data processing practices described in this Policy. If you do not agree, please discontinue use of the platform and contact support to request account closure.

2 Data Controller

nusstar Casino acts as the Personal Information Controller (PIC) in respect of all personal data collected and processed through the nusstar platform, as defined under Section 3(h) of Republic Act No. 10173.

nusstar has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and with the Data Privacy Act of 2012. The DPO may be contacted at the details set out in Section 14 of this Policy.

Where nusstar engages third-party service providers to process personal data on its behalf — including payment processors, identity verification services, and cloud infrastructure providers — such parties act as Personal Information Processors (PIP) under nusstar's instruction and are bound by data processing agreements that require compliance with the Data Privacy Act of 2012 and PAGCOR data security requirements.

3 Personal Data We Collect

nusstar collects personal data from you in the following categories:

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued ID;
• Date of birth (required to verify you are 21 years of age or older);
• Nationality and country of residence;
• Valid Philippine mobile number;
• Email address;
• Username chosen at registration.

3.2 KYC & Identity Verification Data

• Scanned copy or photograph of a valid government-issued Philippine ID (PhilSys, Passport, LTO Driver's License, UMID, SSS/GSIS ID, or PRC ID);
• Selfie photograph for biometric liveness verification where applicable;
• Proof of address documents where required for enhanced due diligence.

3.3 Financial Data

• GCash or PayMaya account number linked to your nusstar account;
• Bank account details for BPI, BDO, or Metrobank withdrawals;
• Transaction records including deposit amounts, withdrawal requests, and game wagering history.

3.4 Technical & Usage Data

• IP address and approximate geolocation;
• Device type, operating system, browser version;
• Session logs, login timestamps, and login location data;
• Game activity logs, including game type, wager amounts, and session duration;
• Cookie and analytics data as described in Section 7.

3.5 Communications Data

• Records of live chat, email, and SMS communications with nusstar support;
• Complaint and dispute records.

4 How nusstar Uses Your Personal Data

nusstar processes your personal data for the following purposes:

• Account registration and management: To create, maintain, and administer your nusstar player account;
• Identity and age verification: To verify that you are 21 years of age or older and to confirm your identity in compliance with PAGCOR KYC requirements;
• Payment processing: To process deposits and withdrawals via GCash, PayMaya, and Philippine bank transfers;
• Anti-money laundering compliance: To monitor transactions for suspicious activity and fulfill reporting obligations to the Anti-Money Laundering Council (AMLC) under AMLA Republic Act No. 9160 and its amendments;
• Game provision and platform operation: To deliver, personalize, and improve the gaming services available on nusstar;
• Customer support: To respond to queries, complaints, and disputes submitted to the nusstar support team;
• Responsible gaming: To monitor gaming behavior, identify potential problem gambling indicators, and administer self-exclusion and deposit limit arrangements;
• Security and fraud prevention: To detect, investigate, and prevent unauthorized access, fraud, and other malicious activity on the platform;
• Marketing communications: To send promotional offers and platform updates to players who have opted in to receive marketing communications — subject to your right to opt out at any time;
• Legal compliance: To comply with applicable Philippine law, PAGCOR regulatory requirements, and NPC obligations.

5 Legal Basis for Processing

Under the Data Privacy Act of 2012, nusstar processes your personal data on the following legal bases:

• Consent (Section 12(a) DPA): For marketing communications, cookie-based analytics, and other processing activities for which you have provided explicit consent during registration or via account settings;
• Contractual necessity (Section 12(b) DPA): For processing required to fulfill our obligations under the nusstar Terms & Conditions, including account operation, payment processing, and game provision;
• Legal obligation (Section 12(c) DPA): For processing required to comply with PAGCOR licensing requirements, AMLC reporting obligations, and other applicable Philippine law;
• Legitimate interests (Section 12(f) DPA): For fraud prevention, platform security monitoring, responsible gaming assessments, and other processing activities where nusstar's legitimate operational interests do not override your privacy rights.

6 Data Sharing & Third-Party Disclosure

nusstar does not sell your personal data to third parties. We share your personal data only in the following limited circumstances:

• Payment processors: GCash (G-Xchange Inc.), PayMaya (Maya Philippines Inc.), and Philippine banking institutions, for the purpose of processing deposits and withdrawals;
• KYC and identity verification providers: Third-party identity verification services engaged to fulfill PAGCOR KYC requirements, bound by data processing agreements;
• Game software providers: JILI, Pragmatic Play, PG Soft, and other licensed game studios require access to limited session data to deliver games — such access is governed by data processing agreements;
• Regulatory authorities: PAGCOR, AMLC, the National Privacy Commission, and other competent Philippine government agencies, where required by law or regulatory order;
• Law enforcement: Philippine law enforcement authorities, where required pursuant to a valid legal process;
• Cloud infrastructure providers: Data hosting and infrastructure partners operating servers within or accessible from the Philippines, bound by data processing agreements requiring compliance with the Data Privacy Act of 2012.

nusstar requires all Personal Information Processors to implement security measures equivalent to or exceeding those required under the Data Privacy Act of 2012 and its IRR.

7 Cookies & Tracking Technologies

The nusstar platform uses cookies and similar tracking technologies to deliver and improve the user experience. The following categories of cookies may be set when you visit nusstar.org:

• Strictly necessary cookies: Required for platform operation including session authentication, security token management, and load balancing. These cannot be disabled without impairing core functionality;
• Analytics cookies: Used to understand aggregate player behavior on the platform — including pages visited, session duration, and device type — to improve platform performance. Analytics data is anonymized or pseudonymized where possible;
• Functional cookies: Used to remember your preferences such as language settings, game lobby view, and notification preferences;
• Marketing cookies: Used to deliver relevant promotional content based on your platform activity, subject to your opt-in consent.

You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the nusstar platform.

8 Data Retention

nusstar retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following standard retention periods apply:

• Account registration and KYC data: Retained for a minimum of 5 years following account closure, in compliance with PAGCOR record-keeping requirements and AMLA obligations;
• Transaction records: Retained for a minimum of 5 years following the transaction date, in compliance with AMLC reporting requirements;
• Game activity logs: Retained for 2 years following the gaming session date, or longer where required for dispute resolution;
• Communications data: Retained for 2 years following the communication date, or longer where a complaint or dispute remains unresolved;
• Marketing consent records: Retained until consent is withdrawn and for 1 year thereafter as evidence of prior consent.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in a manner that renders it impossible to re-identify the Data Subject.

9 Data Security

nusstar implements appropriate organizational and technical security measures to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. These measures include:

• TLS 1.3 encryption for all data in transit between your device and nusstar's servers;
• AES-256 encryption for sensitive data at rest, including financial data and identity document images;
• Multi-factor authentication requirements for internal systems accessing player data;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular penetration testing and vulnerability assessments conducted by qualified cybersecurity professionals;
• Incident response procedures for data breach detection, containment, and NPC notification in accordance with NPC Circular 16-03.

In the event of a personal data breach that poses a real risk of serious harm to Data Subjects, nusstar will notify the National Privacy Commission within 72 hours of becoming aware of the breach and will notify affected Data Subjects without undue delay.

10 Your Data Privacy Rights

As a Data Subject under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by nusstar:

• Right to Access (Section 16(c) DPA): You have the right to obtain confirmation of whether nusstar holds personal data about you, and to receive a copy of that data;
• Right to Rectification (Section 16(d) DPA): You have the right to request correction of inaccurate or incomplete personal data held by nusstar;
• Right to Erasure / Blocking (Section 16(e) DPA): You have the right to request deletion or blocking of your personal data where processing is no longer necessary, was based on withdrawn consent, or is otherwise unlawful;
• Right to Object (Section 16(f) DPA): You have the right to object to processing of your personal data, including processing for direct marketing purposes;
• Right to Data Portability: You have the right to receive a structured copy of personal data you have provided to nusstar in a machine-readable format;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) at privacy.gov.ph if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact nusstar's Data Protection Officer using the details in Section 14. nusstar will respond to all Data Subject requests within 30 calendar days of receipt.

11 Minors — Under 21

The nusstar platform is strictly intended for individuals aged 21 years and above in accordance with PAGCOR regulations and Philippine law. nusstar does not knowingly collect personal data from persons under 21 years of age.

In the event that nusstar becomes aware that personal data has been collected from a person under the age of 21, such data will be deleted without undue delay and the associated account will be permanently closed. If you believe that a minor has registered an account on the nusstar platform, please notify the nusstar Data Protection Officer immediately.

12 Cross-Border Data Transfers

In certain circumstances, nusstar may transfer your personal data to service providers or game software partners whose servers are located outside the Philippines — for example, where an international game provider's platform processes session data on servers in another jurisdiction.

Any cross-border transfer of personal data by nusstar is conducted in compliance with Section 21 of the Data Privacy Act of 2012, which requires that the recipient country provides a level of data protection that meets or exceeds the standards of Philippine law, or that appropriate contractual safeguards — such as Standard Contractual Clauses — are in place prior to the transfer.

nusstar does not transfer financial data, KYC identity documents, or Philippine government-issued ID data outside the Philippines without explicit legal authority to do so under applicable Philippine law and NPC regulations.

13 Updates to This Privacy Policy

nusstar reserves the right to update this Privacy Policy at any time to reflect changes in applicable Philippine law, NPC guidance, PAGCOR regulatory requirements, or nusstar's data processing practices. When material changes are made, nusstar will notify registered players via the platform, email, or SMS to their registered contact details prior to the effective date of the updated Policy.

The current version of this Privacy Policy is always available at nusstar.org/privacy-policy. The "Last Updated" date at the top of this document indicates when the most recent version was published. Players are encouraged to review this Policy periodically.

Continued use of the nusstar platform following notification of any update to this Policy constitutes your acceptance of the revised Policy terms. If you do not agree to a material change, you may request account closure prior to the effective date of the change.

14 Contact & Data Protection Officer

For all data privacy inquiries, Data Subject rights requests, or to contact nusstar's Data Protection Officer, please use the following channels:

• Data Protection Officer Email: [email protected] — please include "Data Privacy Request" in the subject line;
• Live Chat: Available 24/7 through the nusstar platform — identify your message as a data privacy inquiry;
• Response Time: nusstar will acknowledge all data privacy requests within 5 business days and resolve them within 30 calendar days as required by the Data Privacy Act of 2012.

If you are not satisfied with nusstar's response to your data privacy request, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.

© 2026 nusstar Casino. This Privacy Policy was last updated in June 2026. Regulated by PAGCOR. For persons aged 21 and above only.