NusStar Privacy Policy — How We Protect Your Personal Data

NusStar ("NusStar," "we," "us," or "our") is the operator of the online gaming platform at nusstar.best. NusStar operates under a licence issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is registered with the National Privacy Commission (NPC) of the Philippines as a Personal Information Controller under the Data Privacy Act of 2012 (Republic Act No. 10173).

As a Personal Information Controller, NusStar determines the purposes and means of processing personal data collected through the NusStar platform. This Privacy Policy applies to all personal data collected from players, prospective players, and visitors to nusstar.best — regardless of how they access the platform (mobile browser, desktop browser, or any future NusStar application).

NusStar collects only the personal data necessary to operate your account, comply with legal obligations, and provide you with the best possible gaming experience. The categories of data we collect are:

Registration & Identity Data

This information is required to create and verify your NusStar account, confirm your identity during KYC verification, and comply with PAGCOR's player registration requirements and Anti-Money Laundering Act (AMLA) obligations.

Financial & Transaction Data

Financial data is processed to execute your deposits and withdrawals, detect and prevent fraud, and meet NusStar's AMLA reporting obligations. Full payment card numbers are never stored on NusStar's servers — payment processing is handled by certified third-party payment processors.

Gaming Activity Data

Gaming activity data is used to operate games fairly, calculate and pay winnings, administer bonuses, detect irregular patterns, and support responsible gaming interventions where warranted.

Technical & Usage Data

Technical data is collected automatically when you access NusStar. It is used to ensure platform security, detect multi-accounting and fraud, and improve platform performance for the devices and connections most commonly used by Philippine players.

Communications Data

If you contact NusStar's support team via live chat, email, or any other channel, NusStar retains records of those communications to resolve your query, train support staff, and improve service quality. These records are stored securely and are accessible only to authorised support and compliance personnel.

NusStar collects personal data through several channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion, you provide information directly to NusStar.
• Automatically through platform use: When you browse nusstar.best or play any NusStar game, technical and usage data is collected automatically through server logs, cookies, and similar technologies. See Section 7 for full details on cookies.
• From payment processors: When you deposit or withdraw funds, NusStar receives transaction confirmation data from your payment provider (e.g., GCash, Maya, BDO). NusStar does not receive full card or account credentials from these processors.
• From identity verification services: To comply with KYC requirements, NusStar may use third-party identity verification services that cross-reference the information you provide with government databases or document validation tools. These services are bound by strict data processing agreements with NusStar.
• From fraud prevention and analytics providers: NusStar uses third-party services to detect fraud, multi-accounting, and irregular betting patterns. These services process device and behavioural data to flag potential violations.

NusStar uses the personal data it collects for the following purposes:

1. Account creation and management: Creating your NusStar account, verifying your identity, maintaining your account settings, and communicating essential account information to you.
2. Processing transactions: Executing deposits, withdrawals, and bet settlements accurately and securely. Maintaining transaction records required by PAGCOR and AMLA regulations.
3. Providing gaming services: Operating games fairly, awarding winnings, administering bonuses, and resolving disputes arising from game outcomes.
4. Regulatory compliance: Meeting NusStar's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine laws. This includes filing mandatory reports with AMLC for qualifying transactions.
5. Fraud prevention and platform security: Detecting and preventing fraud, multi-accounting, collusion, bonus abuse, money laundering, and other prohibited activities. Protecting the integrity of NusStar's games and payment systems.
6. Responsible gaming: Monitoring gaming patterns to identify players who may be experiencing gambling-related harm, applying responsible gaming tools where warranted, and facilitating self-exclusion requests.
7. Customer support: Resolving your queries, complaints, and technical issues efficiently.
8. Marketing communications: Sending you promotional offers, bonus notifications, and news about NusStar — but only where you have consented to receive such communications. You can withdraw consent at any time.
9. Platform improvement: Analysing aggregated, anonymised usage data to improve NusStar's games, interface, and overall player experience.

Under the Philippine Data Privacy Act, NusStar processes your personal data on the following legal bases:

• Contractual necessity: Most data processing is necessary to fulfil NusStar's contract with you — providing gaming services, processing payments, and maintaining your account.
• Legal obligation: Certain data processing is required by Philippine law — including KYC verification, AMLA transaction reporting, and PAGCOR licence compliance obligations.
• Legitimate interests: NusStar processes some data on the basis of legitimate interests — such as fraud prevention, platform security, and responsible gaming monitoring — where these interests do not override your privacy rights.
• Consent: For marketing communications and certain non-essential cookies, NusStar relies on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

NusStar does not sell or rent your personal data to any third party. NusStar may share your data only in the following limited circumstances:

• Payment processors: NusStar shares transaction data with payment service providers (GCash, Maya, GrabPay, BDO, BPI, UnionBank, Visa/Mastercard networks) solely to execute your deposits and withdrawals. These processors are subject to their own privacy policies and are bound by NusStar's data processing agreements.
• Identity and KYC verification providers: NusStar uses third-party verification services to confirm player identity during registration and KYC processes. These providers are PDPA-compliant and access only the minimum data required for verification.
• Fraud prevention services: Anonymised or pseudonymised technical data may be shared with fraud detection providers to identify and prevent gaming fraud, multi-accounting, and money laundering across the platform.
• PAGCOR and regulatory authorities: NusStar is required by law to share certain player and transaction data with PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities as required under applicable regulations.
• Law enforcement: NusStar will disclose personal data to law enforcement or government agencies when required to do so by a valid court order, subpoena, or other lawful legal process under Philippine law.
• Business transfers: In the event of a merger, acquisition, or sale of NusStar's business, player data may be transferred to the acquiring entity, subject to the same privacy protections as under this Policy.

NusStar uses cookies and similar tracking technologies on its website. Cookies are small text files placed on your device to help the platform function, remember your preferences, and analyse usage patterns.

Types of Cookies NusStar Uses

• Strictly necessary cookies: Required for the platform to function — keeping you logged in, maintaining session security, and processing transactions. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool settings. Disabling these may affect your experience.
• Analytics cookies: Collect anonymised data on how players use NusStar — which pages are visited, how long sessions last, which games are most popular. NusStar uses this data to improve the platform. These are only placed with your consent.
• Security cookies: Help detect fraud, multiple account registrations, and other security threats by recognising your device and comparing it against known risk patterns.

You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent NusStar from functioning correctly. For other cookie types, you can withdraw consent at any time through your browser or by contacting NusStar's support team.

NusStar retains personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.

• Account and identity data: Retained for the lifetime of your active NusStar account, and for a minimum of 5 years after account closure, as required by PAGCOR licensing conditions and AMLA record-keeping obligations.
• Financial and transaction data: Retained for 7 years from the date of the transaction, in compliance with AMLA requirements and standard accounting obligations.
• Gaming activity data: Retained for 5 years from the date of the relevant gaming session or transaction to support dispute resolution and regulatory inquiries.
• Support communications: Retained for 3 years from the date of the interaction, unless the communication relates to an ongoing dispute or legal matter, in which case it is retained until resolution.
• Technical and analytics data: Retained in anonymised or aggregated form for up to 2 years for platform analytics purposes.

After the applicable retention period has expired, NusStar securely deletes or anonymises your personal data so that it can no longer be linked to you.

Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal data held by NusStar:

NusStar will respond to all data subject rights requests within 15 business days of receipt. In complex cases, NusStar may extend this period by a further 15 business days and will notify you of the extension. NusStar may ask you to verify your identity before processing a request to ensure that data is not disclosed or modified for unauthorised persons.

NusStar implements a comprehensive range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, and destruction:

• 256-bit SSL/TLS encryption on all data in transit between your device and NusStar's servers.
• Encryption at rest for sensitive personal data stored in NusStar's databases.
• Role-based access controls (RBAC) ensuring that only personnel with a documented need can access specific categories of player data.
• Regular penetration testing by independent cybersecurity firms to identify and remediate vulnerabilities.
• Intrusion detection and prevention systems (IDPS) monitoring NusStar's infrastructure for suspicious activity in real time.
• Multi-factor authentication (MFA) required for all NusStar administrative access.
• Data breach response procedures including protocols for containing, investigating, and notifying affected parties of any breach within the timeframes required by the National Privacy Commission.

Despite these measures, no digital platform can guarantee 100% security against all possible threats. NusStar encourages all players to maintain strong, unique passwords for their NusStar account and to report any suspected unauthorised account activity immediately.

NusStar's platform is strictly for persons aged 21 years and above. NusStar does not knowingly collect personal data from individuals under the age of 21. If NusStar becomes aware that personal data has been collected from a person under 21, the account will be immediately suspended, all data will be deleted to the extent permitted by law, and any deposits will be returned to the payment method used.

If you are a parent or guardian and believe that your child has registered on NusStar, please contact NusStar's support team immediately at support@nusstar.best or the DPO at privacy@nusstar.best so we can take immediate action.

NusStar's primary data storage and processing infrastructure is located within the Philippines. In some cases — for example, where NusStar uses international third-party service providers for fraud prevention, cloud infrastructure, or payment processing — personal data may be transferred to or processed in countries outside the Philippines.

Where cross-border data transfers occur, NusStar ensures that the receiving organisation is bound by contractual data protection obligations that provide a level of protection at least equivalent to the Philippine Data Privacy Act. NusStar does not transfer personal data to countries that do not provide adequate data protection standards without implementing appropriate safeguards.

NusStar may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. Material changes — those that significantly affect how NusStar collects, uses, or shares your personal data — will be communicated to registered players by email to their registered address at least 7 days before taking effect.

Minor or clarifying changes may be made without prior notice and will be reflected in the "Last updated" date at the top of this page. The version of the Privacy Policy currently published on nusstar.best/privacy-policy is the version in force. Continued use of the NusStar platform after the effective date of any update constitutes acceptance of the revised Policy.

NusStar encourages players to review this Privacy Policy periodically to stay informed about how their data is being handled.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or wish to raise a privacy-related concern, please contact NusStar through any of the following channels:

• Data Protection Officer: privacy@nusstar.best — for formal data subject rights requests, privacy complaints, and DPO-specific queries. Responses within 15 business days.
• General Support: support@nusstar.best or live chat within the NusStar platform — for general privacy questions or informal queries. Live chat response typically under 90 seconds during peak hours.

If you are not satisfied with NusStar's response to a privacy complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines through its official complaint procedures. NusStar cooperates fully with all NPC inquiries and investigations.