Your Privacy Matters at
nustarr

This Privacy Policy ("Policy") is issued by nustarr ("nustarr", "we", "us", "our"), the operator of the online gaming and sports betting platform available at nustarr.net. nustarr is a PAGCOR-registered platform built specifically for Filipino players, operating in full compliance with the Philippine Amusement and Gaming Corporation's applicable regulations and the Data Privacy Act of 2012 (Republic Act No. 10173), along with its Implementing Rules and Regulations.

This Policy governs how nustarr collects, processes, stores, shares, and protects the personal data of all individuals who interact with our platform — including registered players, visitors to our website, and individuals who contact our support team. The term "personal data" refers to any information that identifies or could reasonably be used to identify a natural person, consistent with the definition in RA 10173.

nustarr acts as a personal information controller in respect of all personal data processed through the nustarr platform. Where third-party service providers process data on our behalf, they act as personal information processors and are bound by data processing agreements that require them to maintain equivalent standards of data protection.

nustarr collects personal data through multiple channels in the ordinary course of operating an online gaming platform. The categories of personal data we collect are described below.

2.1 Registration Data

When you create a nustarr account, we collect the information you provide directly, including:

• Full legal name as it appears on a government-issued identification document.
• Date of birth (used to verify the PAGCOR-mandated 21+ age requirement).
• Residential address, including city, province, and postal code.
• Email address and mobile phone number.
• Username and encrypted password.
• Preferred language and currency (Philippine Peso by default).

2.2 Identity Verification (KYC) Data

In compliance with PAGCOR requirements and the Philippine Anti-Money Laundering Act (AMLA), nustarr conducts Know Your Customer verification on all accounts. KYC documentation we may collect includes:

• Scanned or photographed copies of government-issued photo identification (Philippine passport, SSS/GSIS card, PhilHealth ID, driver's license, or Unified Multi-Purpose ID).
• Proof of address documents (utility bills, bank statements, or barangay certificates dated within 90 days).
• Proof of payment method ownership (e.g., screenshots of a GCash account or bank account statement matching the registered name).
• Selfie or liveness verification image for biometric comparison purposes.
• Source of funds declarations for accounts exceeding prescribed transaction thresholds under AMLA.

2.3 Financial Transaction Data

nustarr records all financial transactions associated with your account, including:

• Deposit amounts, timestamps, and payment method details (e.g., masked GCash number, last four digits of a bank account).
• Withdrawal requests, amounts, processing status, and destination account details.
• Bonus credits, wagering activity related to bonuses, and promotional reward redemptions.
• Account balance history and transaction reference numbers.

2.4 Gaming Activity Data

nustarr records detailed logs of your gaming activity on the platform, which may include:

• Games played, bet amounts, game outcomes, and timestamps of each session.
• Sports betting market selections, odds accepted, stake amounts, and settlement results.
• Session durations and frequency of play, used for responsible gaming monitoring.
• Responsible gaming tool settings and any self-exclusion or limit requests you have submitted.

2.5 Technical & Device Data

When you access the nustarr platform, our systems automatically collect certain technical information, including:

• IP address and geolocation data (to verify you are accessing from a permitted jurisdiction).
• Device type, operating system, browser type and version.
• Unique device identifiers and advertising identifiers where applicable.
• Pages visited, links clicked, and navigation paths through the nustarr platform.
• Referring website or marketing campaign source (where applicable).

2.6 Communications Data

nustarr retains records of communications between you and our support team, including live chat transcripts, email correspondence, and any attachments or screenshots you share when raising a complaint or support request.

nustarr processes personal data only for specified, legitimate purposes. The table below summarizes the primary purposes for which we use the data we collect, together with the legal basis for each processing activity under RA 10173.

3.1 Marketing Communications

nustarr will only send you promotional emails or SMS messages about bonuses, game launches, or special offers if you have explicitly opted in to receive such communications during registration or through your account notification settings. You may withdraw your consent and unsubscribe from marketing communications at any time by updating your preferences in Account Settings or by contacting support. Withdrawal of consent to marketing does not affect the lawfulness of processing carried out prior to withdrawal, and will not affect your access to gaming services.

3.2 Automated Decision-Making

nustarr uses automated systems for fraud detection, responsible gaming risk scoring, and bonus eligibility checks. Where an automated decision produces a significant effect on your account — such as an account restriction or bonus void — you have the right to request human review of that decision. Please contact support to exercise this right.

nustarr does not sell, rent, or trade your personal data to any third party for their own independent commercial use. We may share your personal data only in the circumstances described below.

4.1 Service Providers (Personal Information Processors)

nustarr engages third-party service providers to support the operation of the platform. These include payment processors (GCash, PayMaya, BPI, BDO, Metrobank, and cryptocurrency payment gateways), game content providers, KYC and identity verification technology providers, cloud hosting and infrastructure providers, and customer support tooling vendors.

All service providers are bound by data processing agreements that prohibit them from using your personal data for any purpose other than performing the contracted service for nustarr, and that require them to implement appropriate security measures to protect your data.

4.2 Regulatory and Legal Disclosures

nustarr is required by applicable Philippine law to disclose personal data to regulatory and law enforcement bodies in certain circumstances, including:

• PAGCOR, in connection with regulatory audits, investigations, or mandatory reporting obligations.
• The Anti-Money Laundering Council (AMLC), in connection with suspicious transaction reports or covered transaction reports required under the AMLA and its implementing rules.
• Philippine courts, government agencies, or law enforcement bodies when compelled to do so by a valid legal process (e.g., subpoena, court order, or written regulatory directive).

nustarr will notify you of any such disclosure to the extent permitted by law and consistent with our legal obligations.

4.3 Business Transfers

In the event that nustarr undergoes a merger, acquisition, or sale of all or a material portion of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. nustarr will provide notice of any such transfer through the platform and will ensure that any acquiring entity is bound by obligations equivalent to those in this Policy prior to any transfer of your personal data.

nustarr uses cookies and similar tracking technologies to provide a functional, secure, and personalized experience on our platform. A cookie is a small text file placed on your device by a website you visit. nustarr uses the following categories of cookies:

You can manage your cookie preferences through the Cookie Preference Centre accessible from the footer of the nustarr website, or by configuring your browser settings to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging into your nustarr account. For instructions on managing cookies in your specific browser, please refer to your browser's help documentation.

5.1 Local Storage and Fingerprinting

In addition to cookies, nustarr may use browser local storage and device fingerprinting techniques (combining non-identifying hardware and software characteristics) for fraud detection and multi-account identification purposes. This use is strictly limited to platform security and regulatory compliance and is not used for commercial profiling.

nustarr implements a layered, defense-in-depth approach to protecting your personal data. Our technical and organizational security measures include:

• Encryption in transit: All data transmitted between your device and nustarr's servers is encrypted using TLS 1.2 or higher (HTTPS). nustarr enforces HTTPS across the entire platform with HTTP Strict Transport Security (HSTS) enabled.
• Encryption at rest: Sensitive personal data stored in nustarr's databases — including government ID document images, KYC records, and payment method details — is encrypted at rest using AES-256 encryption.
• Password security: Account passwords are never stored in plain text. nustarr uses industry-standard adaptive hashing algorithms (bcrypt) to store password credentials. Players are encouraged to use strong, unique passwords and to enable two-factor authentication where offered.
• Access controls: Access to personal data within nustarr's internal systems is restricted on a strict need-to-know basis. All internal access to player data is logged and subject to periodic audit.
• Fraud and intrusion detection: nustarr operates 24/7 automated monitoring for unusual account activity, suspicious transactions, and attempted unauthorized access. Our security team investigates all anomalous alerts.
• Vendor security assessments: Third-party service providers who process player data on nustarr's behalf are subject to security assessments prior to onboarding and are required to demonstrate appropriate information security certifications or controls.

While nustarr takes all reasonable steps to protect your personal data, no online system is completely immune from security threats. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, nustarr will notify the National Privacy Commission (NPC) and affected players within the timeframes required under RA 10173 and the NPC's breach notification guidelines.

nustarr retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, nustarr will securely delete or anonymize personal data so that it can no longer be attributed to you as an individual. Where data must be retained for a mandatory regulatory period that extends beyond your account closure, that data will be placed in a restricted archive accessible only to authorized compliance personnel.

As a data subject under the Philippine Data Privacy Act of 2012, you hold the following rights in respect of your personal data processed by nustarr. nustarr is committed to facilitating the exercise of these rights promptly and without unnecessary barriers.

8.1 How to Exercise Your Rights

To exercise any of the rights listed above, please contact nustarr's Data Protection Officer using the contact details in Section 12 of this Policy. Your request should include your full name, registered email address, and a clear description of the right you wish to exercise. nustarr will respond to all verified data subject requests within fifteen (15) calendar days of receipt, consistent with the timeframes specified by the National Privacy Commission. Where a request is complex or involves a large volume of data, we may extend this period by a further fifteen (15) days and will notify you of the extension.

nustarr will verify your identity before processing any data subject request to ensure that personal data is not disclosed to or modified by unauthorized individuals. We may ask you to provide supporting documentation to confirm your identity. There is no fee for exercising your data subject rights, unless requests are manifestly unfounded or excessive, in which case nustarr reserves the right to charge a reasonable administrative fee or to decline the request with written reasons.

nustarr is an online gambling platform and, consistent with PAGCOR regulations and the applicable provisions of Philippine law, our services are strictly restricted to individuals who are at least twenty-one (21) years of age. nustarr does not knowingly collect personal data from any individual under the age of 21.

All account registrations are subject to KYC age verification before any deposit or gaming activity is permitted. Providing false information about your age during registration constitutes a breach of nustarr's Terms and Conditions and may result in immediate account closure, forfeiture of funds, and referral to relevant authorities where legally required.

If nustarr becomes aware that personal data has been collected from an individual who is under 21 years of age, we will take immediate steps to suspend the account, delete the associated personal data (except where retention is required for regulatory or legal reasons), and return any deposited funds to the originating payment method after completing any applicable AML checks.

nustarr primarily stores and processes personal data within data centers located in the Philippines or in jurisdictions that the National Privacy Commission has recognized as providing an adequate level of data protection. In some cases, the use of third-party service providers — such as cloud infrastructure, KYC technology vendors, and game content providers — may involve the transfer of personal data to servers located outside the Philippines.

Where such international transfers occur, nustarr ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under RA 10173. These safeguards may include:

• Data processing agreements incorporating standard contractual clauses approved or recognized by the National Privacy Commission.
• Transfers to service providers in jurisdictions with adequacy determinations by the NPC or comparable international data protection bodies.
• Binding corporate rules applicable to transfers within a corporate group.

By using the nustarr platform and providing your personal data, you acknowledge that your data may be transferred, stored, and processed in jurisdictions outside the Philippines, subject to the safeguards described above. You may request further information about the specific safeguards applicable to international transfers of your personal data by contacting our Data Protection Officer.

nustarr reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or the services we offer. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page and in the table of contents.
• Display a prominent notice on the nustarr platform informing logged-in players of the material change.
• Send an email notification to all registered players' email addresses on file, where the change materially affects their rights or the way their data is processed.

Your continued use of the nustarr platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you should cease using the platform and contact support to request account closure. nustarr will retain a version history of this Privacy Policy so that you can review previous versions upon request.

Minor changes — such as corrections of typographical errors, clarifications that do not alter the substance of our data practices, or formatting updates — may be made without advance notice. The "Last Updated" date will always reflect the most recent revision, whether major or minor.

nustarr has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012. The DPO is responsible for overseeing nustarr's data protection compliance, handling data subject requests, and serving as the point of contact with the National Privacy Commission.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way nustarr processes your personal data, please contact us using the details below. All privacy-related inquiries directed to the DPO will be acknowledged within three (3) business days and resolved within the timeframes specified in Section 8.1.

For complaints that nustarr has been unable to resolve to your satisfaction, you may contact the National Privacy Commission through their official government portal. The NPC accepts complaints from data subjects whose rights under RA 10173 have been violated by a personal information controller operating within Philippine jurisdiction.

nustarr values your trust and is committed to resolving all privacy concerns in a fair, transparent, and timely manner. We encourage you to reach out to us directly first so we can address your concern before escalating to the NPC — in most cases, we can resolve issues quickly through our support channels.