Nustarga Privacy Policy – How We Protect Your Data

1. Overview

Nustarga ("we," "our," or "us") operates the online gaming platform at nustarga.com. This Privacy Policy explains how we collect, use, store, disclose, and protect the personal information of players and visitors ("you") who access our platform in the Philippines.

We take data privacy seriously. As a platform serving Filipino players, we operate in full respect of the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, administered by the National Privacy Commission (NPC) of the Philippines. By using Nustarga, you consent to the data practices described in this policy.

If you have questions at any point, our support team is reachable at support@nustarga.com — available 24/7.

2. Data We Collect

Nustarga collects personal information that is necessary to provide you with a safe, legal, and enjoyable gaming experience. We collect data in three main ways: information you provide directly, information collected automatically, and information from third parties.

Information you provide directly:

• Full legal name and date of birth
• Philippine mobile number and email address
• Home address (for KYC verification)
• Government-issued ID details (passport, driver's license, PhilSys, SSS, UMID, etc.)
• Payment method details (e-wallet numbers, bank account info, card details)
• Security questions and answers
• Any information shared in support conversations or feedback forms

Information collected automatically:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited, time spent, and navigation patterns
• Game history, betting activity, and session logs
• Login timestamps and frequency
• Cookie and tracking data (see Section 8)

Information from third parties:

• Identity verification results from KYC/AML service providers
• Payment confirmation data from GCash, Maya, BDO, BPI, UnionBank, and other processors
• Fraud risk signals from our security partners

3. How We Use Your Data

Every piece of data Nustarga collects has a specific, legitimate purpose. Here is how we use your information:

We do not use your data to make fully automated decisions that significantly affect you without human review. If profiling is used for responsible gaming purposes, it is always subject to human oversight.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, Nustarga processes your personal data based on the following lawful grounds:

• Contractual necessity: Processing required to fulfil your account agreement with us — account registration, deposits, withdrawals, and gameplay.
• Legal obligation: Compliance with Philippine gaming regulations, KYC requirements, AML laws, and financial reporting obligations.
• Legitimate interest: Fraud prevention, platform security, responsible gaming monitoring, and internal analytics to improve our services.
• Consent: For marketing communications (email, SMS, push notifications). You may withdraw this consent at any time by updating your account notification preferences or contacting support.

5. How We Share Your Data

Nustarga does not sell, rent, or trade your personal data to any third party for commercial gain. We share your information only in the following limited circumstances:

• Payment processors: GCash, Maya, GrabPay, Coins.ph, BDO, BPI, UnionBank, InstaPay/PESONet, Visa, and Mastercard — to process your financial transactions.
• Identity verification providers: Licensed KYC and AML service partners who help us confirm player identities and screen for financial crime risks.
• Game providers: Software providers who power the games on our platform may receive anonymised session and gameplay data for game performance and fairness auditing purposes.
• Technology and security partners: Cloud hosting, fraud detection, and cybersecurity vendors who operate under strict data processing agreements with Nustarga.
• Regulatory and law enforcement authorities: Where required by Philippine law, a court order, or a valid request from a government authority such as AMLC, NPC, or PAGCOR.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to the same privacy protections.

All third-party service providers who receive your data are contractually bound to handle it securely and only for the specific purposes we specify. They are not permitted to use your data for their own marketing or any purpose beyond the service they provide to Nustarga.

6. Data Retention

We retain your personal data for as long as your account is active or as necessary to fulfil the purposes outlined in this policy. After account closure, we retain certain categories of data to comply with legal and regulatory obligations:

• Transaction records and KYC documents: Retained for a minimum of five (5) years following account closure, as required under Philippine AML regulations.
• Game and betting history: Retained for up to three (3) years for dispute resolution and regulatory audit purposes.
• Communication records: Retained for up to two (2) years to support customer service and compliance reviews.
• Marketing preference data: Deleted within 30 days of a consent withdrawal request.

When data is no longer required, we delete or anonymise it using secure methods that prevent recovery or reconstruction.

7. Security Measures

Protecting your data is one of our core responsibilities at Nustarga. We implement layered security controls across all systems to minimise the risk of unauthorised access, disclosure, or misuse of your personal information.

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers.
• At-rest encryption for sensitive stored data including payment details and ID documents.
• Multi-factor authentication (MFA) for player accounts and internal staff access.
• Regular penetration testing and third-party security audits of our platform infrastructure.
• Role-based access controls ensuring only authorised personnel can access specific categories of player data.
• 24/7 monitoring for suspicious activity, unusual login patterns, and potential data breaches.
• Incident response plan — in the event of a data breach, we will notify affected players and the NPC within the timeframes prescribed by law.

8. Cookies and Tracking Technologies

Nustarga uses cookies and similar tracking technologies to improve your experience on our platform. Here is a breakdown of the types of cookies we use:

• Essential cookies: Required for the platform to function. These enable you to log in, navigate the site, and complete transactions. Disabling these will affect platform functionality.
• Functional cookies: Remember your preferences such as language settings and display options, so you don't have to set them every visit.
• Analytical cookies: Help us understand how players use the platform — which pages are popular, where sessions drop off, and how to improve the overall experience. Data is aggregated and anonymised.
• Security cookies: Detect and prevent fraudulent activity, bot access, and unusual account behaviour.

You can manage cookie preferences through your browser settings. Note that disabling non-essential cookies will not affect your ability to play on Nustarga. We do not use advertising or third-party tracking cookies for ad retargeting purposes.

9. Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by Nustarga:

• Right to be informed: Know what data we collect and how it is used — which is exactly what this policy is for.
• Right to access: Request a copy of the personal information we hold about you at any time.
• Right to rectification: Ask us to correct inaccurate or outdated information in your account.
• Right to erasure: Request deletion of your personal data, subject to our legal retention obligations.
• Right to data portability: Receive your data in a structured, machine-readable format for transfer to another service.
• Right to object: Opt out of specific data processing activities, including direct marketing.
• Right to withdraw consent: Remove your consent for marketing communications without affecting other processing activities.
• Right to lodge a complaint: File a complaint with the National Privacy Commission (NPC) if you believe your rights have been violated.

To exercise any of these rights, contact our data privacy officer at support@nustarga.com. We will respond within fifteen (15) working days of receiving your request, as required under Philippine law.

10. Minors and Age Verification

Nustarga is strictly for players aged 21 years and above. We do not knowingly collect or process personal data from individuals below the legal gaming age. Age verification is performed during registration and as part of our KYC process.

If we discover that a player has provided false age information and is under 21, we will immediately suspend the account, void any gameplay, return any deposits where possible, and delete the associated personal data in accordance with applicable law. Parents and guardians who believe a minor has accessed our platform should contact us immediately at support@nustarga.com.

11. Changes to This Policy

Nustarga may update this Privacy Policy periodically to reflect changes in our data practices, platform features, or applicable laws. When we make material changes, we will notify you via email or through a visible notice on our platform at least seven (7) days before the changes take effect.

For minor clarifications or non-material updates, the revised policy will be posted here without prior notice. The "Last updated" date at the top of this page always reflects the most recent revision. We encourage you to review this page regularly to stay informed about how we protect your data.

12. Contact and Data Privacy Officer

If you have questions, concerns, or requests relating to this Privacy Policy or the personal data we hold about you, please reach out to us directly:

• Email: support@nustarga.com
• Platform: Use the live chat feature on nustarga.com (available 24/7)
• Response time: Within 15 working days for formal data requests

For concerns that we are unable to resolve to your satisfaction, you may file a complaint with the National Privacy Commission of the Philippines (NPC) through their official channels.

We take every privacy concern seriously. Whether it's a simple question about what data we store or a formal request to delete your account information, our team is here to help — no runaround, no passing the buck.