Privacy Policy

1. About This Privacy Policy

nustar ("nustar," "we," "us," or "our") is committed to protecting the privacy and personal data of every player and visitor who interacts with the nustar platform at nustar.bio ("Platform"). This Privacy Policy ("Policy") describes our data processing practices in detail and is designed to be read clearly and understood by Filipino players without requiring a legal background.

This Policy applies to all personal information collected through the Platform, including information provided during account registration, KYC verification, deposits and withdrawals, gameplay activity, customer support interactions, and any other form of engagement with nustar's services.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, nustar is the Personal Information Controller ("PIC") in respect of all personal data collected through the Platform. nustar is responsible for determining the purposes and means of processing your personal information.

nustar has designated a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data protection law. Contact details for the nustar DPO are provided in Section 15 of this Policy.

3. Information We Collect

nustar collects personal information in the following categories depending on the nature of your interaction with the Platform:

3.1 Information You Provide Directly

• Account Registration Data: Full legal name, date of birth, gender, Philippine mobile number, email address, and chosen username.
• KYC Verification Documents: Government-issued Philippine ID (e.g., PhilSys National ID, UMID, Passport, Driver's License), selfie photographs for identity confirmation, and proof of address where required.
• Financial Information: GCash mobile number, PayMaya account details, bank account numbers (BPI, BDO, Metrobank) submitted for deposit or withdrawal processing. nustar does not store full card numbers or full bank account credentials beyond what is necessary for transaction processing.
• Communication Records: Messages, transcripts, and records of all interactions with nustar's customer support team, including live chat and email correspondence.
• Source of Funds Declarations: Where required for enhanced KYC compliance, documentation or declarations regarding the lawful origin of funds deposited on the Platform.

3.2 Information Collected Automatically

• Device & Technical Data: IP address, device type and model, operating system version, browser type and version, device identifiers, and screen resolution.
• Session & Usage Data: Login timestamps, session duration, pages visited, features used, game titles accessed, bet amounts, game outcomes, and in-session behavior patterns.
• Location Data: Approximate geolocation derived from IP address for the purpose of geographic access control and fraud prevention. nustar does not request or use precise GPS location data.
• Cookie & Tracking Data: Data collected through cookies, web beacons, pixels, and similar technologies as described in Section 6.

3.3 Information Received from Third Parties

• Identity verification data from KYC and anti-fraud service providers.
• Transaction confirmation data from payment processors including GCash, PayMaya, and banking partners.
• Fraud risk signals from industry-standard risk intelligence providers used to protect the Platform and its players.

4. How We Use Your Personal Information

nustar processes your personal information for the following purposes. The table below maps each purpose to the data categories used:

nustar does not use your personal information for automated decision-making that produces legal or similarly significant effects without appropriate human review and the opportunity for you to contest the decision.

5. Legal Bases for Processing

nustar processes your personal information on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform nustar's obligations to you under the Terms & Conditions — including account management, payment processing, game provision, and customer support.
• Legal Obligation: Processing required to comply with applicable Philippine law, including anti-money laundering obligations, PAGCOR licensing requirements, tax reporting, and regulatory directives.
• Legitimate Interests: Processing for fraud prevention, Platform security, responsible gaming monitoring, and internal analytics — where nustar's legitimate interests do not override your fundamental rights and freedoms.
• Consent: Processing for optional activities such as promotional and marketing communications, where nustar has obtained your specific, informed, and freely given consent. You may withdraw consent for marketing communications at any time through your account settings without affecting the lawfulness of prior processing.

6. Cookies & Tracking Technologies

nustar uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used by nustar are as follows:

• Strictly Necessary Cookies: Essential for Platform functionality including session authentication, account security, and payment processing. These cookies cannot be disabled without impairing core Platform features.
• Functional Cookies: Used to remember your preferences such as language settings, display preferences, and game lobby filters to provide a personalized experience.
• Analytics Cookies: Used to collect aggregated, anonymized data about how players navigate and use the Platform, enabling nustar to improve user experience, fix bugs, and optimize game loading performance.
• Security Cookies: Used for fraud detection, bot identification, and account protection purposes, including device fingerprinting to detect unauthorized account access attempts.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to use the Platform. nustar does not use cookies for cross-site advertising targeting on third-party websites.

7. Data Sharing & Third-Party Disclosure

nustar does not sell your personal information to third parties under any circumstances. nustar shares your personal data only in the following limited circumstances:

• Payment Processors: GCash (Mynt), PayMaya (Voyager Innovations), BPI, BDO, Metrobank, and other payment partners receive the minimum personal data necessary to process your transactions securely.
• KYC and Identity Verification Providers: Third-party identity verification services receive your KYC documentation for the purpose of age and identity verification in compliance with regulatory requirements.
• Game Content Providers: Game providers such as JILI, Evolution Gaming, and Pragmatic Play receive session data necessary for game operation, outcome recording, and RNG audit compliance.
• Regulatory and Law Enforcement Authorities: nustar will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities when required by law, court order, or regulatory direction.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by nustar may have access to personal data under strict confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or asset sale affecting the nustar Platform, personal data may be transferred to the acquiring entity subject to equivalent data protection commitments.

All third parties with whom nustar shares personal data are required to process that data only for the specified purpose, under appropriate contractual protections, and in accordance with applicable Philippine data protection law.

8. International Data Transfers

Some of nustar's technology infrastructure, game provider systems, and service providers may be located outside the Philippines. When nustar transfers your personal data to recipients in other countries, we ensure appropriate safeguards are in place in accordance with the Data Privacy Act of 2012 and NPC guidelines. These safeguards include contractual data protection clauses, adequacy assessments, and in some cases binding corporate rules where applicable.

By creating a nustar account and accepting the Terms & Conditions, you acknowledge and consent to the transfer of your personal data to nustar's service providers in jurisdictions outside the Philippines where necessary for the provision of services, subject to the safeguards described above.

9. Data Retention

nustar retains personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, in compliance with Philippine AML and gaming regulatory record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years from the date of last transaction or account closure, whichever is later, as required by the AMLC Revised Implementing Rules and Regulations.
• Transaction Records: All deposit, withdrawal, and betting transaction logs are retained for a minimum of five (5) years for regulatory audit and dispute resolution purposes.
• Customer Support Records: Communication records retained for three (3) years following the resolution of the relevant issue or account closure, whichever is later.
• Marketing Data (Consent-Based): Retained until you withdraw consent, after which data is deleted or anonymized within 30 days.

Upon expiry of the applicable retention period, nustar will securely delete or irreversibly anonymize your personal data, unless retention is required by a specific legal obligation or ongoing legal proceeding.

10. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal information held by nustar:

• Right to Be Informed: You have the right to be informed of how your personal data is collected and processed, as set out in this Policy.
• Right to Access: You may request a copy of the personal data nustar holds about you and information about how it is being processed.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held about you. Most registration details can be updated directly in your nustar account profile settings.
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and no other legal basis applies; or (c) the data has been unlawfully processed. Note that this right is subject to nustar's legal obligations to retain certain data.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time, and to processing based on legitimate interests where you believe your rights override those interests.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the Philippine National Privacy Commission (NPC) if you believe nustar has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of these rights, please contact nustar's Data Protection Officer as described in Section 15. nustar will respond to all rights requests within fifteen (15) business days of receipt of a valid, verified request.

11. Data Security

nustar implements technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Industry-standard 256-bit SSL/TLS encryption for all data transmitted between your device and the nustar Platform.
• Hashing of account passwords using cryptographic algorithms — nustar staff cannot view your password in plain text under any circumstances.
• Multi-factor authentication and access controls for internal systems handling personal data.
• Regular penetration testing and vulnerability assessments of Platform infrastructure.
• Role-based access control ensuring nustar personnel can only access personal data necessary for their specific job functions.
• Secure data center infrastructure with physical access controls.

While nustar employs robust security practices, no system is completely immune to security incidents. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, nustar will notify the National Privacy Commission and affected data subjects in accordance with the timelines prescribed by the Data Privacy Act of 2012.

12. Children's Privacy and the 21+ Age Requirement

nustar's Platform is strictly restricted to individuals aged twenty-one (21) years and above in accordance with applicable Philippine gaming regulations. nustar does not knowingly collect personal information from persons below the age of 21. The KYC verification process is specifically designed to confirm that all registered players meet the minimum age requirement before real-money gameplay is permitted.

If nustar becomes aware that personal data has been collected from an individual below the age of 21, nustar will promptly close the associated account, reverse any transactions where permissible, and securely delete the relevant personal data in accordance with applicable law.

Parents and guardians who believe that a minor has registered on the nustar Platform should contact nustar's support team immediately via live chat or at [email protected].

13. Third-Party Links and Services

The nustar Platform may contain references or links to game provider portals, payment processors, and other third-party services. This Privacy Policy applies exclusively to personal data processed by nustar. Third-party services operate under their own privacy policies, and nustar is not responsible for the privacy practices of those third parties.

nustar recommends that you review the privacy policies of any third-party service you interact with in connection with your nustar account, including your GCash or PayMaya account, to understand how those services handle your personal data.

14. Amendments to This Policy

nustar reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, nustar's data processing practices, or the Platform's technical architecture. When material changes are made to this Policy, nustar will notify registered players via the email address on file or through a prominent notice on the Platform at least seven (7) calendar days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when the current version was published. Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgment of the revised Policy. If you do not agree with the amended Policy, you may request account closure and withdrawal of any verified real-money balance.

15. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or nustar's data processing practices, please contact nustar through the following channels:

• Live Chat Support: Available 24 hours a day, 7 days a week via the nustar Platform. For privacy-specific matters, please request to speak with the Data Protection team.
• Email (Data Protection Enquiries): [email protected] — plain text, not a clickable link. Please include "Privacy Request" in the subject line for faster routing to the DPO team.
• Response Timeline: nustar will acknowledge privacy enquiries within 48 hours and provide a substantive response within 15 business days of receipt of a valid, verified request.