Nustur Privacy Policy – How We Protect Your Data

1. Overview

This Privacy Policy describes how Nustur ("we," "us," or "our") collects, uses, stores, and protects the personal information of users ("you" or "Player") who access and use the Nustur platform, available at nustur.com, along with any associated mobile applications and services (collectively, the "Platform").

We are committed to protecting the privacy of every Filipino player on our platform. This policy is designed to comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the standards set by the National Privacy Commission (NPC).

By registering an account, accessing the Platform, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein.

2. Data We Collect

Nustur collects personal information necessary to provide you with a safe, smooth, and enjoyable gaming experience. We only collect what we genuinely need — nothing more.

2.1 Information You Provide Directly

• Registration data: Full name, date of birth, email address, mobile number, and home address
• Identity verification: Government-issued ID (e.g., PhilSys, passport, driver's licence), selfie or photo for KYC purposes
• Financial information: Bank account details, e-wallet identifiers (GCash, Maya, etc.), and payment method information submitted during deposits or withdrawals
• Communications: Messages you send to our support team, feedback forms, and survey responses

2.2 Information Collected Automatically

• IP address and approximate geographic location
• Device type, operating system, and browser information
• Session data: pages visited, time spent, games played, and betting history
• Login timestamps and access logs
• Cookie and tracking data (see Section 7)

2.3 Information from Third Parties

We may receive data about you from identity verification partners, payment processors, and fraud prevention services as part of our KYC and AML compliance obligations. This data is used solely for account verification and security purposes.

3. How We Use Your Data

Your personal data is used only for legitimate purposes directly related to the operation of the Nustur platform and our legal obligations. Specifically, we use your data to:

We do not use your data for automated decision-making that produces significant legal effects on you without your informed consent.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, Nustur processes your personal data on the following legal grounds:

• Consent: For optional activities such as marketing communications. You may withdraw consent at any time.
• Contract performance: To fulfil our obligations to you under the Terms and Conditions, including operating your account and processing transactions.
• Legal obligation: To comply with Philippine laws, including Anti-Money Laundering Act (AMLA) requirements, gaming regulations, and NPC directives.
• Legitimate interests: To prevent fraud, maintain platform security, and improve our services — provided these interests do not override your fundamental privacy rights.

5. Data Sharing and Disclosure

Nustur does not sell, rent, or trade your personal data. We only share your information in the following limited circumstances:

5.1 Service Providers

We work with trusted third-party providers who assist in operating the Platform — including payment processors, identity verification services, IT infrastructure providers, and customer support tools. These providers are contractually bound to process your data only on our instructions and in compliance with applicable privacy laws.

5.2 Regulatory and Legal Authorities

We may disclose your data to government agencies, law enforcement bodies, or regulatory authorities when required by law or in response to valid legal processes. This includes compliance with anti-money laundering regulations and gaming regulatory requirements in the Philippines.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of Nustur's business, your personal data may be transferred to the relevant successor entity. You will be notified of any such transfer and the privacy protections applicable to your data.

5.4 With Your Consent

We will share your data with any other party only when you have given your explicit, informed consent to do so.

6. Payment Data and Financial Security

All payment transactions on Nustur are processed through PCI-DSS compliant payment gateways. We support the following Philippine payment methods:

• GCash and Maya (PayMaya)
• GrabPay and Coins.ph
• InstaPay and PESONet bank transfers
• BDO, BPI, and UnionBank online banking
• Visa and Mastercard debit/credit cards

When you make a deposit or request a withdrawal, your payment details are transmitted directly to the relevant payment processor over an encrypted connection. Nustur does not store raw card numbers, OTPs, CVV codes, or full bank account credentials on our servers at any point.

All amounts are transacted in Philippine Peso (₱). If a withdrawal requires identity verification, we will notify you promptly and outline exactly what documentation is needed.

7. Cookies and Tracking Technologies

Nustur uses cookies and similar technologies to enhance your experience on the Platform. Here's what we use and why:

Essential Cookies

These are required for the Platform to function correctly — things like keeping you logged in during your session and maintaining your preferences. You cannot opt out of essential cookies without disabling your browser's cookie functionality entirely.

Analytics Cookies

We use anonymised analytics tools to understand how players navigate the Platform — which games are popular, where drop-offs occur, and how we can improve. This data is aggregated and not tied to your personal identity.

Personalisation Cookies

These help us remember your settings and preferences so your experience feels tailored — like remembering your preferred game categories or bonus opt-in status.

Managing Cookies

You can manage or delete cookies through your browser settings at any time. Disabling non-essential cookies will not affect your ability to use core platform features, though some personalisation features may not work as expected.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this privacy policy, comply with our legal obligations, and resolve any disputes that may arise.

• Active account data: Retained for the full duration of your account and for up to 5 years after closure, in compliance with AMLA and gaming regulatory requirements.
• Transaction records: Retained for at least 5 years as required by applicable financial regulations.
• Identity verification records: Retained for the period mandated by KYC regulations.
• Support communications: Retained for up to 3 years from the date of the most recent interaction.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable additional period for record-keeping purposes.

When data is no longer required, it is securely deleted or anonymised so it can no longer be linked back to you.

9. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012 and our own commitment to player-first privacy, you have the following rights regarding your personal data:

• Right to be informed: Know what data we collect and how we use it — which is exactly why this privacy policy exists.
• Right to access: Request a copy of the personal data we hold about you at any time.
• Right to rectification: Ask us to correct any inaccurate or incomplete data in your account.
• Right to erasure: Request deletion of your personal data, subject to our legal retention obligations.
• Right to data portability: Request your data in a structured, commonly used format.
• Right to object: Object to processing of your data for direct marketing purposes.
• Right to withdraw consent: Withdraw any consent you've previously given for optional data uses (e.g., marketing) without affecting the legality of prior processing.
• Right to file a complaint: Lodge a complaint with the National Privacy Commission (NPC) if you believe your privacy rights have been violated.

To exercise any of these rights, contact us at support@nustur.com. We aim to respond to all data rights requests within 15 business days.

10. Security Measures

Protecting your personal data is a core part of how we build and operate the Nustur platform. Our security infrastructure includes:

• SSL/TLS encryption for all data transmitted between your device and our servers
• AES-256 encryption for sensitive data stored in our databases
• Two-factor authentication (2FA) available for all player accounts
• Regular penetration testing and security audits by independent third parties
• Strict access controls — staff can only access personal data on a need-to-know basis
• Intrusion detection systems and 24/7 security monitoring

Despite these measures, no online platform can guarantee 100% security. In the event of a data breach that affects your rights and freedoms, we will notify you and the National Privacy Commission within the timeframes required by law.

11. Minors and Underage Players

Nustur is strictly for players aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. If you are a parent or guardian and believe that a minor has registered on our Platform or provided us with personal information, please contact us immediately at support@nustur.com.

We will promptly investigate the matter, close the account, and delete any data associated with the underage individual. Protecting minors from exposure to gambling is a responsibility we take very seriously.

12. Third-Party Links and Services

The Nustur Platform may contain links to third-party websites or services — for example, payment gateway pages or regulatory body websites. This privacy policy applies only to the Nustur Platform and does not cover how third parties handle your data.

We recommend reviewing the privacy policies of any third-party service you access through or in connection with our Platform. Nustur is not responsible for the privacy practices of external sites.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or improvements to our Platform. When we make material changes, we will notify you via email and/or a prominent notice on the Platform before the changes take effect.

The updated policy will always be available on this page, and the "Last Updated" date at the top will reflect when the most recent revision was made. Your continued use of the Platform after any changes constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this page regularly so you stay informed. Your privacy matters to us — not just when it's required, but all the time.

14. Contact Us and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, you can reach us through the following channels:

• Email: support@nustur.com
• Live Chat: Available 24/7 directly on the Nustur platform — the fastest way to get a response

Nustur has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. Requests specifically addressed to the DPO regarding your data rights will be prioritised and handled with full confidentiality.

If you believe your privacy rights have not been properly respected, you may also file a complaint directly with the National Privacy Commission (NPC) of the Philippines. We will cooperate fully with any NPC investigation.