nustsr Privacy Policy

Data Controller

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, nustsr — the operator of the online casino and sports betting platform accessible at nustsr.net — is the personal information controller responsible for the collection, use, storage, and protection of personal data processed in connection with your nustsr account and use of nustsr services.

nustsr is committed to the principles of transparency, legitimate purpose, and proportionality as required by Philippine data protection law. Where nustsr engages third-party service providers to process personal data on its behalf, those providers act as personal information processors under written agreements that impose data protection obligations consistent with this Policy.

Data We Collect

nustsr collects the following categories of personal data in connection with your registration, use of the platform, and any interactions with nustsr customer support:

nustsr does not collect sensitive personal information as defined under RA 10173 (such as health data, racial or ethnic origin, political affiliation, or religious beliefs) except where such information is incidentally disclosed in the context of a responsible gaming assessment and is strictly necessary for player protection purposes.

How We Collect Your Data

nustsr collects personal data through the following means:

• Direct collection: When you register a nustsr account, complete KYC verification, make a deposit or withdrawal request, contact nustsr support, or participate in a promotion, you provide personal data directly to nustsr.
• Automated collection: When you access and use the nustsr platform, technical data — including your IP address, device identifiers, session logs, and browser information — is automatically recorded by nustsr's platform infrastructure and analytics systems.
• Cookie and tracking technologies: nustsr uses cookies and similar tracking technologies on its website to recognise returning visitors, maintain session state, and collect aggregate usage analytics. See Section 07 for full details.
• Payment providers: When you make a deposit or withdrawal via GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, or other supported payment channels, nustsr receives transaction confirmation data from those payment providers. nustsr does not receive or store your full payment credentials.
• Third-party verification providers: To satisfy KYC requirements, nustsr may use authorised third-party identity verification services to cross-check the identity documents you submit. These providers process your data strictly under nustsr's instruction and are bound by confidentiality obligations.

How We Use Your Data

nustsr uses the personal data it collects for the following specific purposes:

• Account management: To create, maintain, and administer your nustsr player account, including authentication, password recovery, and account settings management.
• KYC and age verification: To verify that you meet the 21+ age requirement for casino-style gambling in the Philippines, and to confirm your identity in compliance with applicable gaming and anti-money-laundering regulations.
• Payment processing: To process your deposits and withdrawal requests via supported Philippine payment methods, reconcile transactions, and maintain accurate financial records.
• Fraud prevention and security: To detect and investigate suspicious account activity, unauthorised access, bonus abuse, money laundering, and other prohibited conduct that could harm the integrity of the nustsr platform or other players.
• Regulatory compliance: To fulfil nustsr's obligations under applicable Philippine gaming regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012, including mandatory reporting to relevant Philippine authorities where required by law.
• Responsible gaming: To monitor gaming patterns for indicators of problem gambling behaviour, enforce self-exclusion elections, apply deposit and session limits, and fulfil duty-of-care obligations to players.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality assurance and dispute resolution purposes.
• Platform improvement: To analyse aggregate usage patterns and improve the performance, usability, and game offering of the nustsr platform. Analytics used for this purpose are aggregated and do not identify individual players.
• Marketing communications: To send you promotional emails, bonus offers, and platform updates — but only if you have opted in to receive such communications. You may opt out at any time.

Legal Basis for Processing

nustsr processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual necessity: Processing necessary for the performance of the contract between you and nustsr — specifically, the Terms and Conditions governing your use of the nustsr platform. This covers account management, payment processing, game delivery, and customer support.
• Legal obligation: Processing required to comply with nustsr's obligations under Philippine law, including gaming regulations administered by PAGCOR, the Anti-Money Laundering Act, and mandatory KYC and reporting requirements.
• Legitimate interests: Processing necessary for nustsr's legitimate interests in fraud prevention, platform security, responsible gaming compliance, and the improvement of nustsr services — provided those interests are not overridden by your fundamental data protection rights.
• Consent: Processing for optional purposes — specifically, marketing communications — where nustsr relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing or your continued access to the nustsr platform.

Sharing Your Data

nustsr does not sell your personal data to any third party. nustsr may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other supported Philippine payment processors receive the minimum data necessary to authenticate and execute your financial transactions.
• Identity verification providers: Authorised KYC and identity document verification services engaged by nustsr to assist with age and identity confirmation. These providers act as personal information processors under binding agreements.
• Game software providers: Third-party game developers and live casino operators whose games are available on the nustsr platform may receive session and wagering data as necessary to operate game rounds and calculate results. Such providers do not receive your full personal profile.
• Regulatory and law enforcement authorities: Philippine gaming regulators, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities where disclosure is required by law or court order.
• Professional advisers: Legal counsel, auditors, and compliance consultants engaged by nustsr, subject to professional confidentiality obligations.
• Business successors: In the event of a merger, acquisition, or transfer of nustsr's business operations, your personal data may be transferred to the acquiring entity, which would assume the obligations under this Privacy Policy.

All third parties with whom nustsr shares personal data are required to maintain appropriate technical and organisational security measures and to process your data only for the specific purposes for which it was shared.

Cookies & Tracking Technologies

nustsr uses cookies — small text files stored on your device — and similar tracking technologies to provide a functional, personalised, and secure browsing experience on the nustsr platform. The following categories of cookies are in use:

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary or security cookies will impair your ability to use the nustsr platform. nustsr does not use third-party advertising cookies or cross-site tracking technologies for the purpose of serving targeted advertising on external websites.

Data Retention

nustsr retains personal data for no longer than is necessary to fulfil the purposes described in this Policy, or as required by applicable Philippine law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status plus a post-closure period of at least five (5) years, as required by AMLA and applicable gaming regulations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with AMLA record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years following the closure or termination of your account, or longer if required by a regulatory investigation or legal hold.
• Support communications: Retained for two (2) years from the date of the interaction, unless the communication is relevant to an ongoing dispute or investigation, in which case it is retained until final resolution.
• Marketing opt-in records: Retained for the duration of your consent and for two (2) years following withdrawal of consent, to demonstrate compliance with consent requirements.
• Technical and session logs: Retained for ninety (90) days for routine security monitoring purposes, and for up to twelve (12) months where logs are relevant to a fraud investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised such that it can no longer be attributed to an identifiable individual.

Security Measures

nustsr implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in transit: All data exchanged between your device and the nustsr platform is encrypted using TLS (Transport Layer Security) with a minimum of 256-bit encryption strength.
• Encryption at rest: Sensitive personal data — including identity documents and financial records — is encrypted when stored in nustsr's databases and infrastructure.
• Access controls: Access to personal data is strictly limited to nustsr staff who require it to perform their specific job functions. Role-based access controls and mandatory access logging are enforced.
• Two-factor authentication: nustsr offers optional two-factor authentication (2FA) for player accounts and mandates 2FA for all internal staff access to systems that hold personal data.
• Regular security assessments: nustsr conducts periodic security reviews, vulnerability assessments, and penetration testing of its platform infrastructure.
• Incident response: In the event of a personal data breach that is likely to result in risk to your rights and freedoms, nustsr will notify the National Privacy Commission (NPC) within the timeframe required by RA 10173 and will inform affected players as required by law.

Your Data Rights

As a data subject under the Data Privacy Act of 2012, you hold the following rights with respect to the personal data that nustsr holds about you. You may exercise any of these rights by submitting a written request to [email protected] with the subject line "Data Rights Request" and your registered account username.

nustsr will acknowledge your data rights request within two (2) Philippine business days and will endeavour to provide a substantive response within fifteen (15) Philippine business days. Certain rights — particularly erasure — may be limited by nustsr's legal obligations to retain data under AMLA and gaming regulations, in which case nustsr will explain the applicable restriction clearly.

If you are not satisfied with nustsr's response to your data rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC), which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.

Minors & Age Verification

nustsr strictly prohibits access to its platform by any person under the age of 21. This is the legally mandated minimum gambling age in the Republic of the Philippines and is a non-negotiable condition of nustsr account registration.

nustsr does not knowingly collect personal data from individuals under the age of 21. All new registrations are subject to age verification as part of the KYC process. Where nustsr discovers that an account has been registered by or on behalf of a person under 21, the account will be closed immediately, all associated funds will be returned to the payment source after deduction of any applicable verification costs, and the personal data of the minor will be deleted in accordance with nustsr's data retention procedures.

Policy Changes

nustsr reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable Philippine law, regulatory requirements, nustsr's data processing practices, or the services offered on the platform.

When material changes are made to this Policy — meaning changes that significantly affect the way nustsr processes your personal data or the rights available to you — nustsr will notify registered players by email to their registered address and/or through a prominent notice on the nustsr platform at least fourteen (14) days before the changes take effect.

For non-material updates — such as clarifications to existing language, corrections of typographical errors, or minor structural reorganisation that does not change the substance of the Policy — nustsr will update the "Last Updated" date at the top of this page without separate advance notification.

Continued use of the nustsr platform following the effective date of any Privacy Policy update constitutes your acknowledgement of the revised Policy. If you do not agree with any changes to this Policy, you should cease using nustsr and may request account closure by contacting [email protected].

Contact & Data Protection Officer

nustsr has designated a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and its Implementing Rules. The DPO is responsible for overseeing nustsr's data protection compliance and serves as the primary point of contact for data privacy matters.

To exercise your data rights, raise a privacy concern, request information about nustsr's data processing activities, or lodge a complaint regarding nustsr's handling of your personal data, please contact the nustsr DPO using the details below:

• Email: [email protected] — please use the subject line "Data Privacy Request" or "DPO Enquiry" for fastest routing.
• Response time: The nustsr DPO will acknowledge your message within two (2) Philippine business days and provide a substantive response within fifteen (15) Philippine business days.
• Support hours: nustsr support is available 24 hours a day, 7 days a week, Philippine Standard Time.