1 Introduction
This Privacy Policy ("Policy") describes how Nustarga ("Nustarga", "we", "us", "our") collects, uses, stores, and protects the personal information of individuals ("you", "your", "player") who register for and use the Nustarga online gaming platform at nustarga.net.
By registering a Nustarga account or using any part of the Platform, you confirm that you have read and understood this Policy. You also acknowledge that your personal data will be processed in accordance with the purposes and methods described here.
This Policy forms part of the broader Nustarga Terms and Conditions and should be read alongside them. In case of any conflict between this Policy and the Terms, the Terms take precedence except where this Policy provides greater data protection rights to the player.
In plain terms: this is the document that explains everything we do with your personal information. It's worth reading — it's not just legal boilerplate.
2 Who We Are
Nustarga operates the online gaming platform available at nustarga.net. For the purposes of this Privacy Policy, Nustarga is the data controller responsible for the personal information of registered players.
As data controller, Nustarga determines the purposes for which your personal data is collected and the manner in which it is processed. We are responsible for ensuring that your data is handled in compliance with applicable Philippine law, including the Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations.
You can contact Nustarga's data privacy team at any time at support@nustarga.net with any questions, concerns, or requests related to your personal data.
3 Personal Data We Collect
Nustarga collects the following categories of personal data from players:
Registration Data
- Full legal name
- Date of birth
- Email address
- Mobile phone number
- Home address (including city, province, and postal code)
- Username and encrypted account password
Identity Verification (KYC) Data
- Copies of government-issued photo identification (Philippine National ID, passport, driver's licence, SSS/GSIS card, or similar)
- Proof of address documentation (utility bills, bank statements, or other government documents)
- Proof of payment method ownership where required
Financial Data
- Deposit and withdrawal transaction records
- Payment method details (GCash account number, Maya account number, bank account details, card details — stored in tokenised or masked form)
- Account balance history
Gaming Activity Data
- Bets placed, games played, and game session records
- Win and loss history
- Bonus usage and wagering records
- Gaming session timestamps and duration
Technical Data
- IP address and approximate geolocation
- Device type, operating system, and browser type
- Cookie data and session identifiers
- Platform interaction logs (pages visited, features used, errors encountered)
Communications Data
- Support chat and email correspondence
- Feedback and complaint records
- Marketing preference settings
We do not collect sensitive personal data categories (such as health data, biometric data, or political opinions) unless directly relevant to a responsible gaming or regulatory requirement, and only with your explicit consent where applicable.
4 How We Collect Your Data
Nustarga collects personal data through the following channels:
Directly From You
Most of the personal data Nustarga holds about you comes directly from information you provide during the registration process, when completing identity verification, when contacting support, or when updating your account profile. This is the primary source of your data and the most straightforward one.
Automatically Through Platform Use
When you access and use the Nustarga Platform, certain technical data is collected automatically. This includes your IP address, device and browser information, session data, and usage logs. This data is collected using standard web technologies including cookies, session tokens, and server logs.
From Payment Providers
When you make a deposit or withdrawal, your payment provider (GCash, Maya, your bank, or card issuer) may share transaction confirmation data with Nustarga for the purpose of matching the transaction to your account and verifying payment method ownership. Nustarga does not receive your full card or account credentials from payment providers — these remain with the provider.
From Identity Verification Services
Where Nustarga uses a third-party identity verification service to assist with KYC checks, that service may provide a verification outcome (pass/fail and confidence level) along with relevant extracted data from your submitted documents. These providers operate under their own privacy policies and under Nustarga's data processing instructions.
5 How Nustarga Uses Your Data
Nustarga processes your personal data for the following specific purposes, each with a clearly identified legal basis:
| Purpose | Legal Basis |
|---|---|
| Creating and managing your Nustarga account | Contract performance |
| Processing deposits and withdrawals | Contract performance |
| Identity verification (KYC) and age checks | Legal obligation / regulatory requirement |
| Fraud detection, anti-money laundering checks | Legal obligation / legitimate interest |
| Providing customer support | Contract performance / legitimate interest |
| Responsible gaming monitoring and player protection | Legal obligation / legitimate interest |
| Improving the Platform and user experience | Legitimate interest |
| Sending promotional communications (with consent) | Consent |
| Regulatory reporting to licensing authorities | Legal obligation |
Nustarga will not process your personal data for any purpose not listed in this Policy without first obtaining your consent or identifying a valid legal basis. Where processing is based on legitimate interest, we have assessed that our interest does not override your fundamental privacy rights.
7 How Long We Keep Your Data
Nustarga retains personal data only for as long as is necessary for the purposes set out in this Policy, or as required by applicable law and our gaming licence obligations.
Active Accounts
While your Nustarga account remains active, we retain all account, gaming, and financial data necessary to operate your account, provide support, and comply with ongoing regulatory requirements.
Closed and Inactive Accounts
Following account closure, Nustarga is required by its operating licence and applicable anti-money laundering regulations to retain KYC documentation, financial transaction records, and gaming activity logs for a minimum period of five years from the date of closure. This is a legal requirement and cannot be shortened on request.
Marketing Preferences
Records of your marketing consent preferences are retained for as long as necessary to demonstrate compliance with applicable consent requirements, typically for three years after the last interaction.
Support Communications
Customer support records are typically retained for three years from the date of the last interaction, or longer where relevant to an unresolved dispute or regulatory inquiry.
Upon expiry of the applicable retention period, data is securely deleted or anonymised in a manner that prevents re-identification.
8 How We Protect Your Data
Nustarga implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction.
Technical Measures
- All data transmitted between your device and the Nustarga Platform is encrypted using TLS (Transport Layer Security)
- Sensitive data at rest — including payment details and identity documents — is stored with AES-256 encryption
- Access to systems containing personal data is controlled using role-based access controls and multi-factor authentication
- Regular penetration testing and vulnerability assessments are conducted by qualified security teams
Organisational Measures
- Only staff who genuinely need access to personal data for their specific role are authorised to view it
- All staff handling personal data receive data protection training and are bound by confidentiality obligations
- Nustarga maintains an incident response plan for data breach scenarios, including notification procedures
Your Role in Security
While Nustarga takes extensive measures on its end, account security also depends on you. Keep your password secure, do not share your login credentials with anyone, enable any available two-factor authentication, and contact support immediately if you suspect unauthorised access to your account. Nustarga will never ask for your password by email, chat, or phone.
In the event of a data breach that is likely to result in a high risk to your rights and freedoms, Nustarga will notify you without undue delay and take immediate steps to contain and remediate the incident.
9 Cookies and Similar Technologies
Nustarga uses cookies and similar technologies (including local storage and session tokens) to operate the Platform effectively and improve your experience.
Types of Cookies We Use
- Essential cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. You cannot opt out of these without stopping use of the Platform.
- Functional cookies: Remember your preferences such as language settings, odds format, and game lobby layout so you don't have to reconfigure them on each visit.
- Analytics cookies: Help us understand how players navigate the Platform — which pages are visited most, where issues occur, and how features are used. This data is aggregated and not linked to your individual identity.
- Security cookies: Assist in fraud detection and prevention by monitoring unusual access patterns and session behaviour.
Managing Cookies
You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent the Platform from functioning correctly. Adjusting analytics or functional cookies will not affect your ability to log in or play, but may result in a less personalised experience.
10 Your Data Protection Rights
Under the Philippine Data Privacy Act of 2012 and applicable regulations, you have the following rights regarding your personal data held by Nustarga:
Request a copy of the personal data Nustarga holds about you. We will provide this within 30 days of your request, free of charge for the first request in any 12-month period.
Request correction of inaccurate or incomplete personal data. You can update most account information directly in your profile settings, or contact support for assistance with KYC documents.
Request deletion of your personal data. Note that some data must be retained for regulatory compliance (minimum five years post-closure). We will clearly explain what can and cannot be deleted in response to your request.
Object to processing based on legitimate interests, including direct marketing. If you object to marketing communications, you can unsubscribe at any time via the link in any email or through your account settings.
Request your personal data in a structured, commonly used, machine-readable format. This applies to data you provided directly to Nustarga and which is processed on the basis of your consent or a contract.
Where processing is based on your consent (such as marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.
To exercise any of these rights, contact Nustarga at support@nustarga.net. We will respond within 30 calendar days. If you are dissatisfied with our response, you may lodge a complaint with the National Privacy Commission of the Philippines.
11 Minors and Under-18 Players
The Nustarga Platform is strictly for adults aged 18 and above. Nustarga does not knowingly collect personal data from individuals under the age of 18. Our registration process includes age declaration, and identity verification procedures are designed to identify and reject underage applicants.
If Nustarga discovers that personal data has been collected from a person under 18, all associated data will be deleted immediately, the account will be closed, and any funds held will be handled in accordance with applicable regulatory requirements.
If you believe a minor has registered a Nustarga account, please contact us immediately at support@nustarga.net. We take this extremely seriously and will act promptly on any credible report.
12 Changes to This Privacy Policy
Nustarga may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform features. When material changes are made, we will notify registered players by email and/or by a prominent notice on the Platform at least 14 days before the changes take effect.
The "Last updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the Nustarga Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.
We encourage you to review this Policy periodically. If you disagree with any changes and wish to close your account, please contact support and we will assist you with account closure and any applicable data deletion requests.
We'll always let you know before significant changes take effect. We won't silently change how we use your data.
13 Contact Us About Privacy
For any questions, concerns, or requests related to this Privacy Policy or the personal data Nustarga holds about you, please contact us:
Email: support@nustarga.net
Subject line: Privacy Request – [Your registered email address]
We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them within 30 calendar days. Complex or sensitive requests may take longer, in which case we will update you on progress within the 30-day window.
If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph. Nustarga cooperates fully with the NPC in the course of any investigation.
We take every privacy inquiry seriously. Whether it's a simple access request or a complex concern about data use, our team will give it proper attention and respond clearly and honestly.