Last Updated: 1 June 2025 · Version: 3.1 · Applies to all Nus Star accounts at nusstar.xyz
1
About This Privacy Policy
This Privacy Policy describes how Nus Star ("we," "us," "our") collects, uses, stores, shares, and protects the personal information of individuals ("you," "your") who register for, access, or use any service provided through the Nus Star platform at nusstar.xyz — including our online casino, sportsbook, VIP Club, and all associated mobile and web interfaces.
This policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission (NPC). It applies to all personal data processed by Nus Star, whether collected online, by phone, or in written correspondence with our support team.
By registering an account with Nus Star, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, please do not create an account or continue to use the platform.
Data Controller: Nus Star is the data controller for all personal information collected through nusstar.xyz. Our Data Protection Officer can be reached at privacy@nusstar.xyz. As a PAGCOR-licensed operator, we are subject to both NPC and PAGCOR oversight with respect to our handling of player data.
2
Personal Data We Collect
Nus Star collects only the personal data necessary to provide our services, comply with regulatory obligations, and maintain the security and integrity of the platform. Below is a summary of the categories of data we collect and the specific information within each category.
| Data Category |
Information Collected |
When Collected |
| Identity Data |
Full legal name, date of birth, nationality, government ID number and type (passport, UMID, PhilSys, driver's licence, PRC ID) |
KYC verification |
| Contact Data |
Email address, Philippine mobile number, residential address |
Registration |
| Account Data |
Username, encrypted password, account tier, VIP status, communication preferences |
Registration & ongoing |
| Financial Data |
GCash or Maya registered name and number, bank account name and number (for bank transfers), partial card number (last 4 digits only for Visa/Mastercard), transaction history |
Deposits & withdrawals |
| Gaming Activity |
Bet history, game session logs, win/loss records, bonus activity, responsible gaming tool usage |
During platform use |
| Technical Data |
IP address, device type, browser type and version, operating system, session timestamps, geolocation (country/region) |
All platform access |
| Communication Data |
Support chat transcripts, email correspondence, feedback submissions |
Customer interactions |
| Verification Documents |
Copies of government-issued ID, proof of address documents, selfie verification images (where required) |
KYC verification |
Data We Do Not Collect
Nus Star does not collect full credit or debit card numbers. We do not collect biometric data beyond what is required for document verification purposes. We do not collect your PAGCOR self-exclusion status directly — this information is supplied to us by PAGCOR as part of our licence obligations.
3
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
- Account creation and management: To register your Nus Star account, verify your identity, maintain your account, and communicate with you about your account status.
- Service delivery: To process deposits and withdrawals, accept bets, settle winnings, deliver promotional offers, and operate our online casino and sportsbook services.
- Identity verification and KYC compliance: To verify that you are who you say you are, that you meet the age requirement of 21 years, and that you are eligible to use Nus Star's services under PAGCOR regulations.
- Anti-money laundering (AML) compliance: To monitor transactions for suspicious activity as required by the Anti-Money Laundering Act (RA 9160 as amended) and PAGCOR's AML guidelines.
- Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and other prohibited conduct described in our Terms and Conditions.
- Responsible gaming: To monitor gaming activity for signs of problematic gambling behaviour, apply responsible gaming tools at the player's request, and enforce self-exclusion restrictions.
- Customer support: To respond to your enquiries, resolve disputes, and process complaints through our support channels.
- Platform improvement: To analyse aggregated, anonymised usage data to improve the design, performance, and functionality of the Nus Star platform.
- Legal and regulatory compliance: To comply with our obligations under PAGCOR regulations, Philippine tax law, and any court order or legal process requiring disclosure of player data.
- Marketing communications: To send you promotional offers, platform updates, and news about Nus Star — but only if you have opted in to receive such communications. You can opt out at any time through your account settings or by emailing privacy@nusstar.xyz.
4
Legal Basis for Processing
Under the Philippine Data Privacy Act, Nus Star processes your personal data on the following legal grounds:
- Contractual necessity: Processing required to fulfil the Terms and Conditions you agreed to when registering your Nus Star account — including account management, transaction processing, and service delivery.
- Legal obligation: Processing required to comply with applicable law, including PAGCOR licence conditions, AML obligations, KYC requirements, and NPC data handling standards.
- Legitimate interests: Processing carried out for Nus Star's legitimate business interests, including fraud prevention, security monitoring, and platform improvement — provided those interests do not override your fundamental rights.
- Consent: Processing based on your explicit opt-in consent, specifically for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
5
Data Sharing & Disclosure
Nus Star does not sell, rent, or trade your personal data to any third party for their own marketing use. Your data may be shared with the following categories of recipients only where necessary and lawful:
- PAGCOR: As a licensed operator, Nus Star shares player data with PAGCOR as required by our licence conditions, including for regulatory audits and responsible gaming compliance.
- Payment service providers: GCash (G-Xchange Inc.), Maya (PayMaya Philippines Inc.), InstaPay/PESONet network banks, and Visa/Mastercard network processors receive the minimum financial data necessary to process your transactions. These providers have their own privacy policies and data handling obligations.
- Game content providers: Live dealer and game software providers (such as Evolution Gaming and Pragmatic Play) may receive anonymised session data necessary to deliver their game services. They do not receive your identity or financial data.
- Identity verification services: Third-party KYC technology providers process identity document images on Nus Star's behalf under strict data processing agreements.
- Law enforcement and regulatory bodies: Where required by a valid court order, warrant, or legal process under Philippine law, Nus Star will disclose the minimum personal data required.
- Anti-fraud networks: Nus Star participates in shared fraud prevention networks where data about confirmed fraudulent activity (not general player data) may be shared to protect multiple platforms from the same bad actors.
Important: All third parties who process personal data on behalf of Nus Star are bound by written data processing agreements that require them to handle your data in accordance with RA 10173 standards and to use it only for the specific purpose for which it was shared.
6
Cookies & Tracking Technologies
Nus Star uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. Here is what we use and why:
Essential Cookies
These are necessary for the platform to function. They enable login session management, security token verification, and core platform features. You cannot opt out of essential cookies without disrupting your ability to use Nus Star.
Functional Cookies
These remember your preferences — such as your preferred language, display settings, and responsible gaming tool configurations. Disabling them will mean the platform cannot remember your settings between sessions.
Analytics Cookies
We use anonymised analytics to understand how players navigate the platform — which pages are visited most, where players drop off, and how features are being used. This data is aggregated and does not identify individual players. You can opt out of analytics tracking through the cookie preferences panel accessible in the platform footer.
Managing Cookies
Most modern browsers allow you to control cookies through their settings. Blocking all cookies will affect your ability to log in and use core features of Nus Star. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.
7
Data Retention
Nus Star retains personal data for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply:
- Active account data: Retained for the duration of your account plus 5 years after account closure, as required by PAGCOR record-keeping obligations.
- Transaction records: Retained for 10 years from the date of transaction, in compliance with Philippine AML record-keeping requirements under RA 9160.
- KYC and identity documents: Retained for 5 years from account closure or the end of the business relationship, whichever is later.
- Customer support communications: Retained for 3 years from the date of the interaction.
- Marketing preference data: Retained until you opt out, plus 1 year thereafter to maintain proof of consent withdrawal.
- Fraud and security logs: Retained for 5 years to support ongoing fraud investigations and regulatory audits.
After the applicable retention period expires, personal data is securely deleted or anonymised using industry-standard methods that prevent reconstruction of the original data.
8
Data Security Measures
Nus Star implements a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our key security measures include:
- Transport encryption: All data transmitted between your device and Nus Star servers is protected by TLS 1.3 with 256-bit AES encryption.
- Data-at-rest encryption: Personal data stored in Nus Star's databases is encrypted using AES-256 at rest. Encryption keys are managed separately from the data they protect.
- Access controls: Internal access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality agreements and regular privacy training.
- Multi-factor authentication: All administrative access to production systems containing personal data requires multi-factor authentication.
- Regular security audits: Nus Star conducts penetration testing and vulnerability assessments on a scheduled basis, and remediates identified issues according to severity level.
- Intrusion detection: Automated monitoring systems are in place to detect unusual access patterns or potential security incidents in real time.
- Vendor security standards: All third-party vendors who process personal data on Nus Star's behalf are assessed for their security practices before engagement and are subject to contractual security requirements.
No security system is completely impenetrable. While Nus Star takes every reasonable precaution to protect your data, we cannot guarantee absolute security. If you believe your account has been compromised, contact support@nusstar.xyz immediately.
9
Your Rights Under RA 10173
The Philippine Data Privacy Act gives you specific, enforceable rights over your personal data. Nus Star is committed to making these rights easy to exercise. Here is what you are entitled to:
Right to Be Informed
You have the right to know what personal data Nus Star holds about you and how it is being used. This Privacy Policy is the primary way we fulfil this right.
Right to Access
You can request a copy of all personal data Nus Star holds about you at any time. We will provide a structured data export within 15 business days of your verified request.
Right to Correction
If any of your personal data held by Nus Star is inaccurate or incomplete, you have the right to have it corrected. Contact support@nusstar.xyz with the correction and supporting evidence.
Right to Erasure
You may request deletion of personal data that is no longer necessary for its original purpose. Note that some data must be retained for regulatory reasons (see Section 7) and cannot be deleted regardless of request.
Right to Object
You may object to processing of your personal data for direct marketing purposes at any time. To opt out of marketing communications, use the unsubscribe link in any email or update your preferences in account settings.
Right to Data Portability
You may request your personal data in a commonly used, machine-readable format for transfer to another platform or service. Submit portability requests to privacy@nusstar.xyz.
Right to Complain to the NPC
If you believe Nus Star has violated your data privacy rights and we have not resolved your concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) at www.privacy.gov.ph.
To exercise any of the above rights, submit your request in writing to privacy@nusstar.xyz. We will acknowledge your request within 3 business days and respond fully within 15 business days. We may ask you to verify your identity before processing the request.
10
Children's Privacy
Nus Star's services are strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under 21. If you are under 21, please do not attempt to register or use Nus Star in any way.
If Nus Star becomes aware that it has inadvertently collected personal data from a person under 21, we will immediately suspend the relevant account, delete all associated personal data, and notify PAGCOR as required. If you believe that a person under the legal age has registered on Nus Star using false information, please contact us at support@nusstar.xyz immediately.
11
International Data Transfers
Nus Star's primary data infrastructure is located in the Philippines. Some personal data may be processed by our technology and service partners in data centres outside the Philippines — for example, certain cloud infrastructure providers, live dealer game servers, or analytics platforms may operate from Singapore, Hong Kong, or other jurisdictions.
When personal data is transferred outside the Philippines, Nus Star ensures that appropriate safeguards are in place, including:
- Binding contractual clauses based on the NPC's standard contractual clauses for data transfers
- Selection of service providers in jurisdictions with an adequate level of data protection as recognised by the NPC
- Transfer only of the minimum data necessary for the specific service purpose
Your financial data — GCash details, Maya details, bank account numbers — is processed exclusively within Philippine payment infrastructure and is never transferred to servers outside the Philippines.
12
Data Breach Response Protocol
In the event of a personal data breach — meaning a security incident that results in the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to personal data — Nus Star follows a defined incident response protocol:
- Containment: The breach is contained and the affected systems are isolated as quickly as possible to prevent further exposure.
- Assessment: The scope, nature, and likely impact of the breach are assessed by our security and privacy teams within the first 24 hours.
- NPC notification: Where the breach is likely to give rise to a real risk of serious harm to affected individuals, Nus Star notifies the National Privacy Commission within 72 hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03.
- Player notification: Affected players are notified promptly with clear information about what happened, what data was affected, what Nus Star has done in response, and what you should do to protect yourself.
- Remediation: The root cause of the breach is addressed and preventive measures are implemented to reduce the risk of recurrence.
Nus Star maintains a data breach register as required by the NPC, which records all confirmed breaches regardless of whether NPC notification was required.
13
Changes to This Privacy Policy
Nus Star may update this Privacy Policy from time to time as our services evolve, as Philippine privacy law changes, or as NPC issues new guidelines affecting our data practices. We will notify you of material changes by email to your registered address and by posting a prominent notice on the Nus Star homepage at least 7 days before the changes take effect.
The date at the top of this policy reflects when it was last updated. Your continued use of Nus Star after a policy update constitutes your acknowledgement of the revised terms. If you disagree with any change, you have the right to close your account before the effective date by contacting support@nusstar.xyz.
14
Contact Us & Data Protection Officer
For all privacy-related enquiries, data subject requests, or concerns about how Nus Star handles your personal information, please contact our Data Protection Officer (DPO):
Data Protection Officer — Nus Star
Email: privacy@nusstar.xyz
General Support: support@nusstar.xyz
Response Time: Within 3 business days (acknowledgement); 15 business days (full response)
If you are not satisfied with how Nus Star has handled your privacy concern, you may also file a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the government body responsible for administering and implementing the Data Privacy Act of 2012.
