nusta Privacy Policy

nusta ("we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses the nusta platform at nusta.ws, the nusta mobile application, and any other interface we operate. This Privacy Policy sets out in clear terms what personal data we collect from you, why we collect it, how we use it, and what rights you have over your own information.

This Privacy Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). Where nusta's operations are subject to additional data protection requirements under PAGCOR regulations, those requirements supplement this Policy.

By registering an account on nusta, completing the nusta Login process, or otherwise using any nusta service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you should not use the nusta platform.

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, nusta is the personal information controller in respect of the personal data collected through the nusta platform. This means nusta determines the purposes for which and the manner in which your personal data is processed.

nusta has appointed a Data Privacy Officer ("DPO") who is responsible for overseeing compliance with this Privacy Policy and with applicable Philippine data privacy laws. The DPO is the designated point of contact for all data privacy concerns, rights requests, and regulatory correspondence relating to personal data processed by nusta.

If you have any questions about how nusta handles your personal data, or if you wish to exercise any of your rights under the Data Privacy Act of 2012, you may contact the DPO through the support channels described in Section 15 of this Policy.

nusta collects the minimum personal data required to operate a safe, legally compliant, and enjoyable gaming platform for Filipino players. The categories of personal data we collect are described in the table below.

nusta does not collect sensitive personal information as defined under the Data Privacy Act of 2012 (such as health data, political affiliations, or biometric data) unless specifically required by PAGCOR or Philippine law for the purpose of responsible gaming interventions or AML compliance, and only with your explicit consent or on a lawful basis.

nusta collects personal data through the following means:

• Direct interactions: Data you provide when registering your account, completing the nusta Login process, uploading KYC documents, making deposits or withdrawals, using live chat support, or corresponding with us by email.
• Automated technologies: Technical data collected automatically when you access the nusta platform, including IP addresses, device identifiers, browser characteristics, and session data collected through cookies and similar tracking technologies (see Section 8).
• Payment processors: Transaction confirmation data received from GCash, PayMaya, BPI Online, BDO Online, Metrobank Online, and other payment providers you use to fund your nusta account. This data is limited to what is necessary to confirm and reconcile your transactions.
• Identity verification providers: Where nusta uses accredited third-party KYC and identity verification services, those providers may share the result of document checks and identity match scores with us. nusta does not receive raw biometric data from these providers.
• Fraud prevention and security partners: Risk signals, device fingerprinting data, and fraud indicators shared by our security service partners to protect nusta and its players from fraudulent activity.
• Publicly available sources: Information from publicly accessible government databases, court records, or sanctions lists used for AML screening, solely to the extent required by Philippine law.

nusta uses the personal data we collect strictly for the following purposes:

• Account registration and management: Creating and maintaining your nusta account, authenticating your nusta Login, managing your account preferences and settings.
• Identity and age verification: Confirming that you meet the 21+ age requirement and that you are who you say you are, in compliance with PAGCOR KYC requirements.
• Payment processing: Facilitating deposits to and withdrawals from your nusta account via GCash, PayMaya, and Philippine banking partners.
• Gaming operations: Operating all betting and gaming products on the platform, calculating and crediting winnings, managing bonus offers and wagering requirements.
• Regulatory compliance: Fulfilling nusta's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA) of the Philippines, and the Data Privacy Act of 2012. This includes mandatory reporting to PAGCOR and the Anti-Money Laundering Council (AMLC).
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling, administering self-exclusion and cooling-off periods, and providing responsible gaming interventions where needed.
• Customer support: Responding to your queries, resolving disputes, and improving the quality of our support services.
• Marketing communications: Sending you promotional offers, new game announcements, and personalised recommendations — only where you have opted in to receive such communications. You may withdraw your marketing consent at any time.
• Platform improvement: Analysing aggregated usage data to improve the nusta platform, fix bugs, and enhance the player experience.

Under the Data Privacy Act of 2012, nusta processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your nusta account and provide the gaming services you have subscribed to. Without this processing, nusta cannot provide its services to you.
• Legal obligation: Processing required to comply with Philippine law, including PAGCOR licensing conditions, AMLA obligations, tax reporting requirements, and NPC compliance mandates.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where our legitimate interests in operating a safe and compliant platform do not override your fundamental rights and freedoms.
• Consent: Processing for marketing communications and optional personalisation features, based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Where nusta processes your data on the basis of consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect nusta's ability to continue processing your data on other lawful bases (e.g., contractual necessity or legal obligation).

nusta does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share your personal data only in the following limited circumstances:

• PAGCOR and Philippine regulatory authorities: nusta is obligated to share player data with PAGCOR as part of its licensing compliance. This includes reporting on player activity, KYC records, and any suspicious transaction reports required under the AMLA.
• Payment service providers: Your financial data is shared with GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors strictly to facilitate your deposits and withdrawals. These providers process your data under their own privacy policies and are bound by their own regulatory obligations.
• KYC and identity verification providers: Accredited third-party services that assist nusta in verifying your identity and age. These providers act as data processors on nusta's behalf and are contractually bound to process your data only for the purpose of identity verification.
• Fraud prevention and security partners: Service providers that help nusta detect and prevent fraudulent activity on the platform. Data shared is limited to technical identifiers and risk signals, not full personal profiles.
• IT infrastructure and hosting providers: Cloud hosting and platform infrastructure providers that store and process nusta's data on our behalf, under strict data processing agreements that prohibit any independent use of player data.
• Law enforcement and government agencies: Where required by Philippine law, court order, or lawful government request, nusta will disclose personal data to the relevant authorities. nusta will notify you of any such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of nusta's business or assets, player personal data may be transferred to the acquiring entity, subject to the same privacy protections as described in this Policy. You will be notified of any such transfer.

nusta uses cookies and similar tracking technologies (such as web beacons and local storage) on the nusta website and application. These technologies help us deliver a secure, functional, and personalised experience for Filipino players.

The types of cookies nusta uses are:

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that keep you logged in during your nusta Login session and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming settings (e.g., deposit limits you have set). Disabling these cookies may reduce your experience but will not prevent you from using the platform.
• Analytics cookies: Collect aggregated, anonymised data about how players use the nusta platform — which games are most popular, where players navigate, and how long sessions last. This data helps nusta improve its services. nusta uses only first-party analytics and does not share raw analytics data with third-party advertising networks.
• Security cookies: Used by our fraud prevention systems to detect anomalous behaviour patterns associated with account takeover attempts, multi-accounting, and bonus abuse.

You can manage your cookie preferences through your web browser's settings. Most browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will prevent you from completing the nusta Login process and using the platform.

nusta does not use third-party advertising cookies, retargeting pixels, or social media tracking cookies that track your activity across other websites.

nusta retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain your active account, and to comply with nusta's legal obligations under Philippine law. The following retention periods apply:

At the end of the applicable retention period, nusta will securely delete or irreversibly anonymise your personal data. Anonymised data (which can no longer be linked to any individual) may be retained indefinitely for statistical and platform improvement purposes.

nusta implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security framework includes:

• Encryption in transit: All data transmitted between your device and the nusta platform is encrypted using TLS 1.2 or higher. nusta enforces HTTPS across all platform endpoints and rejects insecure connections.
• Encryption at rest: Personal data and financial records stored on nusta's servers are encrypted using AES-256 encryption. Encryption keys are managed through a secure key management system with strict access controls.
• Access controls: Access to personal data is restricted to nusta staff members who require it to perform their job functions. All staff access is logged, and access privileges are reviewed periodically. Former employees' access is revoked immediately upon departure.
• Two-factor authentication: nusta's internal systems require multi-factor authentication for all staff accessing player data. We also offer and encourage 2FA for player nusta Login accounts.
• Penetration testing and security audits: nusta commissions regular third-party penetration tests and security audits of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: nusta maintains a documented data breach response plan. In the event of a personal data breach, nusta will notify the National Privacy Commission within 72 hours of discovery, and will notify affected players without undue delay where the breach poses a high risk to their rights and freedoms.

As a data subject under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by nusta. You may exercise any of these rights by contacting nusta's Data Privacy Officer as described in Section 15.

• Right to be informed: You have the right to be informed of whether nusta holds personal data about you, the nature of that data, and how it is being processed. This Privacy Policy fulfils nusta's obligation to inform you at the time of data collection.
• Right of access: You have the right to request a copy of the personal data nusta holds about you, along with information about the purposes of processing, the categories of data, and any third parties to whom it has been disclosed.
• Right to rectification: If any personal data nusta holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update basic account information directly through your account settings after completing nusta Login.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to nusta's legal obligations to retain data under PAGCOR and AMLA requirements (see Section 9).
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes. You also have the right to object to processing carried out on the basis of nusta's legitimate interests, where you have grounds relating to your particular situation.
• Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another personal information controller where technically feasible.
• Right to file a complaint: If you believe nusta has not handled your personal data in accordance with the Data Privacy Act of 2012, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.

nusta will respond to all valid data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, with written notice to you explaining the reason for the extension.

The nusta platform is strictly for individuals aged 21 years and above. This is a firm legal requirement under Philippine gaming regulations and PAGCOR licensing conditions. nusta does not knowingly collect personal data from any person under the age of 21.

nusta's registration process includes mandatory age verification, and all accounts are subject to KYC verification that confirms the account holder's age. Any account found to belong to a person under 21 years of age will be immediately closed and all associated funds will be handled in accordance with PAGCOR's procedures for underage gambling incidents.

If you are a parent or guardian and you believe that a minor under your care has created a nusta account or provided personal data to nusta, please contact our Data Privacy Officer immediately using the contact details in Section 15. nusta will promptly investigate and take appropriate action, including deletion of the minor's data.

nusta's primary operations and data storage are based within the Philippines. However, some of our technology service providers — including cloud hosting infrastructure and fraud prevention partners — may process data in other countries.

Where personal data is transferred outside of the Philippines, nusta ensures that adequate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012. These safeguards include:

• Data processing agreements: All third-party processors handling nusta player data outside the Philippines are bound by contractual data processing agreements that require them to maintain data protection standards equivalent to those required under Philippine law.
• Standard contractual clauses: Where appropriate, nusta incorporates standard contractual clauses approved by the National Privacy Commission into its agreements with international service providers.
• Adequacy assessments: Before engaging any international service provider, nusta conducts a privacy impact assessment to determine whether the provider's data protection framework offers adequate protection for Filipino players' personal data.

By using the nusta platform, you acknowledge that your personal data may be transferred to and processed in countries other than the Philippines, subject to the safeguards described above. If you have concerns about international transfers of your data, please contact the DPO as described in Section 15.

nusta reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable Philippine law, or updates to PAGCOR regulatory requirements. When we make material changes to this Policy, we will:

• Post the updated Privacy Policy on this page with a revised effective date;
• Display a prominent notice on the nusta platform notifying players of the update;
• Where required by law or where the changes materially affect your rights, send you a direct notification via email or in-platform message before the changes take effect.

Your continued use of the nusta platform after any updates to this Privacy Policy constitutes your acknowledgment of and agreement to the revised terms. If you do not agree with the updated Privacy Policy, you should stop using the nusta platform and contact our Data Privacy Officer to exercise your right to erasure where applicable.

We encourage you to review this Privacy Policy periodically to stay informed about how nusta is protecting your personal data. The current version of this Policy is always available at nusta.ws/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to nusta's handling of your personal data, you may contact nusta's Data Privacy Officer through the following channels:

• Email: [email protected] (please include "Data Privacy Request" in the subject line)
• Live chat support: Available after completing nusta Login via the support widget on the platform dashboard
• In-platform support ticket: Submit a support ticket through your nusta account settings, selecting "Privacy & Data Request" as the category

nusta's Data Privacy Officer will acknowledge your request within three (3) business days and will provide a substantive response within thirty (30) calendar days, as required by the Data Privacy Act of 2012.

If you are not satisfied with nusta's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines:

• National Privacy Commission (NPC)
• 3rd Floor, Core G, DICT Building, C.P. Garcia Ave., Diliman, Quezon City
• Website: privacy.gov.ph