nustas Privacy Policy

This Privacy Policy ("Policy") describes how nustas ("we," "us," "our," "the Platform") collects, uses, stores, discloses, and otherwise processes personal data belonging to visitors, registered players, and prospective users ("you," "your," "Data Subject") of the nustas website located at https://nustas.net and all associated services.

nustas is committed to protecting the privacy and confidentiality of your personal information in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC). This Policy applies to all personal data processed by nustas in both digital and, where applicable, physical formats.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together form the complete framework governing your relationship with nustas.

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, nustas acts as the Personal Information Controller (PIC) in respect of the personal data it collects directly from you through the Platform.

Where nustas engages third-party service providers — such as payment processors, KYC verification vendors, or game software providers — to process personal data on our behalf under documented instructions, those entities act as Personal Information Processors (PIPs). nustas ensures that all PIPs are bound by appropriate data processing agreements that require them to handle your data in compliance with RA 10173.

Our designated Data Protection Officer (DPO) oversees compliance with this Policy and the Data Privacy Act. You may reach our DPO through the contact details provided in Section 15 of this Policy.

nustas collects personal data through several channels, including the account registration form, the KYC verification process, financial transactions, your use of our games and services, and your communications with our support team. The categories of personal data we may collect include:

nustas does not intentionally collect sensitive personal information as defined under Section 3(l) of RA 10173 — such as racial or ethnic origin, health information, or religious beliefs — unless strictly required by regulatory obligations (e.g., certain AML compliance scenarios) and only with your explicit consent or as otherwise permitted by law.

nustas uses your personal data strictly for the following purposes. We do not use your data in ways that are incompatible with the purposes for which it was collected without obtaining your additional consent or as otherwise required by law.

• Account Management: Creating, maintaining, and managing your nustas player account, including authentication and account security.
• Service Delivery: Enabling you to access and use all games, features, promotions, and services available on the nustas Platform.
• KYC & Age Verification: Verifying your identity and confirming that you meet the minimum age requirement of 21 years as mandated under Philippine gaming regulations.
• Payment Processing: Processing deposits and withdrawals through supported payment channels including GCash, Maya, BPI, BDO, Metrobank, and others.
• Regulatory Compliance: Fulfilling our obligations under Philippine anti-money laundering laws (RA 9160 as amended), PAGCOR-related regulatory requirements, and other applicable legislation.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, account abuse, and security threats to the Platform and its players.
• Customer Support: Responding to your inquiries, resolving disputes, and providing assistance through our 24/7 support channels.
• Responsible Gaming: Monitoring gaming activity to identify patterns that may indicate problem gambling and administering responsible gaming tools such as deposit limits and self-exclusion.
• Platform Improvement: Analyzing aggregated usage data to improve the performance, design, and features of the nustas Platform.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates — but only where you have provided your express consent to receive such communications and have not subsequently opted out.

Under the Data Privacy Act of 2012, nustas processes your personal data on the following legal grounds:

• Consent: Where you have freely given, specific, informed, and unambiguous consent — for example, when opting into marketing communications or agreeing to this Privacy Policy at registration.
• Contractual Necessity: Processing that is necessary for the performance of our contract with you under the nustas Terms & Conditions — including account creation, service delivery, and payment processing.
• Legal Obligation: Processing required to comply with our obligations under Philippine law, including the Data Privacy Act, the Anti-Money Laundering Act, and regulations issued by PAGCOR.
• Legitimate Interests: Processing necessary for the legitimate interests of nustas — such as fraud prevention, platform security, and responsible gaming monitoring — provided that such interests are not overridden by your fundamental rights and freedoms.

nustas uses cookies and similar tracking technologies — including web beacons and local storage — to operate the Platform, maintain your session, and improve your experience. Below is a summary of the types of cookies we use:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without breaking core site functionality.
• Functional Cookies: Remember your preferences such as language settings and display options to personalize your experience on nustas.
• Analytics Cookies: Collect anonymized and aggregated data about how players use the Platform — such as pages visited and session length — to help us improve performance and content.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized account access, and bot behavior.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the nustas Platform. nustas does not use third-party advertising cookies to serve targeted ads on behalf of external advertisers.

nustas does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data only in the following limited circumstances:

• Service Providers (PIPs): Trusted third-party vendors who assist in operating nustas — including payment processors (e.g., GCash, Maya, BPI, BDO), KYC verification platforms, game software providers, customer support tools, and cloud hosting providers. All such providers are bound by data processing agreements requiring RA 10173-compliant handling of your data.
• Regulatory Authorities: Government agencies and regulators including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies — where disclosure is required by law, court order, or regulatory direction.
• Fraud Prevention Networks: Industry-wide fraud detection and prevention services where sharing is necessary to identify and prevent fraudulent activity that could harm players or the integrity of the Platform.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of assets involving nustas, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.
• With Your Consent: Any other sharing that you have explicitly consented to in connection with a specific feature or service.

When sharing data with any party, nustas applies the principle of data minimization — disclosing only the minimum amount of personal data necessary for the specified purpose.

nustas retains your personal data for no longer than is necessary to fulfill the purposes for which it was collected, subject to applicable legal and regulatory retention requirements. Our general retention schedule is as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized such that it can no longer be attributed to you as an identified or identifiable individual.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by nustas. These rights may be exercised by submitting a written request to our Data Protection Officer at the contact details in Section 15:

nustas will respond to all valid data subject requests within fifteen (15) business days of receipt. In cases where additional time is required due to complexity, we will notify you of the extension and the reasons for it. There is no charge for exercising your data subject rights unless requests are manifestly unfounded or excessive.

nustas implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• Encryption: All data transmitted between your device and the nustas Platform is protected using TLS (Transport Layer Security) encryption. Sensitive data at rest — including financial records and KYC documents — is encrypted using AES-256 or equivalent standards.
• Access Controls: Personal data is accessible only to nustas personnel and authorized processors who require it for their specific role. Access is governed by role-based permissions and reviewed regularly.
• Multi-Factor Authentication (MFA): Player accounts support multi-factor authentication to protect against unauthorized login attempts.
• Security Monitoring: Our systems are monitored continuously for anomalous activity, potential intrusions, and data breach indicators.
• Regular Audits: nustas conducts periodic security reviews and vulnerability assessments of its infrastructure, with findings addressed through a structured remediation process.
• Staff Training: All nustas personnel with access to personal data receive regular training on data protection obligations and security practices.

While nustas takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorized access to your nustas account.

nustas does not knowingly collect personal data from individuals below the age of 21. In the Philippines, participation in casino-style gaming is restricted to persons who are at least 21 years of age, in accordance with applicable gaming laws and PAGCOR regulations.

Our registration and KYC processes are specifically designed to prevent minors from accessing real-money gaming features. If nustas discovers that personal data has been collected from an individual below the age of 21 — whether through misrepresentation or otherwise — we will immediately:

• Suspend and close the associated account.
• Forfeit any balance in the account in accordance with our Terms & Conditions.
• Delete all personal data associated with the minor, subject to any mandatory retention obligations under Philippine law.
• Where applicable, report the matter to the appropriate regulatory or law enforcement authorities.

If you are a parent or guardian and believe that a minor has accessed nustas using your or another adult's credentials, please contact our support team immediately at [email protected].

nustas may send you promotional communications — including bonus offers, game announcements, tournament invitations, and platform updates — via email and SMS, but only where you have provided your express consent at registration or through your account settings.

Opting Out: You may withdraw your consent to marketing communications at any time by:

• Clicking the "Unsubscribe" link included in every marketing email we send.
• Updating your notification preferences in your nustas account settings.
• Contacting our support team at [email protected] and requesting removal from our marketing list.

Opting out of marketing communications will not affect transactional communications necessary to operate your account — such as deposit confirmations, withdrawal notifications, KYC status updates, and security alerts. These service communications are sent regardless of your marketing preferences as they are necessary for the performance of your contract with nustas.

nustas primarily processes and stores personal data within infrastructure located in or serving the Philippines and the Asia-Pacific region. However, certain third-party service providers — such as game software vendors, cloud hosting partners, and fraud prevention services — may process data in jurisdictions outside the Philippines.

Where personal data is transferred to a country that the National Privacy Commission has not recognized as providing an equivalent level of data protection, nustas ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses approved or recognized under Philippine data privacy law.
• Binding corporate rules where the recipient is part of a corporate group.
• Your explicit consent, where required and appropriate.

You may request information about the specific safeguards applied to any cross-border transfer of your personal data by contacting our Data Protection Officer.

nustas reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal and regulatory requirements. When material changes are made, we will provide notice through one or more of the following channels:

• A prominent notice on the nustas homepage or within the player account dashboard.
• An email notification to your registered email address, where practicable.
• An updated "Effective Date" at the top of this Privacy Policy page.

Your continued use of the nustas Platform after the effective date of any updated Privacy Policy constitutes your acknowledgment and acceptance of the changes. We encourage you to review this Policy periodically. The most current version is always available at https://nustas.net/privacy-policy.

This Privacy Policy was last reviewed and updated on January 1, 2026.

For any questions, concerns , or requests relating to this Privacy Policy or your personal data rights, please contact the nustas Data Protection Officer:

You also have the right to file a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC can be reached through their official government channels.