Privacy Policy – How nusatr Protects Your Personal Data

This Privacy Policy describes how nusatr ("we," "us," "the Platform") collects, processes, stores, and protects the personal information of registered members and visitors to nusatr.com ("you," "your"). It applies to all services offered through the nusatr website and any related communications.

By registering a nusatr account or using the platform in any way, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree, please refrain from using nusatr.

nusatr operates nusatr.com, an online gaming and sports betting platform serving players in the Philippines. As the entity that determines the purposes and means of processing your personal data, nusatr acts as the Personal Information Controller (PIC) within the meaning of the Data Privacy Act of 2012.

This means nusatr is responsible for ensuring that all personal data we hold is processed lawfully, transparently, and securely. nusatr has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act. You may contact the DPO through the details provided in Section 13 of this policy.

Third-party service providers engaged by nusatr to assist in delivering our services — such as payment processors, identity verification providers, and customer support tools — act as Personal Information Processors (PIPs) and process your data only on nusatr's documented instructions and subject to appropriate data processing agreements.

nusatr collects the minimum personal data necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of data we collect are outlined in the table below.

nusatr does not collect or store full credit or debit card numbers. Card payment processing is handled directly by our PCI-DSS compliant payment partners.

nusatr collects personal data through the following channels:

• Account Registration: Information you provide when you sign up for a nusatr account, including your name, date of birth, contact details, and chosen credentials.
• Identity Verification: Documents and photos you submit when completing KYC (Know Your Customer) verification required for withdrawals or as part of anti-money laundering compliance.
• Transactions: Data generated each time you make a deposit, withdrawal, or place a bet on nusatr, including the amounts, timestamps, and payment method details.
• Platform Usage: Technical data collected automatically as you browse nusatr.com and use the platform — such as your IP address, device information, and session activity.
• Customer Support: Information you share when contacting nusatr through live chat, email, or other support channels.
• Cookies and Similar Technologies: Data collected through cookies and tracking technologies as described in Section 9 of this policy.
• Third Parties: In some cases, nusatr may receive data from third-party identity verification providers or fraud detection services as part of our security and compliance processes.

nusatr processes your personal data for the following purposes:

• Account Management: To create and maintain your nusatr account, verify your identity, and enable you to log in securely.
• Service Delivery: To process your deposits and withdrawals, settle your bets, credit bonuses, and provide the full range of gaming services available on nusatr.
• Security and Fraud Prevention: To detect, prevent, and investigate suspicious activity, unauthorised account access, money laundering, and other illegal conduct on the platform.
• Legal and Regulatory Compliance: To meet nusatr's obligations under Philippine law, including the Data Privacy Act, Anti-Money Laundering Act, and applicable gaming regulations.
• Customer Support: To respond to your queries, resolve disputes, and process complaints efficiently.
• Responsible Gaming: To monitor gaming behaviour and identify patterns that may indicate problem gambling, and to administer responsible gaming tools such as deposit limits and self-exclusion.
• Platform Improvement: To analyse how the platform is used, identify areas for improvement, and develop new features that better serve the Filipino gaming community.
• Marketing and Promotions: To send you relevant promotional offers and updates about nusatr — but only where you have consented to receive such communications. You may opt out at any time.

nusatr processes your personal data based on one or more of the following legal grounds under the Data Privacy Act of 2012:

• Consent: Where you have given clear, informed consent to specific processing activities — for example, subscribing to marketing emails or consenting to cookies beyond strictly necessary ones.
• Contractual Necessity: Where processing is necessary to fulfil the agreement between you and nusatr — for example, processing your deposits and withdrawals or settling your bets.
• Legal Obligation: Where processing is required to comply with Philippine law — for example, reporting obligations under the Anti-Money Laundering Act or complying with lawful requests from regulatory authorities.
• Legitimate Interests: Where processing is necessary for nusatr's legitimate business interests, provided those interests are not overridden by your rights — for example, fraud detection, platform security, and improving the quality of services offered to Filipino players.

nusatr does not sell, rent, or trade your personal data to any third party. Your data may be shared only in the following limited and necessary circumstances:

• Payment Processors: When you make a deposit or withdrawal, your payment account details and transaction information are shared with the relevant payment service provider (such as GCash, Maya, or BancNet) solely to facilitate the transaction.
• Identity Verification Providers: Where required for KYC compliance, your identity documents may be shared with a licensed third-party verification provider who processes this data on nusatr's behalf.
• Fraud and Security Services: nusatr uses third-party tools to detect and prevent fraud and money laundering. These tools may process certain technical data such as IP addresses and device fingerprints.
• Customer Support Platforms: Third-party tools used to manage live chat and email support may store records of your support interactions.
• Regulatory and Law Enforcement Authorities: nusatr will disclose your personal data to the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or courts of law when legally required to do so or when we have a good-faith belief that disclosure is necessary to protect the rights, safety, or property of nusatr or others.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of nusatr's business, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer that materially affects your rights.

All third-party service providers processing your data on nusatr's behalf are bound by contractual data processing agreements that require them to handle your data securely and only for the purposes specified by nusatr.

nusatr retains your personal data only for as long as it is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting obligations.

• Active Account Data: While your nusatr account remains open, all account, transaction, and gameplay data is retained in full.
• Closed Account Data: When your account is closed — whether voluntarily or by nusatr — your personal data is retained for a minimum of five years after the closure date. This retention period is required to comply with the Anti-Money Laundering Act and other applicable Philippine regulations.
• Identity Verification Documents: Copies of government-issued ID documents submitted for KYC purposes are retained for five years following account closure.
• Support Records: Customer support interaction records are retained for three years from the date of the interaction.
• Marketing Data: If you withdraw consent to marketing communications, your contact details will be removed from marketing lists within 30 days. However, a record of your opt-out preference may be retained to ensure we respect your choice.

After the applicable retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be associated with you.

nusatr takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it from unauthorised access, disclosure, alteration, or destruction.

• Encryption: All data transmitted between your browser and nusatr's servers is encrypted using TLS (Transport Layer Security). Sensitive data stored in our systems is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within nusatr's systems is restricted to authorised personnel on a need-to-know basis. All staff with access to personal data receive regular data privacy training.
• Secure Infrastructure: nusatr's servers are hosted in secure data centres with physical security controls, firewall protection, intrusion detection systems, and regular security audits.
• Password Security: nusatr does not store your plaintext password. Passwords are hashed using a strong cryptographic algorithm. We recommend using a strong, unique password for your nusatr account and enabling any available two-factor authentication.
• Incident Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, nusatr will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach and will inform affected data subjects as required by law.

nusatr uses cookies and similar tracking technologies on nusatr.com to make the platform function correctly, improve your experience, and analyse usage. A cookie is a small text file stored on your device by your browser.

nusatr uses the following types of cookies:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable you to stay logged in, navigate between pages, and complete transactions. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember your preferences — such as your language settings and display preferences — to provide a more personalised experience on nusatr.
• Analytics Cookies: nusatr uses anonymised analytics data to understand how players navigate the platform so we can improve layout, performance, and features. This data does not identify you personally.
• Security Cookies: Used to detect and prevent fraudulent activity, verify account identity during login sessions, and protect your account from unauthorised access.

You can control cookies through your browser settings at any time. Note that disabling strictly necessary cookies will affect your ability to use the nusatr platform. Non-essential cookies can be declined without impacting core functionality.

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by nusatr:

To exercise any of the above rights, please contact nusatr's Data Protection Officer at privacy@nusatr.com. nusatr will respond to all valid data subject requests within 30 calendar days of receipt.

nusatr is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18 years old, please do not attempt to register an account or use any nusatr services.

If nusatr becomes aware that personal data has been collected from a minor, that account will be closed immediately, all balances forfeited, and the personal data will be deleted as soon as reasonably practicable. Parents or guardians who believe their child may have registered on nusatr should contact us immediately at privacy@nusatr.com.

nusatr may update this Privacy Policy from time to time to reflect changes in our data processing practices, platform services, or applicable law. When material changes are made, we will notify registered members via email at least seven days before the updated policy takes effect.

The most current version of this Privacy Policy will always be available on this page, with the effective date clearly displayed at the top. We recommend reviewing this page periodically to stay informed about how nusatr protects your personal data.

Your continued use of nusatr following notification of a policy update constitutes acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or how nusatr handles your personal data, you may contact our Data Protection Officer through the following channels:

• Privacy enquiries: privacy@nusatr.com
• General support: support@nusatr.com
• Live chat: Available 24/7 via your nusatr account dashboard

Please include "Data Privacy Request" in the subject line of your email so your message is routed to the correct team promptly. nusatr aims to acknowledge all privacy-related enquiries within two business days and to resolve them within 30 calendar days.

If you are not satisfied with nusatr's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the authority responsible for enforcing the Data Privacy Act of 2012.