nustra.ph Privacy Policy

This Privacy Policy ("Policy") is issued by nustraph.net, operating as nustra.ph ("nustra.ph," "we," "us," "our"), and applies to all personal data collected from players, website visitors, and other individuals who interact with the nustra.ph online gaming platform and associated services (collectively, the "Services").

nustra.ph is committed to protecting the privacy and personal data of every individual who uses our platform. We operate under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR) and comply fully with the Republic Act No. 10173, also known as the Data Privacy Act of 2012, and all implementing rules and regulations issued by the National Privacy Commission (NPC) of the Philippines.

By registering for a nustra.ph account, accessing the platform, or otherwise using our Services, you acknowledge that you have read, understood, and consent to the practices described in this Policy. If you do not agree with this Policy, please discontinue use of the nustra.ph platform immediately.

For the purposes of the Data Privacy Act of 2012 and this Policy, nustra.ph (operating under nustraph.net) acts as the Personal Information Controller (PIC) with respect to all personal data collected from users of the nustra.ph platform.

As the Personal Information Controller, nustra.ph determines the purposes and means of processing your personal data. Where nustra.ph engages third-party service providers who process data on our behalf (such as payment processors, identity verification services, and game content providers), such parties act as Personal Information Processors (PIPs) and are bound by data processing agreements that require them to handle your data only as directed by nustra.ph and in accordance with applicable Philippine data privacy law.

Our designated Data Protection Officer (DPO) is responsible for overseeing compliance with this Policy and applicable data privacy regulations. Contact details for the DPO are provided in Section 15 of this Policy.

nustra.ph collects the following categories of personal data, depending on how you interact with our platform:

nustra.ph does not intentionally collect sensitive personal information (as defined under the Data Privacy Act, including data on health, religious beliefs, or sexual orientation) unless strictly required for identity verification, anti-money laundering compliance, or responsible gaming assessments — and only with your explicit consent where required.

nustra.ph collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, respond to surveys or promotions, or update your account details;
• Automatically: Through the nustra.ph platform via cookies, web beacons, server logs, and similar tracking technologies that record technical data about your device and usage patterns when you access our website or mobile platform;
• From third parties: From identity verification providers (for KYC), payment processors (for transaction verification), fraud detection services, and PAGCOR where required for regulatory compliance. We also receive data from social login providers where you choose to sign in using a linked account (e.g., Facebook);
• From publicly available sources: Where permitted by law, from publicly available registers or databases for fraud prevention and AML screening purposes.

nustra.ph processes your personal data for the following specific and documented purposes:

• Account management: Creating, verifying, and maintaining your nustra.ph player account, including processing login authentication and two-factor verification;
• Identity verification (KYC): Confirming your identity, age (21+), and eligibility to use the platform as required by PAGCOR regulations;
• Transaction processing: Processing deposits and withdrawals through GCash, PayMaya, BPI, BDO, Metrobank, and card payment methods in Philippine Peso (PHP);
• Regulatory compliance: Meeting our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012, including the filing of Suspicious Transaction Reports (STRs) with the Anti-Money Laundering Council (AMLC) where required by law;
• Fraud prevention and security: Detecting and preventing fraudulent activity, unauthorized account access, collusion, and bonus abuse;
• Customer support: Responding to your queries, complaints, and support requests through live chat and email;
• Responsible gaming: Monitoring gaming behaviour to identify potential problem gambling indicators, applying player-requested limits, and administering self-exclusion;
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, user experience, and game library quality;
• Marketing communications: Sending promotional offers, bonuses, and platform updates — but only where you have provided explicit consent to receive such communications and only through channels you have authorised.

Under the Data Privacy Act of 2012, nustra.ph processes personal data on the following lawful bases:

• Contractual necessity: Processing required to perform our obligations under the player account agreement — including identity verification, transaction processing, and account management;
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR licensing conditions, AMLA obligations, and NPC data privacy requirements;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where these interests are not overridden by your privacy rights;
• Consent: Processing for direct marketing communications, optional data collection beyond what is required for the contract, and processing of any sensitive personal information — where your explicit consent has been obtained.

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

nustra.ph does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard — for the purpose of processing your deposits and withdrawals;
• Identity verification providers: Third-party KYC and age verification services engaged to confirm your identity and eligibility in accordance with PAGCOR requirements;
• Game content providers: Licensed game providers who supply live dealer, slot, and other game content accessible through the nustra.ph platform. These providers may receive anonymised session data for technical and RTP reporting purposes;
• Fraud prevention services: Third-party providers engaged to assist with detecting and preventing fraudulent transactions and account abuse;
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities — where we are required by law, court order, or regulatory directive to disclose personal data;
• Professional advisers: Lawyers, auditors, and compliance consultants engaged by nustra.ph under confidentiality obligations for specific professional services.

nustra.ph retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Account and identity data: Retained for the duration of the account relationship and for five (5) years following account closure, in accordance with AMLA record-keeping requirements;
• Transaction data: Retained for a minimum of five (5) years from the date of the transaction, as required by AMLA and PAGCOR regulations;
• Gaming history: Retained for a minimum of two (2) years from the date of each gaming session, for dispute resolution and regulatory audit purposes;
• Support communications: Retained for two (2) years from the date of the interaction, for quality assurance and dispute resolution;
• Marketing consent records: Retained for three (3) years from the date of consent or withdrawal of consent;
• Technical and log data: Retained for twelve (12) months for security and fraud monitoring purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

nustra.ph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the nustra.ph platform;
• Encrypted storage of all sensitive personal and financial data at rest using industry-standard encryption algorithms;
• Access controls: Role-based access restrictions ensuring that only authorized nustra.ph personnel can access personal data, and only to the extent required for their specific function;
• Two-factor authentication (2FA) available for all player accounts and mandatory for internal administrative access;
• Regular security audits and penetration testing conducted by independent cybersecurity professionals;
• Incident response procedures that include breach containment, assessment, notification to affected players, and reporting to the NPC in accordance with the Data Privacy Act;
• Employee training on data privacy and security obligations under Philippine law.

nustra.ph uses cookies and similar tracking technologies to enhance platform functionality, analyze usage patterns, and deliver a more personalized experience. A cookie is a small text file stored on your device by your web browser when you visit a website.

nustra.ph uses the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication tokens, security cookies, and cookies required to maintain your login state. These cannot be disabled without impairing platform functionality;
• Functional cookies: Remember your preferences (such as language, notification settings, and responsible gaming tool configurations) to improve your experience on return visits;
• Analytics cookies: Collect anonymised data on how users interact with the nustra.ph platform, including page views, session durations, and navigation paths, to help us improve the platform;
• Security cookies: Assist in detecting and preventing fraudulent access attempts, bot activity, and unauthorized account use.

nustra.ph does not use third-party advertising cookies or retargeting technologies. You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the nustra.ph platform.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by nustra.ph:

To exercise any of the above rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Privacy Request." We will acknowledge your request within five (5) business days and provide a full response within fifteen (15) business days, as required by NPC guidelines.

nustra.ph employs age verification during the registration and KYC process to confirm that all players meet the minimum age requirement. If nustra.ph becomes aware that personal data has been collected from an individual under 21 years of age, the following steps will be taken immediately:

• The account will be suspended and investigated;
• All personal data collected from the underage individual will be securely deleted;
• Any deposits made will be returned through the original payment method without payment of any winnings;
• The matter will be reported to PAGCOR in accordance with our licensing obligations.

Parents or guardians who suspect that a minor has registered on nustra.ph are urged to contact our support team immediately at [email protected].

The nustra.ph platform may process personal data using servers or third-party service providers located outside the Philippines. Where personal data is transferred to a jurisdiction outside the Philippines, nustra.ph ensures that appropriate safeguards are in place in accordance with NPC regulations on cross-border data flows.

Such safeguards include:

• Contractual arrangements with third-party data processors that incorporate data protection clauses equivalent to those required under the Data Privacy Act of 2012;
• Transfer only to jurisdictions that the NPC has determined to provide an adequate level of protection for personal data;
• Application of encryption and access controls that meet Philippine data security standards regardless of where data is physically stored.

Where required, nustra.ph will provide additional information about specific cross-border transfers upon request to our Data Protection Officer.

nustra.ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. When material changes are made to this Policy, we will:

• Update the "Effective Date" at the top of this Policy;
• Notify registered players via email and/or a prominent notice on the nustra.ph platform at least seven (7) days before the changes take effect, where practicable;
• Where required by the Data Privacy Act, seek your renewed consent for any new processing activities that were not covered by your original consent.

Your continued use of the nustra.ph platform following the effective date of any updated Policy constitutes your acknowledgement of the changes. We encourage you to review this Policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by nustra.ph, please contact our Data Protection Officer through the following channels:

• Data Privacy Requests & DPO: [email protected] — Please use the subject line "Data Privacy Request" for all formal data subject rights exercises.
• General Support: [email protected] or via 24/7 live chat on the nustra.ph platform.
• Business & Legal: [email protected]

If you are not satisfied with our response to a data privacy concern, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the government body responsible for upholding and enforcing data privacy rights under the Data Privacy Act of 2012.