For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
- "nustatgame," "we," "us," or "our" — the operator of the nustatgame Platform at nustatgame.net, a PAGCOR-licensed online gaming and sports betting service serving Philippine players.
- "Platform" — the nustatgame website at nustatgame.net and any associated mobile-optimized interfaces or tools provided by nustatgame.
- "Personal Data" — any information, whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably ascertained, as defined under R.A. 10173.
- "Sensitive Personal Information" — personal data relating to an individual's date of birth, government-issued identification numbers, financial account details, and other information classified as sensitive under R.A. 10173.
- "Processing" — any operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, correction, or disposal.
- "Data Subject" — the individual to whom the personal data relates, i.e., the registered nustatgame player or website visitor.
- "DPA" — the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.
- "NPC" — the National Privacy Commission of the Republic of the Philippines.
- "KYC" — Know Your Customer identity verification as required under PAGCOR regulations and the Anti-Money Laundering Act.
nustatgame operates as the personal data controller for all personal data collected
through the nustatgame Platform. As a PAGCOR-licensed online gaming operator serving
Filipino players across Metro Manila, Cebu City, Davao, Quezon City, Makati, and the
broader Philippine archipelago, nustatgame determines the purposes and means of
processing personal data collected in connection with its gaming and sports betting
services.
nustatgame has appointed a Data Protection Officer (DPO) in accordance with the
requirements of the DPA and its Implementing Rules. The DPO is responsible for
overseeing nustatgame's compliance with data privacy obligations and serves as the
primary point of contact for data subject inquiries and NPC communications. The DPO
can be reached at [email protected]
with the subject line "Data Privacy — DPO Inquiry."
PAGCOR licensing and data obligations: As a PAGCOR-licensed operator,
nustatgame is subject to PAGCOR's data governance and record-keeping requirements in
addition to the DPA. Where PAGCOR regulations impose stricter data handling obligations
than the DPA, nustatgame will apply the stricter standard.
nustatgame collects personal data from you directly and automatically in the course of
providing our services. The categories of personal data we collect are described below:
3.1 Data You Provide Directly
- Registration data: Full legal name, date of birth, Philippine mobile number or email address, and chosen username as provided during account creation.
- KYC verification data: Government-issued identification (PhilSys ID, passport, driver's license, or SSS/GSIS ID), proof of address, and selfie photograph for identity verification purposes.
- Financial data: GCash number, Maya account, bank account details (BPI, BDO, Metrobank), and any other payment instrument registered to your nustatgame account. Full financial account credentials are not stored by nustatgame — payment processing is handled by our certified payment partners.
- Communication data: Content of your communications with nustatgame customer support via live chat or email, including any attachments submitted.
- Responsible gaming data: Deposit limits, self-exclusion requests, session time preferences, and any responsible gaming support requests submitted by you.
3.2 Data Collected Automatically
- Device and browser data: IP address, device type and operating system, browser type and version, screen resolution, and mobile device identifiers.
- Session and activity data: Login timestamps, session duration, game history, bet records, deposit and withdrawal transaction logs, and navigation patterns within the nustatgame Platform.
- Geolocation data: Approximate location data derived from IP address, used for fraud detection and compliance with jurisdiction-based access restrictions.
- Cookie and tracking data: As described in Section 7 of this Privacy Policy.
3.3 Summary of Data Categories and Purposes
| Data Category |
Primary Purpose |
Legal Basis |
| Registration & Identity |
Account creation and authentication |
Contractual necessity |
| KYC Documents |
Age verification, AML compliance |
Legal obligation (PAGCOR / AMLA) |
| Financial / Payment Data |
Deposits, withdrawals, fraud prevention |
Contractual necessity & legal obligation |
| Game & Betting History |
Account management, dispute resolution, PAGCOR reporting |
Legal obligation & legitimate interest |
| Device & Session Data |
Fraud detection, security, platform optimization |
Legitimate interest |
| Support Communications |
Customer service delivery and quality assurance |
Contractual necessity & legitimate interest |
| Marketing Preferences |
Personalized promotional communications |
Consent |
| Responsible Gaming Data |
Player protection, self-exclusion management |
Legal obligation & legitimate interest |
nustatgame uses the personal data we collect for the following purposes, always within
the bounds of the applicable legal basis described in Section 5:
- Account administration: Creating and managing your nustatgame account, authenticating your identity at login, processing account settings changes, and maintaining your gaming history and transaction records.
- Service delivery: Processing deposits and withdrawals via GCash, Maya, and other registered payment methods; delivering game content; settling bets and crediting winnings to your account balance.
- Identity and age verification: Conducting KYC checks to verify that you are 21 years of age or older, in compliance with PAGCOR regulations and Philippine law. This is a mandatory requirement and cannot be waived.
- Fraud prevention and security: Detecting and preventing unauthorized account access, fraudulent transactions, money laundering, bonus abuse, and other prohibited conduct as described in the nustatgame Terms and Conditions.
- Regulatory compliance: Meeting nustatgame's obligations under PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), the DPA, and other applicable Philippine laws, including mandatory reporting to PAGCOR and the Anti-Money Laundering Council (AMLC).
- Customer support: Responding to your inquiries, resolving disputes, and improving the quality of nustatgame's customer service interactions.
- Responsible gaming: Managing self-exclusion requests, deposit and loss limits, session time controls, and any other responsible gaming tools activated on your nustatgame account.
- Platform improvement: Analyzing aggregated and anonymized usage data to improve nustatgame's game offerings, user interface, payment processing, and overall platform performance.
- Marketing communications (consent-based only): Sending promotional emails, SMS notifications, and in-platform messages about nustatgame bonuses, new games, and special offers — only where you have provided explicit consent. You may withdraw consent at any time through your account notification settings.
nustatgame processes your personal data only where a valid legal basis exists under
the Data Privacy Act of 2012. The primary legal bases nustatgame relies upon are:
- Contractual necessity: Processing required to fulfill the agreement between you and nustatgame — including account creation, game delivery, payment processing, and customer support — is carried out on the basis that it is necessary to perform the contract you have entered into with nustatgame.
- Legal obligation: nustatgame processes personal data as required by PAGCOR licensing conditions, the Anti-Money Laundering Act, the Electronic Commerce Act, and other applicable Philippine laws. This includes KYC data collection, AMLC reporting, and mandatory record retention.
- Legitimate interest: nustatgame processes certain data — including device identifiers, session logs, and geolocation data — on the basis of our legitimate interest in preventing fraud, maintaining platform security, and improving our services, where such interest is not overridden by your rights and freedoms.
- Consent: Where nustatgame relies on your consent as the legal basis for processing — specifically for marketing communications and optional analytics — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
nustatgame does not sell, rent, or trade your personal data to third parties. We share
your personal data only in the limited circumstances described below:
- Payment service providers: nustatgame shares the minimum personal and financial data necessary to process your deposits and withdrawals with our certified payment partners, including GCash (Mynt), Maya, GrabPay, BPI, BDO, Metrobank, and Coins.ph. These providers are contractually bound to protect your data and may not use it for their own marketing purposes.
- KYC and identity verification providers: nustatgame may share identification documents with licensed third-party KYC verification services for age and identity confirmation. These providers operate under strict data processing agreements consistent with the DPA.
- Game content providers: Third-party game developers and live dealer studio operators that power games on the nustatgame Platform may receive limited session and bet data necessary to deliver their games. They do not receive your full personal profile.
- Regulatory authorities: nustatgame is required by law to report certain information to PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine government agencies. Such disclosures are made only as legally required and are not subject to your consent.
- Law enforcement: nustatgame will disclose personal data to law enforcement or government agencies when required by a valid legal order, subpoena, or warrant issued by a competent Philippine authority.
- Professional advisors: nustatgame may share personal data with legal, accounting, or audit firms on a confidential basis where necessary for the conduct of nustatgame's business operations.
No international data transfers without safeguards: Where nustatgame engages
service providers located outside the Philippines, nustatgame ensures that appropriate
contractual data protection safeguards are in place consistent with the DPA's requirements
for cross-border data transfers, including the use of standard contractual clauses or
equivalent protections recognized by the NPC.
nustatgame uses cookies and similar tracking technologies to operate the Platform
effectively and to improve the user experience. The categories of cookies used are:
- Strictly necessary cookies: Essential for the operation of the nustatgame Platform — including maintaining your login session, remembering game preferences, and securing your account against cross-site request forgery. These cannot be disabled without impairing core Platform functionality.
- Functional cookies: Remember your language preferences, display settings, and responsible gaming limit preferences across sessions on the nustatgame Platform.
- Analytics cookies: Aggregate and anonymized data about how players navigate the nustatgame Platform, used to improve game discovery, page load performance, and the deposit and withdrawal flow. This data does not identify individual users.
- Fraud detection tokens: Session tokens and device fingerprint data used to identify and prevent unauthorized access attempts and fraudulent activity on nustatgame accounts.
nustatgame does not use third-party advertising cookies or tracking pixels for targeted
advertising on external websites. You can manage cookie preferences through your browser
settings. Disabling strictly necessary cookies will affect your ability to use certain
features of the nustatgame Platform.
nustatgame retains personal data only for as long as is necessary for the purposes
for which it was collected, or as required by applicable law:
- Account and transaction data: Retained for a minimum of five (5) years from the date of the last account activity, as required by PAGCOR record-keeping obligations and the Anti-Money Laundering Act.
- KYC identity documents: Retained for a minimum of five (5) years following account closure, in compliance with AMLA record retention requirements.
- Game and betting history: Retained for five (5) years for dispute resolution, PAGCOR reporting, and AML compliance purposes.
- Customer support communications: Retained for three (3) years from the date of the relevant communication, unless a dispute remains unresolved, in which case records are retained until the dispute is fully closed.
- Marketing preference data: Retained until you withdraw your consent for marketing communications or for a maximum of two (2) years of account inactivity, whichever occurs first.
- Self-exclusion records: Retained for a minimum of five (5) years from the end of the self-exclusion period, to prevent re-registration during the exclusion period and to meet PAGCOR responsible gaming reporting requirements.
Following the expiry of the applicable retention period, nustatgame will securely delete
or anonymize your personal data in accordance with its data disposal procedures.
nustatgame implements technical and organizational security measures appropriate to the
sensitivity of the personal data we hold, including:
- Encryption in transit: All data transmitted between your device and the nustatgame Platform is encrypted using TLS 1.3. This includes login credentials, payment data, and all API communications between nustatgame's front-end and back-end systems.
- Encryption at rest: Sensitive personal data and financial information stored in nustatgame's databases is encrypted using AES-256 at rest.
- Access controls: nustatgame employs role-based access controls ensuring that personal data is accessible only to authorized personnel who require it to perform their legitimate job functions. Access logs are maintained and regularly reviewed.
- Password security: Account passwords are hashed using industry-standard cryptographic functions. nustatgame does not store passwords in plaintext form.
- Penetration testing and audits: nustatgame's security infrastructure is subject to regular penetration testing and security audits by qualified third-party specialists.
- Incident response: nustatgame maintains a data breach response procedure. In the event of a personal data breach that is likely to result in risk to data subjects, nustatgame will notify the NPC within 72 hours of becoming aware of the breach, and will notify affected data subjects without undue delay as required by the DPA.
Your role in security: While nustatgame takes extensive measures to protect
your personal data, the security of your account also depends on you. Use a strong, unique
password for your nustatgame account. Enable two-factor authentication (2FA). Never share
your login credentials with anyone. nustatgame will never ask you for your full password
or OTP via email, SMS, or social media.
Under the Data Privacy Act of 2012, you have the following rights in relation to
personal data held about you by nustatgame:
Right to Access
Request a copy of the personal data nustatgame holds about you, the purposes for which it is processed, and the recipients to whom it has been disclosed.
Right to Correction
Request correction of inaccurate, incomplete, or outdated personal data in your nustatgame account, subject to verification requirements.
Right to Erasure
Request deletion of personal data no longer necessary for the purpose it was collected, subject to overriding legal retention obligations under PAGCOR and AMLA.
Right to Object
Object to processing based on legitimate interest, including profiling for marketing purposes. Objection to processing based on legal obligation may not be effective where a statutory duty applies.
Right to Data Portability
Receive your personal data in a structured, commonly used, machine-readable format, where technically feasible and where processing is based on consent or contract.
Right to Lodge Complaints
File a complaint with the National Privacy Commission (NPC) of the Philippines if you believe nustatgame has breached your rights under the DPA.
To exercise any of the above rights, submit a written request to
[email protected] with the subject
line "Data Subject Rights Request." nustatgame will acknowledge your request within five
(5) business days and will provide a substantive response within fifteen (15) business
days, extendable by a further fifteen (15) days where the complexity of the request
requires it. nustatgame may require identity verification before processing a data
subject rights request.
The nustatgame Platform is strictly prohibited for individuals under the age of
21 years, in compliance with PAGCOR regulations and Philippine law
governing online gambling. nustatgame does not knowingly collect personal data from
individuals under 21 years of age.
Age is verified as part of the mandatory KYC process that all Players must complete
before withdrawals are permitted. Where nustatgame discovers, after account creation,
that a user is under 21 years of age, the account will be immediately suspended, all
gaming activity voided, and the matter reported to PAGCOR and relevant Philippine
authorities in accordance with our legal obligations.
If you are a parent or guardian and believe that a minor has registered an account
on the nustatgame Platform, please contact us immediately at
[email protected].
We will investigate and take prompt action consistent with our PAGCOR obligations.
The nustatgame Platform may contain links to third-party websites or services — for
example, links to payment provider websites for the purpose of completing a transaction.
nustatgame is not responsible for the privacy practices or content of third-party sites.
We strongly recommend reviewing the privacy policies of any third-party site you visit
from the nustatgame Platform.
Third-party game providers whose games are embedded within the nustatgame lobby operate
under their own privacy policies in addition to their data processing agreements with
nustatgame. nustatgame conducts due diligence on third-party providers to ensure that
their data handling practices are consistent with the DPA before onboarding them to the
Platform.
nustatgame reserves the right to update or amend this Privacy Policy at any time to
reflect changes in our data processing practices, changes in applicable Philippine law,
or updates to our PAGCOR licensing obligations. Material changes to this Privacy Policy
will be communicated to registered Players via email or in-platform notification at least
seven (7) calendar days before they take effect.
The most current version of this Privacy Policy is always published at
nustatgame.net/privacy-policy and is identified by the effective date at the top of
the document. Your continued use of the nustatgame Platform following a policy update
constitutes your acknowledgment of the revised policy.
This Privacy Policy was last updated and became effective on
1 January 2026. This is Version 2.0 of the nustatgame Privacy Policy.
For all privacy-related inquiries, data subject rights requests, or concerns about
how nustatgame handles your personal data, please contact the nustatgame Data
Protection Officer:
Data Protection Officer — nustatgame
Email: [email protected]
Subject line: "Data Privacy — DPO Inquiry"
Response time: Within 5 business days for acknowledgment; 15 business days for substantive response
Platform: nustatgame.net
If you are not satisfied with nustatgame's response to your privacy inquiry, you have
the right to escalate your complaint to the National Privacy Commission (NPC) of the
Philippines. The NPC provides formal complaint resolution services for data subjects
whose rights under the Data Privacy Act may have been violated.
NPC complaint avenue: The National Privacy Commission accepts formal
complaints from data subjects regarding violations of the Data Privacy Act of 2012.
Filing a complaint with nustatgame's DPO first is encouraged, but is not a prerequisite
to filing with the NPC. Contact information for the NPC is publicly available through
official Philippine government channels.