nustabet Privacy Policy

nustabet ("nustabet," "we," "us," "our") is committed to protecting the privacy and personal data of all individuals who interact with the nustabet platform. We understand that entrusting us with your personal information is a significant act of confidence, and we take that responsibility seriously.

This Privacy Policy is designed to give you a clear and honest account of our data practices. It tells you what personal data we collect when you use nustabet, why we collect it, how we use it, how long we keep it, who we may share it with, and what rights you have in relation to your personal data.

This Privacy Policy should be read alongside the nustabet Terms & Conditions, which govern your use of the platform as a whole. By registering for a nustabet account or by continuing to use the nustabet platform, you acknowledge that you have read and understood this Privacy Policy.

If you have any questions about this Privacy Policy or about how nustabet handles your personal data, please contact our Data Privacy Officer at the details provided in Section 15 of this Policy.

For the purposes of the Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, nustabet is the personal information controller in respect of the personal data collected and processed through the nustabet platform.

As the personal information controller, nustabet determines the purposes for which and the means by which your personal data is processed. nustabet is responsible for ensuring that all data processing activities comply with applicable Philippine data privacy laws and regulations.

nustabet has appointed a Data Privacy Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and with applicable data privacy laws. You may contact the DPO at any time using the contact details provided in Section 15.

nustabet collects the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, and copies of government-issued identification documents (such as PhilSys National ID, passport, driver's license, or UMID) submitted for KYC verification purposes.
• Contact Data: Email address, mobile phone number, residential address (including barangay, city or municipality, province, and postal code).
• Account Data: Username, encrypted password, account registration date, account status, and account preferences and settings.
• Financial Data: Payment method details (GCash account reference, PayMaya account reference, BPI, BDO, or Metrobank account details), deposit and withdrawal transaction records, transaction amounts, dates, and source of funds declarations where required.
• Gaming Data: Game session history, wager amounts, game outcomes, bonus usage records, responsible gaming settings (deposit limits, loss limits, self-exclusion status), and login and logout timestamps.
• Technical Data: IP address, device type and identifiers, browser type and version, operating system, screen resolution, and other technical information collected automatically when you access the nustabet platform.
• Usage Data: Information about how you navigate and interact with the nustabet platform, including pages visited, features used, time spent on pages, and click-through data.
• Communications Data: Records of your communications with nustabet's customer support team, including chat transcripts, email correspondence, and support ticket records.

nustabet collects personal data through the following means:

• Direct Collection: Data you provide directly when registering for a nustabet account, completing KYC verification, making deposits or withdrawals, participating in promotions, contacting customer support, or updating your account profile.
• Automated Collection: Technical and usage data collected automatically through cookies, web beacons, pixel tags, and similar tracking technologies when you access and interact with the nustabet platform. See Section 10 for full details on our use of cookies.
• Third-Party Sources: Identity verification data from KYC service providers; fraud prevention data from anti-fraud service providers; payment verification data from payment processors such as GCash, PayMaya, and partner banks.
• Publicly Available Sources: In limited circumstances, nustabet may supplement your data with information from publicly available sources for fraud prevention or regulatory compliance purposes.

nustabet uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your nustabet account, including processing your registration, verifying your identity, and managing your account settings and preferences.
• Service Delivery: To provide you with access to nustabet's games, betting products, and all other platform features and services.
• Payment Processing: To process your deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods.
• KYC and Regulatory Compliance: To verify your identity and age (21+ requirement), comply with anti-money laundering (AML) obligations, and meet all other applicable regulatory requirements under Philippine law.
• Responsible Gaming: To monitor your gaming activity for signs of problem gambling, enforce responsible gaming limits and self-exclusion settings you have activated, and provide you with responsible gaming support.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other illegal or prohibited conduct on the nustabet platform.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Marketing Communications: To send you promotional offers, bonus notifications, and other marketing communications — but only where you have provided your consent to receive such communications. You may withdraw your consent at any time.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the nustabet platform's features, performance, and user experience.
• Legal Obligations: To comply with applicable laws, regulations, court orders, and requests from regulatory authorities including PAGCOR and the National Privacy Commission.

nustabet processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing that is necessary to perform the contract between you and nustabet — i.e., to provide you with the nustabet platform services you have registered for.
• Legal Obligation: Processing that is necessary for nustabet to comply with its legal obligations, including KYC verification, AML compliance, age verification, and regulatory reporting to PAGCOR and other authorities.
• Legitimate Interests: Processing that is necessary for nustabet's legitimate business interests, including fraud prevention, platform security, and service improvement — provided that such interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

nustabet does not sell your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• KYC and Identity Verification Providers: Third-party identity verification service providers engaged by nustabet to assist with age and identity verification.
• Fraud Prevention Services: Third-party fraud detection and prevention service providers who assist nustabet in identifying and preventing fraudulent activity.
• Game Providers: Third-party game software providers whose games are available on the nustabet platform, to the extent necessary to deliver their games to you.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities, where disclosure is required by law or regulation.
• Law Enforcement: Philippine law enforcement agencies, where disclosure is required by a valid court order, subpoena, or other legal process.
• Professional Advisors: nustabet's legal counsel, auditors, and other professional advisors, subject to strict confidentiality obligations.

nustabet retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your active nustabet account, plus a minimum of five (5) years following account closure, in accordance with applicable regulatory requirements.
• Financial and Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AML regulations and PAGCOR requirements.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Gaming Data: Retained for a minimum of three (3) years from the date of each gaming session, for regulatory compliance and responsible gaming monitoring purposes.
• Communications Data: Customer support records are retained for a minimum of two (2) years from the date of the last interaction.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications, after which your data will be suppressed from marketing lists.

Upon expiry of the applicable retention period, nustabet will securely delete or anonymize your personal data in accordance with our data disposal procedures.

nustabet implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data transmitted between your device and nustabet's servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data at rest, including financial data and KYC documents, is encrypted using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to authorized nustabet personnel who require it to perform their job functions. All staff with access to personal data are subject to strict confidentiality obligations and regular data privacy training.
• Secure Infrastructure: nustabet's platform is hosted on secure, enterprise-grade infrastructure with firewalls, intrusion detection systems, and regular security audits.
• Password Security: User passwords are stored in hashed form using strong cryptographic hashing algorithms. nustabet never stores passwords in plain text.
• Incident Response: nustabet maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, nustabet will notify the National Privacy Commission and affected Users in accordance with the requirements of the Data Privacy Act of 2012.

nustabet uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. The following types of cookies are used on the nustabet platform:

• Strictly Necessary Cookies: These cookies are essential for the nustabet platform to function. They enable core features such as user authentication, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: These cookies remember your preferences and settings (such as language preferences and responsible gaming settings) to provide a more personalized experience.
• Analytics Cookies: These cookies collect anonymized information about how Users interact with the nustabet platform, helping us understand which features are most used and where improvements can be made. This data is aggregated and does not identify individual Users.
• Performance Cookies: These cookies help nustabet monitor platform performance, identify technical issues, and ensure the platform loads quickly and reliably for Users across the Philippines, including in Manila, Cebu, Davao, Quezon City, and Makati.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the nustabet platform. nustabet does not use third-party advertising cookies or behavioral tracking cookies for external advertising purposes.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by nustabet:

To exercise any of these rights, please contact nustabet's Data Privacy Officer using the contact details in Section 15. nustabet will respond to all data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case nustabet will notify you of the extension and the reasons for it.

The nustabet platform is strictly intended for individuals who are at least 21 years of age. nustabet does not knowingly collect personal data from individuals under the age of 21.

If nustabet becomes aware that personal data has been collected from an individual under 21 years of age, nustabet will immediately suspend the relevant account, delete the personal data in question, and take appropriate action in accordance with applicable regulations.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to nustabet, please contact our Data Privacy Officer immediately using the contact details in Section 15 so that we can take prompt action.

nustabet's primary operations and data processing activities are based in the Philippines. In certain circumstances, your personal data may be transferred to, stored in, or processed in countries outside the Philippines — for example, where nustabet uses cloud infrastructure providers or third-party service providers whose servers are located abroad.

Where such international transfers occur, nustabet ensures that appropriate safeguards are in place to protect your personal data in accordance with the requirements of the Data Privacy Act of 2012. These safeguards may include:

• Contractual clauses that require the recipient to protect your personal data to the same standard as required under Philippine law.
• Transfers to countries that have been assessed as providing an adequate level of data protection.
• Other legally recognized transfer mechanisms as approved by the National Privacy Commission.

You may request further information about the safeguards applicable to any international transfer of your personal data by contacting nustabet's Data Privacy Officer.

nustabet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or the features and services available on the nustabet platform.

When material changes are made to this Privacy Policy, nustabet will notify registered Users by email and/or by posting a prominent notice on the nustabet platform prior to the changes taking effect. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the nustabet platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the revised Privacy Policy, you must cease using the nustabet platform and may request account closure in accordance with the Terms & Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how nustabet is protecting your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to nustabet's handling of your personal data, please contact our Data Privacy Officer:

• Data Privacy Officer: nustabet Data Privacy Office
• Email: [email protected]
• General Support: [email protected]
• Response Time: Within 30 calendar days of receipt of your request
• Support Hours: 24 hours a day, 7 days a week

If you are not satisfied with nustabet's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines through their official government channels.