naustar Privacy Policy

1.1 naustar is an online gaming platform operating at naustar.net, serving players across the Philippines including Manila, Cebu, Davao, Quezon City, Makati, and beyond. We offer a wide range of gaming entertainment including slots, live casino tables, sports betting, bingo, sabong, and specialty games.

1.2 For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173), naustar acts as the Personal Information Controller in respect of the personal data of Players collected through the platform.

1.3 naustar operates within the regulatory framework of the Philippine Amusement and Gaming Corporation (PAGCOR). Our data processing practices are designed to meet both PAGCOR regulatory requirements and the standards set by the National Privacy Commission (NPC) of the Philippines.

1.4 If you have any questions about this Privacy Policy or wish to exercise your data privacy rights, you may contact our Data Protection Officer using the details provided in Section 15 of this policy.

2.1 naustar collects the following categories of personal data:

2.2 naustar does not collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance. We do not collect racial or ethnic origin, religious beliefs, health data, or political affiliations unless directly relevant to a specific regulatory obligation.

3.1 naustar collects personal data through the following channels:

• Direct Submission: Information you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions;
• Automated Collection: Technical data collected automatically when you access the platform, including IP addresses, device identifiers, browser type, and session logs collected via cookies and similar tracking technologies;
• Payment Providers: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors when you conduct financial transactions on the platform;
• Identity Verification Services: Data received from third-party KYC and identity verification service providers engaged by naustar to assist with the verification process;
• Regulatory and Law Enforcement Sources: Information received from PAGCOR, the Anti-Money Laundering Council (AMLC), or other regulatory and law enforcement authorities in connection with compliance obligations.

3.2 naustar will always identify itself clearly when collecting personal data and will specify the lawful purpose for which the data is being collected at the time of collection.

4.1 naustar processes your personal data for the following specific purposes:

• Account Management: To create, manage, and maintain your Player account, including account registration, authentication, and account settings management;
• Identity and Age Verification: To verify that you are at least 21 years of age and to confirm your identity in compliance with PAGCOR regulations and Philippine law;
• Financial Transaction Processing: To process your deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank, and to maintain accurate financial records;
• Regulatory Compliance: To meet our obligations under PAGCOR licensing requirements, the Anti-Money Laundering Act (Republic Act No. 9160, as amended), the Data Privacy Act of 2012, and other applicable Philippine legislation;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other security threats to the platform and its Players;
• Customer Support: To respond to your inquiries, resolve disputes, process complaints, and provide general assistance;
• Responsible Gaming: To monitor gaming patterns that may indicate problematic gambling behavior and to administer self-exclusion, deposit limit, and cooling-off requests;
• Platform Improvement: To analyze aggregated, anonymized usage data to improve platform performance, game offerings, and user experience;
• Marketing Communications: To send you promotional offers, bonuses, and platform updates where you have given your express consent to receive such communications.

5.1 naustar processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and naustar (i.e., the Terms & Conditions), including account management, transaction processing, and provision of gaming services;
• Legal Obligation: Processing is required to comply with our obligations under PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine laws;
• Legitimate Interests: Processing is necessary for naustar's legitimate interests in fraud prevention, security monitoring, platform improvement, and responsible gaming operations, provided such interests are not overridden by your privacy rights;
• Consent: For direct marketing communications and the use of non-essential cookies, naustar relies on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.

6.1 naustar does not sell, rent, or trade your personal data to third-party marketers or advertisers under any circumstances. Your data may be shared with the following categories of third parties only as necessary for the purposes described in this policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other licensed payment service providers, strictly for the purpose of processing your financial transactions;
• Game Providers: Licensed game content providers (such as JILI and similar providers) who supply the games available on the naustar platform, where data sharing is required for game operation, fairness certification, or dispute resolution;
• KYC and Identity Verification Providers: Third-party identity verification services engaged by naustar to assist with the KYC process;
• Regulatory Authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other Philippine government agencies, where disclosure is required by law, court order, or regulatory direction;
• Law Enforcement: Philippine National Police (PNP), National Bureau of Investigation (NBI), or other law enforcement authorities, where disclosure is required in connection with a lawful investigation;
• Professional Advisers: Lawyers, auditors, and accountants engaged by naustar in connection with legal proceedings or regulatory compliance, subject to strict professional confidentiality obligations;
• IT and Security Service Providers: Cloud hosting, cybersecurity, and platform maintenance providers who process data on naustar's behalf under strict data processing agreements.

6.2 All third parties who process personal data on behalf of naustar are required to handle such data in accordance with the Data Privacy Act of 2012 and are bound by contractual data processing agreements that prohibit them from using the data for any purpose other than those specified by naustar.

7.1 In certain circumstances, your personal data may be transferred to and processed in countries outside the Philippines. This may occur when naustar engages game providers, cloud infrastructure providers, or technical service partners whose servers are located abroad.

7.2 Where personal data is transferred outside the Philippines, naustar will ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012. Such safeguards may include:

• Contractual clauses requiring the overseas recipient to apply the same standards of data protection as required by Philippine law;
• Processing only in countries that the National Privacy Commission has recognized as providing adequate levels of data protection;
• Obtaining your explicit consent to the international transfer where required.

7.3 If you wish to obtain more information about the specific safeguards applicable to international transfers of your personal data, please contact our Data Protection Officer as described in Section 15.

8.1 naustar retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your active account, plus a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AML obligations;
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or the date of account closure, whichever is later, as required under anti-money laundering regulations;
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act;
• Gaming Activity Logs: Retained for a minimum of three (3) years from the date of the gaming activity;
• Customer Support Records: Retained for three (3) years from the date of the last communication;
• Marketing Consent Records: Retained for the duration of the marketing relationship and for three (3) years thereafter to demonstrate compliance.

8.2 Upon expiry of the applicable retention period, personal data will be securely deleted, anonymized, or destroyed in a manner that prevents unauthorized access or recovery.

9.1 As a data subject under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights in relation to your personal data held by naustar:

9.2 These rights are described in further detail below:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, processed, and used before or at the time of collection. This Privacy Policy is how naustar fulfills this obligation;
• Right to Access: You have the right to request a copy of the personal data that naustar holds about you, as well as information about how it is being processed;
• Right to Correction: You have the right to request that inaccurate or incomplete personal data held by naustar be corrected or updated;
• Right to Erasure or Blocking: You have the right to request that your personal data be erased or blocked where it is no longer necessary for the purpose for which it was collected, subject to naustar's legal retention obligations;
• Right to Object: You have the right to object to the processing of your personal data, including for direct marketing purposes. Where you object to marketing, naustar will cease processing immediately;
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted directly to another personal information controller where technically feasible;
• Right to Damages: You have the right to claim compensation for any damages suffered as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data.

9.3 To exercise any of these rights, please contact our Data Protection Officer at the details provided in Section 15. naustar will respond to all valid data subject requests within fifteen (15) business days of receipt. In complex cases, this period may be extended by a further fifteen (15) business days, with prior notice to you.

9.4 If you believe that naustar has violated your privacy rights, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.

10.1 The naustar platform uses cookies and similar tracking technologies to ensure proper functionality, maintain your session, and improve your experience. A cookie is a small text file placed on your device when you visit a website.

10.2 naustar uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They manage your login session, maintain your security authentication, and enable core platform features. These cookies cannot be disabled without preventing you from using the platform;
• Functional Cookies: These cookies remember your preferences, such as language settings and game display options, to provide a more personalized experience;
• Analytics Cookies: These cookies collect anonymized data about how Players interact with the platform, including pages visited, session duration, and features used. This data helps naustar identify areas for improvement. Analytics data is aggregated and does not identify individual Players;
• Security Cookies: These cookies assist in fraud detection and security monitoring by identifying unusual access patterns or suspicious activity.

10.3 naustar does not use third-party advertising cookies or behavioral targeting technologies that would share your data with external advertising networks.

10.4 You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling functional or analytics cookies may affect your experience on the platform. Instructions for managing cookies are available in your browser's help documentation.

11.1 If naustar discovers or has reason to believe that an account has been registered by a person under the age of 21, the account will be immediately suspended, all associated data will be reviewed, and the account will be permanently closed. Any balance held in the account will be handled in accordance with our Terms & Conditions and applicable regulatory requirements.

11.2 If you are a parent or guardian and believe that your child under the age of 21 has registered on the naustar platform or provided personal data to naustar, please contact our Data Protection Officer immediately at the details provided in Section 15. naustar will take prompt action to investigate and address the matter.

11.3 naustar employs age verification measures during the registration process to prevent underage registration. However, we encourage parents and guardians to monitor their children's online activity and to use available parental control tools to restrict access to online gaming sites.

12.1 naustar implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, disclosure, or alteration. These measures include:

• Encryption: All data transmitted between your device and the naustar platform is encrypted using Transport Layer Security (TLS). Personal data stored on naustar servers is encrypted at rest;
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. naustar staff who handle personal data are subject to confidentiality obligations and receive regular data protection training;
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their naustar accounts for an additional layer of account security;
• Penetration Testing and Security Audits: The naustar platform undergoes regular security assessments and vulnerability testing to identify and remediate potential weaknesses;
• Incident Response: naustar maintains a data breach response plan. In the event of a personal data breach that poses a risk to Players, naustar will notify affected individuals and the National Privacy Commission in accordance with the timeframes required under the Data Privacy Act of 2012.

12.2 While naustar takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for ensuring that your device is adequately protected against malware and unauthorized access.

13.1 The naustar platform may contain links to third-party websites or services, such as payment provider portals (GCash, PayMaya) or regulatory information pages. These third-party sites operate independently of naustar and are governed by their own privacy policies.

13.2 naustar is not responsible for the privacy practices of any third-party websites. We encourage you to review the privacy policy of any third-party site before providing personal data to it. The inclusion of a link to a third-party site on the naustar platform does not constitute an endorsement of that site's privacy practices.

14.1 naustar reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, naustar will:

• Update the "Last Updated" date at the top of this page;
• Notify registered Players by email or via an in-platform notification, where the changes are material and affect how we process your personal data;
• Where required by law, seek your consent before implementing the changes.

14.2 We encourage you to review this Privacy Policy periodically to stay informed about how naustar protects your personal data. Your continued use of the naustar platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the changes.

15.1 naustar has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact our DPO using the details below:

15.2 When submitting a data subject request, please include your full name, registered email address, and a clear description of the right you wish to exercise or the concern you wish to raise. This will allow our DPO to locate your records promptly and respond efficiently.

15.3 If you are not satisfied with naustar's response to your privacy concern, you have the right to escalate the matter to the National Privacy Commission of the Philippines, which can be reached through their official website at privacy.gov.ph.

15.4 For responsible gaming concerns, self-exclusion requests, or deposit limit adjustments, please visit our Responsible Gaming page or contact our support team directly. These requests are handled separately from general data privacy inquiries and are processed on a priority basis.