Privacy Policy

1. Scope & Application

This Privacy Policy applies to all personal information collected by nustae in connection with your use of the nustae online gaming platform, including the website nustae.cam, any associated mobile-optimized interfaces, customer support channels (live chat and email), and any other nustae-operated services (collectively, the "Services").

This Policy applies to all registered users and visitors of the nustae platform located in the Philippines and any other jurisdiction from which users lawfully access the platform. It applies regardless of the device or browser you use to access nustae. This Policy does not apply to third-party websites, services, or applications that may be linked to from the nustae platform — those third parties operate under their own separate privacy policies.

nustae acts as a Personal Information Controller (PIC) as defined under the Philippine Data Privacy Act of 2012 with respect to the personal data it collects and processes in connection with the nustae platform.

2. Data We Collect

2.1 Information You Provide Directly

When you register an account, complete Know Your Customer (KYC) verification, contact support, or otherwise interact with nustae, you may provide:

• Identity Information: Full legal name, date of birth, gender, and nationality;
• Contact Information: Email address, Philippine mobile phone number, and residential address (including barangay, city/municipality, province, and ZIP code);
• Identity Documents: Scanned or photographed copies of government-issued identification (Philippine passport, driver's license, UMID, SSS ID, PhilHealth ID, or equivalent), plus a selfie or liveness photograph for facial verification;
• Financial Information: GCash account number, Maya account number, bank account details (BPI, BDO, Metrobank), or other payment method identifiers — nustae does not store full card numbers or CVV codes;
• Account Credentials: Username and password (stored in hashed form); and
• Communications: Support chat transcripts, emails, and feedback submissions you send to nustae.

2.2 Information Collected Automatically

When you access the nustae platform, we automatically collect certain technical and behavioral data, including:

• Device & Connection Data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network information;
• Usage Data: Pages visited, games played, bet amounts, session duration, navigation paths, and feature interactions;
• Transaction Data: Deposit and withdrawal amounts, timestamps, payment method references, and transaction identifiers; and
• Cookies & Similar Technologies: Session cookies, persistent cookies, and local storage data as described in Section 6 of this Policy.

2.3 Information from Third Parties

nustae may receive personal data about you from:

• Payment service providers (GCash, Maya, BPI, BDO, Metrobank, 7-Eleven CLiQQ) for the purpose of processing and verifying transactions;
• KYC and identity verification service providers who assist with document authentication; and
• Fraud detection and AML screening services that cross-reference your information against regulatory watchlists and adverse media databases as required by PAGCOR.

3. Legal Basis for Processing

nustae processes your personal data on the following legal bases under the Data Privacy Act of 2012:

Processing Purpose	Legal Basis
Account registration and service delivery	Performance of contract (your use agreement with nustae)
KYC identity verification	Legal obligation (PAGCOR AML regulations)
Payment processing and transaction records	Performance of contract; Legal obligation
Fraud prevention and AML monitoring	Legal obligation; Legitimate interest
Customer support and dispute resolution	Performance of contract; Legitimate interest
Responsible gaming monitoring	Legal obligation; Legitimate interest
Platform analytics and improvement	Legitimate interest
Marketing communications (where opted in)	Consent

4. How We Use Your Data

nustae uses the personal data we collect for the following purposes:

• Account Administration: Creating and managing your nustae account, verifying your identity, authenticating logins, and maintaining account security;
• Service Delivery: Enabling you to access games, place bets, process deposits and withdrawals, and use all features of the nustae platform;
• Regulatory Compliance: Fulfilling PAGCOR-mandated KYC obligations, anti-money laundering (AML) and counter-terrorism financing (CTF) screening, age verification, and regulatory reporting;
• Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, bonus abuse, multi-accounting, and other violations of nustae's Terms and Conditions;
• Responsible Gaming: Monitoring gaming behavior for signs of problem gambling, enforcing self-exclusion and deposit limit settings, and fulfilling duties of care under PAGCOR responsible gaming guidelines;
• Customer Support: Responding to your inquiries, complaints, and dispute requests through our 24/7 live chat and email support channels;
• Platform Improvement: Analyzing aggregate usage data to improve platform performance, user experience, game library curation, and technical infrastructure; and
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform news — only where you have consented to receive such communications and with an easy opt-out mechanism on every message.

5. Data Sharing & Disclosure

5.1 Service Providers

nustae shares personal data with third-party service providers who perform functions on our behalf, including payment processors, KYC verification vendors, cloud infrastructure providers, fraud detection services, and customer support platform providers. All service providers are bound by data processing agreements that restrict their use of your data to the specific services they provide to nustae and prohibit them from using your data for their own independent purposes.

5.2 Regulatory Authorities

nustae is required by law and PAGCOR regulations to disclose personal data to regulatory and law enforcement authorities upon lawful request. This includes the Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other relevant Philippine government agencies. nustae will disclose only the minimum information required to satisfy the legal obligation and will notify affected users where legally permissible.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of nustae's business assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the acquiring entity will be required to honor the commitments made in this Privacy Policy.

5.4 No Sale of Personal Data

nustae does not sell, rent, or trade your personal information to third-party advertisers, data brokers, or marketing companies under any circumstances.

6. Cookies & Tracking Technologies

6.1 Types of Cookies Used

nustae uses the following categories of cookies and similar tracking technologies:

• Strictly Necessary Cookies: Essential for platform operation — authentication, session management, security tokens, and load balancing. Cannot be disabled without impairing platform functionality;
• Functional Cookies: Remembering your language preferences, game settings, display preferences, and responsible gaming settings you have configured;
• Analytics Cookies: Collecting aggregated data on how users navigate and interact with nustae for the purpose of improving platform performance and user experience; and
• Security & Fraud Detection Cookies: Identifying suspicious behavior patterns, bot activity, and device fingerprinting for fraud prevention purposes.

6.2 Managing Cookies

You may manage cookie preferences through your browser settings. However, disabling strictly necessary cookies will impair your ability to use the nustae platform, including preventing you from logging in or completing transactions. Browser-based cookie controls vary by browser — consult your browser's help documentation for instructions. Note that blocking cookies does not prevent nustae from collecting server-side data such as IP addresses and transaction records, which are necessary for regulatory compliance purposes.

7. Data Retention

nustae retains personal data for the following periods, after which data is securely deleted or anonymized:

Data Category	Retention Period	Basis
Account registration data	Duration of account + 5 years after closure	PAGCOR regulatory requirement
KYC identity documents	Duration of account + 5 years after closure	AMLC / PAGCOR AML obligations
Transaction records	10 years from transaction date	Philippine AML Act requirements
Support communications	3 years from date of communication	Dispute resolution; Legal claims
Marketing consent records	Until consent is withdrawn + 2 years	Data Privacy Act accountability
Platform analytics data	24 months from collection (aggregated)	Legitimate interest

8. Data Security

nustae implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your browser or device and nustae servers is protected by TLS 1.2 or higher encryption;
• Encryption at Rest: Sensitive personal data stored in nustae databases is encrypted at rest using AES-256 or equivalent standards;
• Password Security: Account passwords are stored using industry-standard one-way cryptographic hash functions with salting — nustae cannot retrieve your plain-text password;
• Access Controls: Access to personal data by nustae staff is restricted on a need-to-know basis, with role-based access controls and comprehensive access logging;
• Penetration Testing: nustae undergoes regular security assessments and vulnerability testing to identify and remediate potential weaknesses in our systems; and
• Incident Response: nustae maintains a data breach response plan and will notify the National Privacy Commission and affected users within 72 hours of discovering a qualifying personal data breach, in accordance with NPC Circular No. 16-03.

Despite these measures, no method of data transmission or storage is completely secure. You play a role in keeping your account secure by using a strong unique password, enabling any available two-factor authentication, and reporting unauthorized account activity to nustae support promptly.

9. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by nustae:

• Right to be Informed: The right to know whether nustae holds personal data about you, and to receive a copy of this Privacy Policy;
• Right to Access: The right to obtain a copy of the personal data nustae holds about you, including information about how it is being used;
• Right to Correction: The right to request correction of inaccurate, incomplete, or outdated personal data in your nustae account;
• Right to Erasure: The right to request deletion of your personal data, subject to nustae's legal retention obligations under PAGCOR and AML regulations, which may prevent immediate deletion of certain data categories;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation;
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format; and
• Right to Damages: The right to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data by nustae.

To exercise any of these rights, contact nustae's Data Protection Officer at [email protected]. nustae will respond to all rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further two months, with notice provided to you of the extension and the reasons for it.

10. Minors & Age Restriction

nustae's services are strictly limited to individuals aged 21 years and above, in compliance with PAGCOR regulations governing online gaming in the Philippines. nustae does not knowingly collect personal data from individuals under 21 years of age. If nustae discovers or is notified that personal data has been collected from an individual under the legal minimum age, we will:

• Immediately close the relevant account;
• Delete or anonymize all personal data associated with the account; and
• Return any deposited funds to the source payment method where technically feasible.

If you believe that a minor has accessed nustae in violation of these age restrictions, please contact us immediately at [email protected].

11. Cross-Border Data Transfers

In providing the nustae platform, some of your personal data may be processed by service providers located outside the Philippines — for example, cloud infrastructure providers or game studio technical systems that operate servers in other countries. Where such cross-border transfers occur, nustae ensures that appropriate safeguards are in place to protect your personal data at a standard equivalent to the protections afforded under the Philippine Data Privacy Act of 2012. These safeguards may include contractual clauses approved by the National Privacy Commission, adequacy decisions, or other recognized transfer mechanisms.

12. Third-Party Services

The nustae platform may contain references to third-party services, including payment providers such as GCash, Maya, BPI, BDO, and Metrobank, and game content provided by third-party studios. When you interact with these third-party services, you are subject to their separate privacy policies and terms of service. nustae is not responsible for the privacy practices of third-party service providers beyond the data processing agreements that govern their handling of data on nustae's behalf. We encourage you to review the privacy policies of any third-party service you interact with through the nustae platform.

13. Changes to This Privacy Policy

nustae reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When we make material changes, we will:

• Post the updated Privacy Policy on this page with a revised "Last Updated" date;
• Send a notification to your registered email address where the changes are material; and
• Display a prominent notice on the nustae platform for a period following the update.

Your continued use of the nustae platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must stop using nustae and may request account closure by contacting our support team.

14. Data Protection Officer

nustae has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act of 2012 and this Privacy Policy. The nustae DPO is registered with the National Privacy Commission of the Philippines.

For all privacy-related inquiries, data subject rights requests, or concerns regarding nustae's data practices, please contact:

• Data Protection Officer, nustae
• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Data Privacy Request — [Your Account Username]"
• Response Time: Within 30 calendar days of receipt
• Support Language: English and Filipino (Tagalog)

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that nustae has violated your data privacy rights. Contact information for the NPC is available on the official NPC website.