Scope of This Policy: This Privacy Policy applies to all personal information collected by nunstar ("nunstar," "we," "us," or "our") through the nunstar.asia website, its related mobile-optimised pages, customer support channels, and any other interactions you have with nunstar as a registered or prospective player. By registering an Account or continuing to use the nunstar Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal information as described herein.
1. Information We Collect
nunstar collects personal information that is necessary for the lawful operation of a regulated online gaming platform. The categories of personal information we collect include:
- Identity Information: Full legal name, date of birth, gender, and government-issued identification numbers (e.g., PhilSys ID number, passport number, driver's licence number, SSS/GSIS number, PRC ID number).
- Contact Information: Philippine mobile number, email address, and residential address (including barangay, city/municipality, province).
- Financial Information: Payment method details sufficient to process deposits and withdrawals (e.g., GCash-registered mobile number, Maya account reference, bank account name and last four digits). nunstar does not store full bank account numbers or card numbers in raw form.
- Account Activity Data: Login timestamps, IP addresses, device identifiers, game history, betting records, deposit and withdrawal history, bonus redemption history, and session duration data.
- KYC Documentation: Copies of government-issued photo identification and, where required by AMLC regulations or PAGCOR compliance requirements, proof of address and source of funds documentation.
- Communications Data: Records of your interactions with nunstar's customer support team, including live chat transcripts and support ticket history.
- Technical Data: Browser type and version, operating system, screen resolution, referring URL, and mobile network operator, collected automatically when you access the Platform.
2. How We Collect Your Information
nunstar collects personal information through the following means:
- Direct submission: Information you provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, or contacting support.
- Automated collection: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you use the Platform. See Section 8 for further detail.
- Third-party verification: Identity and address verification data obtained from licensed third-party KYC and AML screening providers engaged by nunstar to fulfil its regulatory obligations.
- Payment processors: Transaction confirmation data received from licensed payment processors (GCash, Maya, BPI, BDO, Metrobank, and others) when you complete a financial transaction.
3. Purposes of Processing
nunstar processes your personal information for the following purposes:
- Account creation and management: To register, verify, maintain, and administer your nunstar Account.
- Identity verification (KYC): To verify your identity and age in compliance with PAGCOR licensing requirements and Philippine law.
- Payment processing: To process deposits, withdrawals, bonus payments, and refunds through your chosen Philippine payment method.
- Anti-money laundering (AML) compliance: To screen transactions and player activity against AMLC requirements, sanctions lists, and PEP (politically exposed persons) databases, as mandated by Philippine law.
- Responsible gaming: To monitor gaming activity for signs of problem gambling and to administer self-exclusion, deposit limit, and session alert tools you have activated.
- Customer support: To respond to your inquiries, resolve disputes, and provide assistance with your Account.
- Platform improvement: To analyse aggregated usage patterns, fix technical issues, improve game performance, and enhance the overall player experience on nunstar.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and other security threats.
- Marketing communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided consent and have not subsequently withdrawn it. You may opt out of marketing communications at any time via your Account settings.
- Legal and regulatory compliance: To comply with applicable Philippine laws, PAGCOR regulatory requirements, court orders, and lawful requests from competent authorities.
4. Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012, nunstar processes your personal information on the following legal bases:
- Contractual necessity: Processing required to perform the contract between you and nunstar — namely the Terms & Conditions you accepted upon registration — including account management, payment processing, and customer support.
- Legal obligation: Processing required to comply with applicable Philippine laws, including the AMLA, PAGCOR regulations, and the DPA itself (e.g., KYC verification, transaction reporting).
- Legitimate interests: Processing for fraud prevention, platform security, and service improvement where such interests do not override your fundamental privacy rights.
- Consent: Processing for direct marketing communications and non-essential cookies, where we have obtained your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing already carried out.
5. Disclosure to Third Parties
nunstar does not sell, rent, or otherwise commercially disclose your personal information to third parties. We may share your information with the following categories of recipients strictly for the purposes described in Section 3:
- Payment service providers: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, Metrobank, and other licensed Philippine payment processors, to process financial transactions.
- KYC and AML screening providers: Licensed identity verification and sanctions screening services engaged under data processing agreements, for KYC and AML compliance.
- Game providers: Certified game studios supplying slots, live dealer, bingo, and other game content to the Platform, who may receive your account identifier and game session data to deliver game services.
- Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law or regulatory direction.
- IT infrastructure providers: Cloud hosting and technical infrastructure providers operating under contractual data processing obligations consistent with DPA requirements.
All third parties with whom nunstar shares personal information are required to maintain the confidentiality and security of that information and to process it only for the specific purposes for which it was shared.
6. Data Retention
nunstar retains your personal information for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods required by Philippine law and PAGCOR regulations:
- Account and KYC records: Retained for a minimum of five (5) years from the date of Account closure, as required by PAGCOR licensing conditions and AMLA record-keeping obligations.
- Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, consistent with AMLC and PAGCOR requirements.
- Customer support records: Retained for a minimum of two (2) years from the date of the last interaction, for dispute resolution and quality assurance purposes.
- Marketing consent records: Retained for as long as your consent remains active, plus a reasonable period thereafter as evidence of consent.
Upon expiry of the applicable retention period, personal information will be securely deleted or anonymised in accordance with NPC guidelines.
7. Data Security
nunstar implements appropriate technical and organisational measures to protect your personal information against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
- TLS/SSL encryption for all data in transit between your device and nunstar servers;
- Encryption at rest for sensitive personal information, including KYC documents and financial data;
- Access controls limiting personal data access to authorised personnel on a need-to-know basis;
- Regular security assessments and vulnerability testing of Platform infrastructure;
- Multi-factor authentication requirements for internal systems accessing personal data.
In the event of a personal data breach that is likely to result in harm to affected data subjects, nunstar will notify the National Privacy Commission (NPC) and affected players in accordance with the timeframes and procedures prescribed by the DPA and NPC Circular 16-03.
8. Cookies & Tracking Technologies
nunstar uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. The categories of cookies used are:
- Strictly necessary cookies: Required for the Platform to function — session management, security tokens, and authentication. These cannot be disabled.
- Functional cookies: Remember your preferences (e.g., language settings, display preferences) to personalise your experience.
- Analytics cookies: Collect anonymised data about how players interact with the Platform, helping nunstar improve performance and user experience.
- Marketing cookies: Used to deliver relevant promotional content — only with your prior consent, which you may withdraw at any time via your browser settings or the cookie preference centre on the Platform.
You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality.
9. Your Rights Under the DPA
As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal information held by nunstar:
- Right to be informed: The right to know that your personal information is being collected and processed, and the purposes thereof — as fulfilled by this Privacy Policy.
- Right to access: The right to request a copy of the personal information nunstar holds about you and information about how it is being processed.
- Right to rectification: The right to correct inaccurate or incomplete personal information.
- Right to erasure / right to be forgotten: The right to request deletion of your personal information where continued processing is no longer legally justified — subject to nunstar's mandatory retention obligations under PAGCOR regulations and the AMLA.
- Right to object: The right to object to the processing of your personal information for direct marketing purposes, or on compelling legitimate grounds relating to your particular situation.
- Right to data portability: The right to receive your personal information in a structured, commonly used, machine-readable format and to transmit it to another personal information controller, where technically feasible.
- Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe nunstar has processed your personal information in violation of the DPA.
To exercise any of these rights, please contact nunstar's Data Privacy Officer as described in Section 13. nunstar will respond to all verified requests within fifteen (15) business days of receipt.
10. Cross-Border Data Transfers
nunstar may transfer your personal information to service providers located outside the Philippines — for example, cloud infrastructure providers or game studios operating data centres in other jurisdictions. Any such cross-border transfer will be conducted only in accordance with Section 21 of the DPA and NPC guidelines on cross-border data flows, including by ensuring appropriate contractual safeguards are in place (such as standard contractual clauses) or by transferring only to countries with an adequate level of data protection as recognised by the NPC.
Where personal information is transferred outside the Philippines, nunstar will document and maintain records of such transfers and will not transfer data to jurisdictions that do not provide adequate protections without first obtaining your consent or establishing an alternative lawful transfer mechanism.
11. Children and Minors
nunstar's Platform is strictly restricted to individuals aged 21 years and above in accordance with PAGCOR regulations. nunstar does not knowingly collect personal information from persons under 21. If nunstar becomes aware that it has collected personal information from a person under 21 — whether through misrepresentation at registration or otherwise — that Account will be immediately closed, all wagers and winnings will be voided, and the personal information will be deleted or anonymised in accordance with applicable law.
If you are a parent or guardian and believe your child has registered on nunstar, please contact support immediately using the details in Section 13 so we can take appropriate action.
12. Changes to This Policy
nunstar may update this Privacy Policy from time to time to reflect changes in applicable law, NPC guidance, PAGCOR regulatory requirements, or nunstar's data processing practices. When material changes are made, nunstar will notify registered players via their registered email address or mobile number, or through a prominent notice on the Platform, at least seven (7) days before the revised Policy takes effect.
The date at the top of this Policy reflects the most recent update. Your continued use of nunstar following the effective date of any updated Policy constitutes your acknowledgement of the changes. We encourage you to review this Policy periodically.
13. Contact & Data Privacy Officer
nunstar has designated a Data Privacy Officer (DPO) responsible for overseeing compliance with the DPA and handling data subject requests and complaints. To exercise your data rights, raise a privacy concern, or submit a complaint regarding nunstar's data processing practices, please contact:
If you are not satisfied with nunstar's response to your privacy complaint, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines.