Data Privacy
nunstur Privacy Policy
At nunstur, your privacy is not an afterthought — it is a foundational part of how the platform is built. This Privacy Policy explains exactly what personal data nunstur collects, why we collect it, how it is used, who it may be shared with, and what rights you have over your own information as a player based in the Philippines.
Our Privacy Commitments
How nunstur Protects Your Data
Before diving into the full legal text, here is a plain-language summary of the six core privacy principles that guide how nunstur handles your personal information.
We Collect Only What We Need
nunstur collects only the personal data that is genuinely necessary to operate your account, process your transactions, verify your identity, and comply with Philippine regulatory requirements. We do not collect data speculatively.
Your Data Is Securely Stored
All personal data held by nunstur is encrypted at rest and in transit using industry-standard 256-bit SSL/TLS protocols. Access to personal data is restricted to authorised nunstur personnel on a strict need-to-know basis.
You Control Your Own Data
Philippine law gives you meaningful rights over your personal information — including the right to access, correct, object to processing, and request deletion. nunstur has a clear process for handling all data rights requests within 15 business days.
We Do Not Sell Your Data
nunstur does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Data shared with our service providers is strictly limited to what is needed to deliver our services to you.
Transparent Processing
nunstur tells you upfront why each category of data is collected and on what legal basis we process it. There are no hidden uses of your data — this Privacy Policy is the complete picture of how your information is handled.
Compliant with RA 10173
nunstur's data processing practices are designed to comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules and regulations, and the issuances of the National Privacy Commission (NPC).
Your Rights
Your Data Rights Under Philippine Law
The Philippine Data Privacy Act of 2012 grants you specific, enforceable rights over the personal data that nunstur holds about you. These rights apply regardless of whether you are a current player, a former player, or an applicant whose registration was not completed.
How to Exercise Your Rights: To submit a data rights request, contact the nunstur Data Privacy team at [email protected] with the subject line "Data Privacy Request" and your registered account username. We will acknowledge your request within 72 hours and respond substantively within 15 business days.
Right to Access
Request a copy of the personal data nunstur holds about you, including the purposes for which it is processed and any third parties it has been shared with.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held about you. You can update basic account details directly from your nunstur account dashboard.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to nunstur's legal retention obligations under Philippine law.
Right to Object
Object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests. Objections to marketing will be actioned immediately.
Right to Block or Suspend
Request that nunstur temporarily suspend the processing of your personal data while the accuracy or lawfulness of that processing is under review or dispute.
Right to File a Complaint
If you believe nunstur has mishandled your personal data, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
Plain Language Notice: This document is written in formal legal English as required for a compliant privacy policy under Philippine law. If any section is unclear, you are welcome to contact nunstur support for a plain-language explanation. The summary cards above this section provide a non-legal overview of our core data practices.
1 Introduction
This Privacy Policy ("Policy") is issued by nunstur ("nunstur," "we," "us," "our"), the operator of the online casino and sports betting platform accessible at nunstur.net. This Policy describes how nunstur collects, uses, stores, discloses, and otherwise processes the personal data of individuals ("you," "your," "Data Subject") who access or use the nunstur Platform, including registered players, prospective registrants, and visitors to the nunstur website.
This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations ("IRR"), and relevant issuances of the National Privacy Commission ("NPC") of the Philippines.
By registering an account on the nunstur Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to the practices described in this Policy, you must not create an account or continue to use the Platform.
This Policy should be read together with the nunstur Terms and Conditions, which are available at /terms-conditions, and the nunstur Responsible Gaming Policy, available at /responsible-gaming.
2 Data Controller
For the purposes of the Philippine Data Privacy Act and its IRR, nunstur is the Personal Information Controller in respect of personal data collected through the nunstur Platform. As Personal Information Controller, nunstur determines the purposes and means by which your personal data is processed.
nunstur has designated a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data protection law. The DPO may be contacted at the details provided in Section 16 of this Policy.
Registration with the NPC: nunstur has registered its data processing systems with the National Privacy Commission of the Philippines as required under the DPA and its IRR, in respect of processing systems involving sensitive personal information and those that are likely to affect data subjects.
3 Personal Data We Collect
nunstur collects the following categories of personal data, depending on the nature of your interaction with the Platform:
3.1 Registration and Identity Data
- Full legal name as appearing on a government-issued Philippine ID;
- Date of birth (used to verify that you are at least 21 years of age);
- Residential address (barangay, city or municipality, province, ZIP code);
- Nationality and country of residence;
- Email address and mobile phone number.
3.2 Identity Verification (KYC) Data
- Scanned copies or photographs of government-issued Philippine identification documents (e.g., Philippine passport, PhilSys National ID, UMID, SSS ID, PRC ID, driver's license);
- Selfie photographs submitted for facial verification;
- Proof of residential address documents where required;
- Source of funds documentation where requested for AML compliance.
3.3 Financial and Transaction Data
- Deposit and withdrawal transaction records including amounts, timestamps, and payment method identifiers;
- GCash mobile number, Maya account reference, bank account name and number (last four digits only), or other payment method identifiers;
- Wagering history, game activity records, and bonus redemption records.
3.4 Technical and Usage Data
- IP address and approximate geographic location derived from IP address;
- Device type, operating system, browser type and version;
- Session timestamps, pages visited, features used, and clickstream data;
- Error logs and platform performance data.
3.5 Communications Data
- Content of communications submitted through the live chat support system;
- Email correspondence between you and nunstur;
- Records of responsible gaming tool activations and self-exclusion requests.
| Data Category | Examples | Sensitivity Level |
|---|---|---|
| Identity | Full name, date of birth, nationality | Personal Information |
| KYC Documents | Government ID scans, selfie photos | Sensitive Personal Information |
| Financial | Transaction history, payment references | Personal Information |
| Technical | IP address, device data, session logs | Personal Information |
| Communications | Support chat, email records | Personal Information |
4 How We Collect Your Data
nunstur collects personal data through the following channels:
- Directly from you — when you complete the registration form, submit KYC documents, initiate a deposit or withdrawal, contact customer support, or interact with any feature of the Platform;
- Automatically — through cookies, web beacons, and server log files when you browse the nunstur website or use the Platform, as further described in Section 8;
- From third-party verification providers — nunstur uses licensed third-party identity verification and KYC service providers who may supply supplementary identity and fraud-risk data to assist in verifying your account;
- From payment processors — transaction confirmation data is received from GCash, Maya, and banking partners when you initiate a deposit or withdrawal;
- From anti-fraud and AML screening services — nunstur may receive risk signals from third-party compliance screening tools to support its anti-money laundering obligations.
5 Legal Basis for Processing
Under the Philippine Data Privacy Act, nunstur processes your personal data on the following legal bases:
- Contractual necessity: Processing required to fulfill the contract between nunstur and you as a registered player, including account management, transaction processing, and KYC verification;
- Legal obligation: Processing required to comply with nunstur's legal and regulatory obligations under Philippine law, including anti-money laundering requirements under Republic Act No. 9160 (as amended), tax reporting obligations, and regulatory reporting requirements;
- Legitimate interests: Processing carried out for nunstur's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your rights and freedoms;
- Consent: Processing for direct marketing communications, where your separate and specific consent has been obtained. You may withdraw this consent at any time without affecting the lawfulness of prior processing.
6 How We Use Your Personal Data
nunstur uses the personal data it collects for the following specific purposes:
- Creating, managing, and maintaining your nunstur player account;
- Verifying your identity and age (21+) in compliance with applicable Philippine regulations;
- Processing deposits, withdrawals, and all financial transactions through supported payment methods including GCash, Maya, BPI, BDO, and Metrobank;
- Administering bonuses, promotions, and loyalty program benefits;
- Detecting and preventing fraud, cheating, money laundering, and other prohibited activities;
- Monitoring player activity for responsible gaming purposes and enforcing responsible gaming restrictions where required;
- Providing customer support via live chat and email;
- Complying with applicable Philippine law, regulatory requirements, and court orders;
- Improving the Platform's performance, features, and user experience through analysis of anonymized usage data;
- Sending transactional communications (e.g., deposit confirmations, withdrawal notifications, password reset emails);
- Sending promotional and marketing communications where you have provided consent or where permitted under applicable law.
Responsible Gaming Use: nunstur uses player activity data, including session duration, frequency of play, and transaction patterns, to identify potential signs of problem gambling. Where indicators are detected, nunstur may proactively apply responsible gaming interventions including mandatory deposit limits or cool-off periods. This processing is carried out under nunstur's legitimate interest in player welfare.
7 Data Sharing and Disclosure
nunstur does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients only to the extent necessary to achieve the purposes described in this Policy:
7.1 Service Providers
nunstur engages third-party service providers who process personal data on nunstur's behalf as Personal Information Processors under the DPA. These include identity verification providers, payment processing partners (GCash, Maya, BPI, BDO, Metrobank), cloud infrastructure providers, customer support platform providers, and anti-fraud screening services. All service providers are required to comply with the DPA and to process data only on nunstur's documented instructions.
7.2 Regulatory and Law Enforcement Authorities
nunstur may disclose personal data to Philippine government agencies, regulatory bodies, law enforcement authorities, or courts where required by applicable law or by a valid legal order. This includes disclosures to the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other competent Philippine authorities.
7.3 Corporate Transactions
In the event of a merger, acquisition, restructuring, or sale of nunstur's business or assets, personal data held by nunstur may be transferred to the successor entity, subject to equivalent data protection commitments as set out in this Policy. nunstur will provide notice of any such transfer where required by applicable law.
7.4 With Your Consent
nunstur may share your personal data with additional third parties where you have provided your specific and informed consent for such sharing.
8 Cookies & Tracking Technologies
The nunstur Platform uses cookies and similar tracking technologies to provide core functionality, measure performance, and improve the user experience. The following categories of cookies are used:
- Strictly Necessary Cookies: Essential for the Platform to function, including session authentication, security tokens, and load balancing. These cookies cannot be disabled without affecting core Platform functionality.
- Functional Cookies: Used to remember your preferences and settings, such as language selection and display options.
- Analytics Cookies: Used to collect aggregated and anonymized data about how players use the Platform, including pages visited, time spent, and features used. This data helps nunstur identify areas for improvement.
- Security Cookies: Used to detect and prevent fraudulent activity and unauthorized account access.
nunstur does not use third-party advertising or cross-site tracking cookies. You may manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of some Platform features.
9 Data Retention
nunstur retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law, whichever is longer. The following retention periods apply as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity records | 5 years after account closure | AML / regulatory obligation |
| KYC verification documents | 5 years after account closure | RA 9160 AML Act |
| Financial transaction records | 5 years after transaction date | BIR / AML requirements |
| Support communications | 3 years after last contact | Legitimate interest / legal claims |
| Technical / usage logs | 12 months from collection | Security and fraud prevention |
| Self-exclusion records | Indefinite | Responsible gaming obligations |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with nunstur's data disposal procedures.
10 Data Security
nunstur implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the nunstur Platform;
- Encryption of sensitive personal data stored in nunstur's databases;
- Role-based access controls ensuring that only authorised personnel can access personal data, on a need-to-know basis;
- Multi-factor authentication requirements for all nunstur administrative system access;
- Regular security audits, vulnerability assessments, and penetration testing;
- Incident response procedures that comply with the NPC's breach notification requirements under the DPA.
Data Breach Notification: In the event of a personal data breach that is likely to result in serious harm to affected Data Subjects, nunstur will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players as required by applicable NPC guidelines.
While nunstur takes all reasonable precautions to secure your data, no digital platform can guarantee absolute security. You are also responsible for maintaining the security of your nunstur account credentials and for logging out of the Platform when using shared or public devices.
11 International Data Transfers
Some of nunstur's service providers, including cloud infrastructure and technical support providers, may be located outside the Philippines. Where personal data is transferred outside the Philippines, nunstur takes steps to ensure that the recipient jurisdiction or entity provides an adequate level of protection for personal data, consistent with the DPA and NPC requirements.
These steps may include entering into data processing agreements with service providers that incorporate standard contractual clauses approved by the NPC, or relying on the service provider's binding corporate rules where applicable.
nunstur will not transfer personal data to countries or territories that do not provide an adequate level of protection without your explicit consent or without putting in place appropriate safeguards as required by the DPA.
12 Children and Minors
The nunstur Platform is strictly intended for individuals aged 21 years and above, in accordance with applicable Philippine regulations governing online gaming. nunstur does not knowingly collect personal data from individuals under the age of 21.
If nunstur becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted immediately, the associated account will be suspended, and any winnings generated by that account will be forfeited in accordance with nunstur's Terms and Conditions and applicable law.
If you believe that nunstur may have inadvertently collected personal data from a minor, please contact us immediately at the details provided in Section 16 of this Policy.
13 Your Data Protection Rights
Under the Philippine Data Privacy Act, you have the following rights in respect of your personal data held by nunstur:
- Right to be Informed: The right to be informed whether nunstur processes your personal data, and to receive a copy of this Privacy Policy;
- Right of Access: The right to obtain a copy of the personal data nunstur holds about you, including information about its source, recipients, and processing purposes;
- Right to Rectification: The right to have inaccurate or incomplete personal data corrected;
- Right to Erasure or Blocking: The right to have your personal data deleted or its processing suspended where the data is no longer necessary, where consent has been withdrawn, or where processing is unlawful, subject to nunstur's legal retention obligations;
- Right to Object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation where processing is based on legitimate interests;
- Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where processing is carried out by automated means and based on consent or contractual necessity;
- Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe nunstur has violated your data privacy rights.
To exercise any of these rights, please submit a written request to the nunstur Data Protection Officer at the contact details in Section 16. nunstur will acknowledge your request within 72 hours and provide a substantive response within 15 business days. We may request proof of your identity before processing a data rights request.
14 Marketing Communications
Where you have provided your consent during registration or subsequently through your account settings, nunstur may send you promotional communications about new games, bonuses, promotions, and platform updates. These communications may be sent via email or SMS to your registered contact details.
You may withdraw your consent to receive marketing communications at any time by:
- Updating your communication preferences in your nunstur account settings;
- Clicking the unsubscribe link in any marketing email;
- Contacting nunstur customer support and requesting removal from marketing lists.
Withdrawal of marketing consent will not affect the sending of transactional communications that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, and security alerts.
15 Changes to This Privacy Policy
nunstur reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this Policy indicates when the most recent revision was made.
Where amendments to this Policy are material — meaning they significantly affect how nunstur processes your personal data or reduce your rights — nunstur will provide notice by displaying a prominent notification on the Platform and, where practicable, by sending an email to your registered address prior to the amendments taking effect.
Your continued use of the nunstur Platform following the effective date of any amended Policy constitutes your acknowledgment of the revised terms. We encourage you to review this Policy periodically. The current version of this Policy is always accessible at /privacy-policy.
16 Contact & Data Protection Officer
For any queries, concerns, or requests relating to this Privacy Policy or nunstur's handling of your personal data, please contact the nunstur Data Protection Officer:
nunstur Data Protection Officer
Email: [email protected]
Subject line: "Data Privacy Request"
Please include your registered account username and a clear description of your query or request. We will acknowledge receipt within 72 hours and provide a full response within 15 business days.
If you are not satisfied with nunstur's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. Information on how to file a complaint with the NPC is available on the NPC's official website.
For general account support, game-related queries, or responsible gaming assistance, nunstur's 24/7 customer support team is also available via the live chat feature on the Platform after logging in to your account.
Your Data, Your Trust
Play with Confidence at nunstur
Your personal data is handled with the same care we put into our games. Fast GCash withdrawals, a wide game library, and a platform built on transparency — nunstur is where Filipino players can feel at home. Must be 21 years or older to register.
21+ only · SSL Secured · RA 10173 Compliant · Gambling involves financial risk — play within your means.