Six Privacy Principles We Live By
Data Minimisation
nustat only collects personal data that is strictly necessary for account registration, KYC compliance, and service delivery. We do not collect data for its own sake.
Purpose Limitation
Your data is used only for the purposes for which it was collected. nustat does not repurpose your personal information without your knowledge or a lawful basis under Philippine law.
Security by Design
nustat implements industry-standard technical and organisational security measures — including encryption and access controls — to protect your data from unauthorised access or disclosure.
Your Rights Are Real
Filipino players hold enforceable rights over their personal data under the Data Privacy Act of 2012. nustat makes it straightforward to exercise those rights through our support channels.
Regulatory Compliance
nustat operates under PAGCOR regulation and is bound by the Anti-Money Laundering Act (AMLA). Some data disclosures to regulators are mandatory — we are transparent about when and why.
Defined Retention Periods
nustat retains your personal data only for as long as required by law or legitimate operational need. Once the retention period expires, your data is securely deleted or anonymised.
1 Introduction
nustat ("we", "us", "our") is committed to protecting the personal data of every Filipino player who uses the nustat online gaming platform at nustat.pro. This Privacy Policy sets out — in clear, plain terms — what personal information nustat collects, the lawful bases on which it is processed, how it is stored and secured, with whom it may be shared, and the rights available to you as a data subject under Philippine law.
This Privacy Policy applies to all users of the nustat platform, including visitors who browse without registering, players who create an account, and players who contact nustat support. It covers all nustat services — slots, live casino, sports betting, bingo, fishing games, and any other features made available on nustat.pro.
Your agreement: By accessing nustat.pro or creating a nustat account, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree, please discontinue use of the nustat platform immediately.
2 Who We Are
nustat is a PAGCOR-regulated online gaming platform serving Filipino players across the Philippines. nustat operates nustat.pro and all associated mobile and web services under a valid licence issued by the Philippine Amusement and Gaming Corporation (PAGCOR).
For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, nustat is the Personal Information Controller in respect of the personal data of its registered players and site visitors. nustat has designated a Data Protection Officer (DPO) whose contact details are set out in Section 16 of this Policy.
3 Personal Data We Collect
nustat collects the following categories of personal data, depending on the nature of your interaction with the platform:
3.1 Identity & Contact Data
| Data Type | Examples | When Collected |
|---|---|---|
| Full legal name | First name, middle name, last name | Registration & KYC |
| Date of birth | Used to verify 21+ age requirement | Registration |
| Contact details | Email address, mobile number | Registration |
| Residential address | Barangay, city, province, ZIP | KYC verification |
| Government ID | Passport, UMID, driver's licence, Voter's ID | KYC verification |
3.2 Financial Data
| Data Type | Examples | When Collected |
|---|---|---|
| Payment method details | GCash number, PayMaya account, BPI/BDO/Metrobank account reference | Deposit / withdrawal |
| Transaction history | Deposit amounts, withdrawal amounts, timestamps | Ongoing account activity |
| Source of funds declaration | For high-value transactions under AML policy | As required |
3.3 Gaming & Behavioural Data
nustat records your gameplay activity, including game sessions, wager amounts, wins and losses, game preferences, and session duration. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement.
3.4 Technical & Device Data
When you access nustat.pro, our systems automatically collect certain technical information, including your IP address, browser type and version, operating system, device identifiers, referring URLs, and pages visited. This data is used for security monitoring, fraud prevention, and platform analytics.
3.5 Communications Data
If you contact nustat support via live chat or email, we retain records of that communication, including the content of messages and the date and time of contact. This data is used to respond to your enquiry and to improve our support services.
4 How We Collect Your Data
nustat collects your personal data through the following channels:
- Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion;
- Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you browse nustat.pro (see Section 11 for details);
- From third parties — including identity verification service providers, payment processors (e.g. GCash, PayMaya, BPI, BDO), fraud prevention partners, and PAGCOR or law enforcement where legally required.
5 Why We Use Your Personal Data
nustat uses your personal data for the following purposes:
- To create, manage, and maintain your nustat account;
- To verify your identity and age (21+ requirement) in compliance with PAGCOR regulations;
- To process deposits and withdrawals via your chosen payment method;
- To detect, investigate, and prevent fraud, money laundering, and other prohibited conduct;
- To comply with Anti-Money Laundering Act (AMLA) reporting obligations to the Anti-Money Laundering Council (AMLC);
- To personalise your gaming experience and deliver relevant promotions (where you have not opted out);
- To send you account-related notifications, including security alerts and transaction confirmations;
- To provide responsible gaming tools including deposit limits, loss limits, and self-exclusion;
- To respond to support enquiries and resolve disputes;
- To analyse platform performance and improve nustat's services;
- To comply with any applicable legal or regulatory obligation under Philippine law.
6 Legal Bases for Processing
Under the Data Privacy Act of 2012, nustat relies on the following lawful bases for processing your personal data:
- Contractual necessity — processing required to perform the contract between you and nustat (i.e., providing the gaming platform and processing transactions);
- Legal obligation — processing required to comply with PAGCOR licensing conditions, AMLA obligations, and other mandatory Philippine legal requirements;
- Legitimate interests — processing necessary for nustat's legitimate interests in fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights;
- Consent — for marketing communications and optional data uses, where nustat has obtained your explicit consent. You may withdraw consent at any time by contacting nustat support.
7 Data Sharing & Disclosure
nustat does not sell your personal data to third parties. nustat may share your data with the following categories of recipients, strictly on a need-to-know basis:
7.1 Regulatory & Law Enforcement Authorities
nustat is legally required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine government authorities when required by law, court order, or regulatory directive. nustat cannot refuse such disclosures where mandated by Philippine law.
7.2 Payment Processors
To process your deposits and withdrawals, nustat shares necessary financial data with payment service providers including GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard, Coins.ph, and other accepted payment partners. These providers are subject to their own privacy policies and applicable financial regulations.
7.3 Identity Verification Partners
nustat engages third-party KYC and identity verification service providers to assist with age verification and document validation. These partners process personal data solely on nustat's instructions and are bound by confidentiality obligations.
7.4 Technology & Hosting Providers
nustat uses third-party cloud hosting, data storage, and platform infrastructure providers. These providers are engaged as data processors under contractual terms that require them to maintain appropriate security and confidentiality standards.
7.5 Game Providers
Some games on the nustat platform are provided by third-party game developers and studios. Certain technical or anonymised session data may be shared with game providers for the purpose of operating and maintaining those games. nustat does not share identifiable player data with game providers beyond what is technically necessary.
No data selling: nustat does not and will never sell, rent, or otherwise commercially transfer your personal data to unaffiliated third parties for their own marketing or commercial purposes.
8 International Data Transfers
nustat's primary operations and data storage are based within the Philippines. In some cases, nustat may engage service providers (such as cloud infrastructure providers or game studios) whose systems are located outside the Philippines. Where such transfers occur, nustat ensures that appropriate safeguards are in place in accordance with the Data Privacy Act of 2012 and National Privacy Commission (NPC) guidelines.
Such safeguards may include contractual data processing agreements, standard data protection clauses, or reliance on the recipient country's adequacy status as recognised by the NPC. nustat will not transfer personal data to a jurisdiction that does not provide a comparable level of data protection without your explicit consent or a specific legal basis.
9 Data Retention
nustat retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:
- Account and KYC data — retained for a minimum of five (5) years following account closure, in compliance with PAGCOR licensing requirements and AMLA obligations;
- Transaction records — retained for a minimum of five (5) years, as required under the AMLA and its implementing rules;
- Gaming activity logs — retained for a minimum of one (1) year for dispute resolution purposes, and up to five (5) years where regulatory retention applies;
- Support communications — retained for two (2) years following resolution of the relevant enquiry;
- Technical and device data — retained for up to twelve (12) months for security and fraud prevention monitoring.
Upon expiry of the applicable retention period, nustat will securely delete or anonymise your personal data so that it can no longer be linked to you as an identifiable individual.
10 Security Measures
nustat implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
- TLS/SSL encryption for all data transmitted between your device and nustat.pro;
- Encryption of sensitive data at rest, including financial information and government ID data;
- Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
- Regular security audits and vulnerability assessments of the nustat platform;
- Multi-factor authentication requirements for internal system access;
- Incident response procedures and a data breach notification process in accordance with NPC Circular 16-03.
Your responsibility: While nustat takes all reasonable steps to secure your data, the security of your nustat account also depends on you keeping your login credentials confidential. nustat will never ask for your password via email, live chat, or any other channel. Report suspected unauthorised access to nustat support immediately.
11 Cookies & Tracking Technologies
nustat uses cookies and similar tracking technologies on nustat.pro to enhance your browsing experience, maintain session security, and analyse platform usage. The categories of cookies used by nustat are as follows:
- Strictly necessary cookies — essential for the operation of nustat.pro, including session management and account security. These cannot be disabled without impairing core platform functionality.
- Analytics cookies — used to collect aggregated, anonymised data about how visitors navigate nustat.pro. This data helps nustat understand usage patterns and improve the platform.
- Functional cookies — used to remember your preferences (such as language settings and display options) to personalise your experience.
- Marketing cookies — used, where you have consented, to deliver relevant promotional content and to measure the effectiveness of nustat's marketing activities.
You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of nustat.pro. nustat's cookie preferences can also be managed via the cookie consent tool displayed on your first visit to the site.
12 Your Data Subject Rights
Under the Data Privacy Act of 2012, you hold the following rights in respect of your personal data held by nustat:
- Right to be informed — you have the right to know what personal data nustat holds about you and how it is processed;
- Right of access — you have the right to request a copy of the personal data nustat holds about you;
- Right to rectification — you have the right to request correction of inaccurate or incomplete personal data;
- Right to erasure — you have the right to request deletion of your personal data where nustat no longer has a lawful basis for retaining it, subject to legal retention obligations;
- Right to object — you have the right to object to processing of your personal data carried out on the basis of nustat's legitimate interests;
- Right to data portability — you have the right to receive your personal data in a structured, commonly used, and machine-readable format;
- Right to withdraw consent — where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing;
- Right to lodge a complaint — you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe nustat has breached your data privacy rights.
To exercise any of the above rights, please contact nustat's Data Protection Officer using the details in Section 16. nustat will respond to all data subject requests within thirty (30) calendar days of receipt, in accordance with NPC requirements.
13 Children's Privacy
The nustat platform is strictly for individuals aged twenty-one (21) years and older, in accordance with PAGCOR regulations governing online gaming in the Philippines. nustat does not knowingly collect personal data from individuals under the age of 21.
If nustat becomes aware that personal data has been collected from an individual under 21 without the required age verification, nustat will promptly delete that data and suspend the relevant account. If you believe a minor has accessed or registered on the nustat platform, please contact nustat support immediately.
14 Third-Party Links
nustat.pro may contain links to third-party websites or services, including payment provider portals. nustat is not responsible for the privacy practices or content of those third-party sites. This Privacy Policy applies solely to the nustat platform and its associated services. nustat encourages you to review the privacy policy of any third-party site you visit.
15 Updates to This Privacy Policy
nustat reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Where changes are material, nustat will notify active players via their registered email address or via a prominent notice on nustat.pro prior to the changes taking effect.
The "Last Updated" date at the top of this Policy will be revised each time an amendment is made. Your continued use of the nustat platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. nustat recommends that you review this Policy periodically to stay informed of how your data is being protected.
16 Contact & Data Protection Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or nustat's data processing practices, you may contact our Data Protection Officer through the following channels:
- Live Chat: Available 24/7 directly on the nustat platform — the fastest way to reach us for urgent matters.
- Email: [email protected] — please include "Data Privacy Request" in the subject line.
nustat aims to acknowledge all data privacy requests within five (5) business days and to provide a substantive response within thirty (30) calendar days, as required by the Data Privacy Act of 2012.
National Privacy Commission: If you are not satisfied with nustat's response to your data privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the government body responsible for administering and implementing the Data Privacy Act of 2012 in the Philippines.
Your Data Is Safe. Your Game Awaits.
nustat is a PAGCOR-regulated platform built for Filipino players. Fair games, fast payouts, and full player data protections — all under one roof. Must be 21 or older to participate.
Must be 21 years or older. Play responsibly. Regulated by PAGCOR.