nustra.ph Privacy Policy

nustra.ph is the operator of the online gaming platform accessible at nustraph.club (the "Platform"). For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, nustra.ph acts as the Personal Information Controller (PIC) with respect to the personal data of all registered players and Platform visitors.

As a Personal Information Controller, nustra.ph determines the purpose and means of processing your personal data and bears primary responsibility for ensuring that such processing complies with applicable Philippine data protection law and PAGCOR's data governance requirements for licensed online gaming operators.

nustra.ph operates under a Philippine Amusement and Gaming Corporation (PAGCOR) license. Processing of player data by nustra.ph is therefore subject to both the NPC's data protection framework and PAGCOR's regulatory requirements, which in certain contexts — including AML compliance and responsible gaming records — mandate specific data collection, retention, and disclosure obligations.

nustra.ph collects the following categories of personal data from players and Platform visitors:

2.1 Registration & Identity Data

• Full legal name as it appears on a valid Philippine government-issued ID
• Date of birth (to verify the 21+ age requirement mandated by PAGCOR)
• Registered Philippine mobile number
• Email address (where provided during registration)
• Chosen username and encrypted account password

2.2 KYC Verification Documents

• Copies of valid Philippine government-issued identification documents (PhilSys, UMID, passport, driver's license, voter's ID, PhilHealth ID, SSS ID)
• Selfie photographs taken for liveness and identity verification purposes
• Proof of payment method ownership where required under AML procedures

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts, timestamps, and payment channel identifiers (e.g., GCash account reference, Maya account reference, bank account details where applicable)
• Account balance history and wagering records
• Bonus redemption history and wagering requirement completion records

2.4 Usage & Technical Data

• IP address and device identifiers at the time of login and gameplay sessions
• Browser type, operating system, and device model
• Session duration, pages visited, and game play logs
• Login timestamps and geographic location data derived from IP address

2.5 Communication Data

• Records of live chat support interactions
• Email correspondence sent to or received from [email protected]
• Complaint and dispute records

2.6 Responsible Gaming Data

• Deposit limit settings, session time preferences, and loss limit configurations
• Self-exclusion or cooling-off period requests and effective dates
• PAGCOR-mandated responsible gaming interaction records

nustra.ph collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, contact customer support, or respond to surveys and promotions.
• Automatically during Platform use — through server logs, cookies, and similar tracking technologies that record technical and usage data when you access the Platform. See Section 9 for the full cookies policy.
• From payment service providers — transaction confirmation data from GCash, Maya, GrabPay, InstaPay, BPI, BDO, Metrobank, and other accepted payment channels, to the extent required to verify and reconcile deposits and withdrawals.
• From identity verification services — where nustra.ph uses third-party KYC verification technology to cross-check ID documents against government databases, to the extent permitted by applicable law.
• From regulatory authorities — PAGCOR, the AMLC, or other competent Philippine authorities may share information relevant to your account where required under applicable regulatory frameworks.

nustra.ph does not use personal data for automated decision-making that produces legal or similarly significant effects without human review.

Under Republic Act No. 10173, nustra.ph processes personal data on the following lawful bases:

• Contract Performance (Section 12(b) RA 10173): Processing necessary to fulfil our contractual obligations to you as a registered player — account management, deposit and withdrawal processing, game access, and support.
• Legal Obligation (Section 12(c) RA 10173): Processing required to comply with applicable Philippine law including PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), and NPC regulations.
• Legitimate Interest (Section 12(f) RA 10173): Processing necessary for nustra.ph's legitimate interests in fraud prevention, platform security, and service improvement, where such interests do not override your fundamental rights and freedoms.
• Consent (Section 12(a) RA 10173): For processing that is not required by contract or law — such as sending you promotional communications about nustra.ph offers and events — we will obtain your explicit, informed, and freely given consent before proceeding. You may withdraw such consent at any time without affecting the lawfulness of prior processing.

6.1 Regulatory and Government Bodies

nustra.ph is required to share player data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities where required by applicable law or regulatory direction. This includes mandatory suspicious transaction reporting under the AMLA and player information requested by PAGCOR in the exercise of its supervisory functions.

6.2 Payment Service Providers

To process deposits and withdrawals, nustra.ph shares transaction-relevant data with payment service providers including GCash, Maya, GrabPay, InstaPay, BPI, BDO, Metrobank, and 7-Eleven CLiQQ. Data shared is limited to what each provider requires to execute and verify the specific transaction, under data processing agreements that bind them to appropriate confidentiality and security standards.

6.3 KYC & Identity Verification Partners

Where nustra.ph uses third-party technology providers to assist with identity document verification and liveness checking during the KYC process, personal data including ID documents and selfie images may be shared with those providers. Such providers act as Personal Information Processors (PIPs) under contracts that specify data use, security standards, and retention limits.

6.4 IT and Platform Infrastructure Providers

nustra.ph uses third-party IT service providers for cloud hosting, platform security, and technical operations. These providers access personal data only to the extent necessary to perform their contracted services, under data processing agreements that require them to process data only on nustra.ph's documented instructions.

6.5 Law Enforcement

nustra.ph may disclose personal data to Philippine law enforcement agencies where required by a valid court order, subpoena, or other legal process, or where nustra.ph reasonably believes disclosure is necessary to protect the rights, property, or safety of nustra.ph, its players, or the public.

nustra.ph retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The key retention periods that apply to player data are:

• Account and KYC data: Retained for the duration of your active membership plus five (5) years following account closure, as required under PAGCOR licensing conditions and Philippine AML regulations.
• Financial transaction records: Retained for five (5) years from the date of each transaction, in compliance with the Anti-Money Laundering Act's record-keeping mandate.
• Responsible gaming records: Retained for the period required by PAGCOR's responsible gaming reporting requirements, which may extend beyond account closure.
• Customer support communications: Retained for three (3) years from the date of the interaction, for dispute resolution and quality assurance purposes.
• Technical and usage logs: Retained for a rolling twelve (12) month period for security monitoring and fraud detection purposes, then deleted or anonymised.
• Marketing consent records: Retained for the duration of your active consent plus three (3) years as evidence of consent status.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with nustra.ph's data disposal procedures.

nustra.ph implements technical and organisational security measures appropriate to the sensitivity of the personal data it holds and the risks of processing. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between player devices and nustra.ph servers
• Encryption of personal data at rest, including KYC documents and financial records
• Role-based access controls limiting staff access to personal data to those whose functions require it
• Multi-factor authentication for all nustra.ph staff access to systems holding personal data
• Regular security assessments and penetration testing of Platform infrastructure
• Intrusion detection systems and automated alerts for anomalous access patterns
• Data breach response procedures with NPC notification timelines as required by RA 10173

nustra.ph uses cookies and similar tracking technologies on the nustraph.club Platform. The categories of cookies used are:

• Strictly Necessary Cookies: Required for the Platform to function, including session management, login state persistence, and security tokens. These cannot be disabled without breaking Platform functionality.
• Functional Cookies: Store your preferences such as language settings, game lobby display preferences, and chosen deposit method to improve your experience on return visits.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the Platform, enabling nustra.ph to improve page performance and user experience. These do not identify you personally.
• Security Cookies: Used to detect and mitigate bot activity, credential stuffing, and other automated threats to account security.

nustra.ph does not use third-party advertising or tracking cookies to build profiles of player behaviour for sale to advertisers. You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair Platform functionality including login and gameplay.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by nustra.ph:

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Privacy Request" and include your full registered name and account details for identity verification. nustra.ph will respond to verified requests within fifteen (15) business days as required under NPC regulations. Note that certain rights — particularly erasure — may be limited where retention is required by PAGCOR, the AMLA, or other applicable Philippine law.

Age verification is performed during account registration and as a prerequisite to withdrawal processing. If nustra.ph becomes aware that personal data has been collected from a person under 21 years of age, it will immediately suspend the associated account, delete the personal data collected from that individual to the extent not required to be retained for regulatory purposes, and refer the matter to PAGCOR as required.

Parents and legal guardians who believe a minor may have registered an account on nustra.ph should contact [email protected] immediately. nustra.ph will respond to verified parental disclosure requests as a priority.

nustra.ph's primary data processing infrastructure is based in the Philippines. Where operational requirements involve transferring personal data to data processors located outside the Philippines — for example, certain cloud infrastructure providers or KYC technology partners — nustra.ph ensures that such transfers comply with Section 21 of the Data Privacy Act of 2012 and NPC regulations on cross-border data transfer.

Cross-border transfers are permitted only where: the recipient country provides an adequate level of protection; the recipient is bound by appropriate contractual data transfer safeguards recognised by the NPC; or your explicit consent has been obtained for the specific transfer. nustra.ph does not transfer personal data to jurisdictions where applicable data protection standards cannot be met.

nustra.ph may update this Privacy Policy from time to time to reflect changes in applicable law, PAGCOR requirements, our data processing practices, or Platform features. Material changes — those that affect your rights or how your data is used in ways you would reasonably consider significant — will be communicated to registered players via SMS or email at least seven (7) days before taking effect.

The current version of this Policy, with its effective date, is always available on this page. nustra.ph recommends that players review this Policy periodically. Your continued use of the Platform after the effective date of any revision constitutes acceptance of the updated Policy. If you do not agree to a material change, you may close your account before the revision takes effect.