At nurstar, your personal data belongs to you. This Privacy Policy explains exactly what information we collect when you use nurstar.co, why we collect it, how we use it, who we share it with, and what rights you hold over it under Philippine law.
nurstar collects only the personal data necessary to operate your account, process transactions, verify your identity, and comply with PAGCOR regulations. We do not collect data we have no legitimate use for.
nurstar does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your data is used solely to operate and improve the nurstar platform for your benefit.
As a Philippine data subject, you have the right to access, correct, object to, erase, and port your data held by nurstar. Requests are processed within 15 business days at no charge to you.
All nurstar data at rest is encrypted using AES-256. Data in transit is protected by TLS 1.3. Passwords are stored as salted bcrypt hashes — nurstar employees cannot see your password under any circumstances.
nurstar retains your data only for as long as required by Philippine law, PAGCOR regulations, and the purposes for which it was collected. Account data is typically retained for 5 years after account closure.
In the event of a personal data breach that poses a risk to your rights, nurstar will notify the National Privacy Commission and affected Members within 72 hours of discovering the breach, in accordance with NPC regulations.
SCOPE OF THIS POLICY: This Privacy Policy applies to all personal data collected by nurstar through nurstar.co, including during account registration, identity verification, payment processing, customer support interactions, and promotional activities. It applies to all Members and visitors who interact with the nurstar platform, regardless of the device or location from which they access it within the Philippines.
1.1 The data controller responsible for the personal data collected through the nurstar platform is nurstar, the operator of nurstar.co, registered and operating under applicable Philippine law and subject to the licensing and compliance requirements of the Philippine Amusement and Gaming Corporation (PAGCOR).
1.2 As data controller, nurstar determines the purposes for which your personal data is processed and the means by which that processing is carried out. nurstar processes personal data in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC) of the Philippines.
1.3 For all data privacy enquiries, requests to exercise your data subject rights, and formal notices to the Data Protection Officer, please refer to Section 16 of this Policy.
2.1 nurstar collects the following categories of personal data from Members and platform visitors. The specific data collected in any instance depends on the context of the interaction and the product or service being accessed.
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, government-issued ID type and number, selfie photo | KYC verification, age verification, fraud prevention |
| Contact Data | Email address, mobile number, city/province of residence | Account communication, OTP delivery, support |
| Account Data | Username, password hash, account creation date, login history, device fingerprint | Account management, security, fraud detection |
| Financial Data | GCash / PayMaya account identifier, bank account details, transaction history, wallet balance | Payment processing, AML compliance, withdrawal verification |
| Gaming Data | Bet history, game session logs, wins/losses, responsible gaming limit settings | Service provision, responsible gaming, regulatory reporting |
| Technical Data | IP address, device type, operating system, browser type, geolocation (country/city) | Security, fraud prevention, platform optimisation |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer service, dispute resolution, quality assurance |
| Marketing Data | Promotional email open/click data, bonus claim history, communication preferences | Targeted promotions (with consent), platform improvement |
2.2 nurstar does not collect sensitive personal information as defined under Section 3(l) of the DPA — such as health data, biometric data, or racial/ethnic origin — except to the extent that such data is voluntarily provided by the Member as part of a specific responsible gaming or self-exclusion request.
3.1 nurstar collects personal data through the following means:
Data you provide directly to nurstar when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to promotional communications. This is the primary source of identity and contact data held by nurstar.
Data collected automatically when you access and use the nurstar platform, including IP address, device identifiers, browser information, session duration, pages visited, and game activity logs. This data is collected via server logs, session tracking, and device fingerprinting technology.
Identity and fraud risk data received from KYC verification providers, payment processors (including GCash and PayMaya), and PAGCOR-mandated reporting integrations. nurstar only receives data from third parties where you have authorised that third party to share it or where sharing is required by Philippine law.
Session and preference data collected through browser cookies, local storage, and similar tracking technologies. See Section 7 of this Policy for full cookie disclosure.
4.1 nurstar processes your personal data on the following legal grounds, each of which corresponds to one or more criteria under Section 12 of the Data Privacy Act of 2012:
Processing required to fulfil the contract between nurstar and the Member — including account operation, payment processing, bet settlement, and withdrawal processing.
Processing required to comply with Philippine law — including PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA) obligations, KYC mandates, tax reporting, and age verification.
Processing necessary for nurstar's legitimate business interests — including fraud detection, platform security, responsible gaming monitoring, and platform performance analytics — where these interests are not overridden by the Member's privacy rights.
Processing for marketing communications and certain analytics activities, where you have provided explicit, freely given, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing before the withdrawal.
5.1 nurstar uses your personal data for the following specific purposes. We do not use your data for any purpose that is incompatible with these stated uses without first obtaining your consent or establishing a separate legal basis.
6.1 nurstar does not sell your personal data. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:
nurstar uses third-party KYC service providers to perform identity document verification and liveness checks as required by PAGCOR. These providers act as data processors on nurstar's behalf and are bound by data processing agreements consistent with the DPA.
Deposit and withdrawal transactions are processed through GCash, PayMaya, and Philippine banking partners. The minimum necessary data (transaction amount, account identifier) is shared to process payments. nurstar does not store full payment instrument details on its servers.
For live casino, slots, and certain other games, a session token and minimum account reference are shared with the licensed game provider to facilitate the gaming session. Game providers do not receive your identity, contact, or full financial data.
nurstar is legally obligated to share certain Member data with PAGCOR, the AMLC, and the BIR as required by applicable Philippine law. nurstar cannot decline such disclosures. Where permitted by law, nurstar will notify you of a regulatory data request.
nurstar may share data with the Philippine National Police, the NBI, or other law enforcement agencies where required by a valid legal process (subpoena, court order, or equivalent instrument issued under Philippine law).
6.2 All third parties who receive personal data from nurstar are contractually required to process that data only for the purposes for which it was shared and to maintain security standards at least equivalent to those maintained by nurstar.
7.1 nurstar uses cookies and similar technologies on nurstar.co to provide core platform functionality, improve performance, and (with your consent) deliver personalised content. The following categories of cookies are used:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Session management, authentication, security, load balancing. Cannot be disabled without breaking core platform functionality. | No — essential |
| Functional | Remembering your language preference, display settings, and responsible gaming choices between sessions. | No — legitimate interest |
| Analytical | Aggregated, anonymised data on page performance, game load times, and navigation paths to improve nurstar's platform. | Yes — opt-in |
| Marketing | Tracking which nurstar promotions you have viewed or engaged with to avoid sending duplicate communications. | Yes — opt-in |
7.2 You may manage your cookie preferences through your browser settings. Most browsers allow you to view, block, and delete cookies. Blocking strictly necessary cookies will impair your ability to log in and use core nurstar features.
7.3 nurstar does not use cross-site tracking cookies or share cookie data with advertising networks or data brokers.
8.1 nurstar retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by Philippine law and PAGCOR regulations. The following general retention schedule applies:
8.2 Upon expiry of the applicable retention period, nurstar will securely destroy or anonymise the relevant data in accordance with its data disposal procedures.
9.1 nurstar implements and maintains technical and organisational security measures appropriate to the risks posed by the processing activities described in this Policy. Current security measures include:
9.2 While nurstar takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the confidentiality of your nurstar login credentials and for notifying nurstar immediately if you suspect unauthorised access to your account.
9.3 In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected Members, nurstar will notify the National Privacy Commission within 72 hours of becoming aware of the breach and will communicate directly with affected Members without undue delay.
10.1 As a data subject under the Philippine Data Privacy Act of 2012, you hold the following rights with respect to personal data held by nurstar. All requests must be submitted to the nurstar Data Protection Officer as described in Section 16.
Request a copy of the personal data nurstar holds about you, the purposes for which it is processed, and the categories of third parties with whom it has been shared.
Request correction of inaccurate or incomplete personal data. Some corrections (e.g. legal name changes) will require supporting documentation.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to nurstar's legal retention obligations.
Object to the processing of your data for marketing purposes or where processing is based on legitimate interests. Marketing objections take effect within 48 hours.
Request your personal data in a structured, commonly used, machine-readable format for transfer to another service provider, where technically feasible.
Request restriction of processing during periods when accuracy is contested, processing is unlawful but erasure is not preferred, or an objection is pending verification.
10.2 nurstar will respond to data subject requests within 15 business days of receipt. Where a request is complex or numerous, this period may be extended by a further 30 days, in which case nurstar will notify you of the extension and the reason for it.
10.3 There is no charge for exercising your data subject rights. If a request is manifestly unfounded or excessive, nurstar may charge a reasonable administrative fee or decline to act, but will explain the basis for that decision in writing.
10.4 If you are not satisfied with nurstar's response to a data subject request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.
11.1 The nurstar platform is strictly for adults aged 21 years and above. nurstar does not knowingly collect personal data from individuals below the age of 21. The minimum age restriction is enforced through KYC identity verification prior to the first withdrawal.
11.2 If nurstar discovers that personal data has been collected from a person under 21 years of age, that data will be permanently deleted, the associated account will be immediately suspended, and any wagering activity associated with the underage account will be voided in accordance with nurstar's Terms & Conditions.
11.3 If you are a parent or guardian and believe that a minor in your care has created a nurstar account, please contact nurstar immediately via live chat or at [email protected] nurstar will investigate and act on such reports as a priority matter.
12.1 nurstar's primary data processing infrastructure is hosted within the Philippines or in jurisdictions that have been assessed as providing adequate data protection standards consistent with the DPA 2012. Certain third-party service providers — including some game content providers and technical infrastructure vendors — may process data in other jurisdictions.
12.2 Where personal data is transferred to a third party outside the Philippines, nurstar ensures that appropriate safeguards are in place, including contractual obligations requiring the recipient to maintain data protection standards equivalent to those required by Philippine law.
12.3 You may request information about the specific jurisdictions to which your data may be transferred by contacting the nurstar Data Protection Officer as described in Section 16.
13.1 nurstar will only send promotional and marketing communications to Members who have explicitly opted in to receive them. Opt-in is collected during the registration process and can be updated at any time from within your nurstar account settings.
13.2 You may opt out of all marketing communications from nurstar at any time by:
13.3 Opting out of marketing communications does not affect the delivery of transactional communications — including deposit confirmations, withdrawal notifications, account security alerts, and responsible gaming notifications — which are sent regardless of marketing preference as they are necessary for account operation.
13.4 nurstar uses Member gaming activity data (such as game preferences and betting patterns) to send relevant promotional offers. This processing is carried out on the basis of your consent, which you may withdraw as described in 13.2 above.
14.1 The nurstar platform incorporates third-party services — including live casino streaming infrastructure, slot game engines, and payment gateway interfaces. These integrations are subject to the third party's own privacy policies and data practices, which operate independently of nurstar's privacy commitments.
14.2 nurstar is not responsible for the privacy practices of third-party game providers whose content appears within the nurstar platform. We encourage you to review the privacy policies of any third-party service whose interface you access through nurstar.
14.3 The nurstar platform does not contain outbound links to external websites for commercial purposes. Where reference is made to PAGCOR, the National Privacy Commission, or other regulatory bodies in this or other nurstar documents, those references are informational only and do not imply any endorsement by those bodies of the nurstar platform.
15.1 nurstar may update this Privacy Policy from time to time to reflect changes in data processing practices, applicable Philippine law, PAGCOR regulations, or NPC guidance. The "Last Updated" date at the top of this Policy will be revised to reflect the date of the most recent change.
15.2 Where a material change is made to this Policy that affects the way nurstar processes Member data, nurstar will notify registered Members by email and through a prominent notice on the nurstar platform at least 7 days before the change takes effect.
15.3 Your continued use of the nurstar platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised Policy. If you do not accept the revised Policy, you must stop using the platform and may request account closure in accordance with nurstar's Terms & Conditions.
16.1 nurstar has appointed a Data Protection Officer (DPO) in compliance with Section 21 of the Data Privacy Act of 2012. The DPO is responsible for overseeing nurstar's data protection strategy and compliance, and serves as the primary point of contact for all data subject rights requests and privacy-related enquiries.
16.2 To exercise your data subject rights, lodge a privacy complaint, or submit a formal notice to the DPO, please contact nurstar using the following details:
Data Protection Officer — nurstar
Email: [email protected]
Live Chat: Available 24/7 at nurstar.co — request "DPO escalation" from the support agent
Please include your registered email address and account username in all DPO correspondence. Data subject requests are processed within 15 business days of receipt of a complete request.
16.3 If you are not satisfied with nurstar's handling of a data privacy matter, you have the right to file a complaint directly with the National Privacy Commission of the Philippines. Information about the NPC's complaint procedure is available on the NPC's official website.
16.4 This Privacy Policy was last reviewed and approved by the nurstar Data Protection Officer on 1 January 2026. It supersedes all previous versions of the nurstar Privacy Policy.
We take your privacy seriously because it's the right thing to do — not just because the law requires it. If you have questions about how nurstar handles your data, our team is ready around the clock.
Gambling involves risk. Play responsibly. nurstar is PAGCOR regulated. For adults 21 and above only.