Effective Date: 1 January 2025. This Privacy Policy replaces all previous versions. Continued use of NutStar after this date constitutes acceptance of these terms.
1. About This Privacy Policy
This Privacy Policy describes how NutStar ("NutStar," "we," "us," "our") collects, uses, stores, shares, and protects the personal information of players and visitors who access and use the NutStar platform at nutstar.best, including any associated mobile applications or services.
We understand that privacy matters deeply to Filipino players. When you give us your personal information — your name, your contact details, your payment data — you're placing a significant degree of trust in us. This Policy is our detailed account of exactly how we honour that trust. It is written to be read and understood, not buried in language designed to obscure what we're actually doing with your data.
Plain-language commitment: NutStar does not sell your personal data. We do not share it with advertisers. We collect only what we genuinely need to operate the platform and protect you and other players. That's our baseline, and everything in this Policy builds on it.
This Policy applies to all registered players, unregistered visitors to the NutStar website, and any individual who interacts with NutStar through any channel, including customer support, email, and social media accounts operated by NutStar. By accessing or using the NutStar platform, you acknowledge that you have read this Privacy Policy and understand how your data will be handled.
2. Who We Are — The Data Controller
For the purposes of Philippine data privacy law and international data protection standards, NutStar is the data controller of your personal information. This means NutStar determines the purposes for which your data is collected and the means by which it is processed.
NutStar operates the online gaming platform at nutstar.best and is committed to compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines. Our Data Protection Officer (DPO) can be contacted at privacy@nutstar.best for all privacy-related matters.
3. Personal Data We Collect
NutStar collects personal data through several channels: information you provide directly, information generated by your use of the platform, and in some cases, information received from third-party verification or payment partners. Here is a detailed account of what we collect and how.
3.1 Information You Provide
- Registration data: Full legal name, date of birth, gender, nationality, mobile number, email address, and preferred username.
- Identity verification (KYC): Government-issued ID (passport, PhilSys, driver's licence, UMID, SSS/GSIS ID), selfie for liveness confirmation, and proof of address (utility bill, bank statement, barangay certification) where required.
- Financial information: GCash number, Maya wallet details, bank account numbers (BPI, BDO, UnionBank), card numbers (partial, as required by payment processors), and transaction history on the NutStar platform.
- Support communications: Content of your messages to our customer support team, including the issue description, account details shared in context, and any attachments submitted.
- Responsible gaming information: Self-imposed limits, cool-off or self-exclusion requests, and any information you voluntarily share about your gaming behaviour in the context of a responsible gaming interaction.
3.2 Information Collected Automatically
- Device information: Device type, operating system, browser type and version, screen resolution, device identifiers.
- Network information: IP address, mobile network provider, approximate geolocation derived from IP address.
- Usage data: Pages visited, games played, bets placed, session duration, clicks, scroll behaviour, and feature interactions on the platform.
- Cookie and tracking data: Session cookies, persistent cookies, local storage data, and similar technologies as described in Section 7.
- Transaction logs: Timestamps, amounts, payment methods, and outcomes of all deposits, withdrawals, bets, and game sessions.
3.3 Information from Third Parties
- Identity and age verification results from third-party KYC service providers.
- Fraud risk signals from payment processors and anti-fraud partners.
- Information from regulators or law enforcement authorities, where legally required.
4. How We Use Your Personal Data
NutStar uses your personal data for the following purposes. We collect only the data we genuinely need for each purpose — no more.
| Purpose |
Data Used |
| Account creation and management | Registration data, contact details |
| Identity verification (KYC/AML) | ID documents, selfie, address proof |
| Processing deposits and withdrawals | Financial data, transaction history |
| Providing gaming services | Usage data, transaction logs |
| Customer support | Account data, support communications |
| Fraud detection and prevention | IP, device, financial, behavioural data |
| Responsible gaming monitoring | Gaming behaviour, limits, usage data |
| Legal and regulatory compliance | All categories as required by law |
| Platform improvement and analytics | Usage data, anonymised or aggregated |
| Marketing (with consent) | Contact details, gaming preferences |
NutStar does not use your personal data to make fully automated decisions that have legal or similarly significant effects on you without human review. Any account suspension based on automated fraud detection is reviewed by a human team member before becoming permanent.
5. Legal Basis for Processing
Under the Philippine Data Privacy Act (RA 10173), NutStar processes personal data on the following legal bases:
- Contractual necessity: Processing required to fulfil our contract with you — operating your account, processing payments, and providing gaming services.
- Legal obligation: Processing required for compliance with Philippine law, including anti-money laundering (AMLA), KYC obligations, and regulatory reporting.
- Legitimate interests: Processing for fraud detection, security, platform improvement, and responsible gaming monitoring, where our legitimate interests do not override your privacy rights.
- Consent: Marketing communications, optional cookies, and any other processing for which we have sought and received your explicit consent.
Where we rely on your consent, you have the right to withdraw it at any time without affecting the lawfulness of processing already carried out. Withdrawing consent for marketing will not affect your ability to use your NutStar account.
6. Who We Share Your Data With
NutStar does not sell your personal data to third parties. We do not share it with advertisers or data brokers. We share your data only in the following limited, necessary circumstances:
- Payment processors: GCash/Maya (PayMaya), BPI, BDO, UnionBank, and card payment processors receive the minimum transaction data required to process your deposits and withdrawals securely.
- KYC and identity verification partners: Third-party providers who verify the authenticity of your identity documents and perform liveness checks as part of the account verification process.
- Fraud prevention services: Partners who help NutStar detect and prevent fraudulent activity, money laundering, and account manipulation. These partners receive behavioural signals and transaction data in aggregated or hashed form where possible.
- Technology and infrastructure partners: Cloud hosting providers, data centre operators, and IT service providers who process data on NutStar's behalf under strict data processing agreements and are not permitted to use your data for their own purposes.
- Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and Philippine law enforcement agencies, where required by applicable law or valid legal order.
- Professional advisors: Legal, accounting, and auditing firms engaged by NutStar, subject to professional confidentiality obligations.
All third parties with whom NutStar shares personal data are required to process that data in accordance with applicable Philippine data privacy law and are prohibited from using it for any purpose other than the specific service they provide to NutStar.
7. Cookies and Tracking Technologies
NutStar uses cookies and similar tracking technologies to operate the platform, keep you logged in, remember your preferences, detect fraud, and analyse how players use the site. Below is a breakdown of the types of cookies we use.
Strictly Necessary Cookies
These cookies are essential for the platform to function. They maintain your login session, store your security tokens, enable payment flows, and prevent cross-site request forgery. You cannot disable these without losing access to core platform features. These cookies do not require your consent under the Data Privacy Act.
Functional Cookies
These cookies remember your preferences — your preferred language, display settings, game lobby layout, and similar choices — so you don't have to reconfigure them every session. They improve your experience but are not essential to platform operation.
Analytics Cookies
NutStar uses first-party analytics to understand how players navigate the platform — which pages are most visited, where players encounter difficulties, and how features are used. This data is collected in aggregated form and helps us improve the experience for all Filipino players. Analytics cookies do not identify you personally in the reports we review.
Security and Fraud Prevention
Certain tracking mechanisms are used specifically to identify unusual or potentially fraudulent activity — devices associated with known fraud patterns, IP addresses appearing in multiple accounts, or behavioural signals inconsistent with normal human play. These are treated as strictly necessary for platform security.
Cookie control: You can manage non-essential cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will prevent you from logging in to your NutStar account. For details, consult your browser's help documentation.
8. How Long We Keep Your Data
NutStar retains personal data only for as long as necessary for the purposes described in this Policy, subject to our legal and regulatory obligations.
- Active account data: Retained for the lifetime of your account and for a minimum of 5 years after account closure, in compliance with Philippine anti-money laundering regulations.
- KYC/identity documents: Retained for a minimum of 5 years from the date of last account activity, as required by the AMLA and its implementing regulations.
- Transaction records: Retained for 5 years from the date of each transaction, per AMLC reporting requirements.
- Support communications: Retained for 3 years from the date of the last interaction, to allow for dispute resolution and quality review.
- Marketing consent records: Retained for the duration of the marketing relationship plus 1 year.
- Website usage and analytics data: Aggregated data retained indefinitely for trend analysis; individual session data retained for up to 12 months.
After retention periods expire, data is securely deleted or anonymised so that it can no longer be linked to any individual player. Where legal obligations require extended retention, we will retain the minimum necessary data for the legally required period only.
9. How We Protect Your Data
NutStar employs a layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, or destruction.
- Encryption: All data transmitted between your device and NutStar's servers is encrypted using TLS 1.2 or higher (256-bit SSL). Data at rest in our databases is encrypted using AES-256.
- Access controls: Personal data is accessible only to NutStar employees and systems with a legitimate need for access. Staff with access to sensitive data undergo background screening and regular privacy training.
- Network security: NutStar's infrastructure is protected by firewalls, intrusion detection systems, and continuous monitoring for anomalous access patterns.
- Payment data: NutStar does not store full payment card numbers. Card transactions are processed through PCI-DSS compliant payment processors, and only tokenised references are retained on NutStar systems.
- Penetration testing: NutStar conducts regular penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.
- Incident response: NutStar maintains an incident response plan. In the event of a personal data breach that may harm affected players, we will notify the National Privacy Commission and affected individuals within the timeframes required by Philippine law.
Your role in security: No platform security is complete without the player's own precautions. Use a strong, unique password for your NutStar account. Enable two-factor authentication. Never share your login credentials. Contact support@nutstar.best immediately if you suspect your account has been compromised.
10. International Data Transfers
NutStar's primary operations and data processing are conducted within the Philippines. However, some of our technical infrastructure partners and service providers operate internationally. Where your data is transferred to servers or systems outside the Philippines, NutStar ensures that appropriate safeguards are in place, including:
- Data processing agreements requiring the recipient to maintain security standards equivalent to or greater than those required by Philippine law.
- Transfer only to countries or jurisdictions recognised by the National Privacy Commission as providing adequate data protection.
- Contractual clauses that require the overseas recipient to comply with the Philippine Data Privacy Act's standards as a condition of processing the data.
International transfers occur primarily in the context of cloud hosting (data centre replication for disaster recovery), identity verification, and payment processing. In all cases, the minimum necessary data is transferred, and recipients are prohibited from using the data for any purpose beyond the specific service they provide.
11. Your Data Rights Under Philippine Law
As a Filipino player, the Data Privacy Act of 2012 (RA 10173) grants you specific rights over your personal data. NutStar is committed to honouring all of these rights promptly and without unnecessary barriers. Contact privacy@nutstar.best to exercise any of the following rights.
You have the right to request a copy of the personal data NutStar holds about you, along with information about how it is being used. We will provide this within 10 business days of receiving a valid request. This is free of charge for reasonable requests. We may ask you to verify your identity before releasing data to prevent unauthorised disclosure.
If any personal data NutStar holds about you is inaccurate, incomplete, or outdated, you have the right to request that we correct it. For straightforward corrections (such as a misspelled name or incorrect contact number), you can update this directly in your account settings. For corrections requiring document verification, contact privacy@nutstar.best.
You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for continued processing. Note that certain data — particularly KYC records and transaction logs — must be retained for minimum periods under Philippine anti-money laundering law regardless of an erasure request. We will inform you of any such constraints when processing your request.
You have the right to object to processing of your personal data for marketing purposes at any time. You can unsubscribe from marketing emails by clicking the unsubscribe link in any marketing email, or by contacting privacy@nutstar.best. You may also object to processing based on legitimate interests; NutStar will review such objections and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
Where technically feasible and legally appropriate, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that NutStar transmit it directly to another data controller. Contact privacy@nutstar.best to request a data portability package. We will respond within 10 business days.
If you believe NutStar has handled your personal data improperly, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph. We encourage you to contact our Data Protection Officer at privacy@nutstar.best first — in most cases we can resolve privacy concerns quickly without formal regulatory involvement. All complaints are taken seriously and investigated promptly.
12. Children's Privacy
NutStar's platform is strictly for individuals aged 21 years and older. We do not knowingly collect, process, or store personal data from anyone under the age of 21. If you are a parent or guardian and believe your child may have accessed NutStar or provided personal information to us, please contact privacy@nutstar.best immediately.
Upon receiving a credible report that a person under 21 has registered or used NutStar, we will immediately close the account, delete all associated personal data to the extent permitted by legal obligations, and return any deposited funds to the payment method used. Age verification is a mandatory part of our KYC process precisely to prevent underage access.
13. Marketing Communications
NutStar will only send you promotional emails, SMS, or push notifications if you have given us explicit consent to do so during registration or subsequently through your account preferences. Marketing communications may include information about new games, promotions, bonus offers, tournament announcements, and platform updates.
You can withdraw your marketing consent at any time by clicking the "unsubscribe" link in any marketing email, by updating your notification preferences in your account settings, or by contacting privacy@nutstar.best. Unsubscribing from marketing does not affect transactional communications — you will continue to receive account-related emails such as deposit confirmations, withdrawal notifications, and security alerts.
Responsible marketing commitment: NutStar will not send marketing materials to players who have active responsible gaming restrictions on their account, including self-exclusion, deposit limits, or cool-off periods. We will also not send bonus-related marketing to players who have requested to be excluded from promotional materials for responsible gaming reasons.
14. Third-Party Links and Integrations
The NutStar platform may contain links to third-party websites or integrate with third-party services (such as payment processors or identity verification tools). This Privacy Policy applies only to NutStar and does not cover the privacy practices of any third-party websites or services.
When you click through to a third-party website or interact with a third-party service integrated into NutStar's platform, that party's own privacy policy governs how your data is handled. NutStar has no control over and assumes no responsibility for the content, privacy policies, or practices of third-party sites. We encourage you to review the privacy policy of any third party before providing them with personal information.
15. Changes to This Privacy Policy
NutStar may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will notify you by email to your registered address, by in-platform notification, and by updating the "Effective Date" at the top of this page at least 7 days before the changes take effect.
For minor, non-material changes — such as clarifications, typographical corrections, or adding detail about an existing practice without changing the substance — we may update the policy immediately without the 7-day notice period. In all cases, the most current version of this Policy will always be available at nutstar.best/privacy-policy.
Your continued use of NutStar after the effective date of any change to this Policy constitutes your acceptance of the revised terms. If you do not agree with a material change, you should stop using NutStar and may request account closure per the process described in our Terms and Conditions.
16. Contact Us and Data Protection Officer
For all privacy-related questions, requests to exercise your data rights, complaints, or concerns, please contact NutStar's Data Protection Officer:
NutStar Data Protection Officer
📧 Privacy enquiries: privacy@nutstar.best
📧 General support: support@nutstar.best
🌐 Website: nutstar.best
⏰ Response time: Within 10 business days for formal data rights requests; within 24 hours for urgent security concerns
If you feel your privacy concern has not been adequately addressed by NutStar after contacting our DPO, you have the right to escalate the matter to the National Privacy Commission of the Philippines (NPC). The NPC can be contacted through their official website at privacy.gov.ph. NutStar cooperates fully with NPC investigations and takes all regulatory enquiries seriously.
