nistar Privacy Policy

nistar is committed to safeguarding the privacy and personal data of every individual who interacts with the nistar platform, whether as a registered Player, a visitor browsing the site, or a person who contacts our support team. This Privacy Policy sets out, in clear and transparent terms, the practices and procedures by which nistar collects, uses, stores, shares, and protects personal data.

This Privacy Policy applies to all personal data collected through the nistar website at nistar.app, any associated mobile sites or applications, our customer support channels (live chat and email), and any other digital touchpoint operated by nistar in connection with its online casino and sports betting services in the Philippines.

This Privacy Policy should be read in conjunction with nistar's Terms & Conditions and any game-specific or promotion-specific terms published on the platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a matter relating to personal data, this Privacy Policy shall prevail.

nistar operates exclusively within the Philippines under PAGCOR authorization and processes personal data of Filipino players in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all relevant issuances of the National Privacy Commission (NPC) of the Philippines.

For the purposes of the Data Privacy Act of 2012, nistar acts as the Personal Information Controller with respect to all personal data collected from Players and site visitors through the nistar platform.

nistar has appointed a dedicated Data Protection Officer (DPO) responsible for overseeing nistar's compliance with applicable data protection laws, handling data subject requests, and serving as the primary point of contact with the National Privacy Commission.

You may contact nistar's Data Protection Officer at any time through the following channels:

• Support Email: support@nistar.app — please include "DPO Request" in your subject line.
• Live Chat: Available 24/7 directly within the nistar platform.

nistar will acknowledge all data protection inquiries within five (5) business days and will endeavor to resolve all requests within the timeframes prescribed by the Data Privacy Act and NPC regulations.

nistar collects the following categories of personal data from Players and site visitors, to the extent necessary for the purposes described in Section 5 of this Privacy Policy:

nistar does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where explicitly required for identity verification under PAGCOR KYC regulations.

nistar collects personal data through the following methods:

• Direct submission: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal request, contacting our support team, or participating in promotions and surveys.
• Automated technical collection: Technical data collected automatically when you access the nistar platform, including IP addresses, device identifiers, browser fingerprints, session logs, and geolocation data. This collection occurs through server logs, cookies, web beacons, and similar technologies — see Section 8 for full details on cookies.
• Third-party sources: nistar may receive personal data about you from third-party identity verification service providers, payment processors (such as GCash, Maya, BPI, BDO), fraud detection services, and credit reference agencies, where necessary for KYC compliance and financial security purposes.
• PAGCOR and regulatory databases: nistar may cross-check data against PAGCOR's self-exclusion registry and other regulatory databases as required by Philippine gaming law.

All data collection by nistar is conducted transparently, in accordance with the principles of proportionality and legitimate purpose under the Data Privacy Act of 2012.

nistar processes your personal data for the following specific, declared, and legitimate purposes:

• Account registration and management: Creating, maintaining, and administering your nistar Account, including verifying your identity and eligibility to use the platform.
• KYC and age verification: Verifying that you are at least 21 years of age and that your identity matches the information provided during registration, in compliance with PAGCOR regulations and Philippine anti-money laundering law.
• Transaction processing: Processing deposits and withdrawals through your chosen payment method (GCash, Maya, GrabPay, BPI, BDO, Metrobank, and others), including fraud screening and anti-money laundering checks on all financial transactions.
• Platform operations and game delivery: Providing access to nistar's full range of games including slots, live casino, sports betting, sabong, bingo, and card games, and maintaining the technical infrastructure supporting these services.
• Responsible gaming: Monitoring gaming activity to identify potential signs of problem gambling, enforcing Player-requested deposit limits, session limits, loss limits, cooling-off periods, and self-exclusion requests, and cross-referencing against PAGCOR's exclusion registry.
• Regulatory compliance and reporting: Meeting nistar's obligations under PAGCOR authorization, the Anti-Money Laundering Act of 2001 (RA 9160), the Terrorism Financing Prevention and Suppression Act, and reporting to the Anti-Money Laundering Council (AMLC) where legally required.
• Customer support: Responding to your inquiries, resolving disputes, and maintaining records of support interactions.
• Marketing and promotions: Sending you information about nistar promotions, bonuses, and new game releases — only where you have given your explicit consent to receive such communications, and only until you withdraw that consent.
• Platform improvement and analytics: Analyzing aggregated and anonymized usage patterns to improve the nistar platform's performance, user experience, and game offerings.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, account takeovers, money laundering, bonus abuse, and other prohibited activities on the platform.

Under the Data Privacy Act of 2012 (RA 10173), nistar processes your personal data on one or more of the following legal bases:

• Consent: Where you have freely given your specific, informed, and unambiguous consent to the processing of your personal data for a particular purpose — most notably, for the receipt of marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Contractual necessity: Where processing is necessary for the performance of the contract between you and nistar (i.e., the Terms & Conditions governing your use of the platform), including Account management, transaction processing, game delivery, and customer support.
• Legal obligation: Where processing is required for nistar to comply with a legal or regulatory obligation under Philippine law, including PAGCOR authorization requirements, Anti-Money Laundering Act obligations, AMLC reporting duties, and NPC data privacy requirements.
• Legitimate interests: Where processing is necessary for the purposes of nistar's legitimate interests — specifically, fraud prevention, platform security, responsible gaming monitoring, and business analytics — provided those interests are not overridden by your own privacy interests or fundamental rights.

nistar does not rely on consent as the legal basis for processing where another lawful basis is available and more appropriate. Where processing is based on legitimate interests, nistar has conducted a legitimate interests assessment to confirm that the processing is necessary, proportionate, and does not unduly prejudice your rights.

nistar does not sell, rent, or trade your personal data to any third party for commercial purposes. nistar may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the purposes described in this Privacy Policy:

• Payment processors and financial institutions: GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other Philippine payment service providers, for the purpose of processing your deposit and withdrawal transactions.
• Identity verification service providers: Third-party KYC and e-KYC service providers engaged by nistar to assist with identity verification, age verification, and document authentication, in compliance with PAGCOR KYC requirements.
• Fraud prevention and anti-money laundering services: Specialist fraud detection and AML screening service providers that assist nistar in monitoring transactions and player behavior for suspicious activity.
• Game technology providers: Licensed game software providers whose games are available on the nistar platform, to the limited extent necessary for game session management and fair-play auditing.
• PAGCOR and Philippine regulatory authorities: The Philippine Amusement and Gaming Corporation, the Anti-Money Laundering Council, the National Privacy Commission, and other competent Philippine government bodies, where disclosure is required by law, regulation, or a valid government order.
• Professional advisers: nistar's legal counsel, auditors, and compliance consultants, subject to strict professional confidentiality obligations.
• IT and cloud infrastructure providers: Third-party technology providers that host and maintain nistar's platform infrastructure, subject to data processing agreements that impose obligations equivalent to those in this Privacy Policy.

All third-party service providers engaged by nistar are contractually required to process your personal data only on nistar's documented instructions, to implement appropriate technical and organizational security measures, and to comply with applicable Philippine data protection law.

nistar uses cookies and similar tracking technologies on the nistar platform to ensure proper functionality, enhance your experience, maintain your session, and collect analytical data. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the operation of the nistar platform. These cookies enable core functions such as user authentication, session management, security, and fraud prevention. They cannot be disabled without significantly impairing the platform's functionality.
• Functional cookies: Remember your preferences — such as language settings, display preferences, and responsible gaming limit configurations — so that the platform behaves consistently across sessions.
• Analytical cookies: Help nistar understand how Players use the platform by collecting aggregated, anonymized information about page visits, session durations, game preferences, and navigation patterns. This data is used exclusively for internal platform improvement purposes.
• Security and fraud detection cookies: Used to identify suspicious access patterns, detect automated bot activity, and protect your Account and nistar's systems against unauthorized access and abuse.

nistar does not use third-party advertising cookies or behavioral tracking cookies that would allow external advertisers to build profiles of your activity across other websites.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent you from accessing certain features of the nistar platform. For detailed information on the specific cookies used and their individual retention periods, please contact our DPO.

nistar retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your Account's active status, plus a minimum of five (5) years following Account closure, in compliance with the Anti-Money Laundering Act of 2001 (RA 9160) and PAGCOR record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLC regulations and Bureau of Internal Revenue requirements.
• KYC verification documents: Retained for the duration of the Account relationship plus a minimum of five (5) years following Account closure.
• Customer support records: Retained for a minimum of two (2) years from the date of each interaction, for dispute resolution and quality assurance purposes.
• Gaming session data: Retained for a minimum of two (2) years, for regulatory audit, responsible gaming monitoring, and dispute resolution purposes.
• Marketing consent records: Retained for a minimum of three (3) years from the date of consent or withdrawal, to demonstrate compliance with consent requirements.

When personal data is no longer required for any legitimate purpose and its retention period has expired, nistar will securely delete or anonymize the data in accordance with best-practice data destruction standards. Anonymized, aggregated data that cannot be used to identify any individual may be retained indefinitely for statistical and analytical purposes.

nistar implements a comprehensive, multi-layered information security program to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security measures include, but are not limited to:

• Encryption: 256-bit SSL/TLS encryption for all data in transit between your device and nistar's servers. Sensitive data at rest — including financial records and identity documents — is encrypted using AES-256 encryption.
• Access controls: Role-based access controls ensure that only authorized personnel with a documented operational need may access personal data. All internal access to personal data is logged, monitored, and subject to periodic review.
• Two-factor authentication: All nistar staff with access to personal data systems are required to use multi-factor authentication. Players are strongly encouraged to enable 2FA on their Accounts.
• Intrusion detection and prevention: Automated intrusion detection systems monitor nistar's infrastructure 24/7 for suspicious access patterns, unauthorized access attempts, and anomalous data flows.
• Penetration testing: nistar's systems are subject to regular independent penetration testing by qualified cybersecurity professionals to identify and remediate vulnerabilities before they can be exploited.
• Staff training: All nistar employees with access to personal data receive mandatory data privacy and information security training upon onboarding and on a recurring annual basis.
• Incident response: nistar maintains a documented personal data breach response procedure, including notification protocols to the National Privacy Commission and affected data subjects within the timeframes prescribed by NPC Circular 16-03.

Despite these measures, no security system is impenetrable. In the unlikely event of a personal data breach affecting your data, nistar will notify you and the NPC in accordance with applicable Philippine data breach notification requirements.

Under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by nistar:

• Right to be informed: The right to be notified that your personal data is being or has been collected and processed, and to be informed of the purposes, legal bases, and extent of that processing — as fulfilled by this Privacy Policy.
• Right of access: The right to obtain a copy of your personal data held by nistar, along with information about how it has been used and to whom it has been disclosed.
• Right to rectification: The right to request correction of any inaccurate, incomplete, outdated, or misleading personal data held about you.
• Right to erasure or blocking: The right to request the deletion or blocking of personal data where it is no longer necessary for the purposes for which it was collected, where consent has been withdrawn and there is no other legal basis for processing, or where the data has been unlawfully processed — subject to nistar's legal obligations to retain certain data under PAGCOR regulations and the Anti-Money Laundering Act.
• Right to object: The right to object to the processing of your personal data on the basis of legitimate interests or for direct marketing purposes. Where you object to marketing processing, nistar will cease that processing immediately.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another personal information controller where technically feasible.
• Right to damages: The right to be indemnified for any damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data, in accordance with RA 10173.
• Right to file a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph if you believe your data rights have been violated.

To exercise any of the above rights, please contact nistar's Data Protection Officer via live chat or at support@nistar.app with the subject line "Data Rights Request." nistar will respond within fifteen (15) business days, or such shorter period as may be required by NPC regulations. nistar reserves the right to verify your identity before processing any data rights request.

The nistar platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR regulations governing online casino and sports betting in the Philippines. nistar does not knowingly collect, store, or process personal data from individuals under the age of 21.

🔞 If nistar becomes aware that it has inadvertently collected personal data from an individual who is under 21 years of age, it will immediately suspend the associated Account, void all transactions conducted through that Account, and securely delete all related personal data as promptly as practicable.

If you believe that a person under the age of 21 has registered on the nistar platform or has submitted personal data to nistar, please contact our support team immediately at support@nistar.app so that we can investigate and take appropriate action.

nistar employs age verification controls at the point of registration and reserves the right to request documentary proof of age at any time during a Player's use of the platform. Providing false information about your age during registration is a serious violation of nistar's Terms & Conditions and may be reported to PAGCOR and relevant Philippine law enforcement authorities.

nistar's primary operations and data storage infrastructure are based in the Philippines. However, certain third-party service providers engaged by nistar — including game technology providers, cloud infrastructure providers, and fraud detection services — may process your personal data in jurisdictions outside the Philippines.

Where nistar transfers personal data outside the Philippines, it ensures that such transfers are made only to recipients who provide a level of data protection that is comparable to the protections afforded under the Data Privacy Act of 2012 (RA 10173). nistar achieves this through:

• Contractual data transfer clauses that impose obligations on overseas recipients equivalent to those under Philippine data protection law;
• Transferring data only to recipients in jurisdictions recognized by the NPC as providing an adequate level of data protection; or
• Obtaining your explicit consent to the specific cross-border transfer, where no other transfer mechanism is available.

nistar will not transfer your personal data to any overseas recipient that cannot demonstrate an adequate level of data protection, or where the transfer would result in a circumvention of your rights under RA 10173. For information about the specific overseas recipients to whom nistar transfers your data, please contact the DPO.

nistar reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable Philippine law, NPC regulations, PAGCOR requirements, nistar's data processing practices, or the services offered on the platform. The effective date of the most current version is displayed at the top of this page.

Where any amendment to this Privacy Policy is material — meaning it significantly affects your data rights or nistar's data processing practices in a manner that could be adverse to your interests — nistar will notify registered Players via in-platform notification or email to the address associated with your Account, at least seven (7) days before the amended policy takes effect.

Your continued use of the nistar platform after the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy. If you do not agree with any amendment, you must cease using the platform and may request Account closure in accordance with the procedure described in nistar's Terms & Conditions.

nistar encourages you to review this Privacy Policy periodically to stay informed of how your personal data is being protected and processed.

If you have any questions, concerns, or requests regarding this Privacy Policy or nistar's personal data practices, you may contact nistar's Data Protection Officer through the following channels:

• Live Chat: Available 24/7 directly within the nistar platform — the fastest way to reach our team, with an average response time under 2 minutes.
• Email: support@nistar.app — please use the subject line "Privacy / DPO Inquiry" for faster routing. Email responses are provided within 24 hours for general inquiries and within the statutory period for formal data rights requests.

You also have the right to raise a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe that your data rights under RA 10173 have not been adequately respected by nistar. The NPC may be contacted through its official website at privacy.gov.ph.

For responsible gaming concerns specifically, please visit our Responsible Gaming page where you can find detailed information on self-exclusion tools, deposit limits, and additional support resources available to all nistar Players.