nuwstar Privacy Policy — Your Data, Protected

This Privacy Policy ("Policy") describes how nuwstar ("nuwstar," "we," "our," or "us") collects, processes, stores, shares, and protects personal data obtained from players and visitors who use the nuwstar online casino platform accessible at nuwstar.net (the "Platform").

This Policy applies to all personal data that nuwstar processes in connection with your use of the Platform, including account registration, identity verification, deposits and withdrawals, gameplay activity, customer support interactions, and marketing communications. It applies to all current and former registered players as well as to unregistered visitors who browse the Platform.

nuwstar is committed to full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission (NPC). Where applicable, nuwstar also observes PAGCOR data handling directives issued to licensed Philippine online gaming operators.

For the purposes of the Data Privacy Act of 2012, nuwstar acts as the Personal Information Controller (PIC) in respect of personal data collected through the Platform. This means nuwstar determines the purposes and means of processing your personal data and bears primary accountability for ensuring your data is handled lawfully, fairly, and securely.

nuwstar has appointed a designated Data Protection Officer (DPO) in accordance with NPC requirements. The DPO is responsible for overseeing nuwstar's compliance with data privacy laws, managing data subject requests, and coordinating with the NPC where required. Contact details for the DPO are provided in Section 15 of this Policy.

nuwstar collects personal data across several categories depending on your level of interaction with the Platform. The table below summarizes the main categories and specific data points collected:

nuwstar does not intentionally collect sensitive personal information as defined under the Data Privacy Act (such as health records, political opinions, or religious beliefs) except where disclosure of such information is made voluntarily by the player in the context of a support interaction.

nuwstar collects personal data through the following channels and methods:

4.1 Directly From You

The majority of personal data nuwstar holds is provided directly by you during the registration process, when completing KYC verification, when making deposits or withdrawals, when communicating with our support team, and when updating your account settings or responsible gaming preferences.

4.2 Automatically Through Technology

When you visit or use the Platform, nuwstar's servers and analytics systems automatically collect technical data including your IP address, browser type, device identifiers, and session activity logs. This collection occurs regardless of whether you are a registered player or an unregistered visitor and is necessary for Platform security and performance monitoring. Cookies and similar technologies used for this purpose are described in detail in Section 8.

4.3 From Third Parties

nuwstar may receive personal data about you from third parties in the following circumstances:

• Identity Verification Providers: Where you consent to identity verification through a third-party KYC provider, that provider will share verification results with nuwstar.
• Payment Processors: GCash, Maya, and other payment partners share transaction reference data and status updates with nuwstar to facilitate payment processing.
• Fraud Prevention Services: nuwstar may receive risk signals or flagging data from third-party fraud detection services to protect the Platform.
• PAGCOR and Regulatory Authorities: In certain compliance-driven scenarios, nuwstar may receive information about players from PAGCOR or other Philippine regulatory bodies, such as self-exclusion registry data.

nuwstar uses the personal data it collects for the following specific purposes:

• Account Creation and Management: To register your account, verify your identity, maintain your player profile, and manage your account settings throughout your relationship with nuwstar.
• Payment Processing: To process deposits and withdrawals, reconcile financial transactions, manage currency conversions for USDT and crypto payments, and maintain accurate financial records.
• KYC and AML Compliance: To fulfill nuwstar's mandatory Know Your Customer and Anti-Money Laundering obligations under Philippine law, including identity verification, source of funds checks, and transaction monitoring.
• Responsible Gaming: To monitor gaming behavior for indicators of problem gambling, enforce deposit limits and self-exclusion requests, and communicate responsible gaming resources to players who may need support.
• Platform Security: To detect, investigate, and prevent fraud, unauthorized access, bot activity, collusion, money laundering, and other prohibited conduct on the Platform.
• Customer Support: To respond to your support inquiries, resolve disputes, process complaints, and improve support quality through quality assurance reviews of interaction records.
• Service Improvement: To analyze aggregated and anonymized usage data to improve Platform performance, game selection, user experience, and product development.
• Marketing Communications: To send you promotional offers, bonus notifications, and event updates — but only where you have opted in to receive marketing communications and subject to your right to withdraw consent at any time.
• Regulatory Reporting: To fulfill nuwstar's statutory obligations to report certain transactions and player data to PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities.

Under the Data Privacy Act of 2012, nuwstar processes personal data on one or more of the following legal bases depending on the specific processing activity:

6.1 Contractual Necessity

Processing your identity data, contact data, financial data, and gaming activity data is necessary for nuwstar to perform the contract it has with you — namely, providing you access to the Platform, processing your wagers, and paying out your winnings. Without this processing, nuwstar cannot deliver its services.

6.2 Legal Obligation

Certain processing activities — particularly KYC verification, AML transaction monitoring, and regulatory reporting to PAGCOR and AMLC — are required by Philippine law and PAGCOR licensing conditions. nuwstar is legally obligated to conduct these activities regardless of individual player consent.

6.3 Legitimate Interests

nuwstar processes technical data, session logs, and behavioral data on the basis of its legitimate interests in maintaining Platform security, detecting fraud and abuse, improving Platform performance, and conducting responsible gaming monitoring. These interests have been assessed against your rights and freedoms and have been determined not to override your fundamental privacy rights.

6.4 Consent

Where nuwstar sends marketing communications or shares your data with non-essential third parties for analytics purposes, it does so on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time through your account settings without affecting the lawfulness of processing prior to withdrawal.

nuwstar does not sell, rent, or trade your personal data. Data sharing is limited to the following categories of recipients, each bound by confidentiality obligations and, where applicable, data processing agreements:

7.1 Payment Service Providers

GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other payment partners receive only the minimum personal data required to process your specific deposit or withdrawal transaction. These providers are independently regulated and operate under their own privacy frameworks.

7.2 Identity Verification Providers

Third-party KYC and identity verification service providers receive identity documents and biometric data (where applicable) solely for the purpose of verifying your identity in connection with nuwstar's KYC obligations. These providers are contractually prohibited from using your data for any other purpose.

7.3 Technology and Infrastructure Providers

Cloud hosting providers, database management services, and cybersecurity vendors that support nuwstar's technical infrastructure may have incidental access to personal data as part of service delivery. All such providers are bound by data processing agreements that restrict their use of your data to the provision of services to nuwstar only.

7.4 Regulatory and Law Enforcement Authorities

nuwstar will disclose personal data to PAGCOR, the AMLC, the National Privacy Commission, the Bureau of Internal Revenue, or any other competent Philippine authority where required to do so by law, court order, or regulatory directive. nuwstar will notify you of such disclosures where legally permitted to do so.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of nuwstar's assets, your personal data may be transferred to the acquiring entity as part of that transaction. nuwstar will notify you in advance of any such transfer and ensure the receiving entity is bound by privacy obligations no less protective than those in this Policy.

nuwstar uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session, remember your preferences, and analyze Platform usage patterns. The following categories of cookies are used:

8.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be switched off. They include session authentication cookies that keep you logged in during an active session, fraud prevention cookies, and load-balancing cookies. No consent is required for these cookies as they are technically indispensable.

8.2 Functional Cookies

Functional cookies remember your preferences such as language settings, display preferences, and responsible gaming tool configurations. Disabling these cookies may affect your experience but will not prevent access to core Platform functionality.

8.3 Analytics Cookies

nuwstar uses first-party analytics to understand aggregate usage patterns — such as which game categories are most popular, typical session durations, and navigation flows through the Platform. This data is anonymized or pseudonymized and used solely for internal service improvement purposes. Analytics cookies are only placed with your consent.

8.4 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies at any time. Please note that disabling strictly necessary cookies will affect Platform functionality and may prevent you from logging in or completing financial transactions.

nuwstar retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is either securely deleted or anonymized so that it can no longer be associated with an identifiable individual. nuwstar conducts periodic data audits to ensure retention schedules are applied consistently.

nuwstar implements a comprehensive, layered security framework to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. Key security measures in place include:

• Encryption at Rest: All personal data stored in nuwstar's databases is encrypted using AES-256 encryption. Encryption keys are managed through a dedicated key management system with strict access controls.
• Encryption in Transit: All data transmitted between your device and nuwstar's servers is protected by TLS 1.3 protocol. Older TLS versions and insecure cipher suites are disabled.
• Access Controls: Access to player personal data is restricted to authorized nuwstar personnel on a strict need-to-know basis. All access is logged and subject to regular review.
• Multi-Factor Authentication: Administrative access to systems that process player data requires multi-factor authentication. Player accounts are also supported by optional two-factor authentication.
• Intrusion Detection: nuwstar operates 24/7 network monitoring and intrusion detection systems to identify and respond to potential security threats in real time.
• Penetration Testing: nuwstar's Platform and infrastructure undergo regular penetration testing by qualified security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: nuwstar maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, nuwstar will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and affected players will be notified without undue delay.

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by nuwstar. These rights are real and enforceable — you can exercise any of them at any time by contacting nuwstar's Data Protection Officer using the contact details in Section 15.

nuwstar will respond to all data subject requests within fifteen (15) business days of receipt. Complex requests or requests involving large volumes of data may take longer, in which case nuwstar will notify you of the extended timeline. nuwstar reserves the right to verify your identity before processing any data subject request to prevent unauthorized disclosure.

nuwstar's Platform is strictly intended for adults who are 21 years of age or older, in compliance with Philippine gambling laws and PAGCOR regulations. nuwstar does not knowingly collect personal data from individuals under 21 years of age.

During the registration process, all applicants are required to declare their date of birth and agree that they meet the minimum age requirement. nuwstar's KYC verification process is designed to detect and reject applications from individuals who do not satisfy the age requirement.

If nuwstar becomes aware that personal data has been collected from a person under 21 years of age — whether through a fraudulent registration or any other means — nuwstar will immediately suspend the relevant account, delete the personal data as far as legally permissible, and report the incident in accordance with applicable regulations.

If you are a parent or guardian and believe that a minor in your care has registered on the Platform or provided personal data to nuwstar, please contact our Data Protection Officer immediately using the details in Section 15 so that we can take prompt corrective action.

nuwstar's primary data processing infrastructure is located within the Philippines. However, some of nuwstar's technology and service providers — particularly cloud infrastructure and identity verification providers — may process data in data centers located outside the Philippines.

Where personal data is transferred outside the Philippines, nuwstar ensures that such transfers are conducted in accordance with Section 21 of the Data Privacy Act and NPC rules on cross-border data transfers. Specifically, nuwstar requires that:

• The receiving country or territory provides an adequate level of protection for personal data that is at least equivalent to Philippine standards, or
• Appropriate contractual safeguards — such as NPC-approved standard contractual clauses or binding corporate rules — are in place with the receiving entity, or
• The transfer falls within a recognized exemption under the Data Privacy Act, such as where the transfer is necessary for the performance of a contract between you and nuwstar.

nuwstar maintains a register of all third-party processors and their data processing locations, which is available for review upon request submitted to the DPO.

nuwstar reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. The "Last Updated" date at the top of this Policy reflects the most recent revision.

Where changes to this Policy are material — meaning they affect your rights or how nuwstar uses your personal data in a significant way — nuwstar will notify you by email to your registered address and/or by a prominent notice on the Platform at least fourteen (14) days before the changes take effect. Your continued use of the Platform after the effective date of any updated Policy constitutes your acknowledgment of the revised terms.

For non-material changes such as clarifications, formatting corrections, or updates to contact details, nuwstar may update the Policy without prior notice beyond updating the "Last Updated" date. We encourage you to review this Policy periodically to stay informed about how nuwstar protects your personal data.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or need to report a privacy concern, please contact nuwstar's Data Protection Officer using the following details:

If you are not satisfied with nuwstar's response to your privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines. The NPC can be reached through its official website at privacy.gov.ph (note: this is an external government resource; nuwstar does not control the NPC website).

For responsible gaming support and self-exclusion requests, please also refer to nuwstar's Responsible Gaming page, which contains additional resources and contact channels specific to gambling-related support.