nursta Privacy Policy

01 Introduction

nursta is an online casino and sports betting platform serving the Philippine market. In the course of providing our services — including account registration, identity verification, payment processing, customer support, and gameplay — nursta necessarily collects and processes certain personal information about you.

We take our data protection obligations seriously. This Policy has been prepared in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations, as overseen by the National Privacy Commission (NPC). It also reflects the operational requirements applicable to gaming operators under PAGCOR's framework.

nursta acts as the personal information controller in respect of the personal data collected through the nursta.net platform. If you have questions about how your data is handled, you may contact our Data Protection Officer through the support channels listed in Section 12 of this Policy.

02 Information We Collect

nursta collects personal information in several ways: directly from you when you register and use the platform, automatically through your use of the platform, and from third-party service providers where necessary for verification and compliance purposes.

2.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, residential address in the Philippines, email address, and Philippine mobile number.
• Identity verification (KYC) documents: Government-issued Philippine ID (e.g., PhilSys ID, passport, driver's license, UMID, SSS ID, Voter's ID), proof of address documents, and selfie/liveness verification images.
• Payment information: GCash account details, Maya account details, bank account numbers (BPI, BDO, Metrobank, UnionBank), 7-Eleven Cliqq reference data, or cryptocurrency wallet addresses (USDT TRC20, Coins.ph). We do not store full card numbers or banking passwords.
• Communications: Messages sent to nursta customer support via live chat, email, or any other support channel.
• Responsible gaming preferences: Self-imposed deposit limits, cooling-off requests, and self-exclusion instructions.

2.2 Information Collected Automatically

• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, games played, betting history, session duration, login timestamps, and clickstream data.
• Cookies and similar technologies: As described in Section 6 of this Policy.
• Geolocation data: Approximate location derived from IP address to support compliance with jurisdictional access controls.

2.3 Information from Third Parties

nursta may receive personal data from third-party service providers engaged to support identity verification (KYC), fraud detection, payment processing, and anti-money laundering (AML) screening. We only receive the data necessary for those specific purposes and handle it in accordance with this Policy.

2.4 Data Collected at the Table Level

The table below summarizes the key categories of personal data nursta collects and the primary purpose for each:

03 How We Use Your Data

nursta uses the personal data we collect for the following purposes:

• Account creation and management: To register your account, verify your identity, and manage your ongoing relationship with the nursta platform.
• Payment processing: To facilitate deposits and withdrawals through GCash, Maya, BPI, BDO, Metrobank, UnionBank, 7-Eleven Cliqq, USDT TRC20, and Coins.ph in Philippine Peso.
• Legal and regulatory compliance: To meet our KYC, AML, and age verification obligations under Philippine law and PAGCOR requirements, including reporting obligations to relevant authorities.
• Security and fraud prevention: To detect, investigate, and prevent unauthorized account access, fraudulent activity, collusion, bonus abuse, and other prohibited conduct.
• Platform operation and improvement: To deliver the games, betting markets, and features you use, and to analyze platform performance and improve the overall nursta experience.
• Customer support: To respond to your inquiries, process your complaints, and resolve any disputes relating to your account or wagers.
• Responsible gaming: To monitor gameplay for signs of problem gambling behavior, enforce self-imposed limits, process cooling-off and self-exclusion requests, and fulfill our responsible gaming obligations.
• Marketing communications: To send you promotional offers, bonuses, and platform updates where you have consented to receive such communications. You may withdraw this consent at any time by contacting support.
• Legal proceedings: To establish, exercise, or defend legal claims if necessary.

nursta does not use your personal data for automated decision-making that produces significant legal effects on you without human review, except where required by law or where you have given explicit consent.

04 Legal Basis for Processing

Under the Data Privacy Act of 2012, nursta processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the nursta Terms & Conditions — including account management, payment processing, and game delivery — is carried out on the basis that it is necessary to fulfill our contract with you.
• Legal obligation: Certain processing activities — particularly KYC verification, AML screening, age verification, and regulatory reporting — are carried out to comply with nursta's legal obligations under Philippine law and PAGCOR requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and business analytics is carried out on the basis of nursta's legitimate interests, balanced against your privacy rights.
• Consent: Where processing is not required for contract performance, legal compliance, or legitimate interests — such as sending optional marketing communications — nursta relies on your freely given, informed, and specific consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

05 Data Sharing & Disclosure

nursta does not sell, rent, or trade your personal data. We share your information only in the following limited circumstances:

5.1 Service Providers

nursta engages carefully selected third-party service providers who process personal data on our behalf to support platform operations. These include identity verification and KYC providers, payment processors and e-wallet partners (GCash, Maya, BPI, BDO, Metrobank, UnionBank, 7-Eleven Cliqq, and cryptocurrency rails), fraud detection and AML screening services, customer support platform operators, and cloud infrastructure providers. All such providers are contractually bound to process personal data only for the specified purpose and in accordance with applicable data protection law.

5.2 Regulatory and Law Enforcement Authorities

nursta may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or other competent Philippine government authorities where required by law, court order, or regulatory direction. We will only disclose the minimum information necessary to satisfy any such legal obligation.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of nursta's business, personal data held by nursta may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material change to the applicable privacy terms.

5.4 With Your Consent

nursta may share your data with third parties for purposes not listed above where we have obtained your prior explicit consent for that specific disclosure.

06 Cookies & Tracking Technologies

nursta uses cookies, web beacons, and similar technologies to operate and improve the platform. The categories of cookies we use are described below:

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential or security cookies may impair your ability to access or use certain features of the nursta platform. nursta does not use third-party advertising or retargeting cookies.

07 Data Retention

nursta retains personal data for as long as necessary to fulfill the purposes outlined in this Policy and to comply with applicable legal, regulatory, and operational retention requirements. The key retention periods are as follows:

• Account and identity data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements applicable to Philippine gaming operators.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, in line with AMLC and BIR requirements.
• KYC documentation: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the interaction, or longer if related to an active dispute or legal claim.
• Gameplay and betting records: Retained for a minimum of three (3) years from the date of each session, for dispute resolution and responsible gaming monitoring purposes.
• Marketing consent records: Retained until consent is withdrawn and for one (1) year thereafter as evidence of prior consent.

When the applicable retention period expires, nursta securely deletes or anonymizes your personal data in accordance with its data disposal procedures. Anonymized aggregate data may be retained indefinitely for statistical and analytical purposes.

08 Data Security

nursta implements a multi-layered security framework to protect your personal data against unauthorized access, disclosure, alteration, destruction, or loss. Our security measures include:

• Transport Layer Security (TLS): All data in transit between your device and nursta servers is encrypted using TLS 1.2 or higher.
• Password security: Account passwords are stored exclusively as one-way cryptographic hashes. nursta staff cannot view your plain-text password at any time.
• Access controls: Access to personal data within nursta's systems is restricted to authorized personnel on a strict need-to-know basis, governed by role-based access control policies.
• Infrastructure security: nursta's platform infrastructure is hosted in facilities with physical and logical security controls, including intrusion detection, firewalls, and regular vulnerability assessments.
• Incident response: nursta maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, nursta will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012.

09 Your Data Rights

Under the Data Privacy Act of 2012 (RA 10173) of the Philippines, you have the following rights in respect of your personal data held by nursta:

• Right to be informed: You have the right to be informed of how your personal data is being collected and processed — which is the purpose of this Privacy Policy.
• Right of access: You have the right to request a copy of the personal data nursta holds about you, along with information about how it is being processed.
• Right to correction: You have the right to request correction of any inaccurate, incomplete, or outdated personal data we hold about you.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to nursta's legal retention obligations. Note that data subject to mandatory regulatory retention periods (e.g., AML records) cannot be deleted ahead of schedule.
• Right to object: You have the right to object to the processing of your personal data on the basis of legitimate interests, and to object to receiving direct marketing communications at any time.
• Right to data portability: You have the right to request a structured, commonly used, machine-readable copy of your personal data for the purpose of transferring it to another controller, where technically feasible.
• Right to lodge a complaint: You have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of the above rights, please contact nursta through the 24/7 live chat support facility on the platform. nursta will respond to all data rights requests within fifteen (15) business days of receipt, or as otherwise required by applicable law. Requests may require identity verification before processing.

10 Children & Minors

The nursta platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR regulations governing online gaming in the Philippines. nursta does not knowingly collect personal data from individuals under the age of 21.

If you are a parent or guardian and believe your child has registered on the nursta platform, please contact us via the live chat support channel immediately so we can investigate and take appropriate action.

11 Changes to This Privacy Policy

nursta reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Where changes are material, nursta will provide advance notice to registered players via email or in-platform notification before the updated Policy takes effect.

The effective date displayed at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how nursta protects your personal data. Your continued use of the nursta platform after an updated Policy has taken effect constitutes your acknowledgment of the changes.

12 Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by nursta, please contact our support team or Data Protection Officer through the following channels:

• 24/7 Live Chat: Available directly on the nursta platform — the fastest way to reach us.
• Email (plain text — not a link): [email protected]

Support hours: 24/7 — Peak PH staffing 8:00 AM to 12:00 MN (PST). nursta is operated for the Philippine market.

For complaints relating to data privacy violations, you may also contact the National Privacy Commission (NPC) of the Philippines directly. Contact details for the NPC are available on the official Philippine government website.