nistar Privacy Policy

1 About This Policy

This Privacy Policy ("Policy") describes how nistar.cam ("nistar," "we," "us," or "our") collects, uses, discloses, retains, and protects personal information about individuals ("you" or "Player") who visit, register on, or interact with the nistar online casino platform located at nistar.cam and all associated mobile-optimized pages.

This Policy applies to all personal data processed in connection with your use of the nistar platform, including data collected during account registration, identity verification, gameplay, financial transactions, customer support interactions, and marketing communications. It does not apply to personal data processed by third-party game providers or payment processors acting as independent data controllers, whose own privacy policies govern their respective processing activities.

By registering a nistar account or continuing to use our platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree, please refrain from using the platform and contact us to close any existing account.

2 Data Controller

For the purposes of the Republic Act 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, nistar.cam acts as the personal information controller in respect of all personal data collected through the platform. Our Data Protection Officer (DPO) is responsible for overseeing compliance with this Policy and applicable data protection law.

If you have any questions, concerns, or requests regarding the processing of your personal data, you may contact our DPO at: [email protected]. We aim to respond to all data-related enquiries within 15 business days.

3 Information We Collect

nistar collects the following categories of personal information about its players:

nistar does not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where health-related information is voluntarily disclosed in the context of a responsible gaming request.

4 How We Collect Your Data

nistar collects personal information through the following means:

• Direct interactions: Information you provide when registering an account, completing KYC verification, depositing or withdrawing funds, contacting customer support, responding to surveys, or participating in promotions.
• Automated technologies: Technical data collected automatically when you visit the platform through cookies, server logs, and similar tracking technologies. See Section 9 for details.
• Third-party sources: Identity verification and fraud-prevention partners may provide additional data to verify your identity or confirm the legitimacy of financial transactions.
• Payment processors: GCash, PayMaya, and banking partners may transmit transaction confirmation data to nistar to reconcile deposits and withdrawals.

5 Purposes of Processing

nistar processes your personal data for the following specific, legitimate purposes:

• Account management: Creating, maintaining, and securing your nistar player account, including login authentication and password management.
• Identity verification: Conducting KYC checks to confirm your identity, age (21+), and eligibility to use the platform as required by Philippine gaming regulations.
• Financial transactions: Processing deposits, withdrawals, bonus credits, and maintaining accurate records of all financial activity on your account.
• Game delivery: Providing access to casino games, sports betting markets, and arcade titles, and maintaining game integrity through session logging and outcome recording.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, unauthorized access, and other harmful conduct on the platform.
• Legal compliance: Fulfilling obligations under Philippine anti-money laundering laws (AMLA), PAGCOR regulations, the Data Privacy Act, and other applicable legal requirements.
• Customer support: Responding to player enquiries, resolving complaints, and improving our service quality based on support interaction data.
• Responsible gaming: Monitoring player behavior to identify signs of problem gambling and enabling responsible gaming tools such as deposit limits, session limits, and self-exclusion.
• Marketing communications: Sending promotional offers, tournament announcements, and bonus notifications to players who have opted in to receive such communications.
• Platform improvement: Analyzing aggregated, anonymized usage data to improve platform performance, fix technical issues, and develop new features.

6 Legal Bases for Processing

Under the Data Privacy Act of 2012, nistar relies on the following legal bases when processing your personal information:

• Contract performance: Processing necessary to create and manage your player account and fulfill the Terms & Conditions you agreed to upon registration.
• Legal obligation: Processing required to comply with KYC, AML, and other regulatory requirements applicable to gaming operators in the Philippines.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and aggregate analytics, where our interests do not override your rights and freedoms.
• Consent: Processing for direct marketing communications, where you have provided clear, affirmative consent and may withdraw it at any time without affecting other processing activities.

7 Data Sharing & Disclosure

nistar may share your personal data with the following categories of recipients, strictly to the extent necessary for the purposes described in this Policy:

• Identity verification providers: Third-party KYC and AML service providers who assist nistar in verifying player identities and screening against regulatory watchlists.
• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other payment service providers to facilitate deposits, withdrawals, and transaction reconciliation.
• Game software providers: Licensed game providers whose titles are available on the nistar platform, to the extent necessary for game integrity, technical support, and RNG certification.
• IT and cloud service providers: Technology partners providing server hosting, cybersecurity, and platform infrastructure services under strict data processing agreements.
• Regulatory and law enforcement authorities: Philippine government bodies including PAGCOR, the AMLC, the National Privacy Commission, and law enforcement agencies where disclosure is required by law or court order.
• Professional advisers: Legal counsel, auditors, and accountants bound by professional confidentiality obligations, where disclosure is necessary for compliance or litigation purposes.

8 International Data Transfers

Some of nistar's service providers, including game software developers and cloud infrastructure partners, may be located outside the Philippines. Where personal data is transferred internationally, nistar ensures that appropriate safeguards are in place, including contractual data processing agreements incorporating standard data protection clauses consistent with the requirements of the Data Privacy Act and NPC issuances.

nistar does not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate additional safeguards. You may request information about the specific safeguards applicable to any international transfer by contacting our DPO.

9 Cookies & Tracking Technologies

nistar uses cookies and similar tracking technologies to operate the platform, improve user experience, and analyze aggregate platform usage. The following types of cookies are used:

• Strictly necessary cookies: Required for core platform functionality including login session management, account security, and game state preservation. These cannot be disabled without affecting platform usability.
• Functional cookies: Used to remember your language preferences, display settings, and responsible gaming tool configurations between sessions.
• Analytics cookies: Used to collect anonymized data about how players navigate and interact with the platform, enabling us to identify technical issues and improve user experience. Data from analytics cookies does not identify you personally.
• Marketing cookies: Used to deliver relevant promotional notifications on the nistar platform. These are activated only where you have provided consent.

You may manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of parts of the nistar platform. nistar does not use third-party advertising network cookies that track your activity across external websites.

10 Data Retention

nistar retains your personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with applicable legal obligations. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your active account and for a minimum of 5 years following account closure, in compliance with Philippine AML and gaming regulatory requirements.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction as required by AMLA and related AMLC regulations.
• Gaming session logs: Retained for a minimum of 2 years from the date of each session for dispute resolution and regulatory audit purposes.
• Customer support records: Retained for 3 years from the date of each interaction to support ongoing dispute resolution and service quality improvements.
• Marketing preference data: Retained until you withdraw consent or close your account, whichever is earlier.
• Technical and log data: Typically retained for 12 months, after which it is aggregated and anonymized for analytical purposes.

Where personal data is no longer required and no legal obligation requires its retention, nistar will securely delete or anonymize it in accordance with our internal data disposal procedures.

11 Your Data Rights

Under the Data Privacy Act of 2012, Filipino players have the following rights with respect to their personal data held by nistar:

• Right to be informed: The right to know what personal data nistar collects and how it is used, as set out in this Policy.
• Right of access: The right to request a copy of the personal data nistar holds about you and information about how it is processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data in your nistar account.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to nistar's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on the basis of nistar's legitimate interests, where your rights override those interests.
• Right to data portability: The right to receive a structured, commonly used, and machine-readable copy of personal data you have provided to nistar, where technically feasible.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission of the Philippines if you believe nistar has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, please contact nistar's DPO at [email protected] with a description of your request. We will verify your identity before processing any data rights request and will respond within 15 business days.

12 Children & Minors

nistar's platform is strictly intended for individuals who are at least 21 years of age, consistent with the minimum age requirement for casino-style gaming under Philippine law. nistar does not knowingly collect personal information from anyone below this age threshold.

Age is verified during the account registration process through date-of-birth declaration and, where required, documentary verification. If nistar discovers that personal data has been collected from an individual below the age of 21, the relevant account will be immediately suspended, all balances will be returned in accordance with our Terms & Conditions, and all associated personal data will be securely deleted.

If you believe a minor has registered a nistar account, please contact us immediately at [email protected] so that appropriate action can be taken without delay.

13 Security Measures

nistar implements a comprehensive suite of technical and organizational security measures designed to protect your personal data against accidental loss, unauthorized access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and nistar's servers.
• Encrypted storage of sensitive personal data, including financial records and identity documents, on secure servers protected by advanced firewalls.
• Role-based access controls ensuring that only authorized nistar personnel with a documented need can access specific categories of player data.
• Regular independent penetration testing and security audits conducted by certified cybersecurity firms.
• Two-factor authentication options for player accounts and mandatory multi-factor authentication for internal staff accessing player data systems.
• Documented incident response procedures to detect, contain, and remediate data security incidents, with notification processes compliant with NPC breach reporting requirements.

While nistar takes all reasonable precautions, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your nistar login credentials and for notifying us promptly of any suspected unauthorized access to your account.

14 Third-Party Links

The nistar platform may contain references to third-party game providers and payment service partners. While nistar carefully selects its partners, we are not responsible for the privacy practices of third-party entities acting as independent data controllers. We encourage you to review the privacy policies of any third-party services you interact with in connection with your nistar gaming activities, particularly payment processors and game providers.

15 Changes to This Policy

nistar reserves the right to update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. We will notify registered players of material changes via email to the address on file or through a prominent notice on the nistar platform at least 7 calendar days before any revised policy takes effect.

The "Effective Date" at the top of this page reflects the date on which the most recent version came into force. We encourage you to review this Policy periodically to stay informed about how nistar protects your personal information. Continued use of the platform after the effective date of a revised Policy constitutes acceptance of the updated terms.

16 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by nistar, please contact our Data Protection Officer through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 on the nistar platform – average response time under 2 minutes.

If you are dissatisfied with our response to any data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC), the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012.