Your Data, Explained Clearly
Privacy policies tend to be long, written in legal language, and hard to read through in one sitting. Nulstar understands that. This policy is written as plainly as possible while still covering the full scope of what needs to be disclosed. It is a real document — not a formality — and it governs how Nulstar handles every piece of personal information you provide when you register, deposit, play, or contact support.
Nulstar operates as an online gaming platform serving players in the Philippines. Because of that, your data is handled in accordance with the Republic Act No. 10173, known as the Data Privacy Act of 2012 of the Philippines, along with its Implementing Rules and Regulations. The National Privacy Commission (NPC) is the regulatory body that oversees data privacy rights in the Philippines, and Nulstar is committed to full compliance with its requirements.
If you have a question about anything in this policy that is not clearly answered, you can contact the Nulstar data privacy team through our support channel. You should never feel uncertain about what is happening with your information.
This policy complies with the Data Privacy Act of 2012 (RA 10173) and NPC regulations.
Personal data is stored using industry-standard encryption protocols at all times.
Nulstar does not sell your personal information to third parties under any circumstances.
You have the right to access, correct, and request deletion of your data held by Nulstar.
Types of Personal Data Nulstar Collects
Nulstar only collects data that is necessary for operating a licensed, responsible online gaming platform. Here is a breakdown of the main categories.
Identity Data
Information you provide to identify yourself as the registered account holder.
- Full legal name
- Date of birth
- Government-issued ID details
- Nationality
Contact Data
Details used to communicate with you and verify your residential information.
- Email address
- Mobile number
- Home address
- Province / city
Financial Data
Payment information required to process deposits and withdrawals in Philippine Peso.
- GCash / Maya account reference
- Bank account details (masked)
- Transaction history
- Deposit and withdrawal records
Gaming Activity Data
Records generated by your use of Nulstar games and betting features.
- Bet history and amounts
- Game sessions and duration
- Wins, losses, and balance movements
- Bonus usage records
Technical Data
Automatically collected information about the device and connection used to access Nulstar.
- IP address
- Device type and operating system
- Browser type and version
- Session timestamps
Communications Data
Records of your interactions with the Nulstar support team and platform notifications.
- Support chat transcripts
- Email correspondence
- Complaint and dispute records
- Feedback submitted
1 Data Controller
Nulstar is the data controller responsible for the personal information collected through the nulstar.app website and all associated services. As the data controller, Nulstar determines the purposes and means of processing your personal data and is accountable for ensuring that this processing is lawful, fair, and transparent.
Any questions, concerns, or requests relating to your personal data should be directed to the Nulstar data privacy team via the support contact listed in Section 14 of this policy.
2 How We Collect Your Data
Nulstar collects personal data through several channels:
- Direct collection: Information you provide yourself during account registration, identity verification (KYC), deposit and withdrawal requests, and contact with Nulstar support.
- Automated collection: Technical data gathered automatically when you access the Nulstar platform, including IP address, device information, browser type, and session activity logs. This happens regardless of whether you have completed registration.
- Third-party sources: Identity verification services and payment processors may provide data to Nulstar for the purpose of confirming your identity or processing transactions. Nulstar only receives the minimum data necessary from these sources.
- Cookies and similar technologies: Nulstar uses cookies on the platform to manage sessions, remember preferences, and collect analytics. See Section 6 for full details.
3 How We Use Your Data
Nulstar uses personal data for specific, legitimate purposes. We do not use your data for anything outside the scope of what is listed below without first obtaining your consent:
- Account management: Creating and maintaining your Nulstar account, verifying your identity, and managing account settings and preferences.
- Payment processing: Processing deposits and withdrawals in Philippine Peso through your chosen local payment method, and maintaining transaction records as required by law.
- Legal and regulatory compliance: Meeting the requirements of the Data Privacy Act of 2012, PAGCOR regulations, anti-money laundering (AML) obligations, and any other applicable Philippine laws. This includes conducting know-your-customer (KYC) checks and reporting suspicious transactions where legally required.
- Platform security and fraud prevention: Detecting, investigating, and preventing fraud, money laundering, account takeovers, and other forms of abuse on the Nulstar platform.
- Responsible gaming: Monitoring gaming patterns to identify players who may be showing signs of problem gambling and providing support tools or interventions as appropriate.
- Customer support: Responding to your enquiries, resolving disputes, and maintaining records of interactions for quality assurance purposes.
- Platform improvement: Analysing aggregated, anonymised usage data to improve the Nulstar platform, fix technical issues, and develop new features.
- Marketing communications: Sending promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. See Section 11 for how to manage your marketing preferences.
4 Legal Basis for Processing
Under the Data Privacy Act of 2012 of the Philippines, Nulstar processes your personal data on the following legal bases:
- Contract performance: Processing necessary to fulfil the agreement between you and Nulstar — including managing your account, processing payments, and delivering games.
- Legal obligation: Processing required to comply with Philippine law, including AML regulations, PAGCOR licensing requirements, and the Data Privacy Act itself.
- Legitimate interests: Processing necessary for Nulstar's legitimate business interests — including fraud prevention, platform security, and responsible gaming monitoring — provided these interests are not overridden by your rights.
- Consent: For optional processing such as marketing communications, Nulstar relies on your explicit opt-in consent. You can withdraw this consent at any time.
5 Data Sharing
Nulstar does not sell your personal data to any third party. We may share your data with the following categories of recipients only where necessary and under strict data protection agreements:
- Payment processors: Philippine payment service providers (such as GCash, Maya, and local banks) that process your transactions. These providers operate under their own privacy policies and are required to handle your data securely.
- Identity verification services: Third-party KYC and anti-fraud service providers that assist Nulstar in verifying the identity of registered players.
- Technology and hosting providers: Secure hosting and infrastructure partners that support the operation of the Nulstar platform. These partners are contractually bound to process data only on Nulstar's instructions.
- Regulatory and law enforcement authorities: Government bodies, regulators, and law enforcement agencies in the Philippines where Nulstar is legally required to disclose data — for example, in the context of an AML investigation or a court order.
All third-party data processors engaged by Nulstar are required to maintain appropriate technical and organisational security measures and to process data only for the specific purposes authorised by Nulstar.
6 Cookies and Tracking Technologies
Nulstar uses cookies — small text files stored on your device — to make the platform function correctly and to improve your experience. The types of cookies used include:
- Essential cookies: Required for the platform to operate. These include session management cookies that keep you logged in during your visit. Disabling these will prevent the platform from functioning properly.
- Analytics cookies: Used to collect anonymised data about how players navigate and use the Nulstar platform, helping us identify issues and improve performance. These do not track personally identifiable information.
- Preference cookies: Store your language, layout, and other display preferences so you do not have to reset them each time you visit.
- Security cookies: Help Nulstar detect fraudulent activity and protect accounts from unauthorised access.
You can manage cookie settings through your browser. Blocking essential cookies will affect platform functionality. Blocking analytics and preference cookies will not prevent you from using Nulstar but may affect your experience.
7 Data Retention
Nulstar retains personal data only for as long as is necessary for the purposes set out in this policy or as required by law. Specific retention periods include:
- Account data: Retained for the duration of your active Nulstar account plus a minimum of five years after account closure, as required by anti-money laundering regulations applicable in the Philippines.
- Transaction records: Financial transaction records are retained for a minimum of five years from the date of the transaction, in compliance with Philippine AML requirements.
- Support correspondence: Communications with the Nulstar support team are retained for up to three years after the relevant matter is resolved.
- Technical and session data: Logs are typically retained for up to 12 months for security and fraud prevention purposes before being deleted or anonymised.
When personal data is no longer required, Nulstar securely deletes or anonymises it so that it can no longer be linked back to you as an individual.
8 Data Security
Nulstar implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include:
- Transport Layer Security (TLS) encryption for all data transmitted between your device and the Nulstar platform.
- Encryption of sensitive data at rest, including financial and identity records.
- Access controls limiting staff access to personal data on a need-to-know basis.
- Regular security assessments and vulnerability testing of the Nulstar platform.
- Incident response procedures in the event of a data breach, including notification obligations under the Data Privacy Act.
No internet-based platform can guarantee absolute security. You use Nulstar understanding that transmitting data over the internet carries inherent risks that are outside any single provider's control. You are responsible for maintaining the security of your own account credentials.
9 Minors
The Nulstar platform is strictly for adults aged 21 years and over, in accordance with Philippine gaming regulations. Nulstar does not knowingly collect personal data from anyone under the age of 21.
If Nulstar discovers that a player has provided false age information during registration and is in fact under 21, the account will be immediately suspended, all funds will be frozen pending investigation, and the personal data associated with the account will be handled in accordance with the Data Privacy Act and PAGCOR requirements. If you are a parent or guardian and believe your child has created a Nulstar account, contact support immediately.
10 Your Data Rights
Under the Data Privacy Act of 2012 of the Philippines, you have the following rights in relation to your personal data held by Nulstar. You can exercise any of these rights by contacting the Nulstar support team:
11 Marketing Communications
Nulstar may send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, and special events. These are only sent where you have explicitly opted in to receive them during registration or through your account settings.
You can withdraw your marketing consent at any time by:
- Updating your notification preferences in your Nulstar account settings.
- Clicking the unsubscribe link at the bottom of any promotional email.
- Contacting the Nulstar support team directly and requesting removal from marketing lists.
Withdrawing marketing consent will not affect the delivery of transactional messages such as deposit confirmations, withdrawal notifications, and security alerts. These are part of the account service and will continue regardless of your marketing preference settings.
12 Cross-Border Data Transfers
Nulstar primarily processes your data within the Philippines. Where data is processed or stored by third-party service providers located outside the Philippines — for example, cloud hosting infrastructure — Nulstar ensures that appropriate safeguards are in place to protect your data to a standard consistent with the Data Privacy Act of 2012.
These safeguards may include data processing agreements that include standard contractual clauses, or verification that the destination country provides an equivalent level of data protection. Nulstar will not transfer your data to countries without adequate protections in place.
13 Changes to This Privacy Policy
Nulstar may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or feedback from players and regulators. The effective date at the top of this page will always reflect when the most recent update was made.
Where changes are material — for example, a significant change in how we use your data — Nulstar will notify registered players by email or via an in-platform notice before the changes take effect. For minor or administrative updates, revisions will simply appear on this page. Your continued use of Nulstar after any update constitutes your acceptance of the revised Privacy Policy.
14 How to Contact Nulstar About Your Data
If you have any questions about this Privacy Policy, want to exercise any of your data rights, or want to report a privacy concern, you can contact the Nulstar data privacy team through our support channel:
Email: support@nulstar.app — include "Privacy Request" in the subject line so your message reaches the right team quickly. Nulstar will respond to all data-related requests within 15 business days as required under the Data Privacy Act.
If you are not satisfied with Nulstar's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which can be reached through the official NPC website.
Ready to Play at Nulstar?
Now that you know how your data is handled, you can register with confidence. Create a free account, fund it through GCash, Maya, or your Philippine bank, and start playing today.