Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how nuatar ("nuatar," "we," "us," "our") collects, uses, stores, and discloses personal data in connection with the nuatar online gaming platform available at https://nuatar.club and all associated services (collectively, the "Platform").

nuatar is a PAGCOR-licensed online gaming operator serving Filipino players. The processing of personal data is an operational necessity — we cannot verify player identity, process payments, or comply with PAGCOR's regulatory requirements without collecting certain categories of personal information. This Policy explains the full scope of that processing in transparent, plain terms.

By registering a nuatar account, you acknowledge that you have read this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you should not use the nuatar platform.

This Policy should be read alongside the nuatar Terms & Conditions, which govern the overall use of the platform.

2. Data Controller Information

nuatar acts as the data controller for personal data collected and processed through the Platform. As data controller, nuatar determines the purposes for which personal data is processed and the means by which that processing is carried out.

nuatar operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR). All personal data processing activities are subject to PAGCOR's data governance requirements in addition to the Philippine Data Privacy Act of 2012 (RA 10173).

For data protection inquiries and data subject requests, nuatar can be reached at: [email protected]

3. Personal Data We Collect

3.1 Account Registration Data

When you register a nuatar account, we collect the following information:

• Full legal name (as it appears on a government-issued Philippine ID)
• Date of birth (to verify the 21+ age requirement)
• Email address
• Philippine mobile number
• Username and hashed password
• Residential address

3.2 Identity Verification (KYC) Data

Before processing your first withdrawal, nuatar is required by PAGCOR to verify your identity. KYC data collected may include:

• Scanned or photographed copies of a valid Philippine government-issued ID (PhilSys ID, passport, driver's license, SSS ID, GSIS ID, PRC ID, or Voter's ID)
• Proof of address (utility bill, bank statement, or similar document dated within three months)
• Selfie or live photo for facial verification purposes
• Payment method ownership documentation (e.g., screenshot of GCash account showing the registered name)

3.3 Transaction and Financial Data

• Deposit amounts, dates, and payment method references
• Withdrawal requests, amounts, and processing records
• GCash or PayMaya account reference numbers (partial, not full credentials)
• Bank account details (where bank transfers are used, stored in encrypted form)

3.4 Gaming Activity Data

• Games played, bet amounts, game outcomes, and session duration
• Sportsbook wager records
• Bonus claims and wagering requirement progress
• Responsible gaming tool usage (deposit limits set, cool-off periods activated)

3.5 Technical and Usage Data

• IP address and approximate geolocation at the time of login
• Device type, operating system, and browser version
• Pages visited, time on page, and navigation patterns within the platform
• Session timestamps and login history

3.6 Communications Data

• Content of customer support interactions (live chat transcripts, email correspondence)
• Responses to player surveys or feedback forms, where submitted voluntarily

4. How We Collect Your Data

nuatar collects personal data through the following means:

• Directly from you — through account registration forms, KYC document submission, deposit and withdrawal requests, customer support communications, and voluntary survey responses.
• Automatically — through cookies, web beacons, server logs, and similar technologies when you interact with the nuatar platform. See Section 9 (Cookies) for details.
• From payment processors — nuatar receives transaction reference data from GCash, PayMaya, BPI, BDO, and Metrobank when deposits and withdrawals are processed. nuatar does not receive or store full payment credentials.
• From identity verification providers — nuatar may use third-party KYC service providers to assist with document verification. These providers process data under contractual data processing agreements with nuatar.

5. Purposes and Legal Bases for Processing

nuatar processes personal data for the following purposes, each with a corresponding legal basis under RA 10173:

nuatar does not use personal data for automated decision-making that produces legal or similarly significant effects on players without human review, except where required for real-time fraud detection.

6. Disclosure of Personal Data to Third Parties

nuatar does not sell personal data. We may disclose personal data to third parties only in the following circumstances:

• PAGCOR and Philippine regulatory authorities — nuatar is legally required to submit player activity reports, suspicious transaction reports, and KYC records to PAGCOR and, where applicable, the Anti-Money Laundering Council (AMLC) of the Philippines.
• Payment processors — GCash, PayMaya, BPI, BDO, and Metrobank receive transaction data necessary to process deposits and withdrawals. These entities are subject to their own privacy and data protection obligations under Philippine law.
• KYC and identity verification providers — Third-party verification services that assist nuatar in meeting PAGCOR's KYC requirements. These providers process data as data processors under binding contractual agreements with nuatar.
• IT and platform service providers — Cloud hosting, security, and infrastructure providers that process data on nuatar's behalf under data processing agreements. These providers do not use nuatar player data for their own purposes.
• Law enforcement — nuatar will disclose personal data to Philippine law enforcement authorities where required by a valid court order, subpoena, or legal process, or where we have a reasonable belief that disclosure is necessary to prevent fraud, harm, or criminal activity.

In all cases of third-party disclosure, nuatar ensures appropriate contractual data protection safeguards are in place where required by RA 10173.

7. Data Retention

nuatar retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law and PAGCOR regulations.

• Account data and KYC records — Retained for a minimum of five (5) years following account closure, as required by PAGCOR's record-keeping obligations and the Anti-Money Laundering Act (RA 9160).
• Transaction records — Retained for a minimum of five (5) years in accordance with AMLC requirements.
• Gaming activity logs — Retained for three (3) years and then anonymized or deleted.
• Customer support records — Retained for two (2) years from the date of the last interaction.
• Technical/usage data — Retained for twelve (12) months and then aggregated or deleted.

Where a player requests account deletion, nuatar will delete or anonymize data that is not subject to a mandatory retention period. Data subject to legal retention obligations will be held for the required period and then securely deleted.

8. Data Security

nuatar implements a combination of technical and organizational security measures to protect personal data against unauthorized access, accidental loss, destruction, or disclosure:

• SSL/TLS encryption on all data in transit between your browser or device and nuatar's servers.
• Encryption of sensitive data fields (passwords, payment account references) at rest using industry-standard algorithms.
• Role-based access controls ensuring that nuatar personnel can only access personal data relevant to their specific job functions.
• Regular penetration testing and vulnerability assessments of the platform infrastructure.
• Multi-factor authentication for administrative access to systems containing personal data.
• A documented incident response procedure for personal data breaches, including NPC notification obligations under RA 10173 where a breach is likely to give rise to a real risk of serious harm to affected players.

While nuatar takes all reasonable measures to protect your personal data, no system is completely immune from security risks. Players are strongly encouraged to use strong, unique passwords and to enable two-factor authentication on their nuatar accounts.

9. Cookies and Tracking Technologies

nuatar uses cookies and similar tracking technologies to operate the platform, improve user experience, and analyse usage patterns. The following categories of cookies may be used:

• Strictly necessary cookies — Required for the platform to function. These include session cookies that maintain your logged-in state and security cookies that support fraud prevention. These cannot be disabled.
• Functional cookies — Remember your preferences (such as language settings and preferred payment method display). These can be managed through your browser settings.
• Analytics cookies — Collect aggregated, anonymized data about how players navigate the platform. Used to identify areas for improvement. nuatar uses analytics tools that process data under data processing agreements.
• Performance cookies — Monitor platform loading times and technical performance. Help nuatar's engineering team identify and resolve performance issues.

You can control non-essential cookies through your browser's privacy settings. Note that disabling functional cookies may affect the platform experience. nuatar does not use third-party advertising cookies or allow third-party ad networks to place tracking technologies on the platform.

10. Your Rights Under the Philippine Data Privacy Act

As a data subject under RA 10173, you have the following rights with respect to your personal data held by nuatar:

• Right to be Informed — The right to know how your personal data is being collected, used, and disclosed (fulfilled by this Policy).
• Right to Access — The right to request a copy of the personal data nuatar holds about you.
• Right to Correction — The right to request correction of inaccurate or incomplete personal data in your nuatar account.
• Right to Erasure / Right to be Forgotten — The right to request deletion of your personal data, subject to nuatar's legal retention obligations under PAGCOR regulation and RA 9160.
• Right to Object — The right to object to processing of your personal data for direct marketing purposes. nuatar will cease promotional communications immediately upon receipt of a valid objection.
• Right to Data Portability — The right to receive a copy of your personal data in a structured, commonly used format where technically feasible.
• Right to File a Complaint — The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe nuatar has violated your data privacy rights.

To exercise any of these rights, contact nuatar at [email protected]. nuatar will respond to verified data subject requests within fifteen (15) business days. Some requests may be subject to identity verification before processing to prevent unauthorized disclosure.

11. Children and Minors

The nuatar platform is strictly for persons aged twenty-one (21) years and above. nuatar does not knowingly collect personal data from individuals under the age of 21. The 21+ age requirement is enforced at account registration and identity verification.

If nuatar discovers that an account has been registered by a person under the age of 21, the account will be immediately closed, all balances will be forfeited, and any personal data collected will be deleted as promptly as permitted by our legal obligations. If you believe a minor has registered a nuatar account, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

nuatar reserves the right to update or amend this Privacy Policy at any time. Material changes — such as new categories of data collected, new disclosure practices, or changes to your rights — will be communicated to registered players via the email address associated with their nuatar account and/or via a prominent notice on the platform prior to the changes taking effect.

The "Last Updated" date at the top of this document reflects the most recent revision. Your continued use of the nuatar platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree to the revised Policy, you should close your account and cease using the platform.

13. Contact and Data Subject Requests

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by nuatar, please contact us using the following channel:

If you are not satisfied with nuatar's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC can be reached through their official government channels.