nonstar Privacy Policy – How We Protect Your Personal Data

1. Introduction

nonstar ("we," "us," or "the Company") operates the online gaming platform accessible at nonstar.one (the "Platform"). We are committed to protecting the privacy and personal data of all users ("Players," "Users," or "You") who access or use the nonstar Platform.

This Privacy Policy ("Policy") describes how nonstar collects, processes, stores, shares, and protects personal data in connection with the Platform. It is drafted in compliance with Republic Act No. 10173, known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations ("IRR"), issuances of the National Privacy Commission ("NPC") of the Philippines, and applicable regulations of the Philippine Amusement and Gaming Corporation ("PAGCOR").

By registering an account on, accessing, or using the nonstar Platform, you acknowledge that you have read, understood, and agreed to the collection and processing of your personal data as described in this Policy. If you do not agree, you must not use the Platform.

2. Data Controller

The data controller responsible for the personal data processed in connection with the nonstar Platform is the nonstar operating entity. For purposes of the Philippine Data Privacy Act, nonstar is the Personal Information Controller ("PIC") in respect of all personal data processed in connection with the Platform.

Queries regarding this Policy or your personal data may be directed to nonstar's Data Protection Officer ("DPO") at: [email protected]

3. Personal Data We Collect

nonstar collects the following categories of personal data in connection with Platform registration and use:

nonstar does not collect sensitive personal information as defined under the DPA (such as health records, political affiliation, or religious beliefs) except where strictly required by law — for example, where a responsible gaming concern necessitates documentation of a medical referral in connection with a self-exclusion request.

4. How We Use Your Personal Data

nonstar processes your personal data for the following purposes:

• Account Registration and Management: To create, verify, maintain, and administer your nonstar player account.
• Identity Verification (KYC): To verify your identity and eligibility in compliance with PAGCOR requirements and anti-money laundering obligations under Republic Act No. 9160 (Anti-Money Laundering Act) and its amendments.
• Payment Processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, InstaPay, PesoNet, QR Ph, GrabPay, and 7-Eleven CLiQQ, all in Philippine Peso.
• Platform Provision: To deliver gaming services, apply bonuses, and record betting and game session outcomes.
• Responsible Gaming: To monitor for indicators of problem gambling and to administer deposit limits, session reminders, and self-exclusion requests in line with PAGCOR responsible gaming standards.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, and unauthorized access to your account.
• Legal and Regulatory Compliance: To comply with applicable Philippine laws, PAGCOR licensing conditions, court orders, and lawful requests from competent government authorities.
• Customer Support: To respond to your enquiries, process complaints, and administer your account in connection with support requests.
• Platform Improvement: To analyze aggregated, anonymized usage data for the purpose of improving Platform functionality and the player experience.

5. Legal Basis for Processing

nonstar processes your personal data on the following legal bases as recognized under the DPA and its IRR:

• Contractual Necessity: Processing necessary to perform our contract with you — i.e., the nonstar Terms & Conditions — including account management and payment processing.
• Legal Obligation: Processing required to comply with applicable law, including PAGCOR regulations, AML obligations, and NPC requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring — where such interests are not overridden by your data protection rights.
• Consent: For any marketing communications sent to you, which you may withdraw at any time.

6. Data Sharing and Disclosure

6.1 Service Providers

nonstar may share personal data with trusted third-party service providers who process data on our behalf under written data processing agreements, including payment processors (GCash, Maya, BPI, BDO), identity verification providers, game software suppliers, IT infrastructure providers, and customer support platform operators. These providers are permitted to use your data solely for the purposes specified by nonstar and may not use it for their own commercial purposes.

6.2 Regulatory Disclosure

nonstar may disclose personal data to PAGCOR, the Anti-Money Laundering Council ("AMLC"), the National Privacy Commission, law enforcement agencies, and other competent government authorities where required by law, court order, or lawful regulatory request.

6.3 No Sale of Data

nonstar does not sell, rent, or trade your personal data to any third party for marketing or any other commercial purpose not described in this Policy.

7. Data Security

nonstar implements appropriate technical and organizational security measures to protect personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and nonstar servers;
• AES-256 encryption for sensitive data stored at rest;
• Role-based access controls limiting data access to authorized personnel on a need-to-know basis;
• Regular security audits, penetration testing, and vulnerability assessments;
• Multi-factor authentication requirements for administrative system access;
• Incident response procedures aligned with NPC breach notification requirements.

In the event of a personal data breach that is likely to result in harm to affected data subjects, nonstar will notify the National Privacy Commission and affected players in accordance with the timelines and procedures mandated by the DPA and NPC issuances.

8. Data Retention

nonstar retains personal data for as long as necessary to fulfill the purposes described in this Policy, including the duration of your account registration and a reasonable period thereafter for legal and regulatory compliance purposes. In particular:

• Account and KYC records are retained for a minimum of five (5) years from account closure, in compliance with PAGCOR and AMLC record-keeping requirements.
• Transaction records are retained for a minimum of five (5) years from the date of transaction.
• Marketing consent records are retained for the duration of your consent and for a reasonable period thereafter as evidence of consent.

Upon expiry of the applicable retention period, personal data is securely and permanently deleted or anonymized in accordance with NPC-approved disposal procedures.

9. Cookies and Tracking Technologies

nonstar uses the following types of cookies on the Platform:

• Strictly Necessary Cookies: Required for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled.
• Functional Cookies: Used to remember your preferences such as language settings and responsible gaming limit configurations.
• Analytics Cookies: Used to collect anonymized and aggregated data about how players use the Platform, helping nonstar improve functionality and performance. No individual player is identified through analytics data.

nonstar does not use advertising or cross-site tracking cookies. You may manage cookie settings through your browser. Note that disabling strictly necessary cookies will affect Platform functionality.

10. Your Data Subject Rights

Under the Philippine Data Privacy Act, you have the following rights in relation to your personal data held by nonstar:

To exercise any of these rights, contact the nonstar Data Protection Officer at [email protected]. We will respond to all valid data subject access requests within thirty (30) calendar days from receipt. Where a request cannot be fulfilled within this period due to its complexity, nonstar will notify you of the extended timeframe and the reason for the extension.

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been infringed.

11. Children and Minors

The nonstar Platform is strictly intended for adults aged 21 years and above in compliance with PAGCOR regulations. nonstar does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an underage individual, we will immediately close the associated account, delete the personal data, and refund any funds on deposit.

If you believe a minor has registered on the Platform, please contact us immediately at [email protected].

12. Cross-Border Data Transfers

Where nonstar transfers personal data to service providers located outside the Philippines — for example, game software providers or cloud infrastructure services — such transfers are conducted in compliance with the DPA's requirements for cross-border data transfers, including the use of contractual safeguards (standard data protection clauses) and, where applicable, the NPC's whitelist of countries with adequate data protection laws.

13. Policy Amendments

nonstar reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or PAGCOR requirements. The updated Policy will be posted on the Platform with a revised "Last Updated" date. For material changes to this Policy, nonstar will provide advance notice to registered players via the email address on their account. Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

14. Contact and Data Protection Officer

For questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by nonstar, please contact our Data Protection Officer:

Data Protection Officer, nonstar
Email: [email protected]
Response time: Within 3 business days for general enquiries; within 30 calendar days for formal data subject requests.
Operating hours: Philippine Standard Time (UTC+8), Monday–Sunday, 24/7 live chat also available on Platform.