nunstat Privacy Policy

nunstat ("we", "us", "our") is an online gaming and sports betting platform accessible at nunstat.net, built specifically for Filipino players. We understand that when you create a nunstat account and use our services, you are trusting us with personal information about yourself. That trust matters to us, and we take our responsibility to safeguard your data seriously.

This Privacy Policy describes in plain, clear language:

• The categories of personal information nunstat collects from you;
• The purposes for which we collect and process that information;
• The circumstances under which your information may be shared with third parties;
• How long we retain your personal data;
• The security measures we have in place to protect it; and
• The rights you hold with respect to your own personal data.

This policy should be read alongside the nunstat Terms & Conditions, which govern the overall relationship between you and the platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a matter specifically related to data privacy, this Privacy Policy shall prevail.

For the purposes of applicable data protection legislation, nunstat is the data controller responsible for personal information collected through the nunstat platform. As data controller, nunstat determines the purposes and means of processing your personal data and is accountable for ensuring that processing activities comply with applicable legal obligations.

If you have any questions or concerns about how nunstat processes your personal information, you may contact our data protection point of contact at [email protected] with the subject line "Data Privacy Enquiry".

nunstat collects personal information in the following categories, depending on how you interact with the platform:

We collect information directly from you when you register, make deposits or withdrawals, contact support, or update your account. We also collect certain technical data automatically when you access the nunstat platform, as described in Section 9 of this policy.

nunstat uses the personal information we collect for the following purposes:

• Account creation and management: To register your nunstat account, maintain your player profile, and facilitate your login and session management.
• Identity verification (KYC): To verify that you are at least 21 years of age and are who you claim to be, as required by responsible gaming and anti-money laundering obligations.
• Transaction processing: To process deposits and withdrawals in Philippine Peso through your chosen payment method, including GCash, Maya, GrabPay, BPI, BDO, Metrobank, InstaPay, PesoNet, 7-Eleven CLiQQ, and QR Ph.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance through live chat, email, Messenger, and Viber.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct on the nunstat platform.
• Responsible gaming: To enforce deposit limits, cooling-off periods, and self-exclusion requests that you set or that nunstat is obligated to apply under its responsible gaming policy.
• Legal compliance: To meet nunstat's obligations under applicable Philippine laws, gaming regulations, AML requirements, and any other legally binding obligations.
• Platform improvement: To analyse aggregated, anonymised usage patterns in order to improve the nunstat platform experience, game selection, and payment options.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications. You may opt out at any time.

nunstat will not use your personal information for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or unless required to do so by law.

nunstat processes your personal data on the following legal bases, as applicable to each processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the nunstat Terms & Conditions — including account management, transaction processing, and customer support — is carried out on the basis that it is necessary to perform the contract between you and nunstat.
• Legal obligation: Processing carried out to comply with applicable laws, including KYC identity verification, AML reporting obligations, responsible gaming requirements, and responses to lawful regulatory or law enforcement requests.
• Legitimate interests: Processing carried out for fraud prevention, platform security, and aggregated analytics where nunstat's legitimate business interests are not overridden by your privacy rights.
• Consent: Processing of your personal data for marketing communications, where you have given explicit opt-in consent. You may withdraw this consent at any time through your account notification settings without affecting the lawfulness of processing carried out prior to withdrawal.

nunstat does not sell, rent, or trade your personal information to third parties for their own commercial purposes. We may share your data with the following categories of recipients, strictly as necessary:

• KYC and identity verification providers: Third-party services that assist nunstat in verifying player identity and age. These providers process your identity data under a strict data processing agreement and are prohibited from using it for any other purpose.
• Payment processors: GCash, Maya, GrabPay, BPI, BDO, Metrobank, InstaPay, PesoNet, 7-Eleven CLiQQ, and QR Ph, as required to execute your deposit and withdrawal instructions. Each provider operates under its own privacy policy in respect of data it independently holds.
• Game content providers: Licensed third-party game studios whose titles are hosted on the nunstat platform may receive limited session and bet data for the purpose of game operation and integrity monitoring. No directly identifying personal information is shared beyond what is operationally necessary.
• Regulatory and law enforcement bodies: nunstat may be required to disclose personal information to Philippine gaming regulators, tax authorities, financial intelligence units, or law enforcement agencies where required by applicable law or a valid legal order.
• Professional advisors: Legal counsel, auditors, and compliance consultants engaged by nunstat under confidentiality obligations, where disclosure is necessary for the conduct of nunstat's business.

nunstat retains your personal data for as long as your account is active and for such further period as is necessary to fulfil the purposes described in this Privacy Policy, including compliance with legal obligations and the resolution of disputes.

As a general guide, the following retention periods apply:

• Account and identity data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, as required by applicable AML and gaming record-keeping obligations.
• Transaction and gaming activity data: Retained for a minimum of five (5) years following the transaction date, in accordance with financial record-keeping requirements.
• Customer support communications: Retained for three (3) years following the closure of each support interaction, unless a longer period is required for dispute resolution or regulatory purposes.
• Marketing preference records: Retained for as long as your account is active, or until you withdraw consent, whichever occurs first. A record of your withdrawal of consent will be retained for compliance purposes.
• Technical and session data: Retained for up to thirteen (13) months from collection, after which it is anonymised or deleted.

When personal data is no longer required for any legitimate purpose, nunstat will securely delete or anonymise it in accordance with our internal data retention and disposal procedures.

nunstat takes the security of your personal information seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and the nunstat platform is encrypted using TLS (Transport Layer Security) to prevent interception.
• Encryption at rest: Sensitive personal data stored on nunstat servers — including identity documents and financial account references — is encrypted at rest using industry-standard algorithms.
• Access controls: Access to personal player data within nunstat's internal systems is restricted on a need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and periodic security training.
• Two-factor authentication (2FA): nunstat offers 2FA for player account logins as an additional layer of protection. Players are strongly encouraged to enable this feature through their account security settings.
• Regular security reviews: nunstat conducts periodic internal security assessments and works with external security specialists to identify and address potential vulnerabilities in the platform.

nunstat uses cookies and similar tracking technologies (including web beacons and local storage) on the nunstat platform. Cookies are small text files placed on your device when you visit a website. They serve a number of functions that are important to the smooth operation of the nunstat platform.

nunstat uses the following categories of cookies:

• Essential / Strictly Necessary Cookies: Required for the nunstat platform to function. These include session cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without significantly impairing your ability to use nunstat.
• Functional Cookies: Used to remember your preferences — such as your language settings or preferred game lobby view — so that your nunstat experience is consistent across visits.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the nunstat platform, which games are most visited, and where users encounter difficulties. This information helps nunstat improve the platform experience. Analytics data is not used to identify individual players.
• Marketing / Preference Cookies: Used only where you have opted in to marketing communications. These cookies help nunstat display relevant promotional content based on your activity on the platform. You may opt out of marketing cookies at any time through your browser settings or account preferences.

You can control cookie behaviour through your browser settings. Most modern browsers allow you to refuse some or all cookies, or to be notified when a cookie is set. Please note that disabling essential cookies may prevent parts of the nunstat platform from functioning correctly.

As a nunstat player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact nunstat at [email protected] with the subject line "Data Rights Request".

• Right of Access: You may request a copy of the personal information nunstat holds about you, along with information about how it is being used. nunstat will respond to verified access requests within 30 calendar days.
• Right to Rectification: If any personal information nunstat holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Corrections to core identity data may require supporting documentation.
• Right to Erasure: You may request that nunstat delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing. This right is subject to nunstat's legal obligations, which may require retention of certain data (see Section 7).
• Right to Restriction: You may request that nunstat restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that nunstat provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to nunstat processing your personal data on the basis of legitimate interests. nunstat will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent — specifically for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

The nunstat platform is strictly intended for individuals who are at least 21 years of age, in accordance with applicable Philippine regulations governing online gaming and casino-style gambling. nunstat does not knowingly collect personal information from individuals under 21 years of age.

If nunstat becomes aware — through the KYC verification process or any other means — that a registered player is under 21 years of age, the account will be immediately suspended and any real-money balance will be returned to the originating payment method, less any amounts already wagered. nunstat will delete the personal data of any underage individual identified during this process, except where retention is required for regulatory reporting purposes.

If you are a parent or guardian and believe that a minor has accessed the nunstat platform using your or their own payment information, please contact us immediately at [email protected].

nunstat is a platform primarily serving the Philippine market and processes the majority of its player data within systems accessible to operations serving the Philippines. However, certain third-party service providers engaged by nunstat — including KYC verification partners and game content providers — may be located in or operate data infrastructure outside the Philippines.

Where personal data is transferred outside the Philippines to a third-party processor, nunstat takes appropriate steps to ensure that such transfers are conducted under adequate data protection safeguards, including contractual obligations that require the recipient to protect your personal data to a standard equivalent to that required under applicable Philippine data protection law.

By using the nunstat platform, you acknowledge that your personal data may be transferred to and processed in countries other than the Philippines as described in this section.

The nunstat platform may reference or display content from third-party game providers, payment partners, or other service integrations. Where interaction with a third-party service requires you to be directed to or interface with a system operated by that third party, that third party's own privacy policy will apply to any personal data processed by them in that context.

nunstat is not responsible for the privacy practices of third-party providers. We encourage you to review the privacy policies of any third-party services you interact with in connection with your nunstat account, particularly your payment provider's privacy notice, which governs how they handle your financial account information.

nunstat may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or operational requirements. When we make material changes to this policy — that is, changes that significantly affect your privacy rights or the way we use your personal information — we will notify you by sending an email to your registered address or by displaying a prominent notification on the nunstat platform prior to the changes taking effect.

Non-material changes, such as typographical corrections or clarifications that do not alter the substance of our data practices, may be published without advance notice. The "Effective Date" and "Last Reviewed" dates at the top of this document will always reflect the most recent version.

We encourage you to review this Privacy Policy periodically. Your continued use of the nunstat platform following the publication of any updated version constitutes your acknowledgement of the revised policy. If you do not agree to a material change, you should contact nunstat to request account closure before the change takes effect.

If you have questions, concerns, or requests relating to this Privacy Policy or the way nunstat handles your personal data, please reach out to us through any of the following channels:

• Email: [email protected] — use the subject line "Data Privacy Enquiry" for fastest routing to our data protection team.
• Live Chat: Available directly on the nunstat platform, 24 hours a day, 7 days a week, Philippine Standard Time.
• Messenger & Viber: nunstat support is also reachable via Messenger and Viber for players who prefer those channels.

nunstat aims to acknowledge all privacy-related enquiries within 5 business days and to resolve them fully within 30 calendar days of receipt. For complex requests, we may require additional time and will inform you promptly if an extension is needed.