nonstar Privacy Policy

1. Introduction

nonstar ("We," "Us," "Our") operates the online gaming platform accessible at nonstar.win, serving Filipino players across the Philippines including Metro Manila, Cebu, Davao, Quezon City, and all other regions. We understand that Filipino players trust us with sensitive personal and financial information, and we take the responsibility of protecting that data seriously.

This Privacy Policy describes the types of personal information nonstar collects, the purposes for which it is processed, the parties with whom it may be shared, the security measures we apply, and the rights available to you under Philippine law. This Policy applies to all registered nonstar Account holders, visitors to nonstar.win, and anyone who contacts nonstar through any communication channel.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which contain provisions relevant to how your data may be used in the context of platform operations and player protection.

2. Data Controller Identity

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations, nonstar is the personal information controller responsible for the personal data of Players collected through the nonstar Platform.

Questions, requests, and complaints relating to your personal data may be directed to the nonstar Data Protection Officer (DPO) at the contact details provided in Section 15 of this Policy.

3. Categories of Personal Data We Collect

nonstar collects the following categories of personal data in connection with the operation of the Platform:

4. How We Collect Personal Data

nonstar collects personal data through the following means:

• Direct Provision: Information you provide when registering a nonstar Account, completing identity verification, contacting support, or submitting a withdrawal request.
• Automated Collection: Technical data collected automatically when you access and interact with the nonstar Platform, including through cookies, server logs, and device fingerprinting technologies.
• Third-Party Sources: Identity verification data from licensed Know Your Customer (KYC) service providers; fraud risk signals from fraud prevention services; payment data from GCash, Maya, BPI, BDO, and other payment processors with whom you have a direct relationship.
• Regulatory Sources: Data received from PAGCOR or other Philippine regulatory bodies in connection with compliance obligations or investigation requests.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, nonstar processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the gaming services contract between you and nonstar, including account management, game operation, payment processing, and withdrawal fulfilment.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including anti-money laundering regulations, PAGCOR licensing requirements, and tax reporting obligations.
• Legitimate Interest: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring — where these interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. How We Use Your Personal Data

nonstar uses the personal data we hold for the following purposes:

• Creating, managing, and maintaining your nonstar Account
• Verifying your identity and age (21+ requirement) as required by Philippine gaming regulations
• Processing deposits and withdrawals through GCash, Maya, BPI, BDO, and other approved Philippine payment channels
• Detecting and preventing fraud, cheating, money laundering, and other prohibited conduct
• Complying with PAGCOR regulatory requirements, anti-money laundering obligations, and National Privacy Commission guidelines
• Operating responsible gaming tools including deposit limits, session tracking, and self-exclusion enforcement
• Resolving disputes, responding to support requests, and investigating complaints
• Improving the nonstar Platform, personalizing game recommendations, and optimizing user experience
• Sending transactional communications, including deposit confirmations, withdrawal notifications, and account security alerts
• Sending promotional communications and offers where you have consented to receive them

7. Data Sharing and Disclosure

7.1 nonstar does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances.

7.2 nonstar shares personal data with the following categories of third parties, strictly on a need-to-know basis and subject to confidentiality obligations:

• Payment Service Providers: GCash (GXI), Maya (Voyager Innovations), BPI, BDO, Metrobank, and other payment processors, for the purpose of processing deposits and withdrawals. These processors are independent personal information controllers in respect of payment transactions.
• Game Providers: Licensed third-party game studios (including Evolution Gaming, Pragmatic Play, PG Soft, and others) receive necessary session data to deliver and log game results. Game providers operate under their own privacy frameworks and licensing terms.
• Identity Verification Services: Licensed KYC service providers who assist with identity and age verification in compliance with PAGCOR requirements.
• Fraud Prevention Services: Security vendors who help detect and prevent fraudulent account activity, multi-accounting, and financial crime.
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine authorities, where disclosure is required by law or a valid legal order.
• Professional Advisers: Legal, accounting, and auditing professionals bound by professional confidentiality obligations, where necessary for business operations or compliance.

8. International Data Transfers

8.1 Certain nonstar service providers, including game providers and fraud prevention vendors, may be located outside the Philippines. Where personal data is transferred outside the Philippines, nonstar ensures that appropriate safeguards are in place in accordance with the requirements of the Philippine Data Privacy Act, including contractual protections consistent with NPC-approved transfer mechanisms.

8.2 By registering and using the nonstar Platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines for the purposes described in this Policy, subject to the safeguards described in this Section.

9. Data Retention

9.1 nonstar retains personal data for the following periods, after which data is securely deleted or irreversibly anonymized:

• Active Account Data: Retained for the duration of your nonstar Account and for five (5) years following voluntary Account closure, as required for anti-money laundering and gaming regulatory compliance under Philippine law.
• Transaction and Financial Data: Retained for a minimum of five (5) years from the date of each transaction in compliance with Philippine AML and tax record-keeping requirements.
• Identity Verification Documents: Retained for five (5) years following Account closure or the date of document submission, whichever is later.
• Support and Communications Records: Retained for three (3) years from the date of the relevant communication for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of the Account plus three (3) years to demonstrate compliance with consent obligations.
• Suspended or Closed Accounts (fraud/AML): Data related to Accounts closed for cause may be retained for longer periods as required by regulatory obligations or ongoing investigations.

10. Security Measures

10.1 nonstar implements the following technical and organizational security measures to protect your personal data against unauthorized access, loss, alteration, or disclosure:

• 256-bit SSL/TLS encryption for all data transmitted between your device and nonstar servers
• Encryption of personal data at rest within nonstar databases using AES-256 standard encryption
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Multi-factor authentication required for internal system access by nonstar staff
• Regular security vulnerability assessments and penetration testing by independent security professionals
• Intrusion detection and real-time anomaly monitoring on all platform infrastructure
• Incident response procedures aligned with NPC breach notification requirements under the Philippine Data Privacy Act

10.2 In the event of a personal data breach that is likely to result in risk to your rights and freedoms, nonstar will notify the National Privacy Commission and affected data subjects within the timeframes required by the Philippine Data Privacy Act and NPC regulations.

11. Cookies and Tracking Technologies

11.1 nonstar uses cookies and similar tracking technologies on the nonstar Platform. Cookies are small text files stored on your device that help the Platform remember your preferences, maintain your login session, detect fraud, and analyze Platform performance.

11.2 nonstar uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function, including session authentication, security tokens, and fraud prevention signals. These cannot be disabled without preventing use of the Platform.
• Functional Cookies: Remember your preferences such as language settings and remember-me login options to improve your experience on nonstar.
• Analytics Cookies: Collect aggregated, anonymized data about how Filipino players use the nonstar Platform to help us improve performance, navigation, and game recommendations. Used only where you have consented.
• Marketing Cookies: Track your interaction with nonstar promotions and campaigns. Used only where you have provided explicit consent to marketing communications.

11.3 You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the nonstar Platform.

12. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by nonstar:

• Right to Be Informed: The right to be informed about the collection and processing of your personal data, as fulfilled by this Privacy Policy.
• Right of Access: The right to request a copy of the personal data nonstar holds about you and information about how it is processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to nonstar's legal retention obligations.
• Right to Object: The right to object to processing of your personal data for direct marketing purposes or where processing is based on nonstar's legitimate interests.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of the above rights, contact the nonstar Data Protection Officer as described in Section 15. nonstar will respond to data subject requests within thirty (30) days of receipt, as required by Philippine law.

13. Children's Privacy and Age Restriction

If you believe that a minor has registered on the nonstar Platform, please contact our support team immediately at [email protected] so that we may investigate and take appropriate action.

14. Changes to This Privacy Policy

14.1 nonstar may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine laws, or NPC guidance. We will notify you of material changes by posting the updated Policy on the nonstar Platform with a revised effective date, and by sending notice to your registered email address for significant changes.

14.2 Your continued use of the nonstar Platform following the effective date of a revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with changes to the Privacy Policy, you may request Account closure as described in the nonstar Terms & Conditions.

15. Contact & Data Protection Officer

For all data privacy inquiries, access requests, correction requests, deletion requests, or complaints regarding nonstar's handling of your personal data, please contact our Data Protection Officer:

This Privacy Policy was last reviewed and updated on 1 June 2026. All prior versions of the nonstar Privacy Policy are superseded by this document.