nuatar Privacy Policy

1.1 nuatar is committed to protecting the personal data of all players on our platform, including Filipino players and users accessing the Platform from other jurisdictions where nuatar's services are lawfully available.

1.2 This Policy sets out the types of personal data nuatar collects, the purposes for which such data is processed, the legal bases for processing, the parties with whom data may be shared, and the rights available to individuals in respect of their personal data.

1.3 nuatar processes personal data in compliance with applicable Philippine data protection legislation, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines.

1.4 Where nuatar processes data of individuals located in other jurisdictions, nuatar will apply standards consistent with applicable local data protection laws.

2.1 For the purposes of this Policy, nuatar is the Personal Information Controller (as defined under the Data Privacy Act of 2012) in respect of the personal data it collects and processes through the Platform.

2.2 Where nuatar engages third-party service providers to process data on its behalf — such as payment processors, identity verification providers, and customer support platforms — those parties act as Personal Information Processors under nuatar's instructions and pursuant to data processing agreements that impose obligations equivalent to those set out in this Policy.

2.3 Inquiries relating to nuatar's data controller responsibilities, including requests to exercise data subject rights, may be directed to nuatar's Data Protection Officer at: [email protected]

nuatar collects the following categories of personal data from players and platform users:

3.1 nuatar does not intentionally collect sensitive personal information (as defined under the Data Privacy Act of 2012) beyond what is strictly necessary for KYC identity verification, AML compliance, or age verification purposes. Where such information is collected, nuatar applies heightened security and access controls.

nuatar collects personal data through the following means:

• Direct provision by you: When you register an account, complete KYC verification, make deposits or withdrawal requests, contact nuatar's support team, or respond to promotions;
• Automated collection via the Platform: Technical data such as IP addresses, device identifiers, and session data are collected automatically when you access the nuatar website or mobile platform;
• Cookies and tracking technologies: nuatar uses cookies and similar tracking technologies as described in Section 9 of this Policy;
• Third-party sources: nuatar may receive identity verification data from licensed KYC/AML service providers, fraud screening services, and payment processors such as GCash and Philippine banking partners, where lawfully permitted;
• Publicly available sources: In limited circumstances, nuatar may verify information using publicly available Philippine government databases or business registries.

nuatar processes personal data only for specified, legitimate purposes. The following table summarises the primary processing purposes and their corresponding legal bases under the Data Privacy Act of 2012:

5.1 Where nuatar relies on consent as its legal basis for processing, you have the right to withdraw that consent at any time by contacting nuatar at [email protected] or adjusting your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

6.1 nuatar may share personal data with the following categories of third parties:

• Payment processors: GCash (G-Xchange, Inc.), PayMaya, BPI, BDO, Metrobank, and UnionBank, for the purpose of processing deposits and withdrawals;
• KYC and AML service providers: Licensed identity verification and fraud screening platforms engaged to assist nuatar with regulatory compliance obligations;
• Game providers: Third-party game studios and aggregators whose games are made available on the nuatar Platform, to the extent necessary for game functionality and fair play auditing;
• Customer support platforms: Third-party live chat and support ticketing providers used to deliver nuatar's 24/7 customer support service;
• Regulatory authorities: PAGCOR and other competent Philippine authorities, where disclosure is required by law, court order, or regulatory directive;
• Law enforcement: Philippine law enforcement agencies, where nuatar is lawfully compelled to disclose information in connection with a criminal investigation or legal proceeding;
• Professional advisers: Lawyers, auditors, and accountants engaged by nuatar on a confidential basis.

6.2 All third-party processors engaged by nuatar are bound by contractual data processing agreements that require them to process personal data only on nuatar's instructions and in compliance with applicable Philippine data protection law.

7.1 Some of nuatar's third-party service providers — including game providers and cloud infrastructure partners — may be located or operate servers outside the Philippines. Where personal data is transferred outside the Philippines, nuatar takes appropriate safeguards to ensure that the transfer is lawful and that the receiving party affords an adequate level of protection to the data, including through:

• Standard contractual clauses or equivalent data transfer agreements;
• Transfers to jurisdictions recognised by the National Privacy Commission as offering adequate data protection standards;
• Binding corporate rules, where applicable.

7.2 By using nuatar, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines, subject to the safeguards described above.

8.1 nuatar retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations;
• Financial transaction records: Retained for a minimum of five (5) years, or longer if required by PAGCOR or tax regulation;
• KYC verification documents: Retained for a minimum of five (5) years following account closure;
• Customer support records: Retained for up to three (3) years from the date of the interaction;
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period for audit purposes.

8.2 Upon expiry of the applicable retention period, nuatar will securely delete or anonymise the relevant personal data unless its continued retention is required for ongoing legal proceedings or regulatory investigations.

9.1 nuatar uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for Platform operation — including session management, authentication, and security features. These cannot be disabled without impairing core Platform functionality;
• Functional Cookies: Store your language preferences, display settings, and game preferences to personalise your nuatar experience;
• Analytics Cookies: Used to collect aggregated, anonymised data about how players use the nuatar Platform, enabling continuous improvement of the service;
• Security and Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, including account takeover attempts and automated bot activity.

9.2 nuatar does not use advertising or retargeting cookies that share player data with external advertising networks.

9.3 You may manage your cookie preferences by adjusting your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your nuatar account and using core Platform features.

10.1 Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in respect of your personal data held by nuatar:

10.2 To exercise any of the rights above, please contact nuatar's Data Protection Officer at [email protected]. nuatar will respond to all valid data subject requests within thirty (30) days of receipt, subject to identity verification.

10.3 Some rights are subject to limitations — for example, nuatar cannot delete data it is legally required to retain for AML compliance, PAGCOR reporting, or active dispute resolution purposes.

11.1 nuatar implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the nuatar Platform;
• Encryption at rest for sensitive data stored in nuatar's databases, including KYC documents and financial records;
• Access controls limiting internal access to personal data on a strict need-to-know basis, with role-based permissions and audit logging;
• Two-factor authentication (2FA) options for player accounts;
• Regular security assessments and penetration testing of nuatar's infrastructure;
• Incident response procedures governing how nuatar responds to data breaches, including notification to the National Privacy Commission and affected players where required under the Data Privacy Act of 2012.

11.2 Despite these measures, no online platform can guarantee absolute security. nuatar encourages players to protect their accounts by using strong, unique passwords, enabling 2FA, and reporting any suspected security incidents to [email protected] immediately.

12.1 If nuatar becomes aware that personal data has been collected from an individual under the age of 21, nuatar will promptly delete such data and close the associated account. Any deposits made by or on behalf of an underage individual will be handled in accordance with applicable regulatory requirements.

12.2 If you believe a minor has accessed or registered on the nuatar Platform, please notify nuatar immediately at [email protected].

13.1 The nuatar Platform may contain references to third-party services such as GCash, PayMaya, BPI, BDO, and other payment platforms. When you interact with those third-party services — for example, when completing a GCash deposit — you will be subject to that third party's own privacy policy and data practices.

13.2 nuatar is not responsible for the privacy practices of third-party service providers. nuatar encourages players to review the privacy policies of any third-party service they use in connection with their nuatar account.

13.3 nuatar's Privacy Policy applies only to data collected and processed by nuatar directly and does not extend to data processed independently by third-party processors once data leaves nuatar's direct control under an appropriate data sharing agreement.

14.1 nuatar may update this Privacy Policy from time to time to reflect changes in data processing practices, regulatory requirements, or Platform functionality. When material changes are made, nuatar will notify registered players via their registered email address or via a prominent notice on the Platform.

14.2 The effective date of the current version of this Policy is stated at the top of this page. nuatar recommends that players review this Policy periodically. The most current version is always available at https://nuatar.vip/privacy-policy.

14.3 Continued use of the nuatar Platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated terms.

15.1 For any questions, concerns, or requests relating to this Privacy Policy or nuatar's data processing practices, please contact nuatar's Data Protection Officer:

15.2 If you are not satisfied with nuatar's response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available at the NPC's official website.

15.3 nuatar is committed to resolving all data privacy concerns promptly, fairly, and in accordance with the Data Privacy Act of 2012. Response times for formal data subject requests are within thirty (30) calendar days of receipt.