Privacy Policy — nustqr Data Protection

This Privacy Policy ("Policy") describes how nustqr ("nustqr", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "player") who access or use the nustqr online casino and sports betting platform available at nustqr.net.

nustqr operates in the Philippines and primarily serves Filipino players. This Policy is drafted in accordance with the Republic Act No. 10173 — Data Privacy Act of 2012 (DPA) of the Philippines and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC). Where applicable, we also align our practices with internationally recognized data protection standards.

By registering an account on nustqr, accessing the platform, or using any of our services, you acknowledge that you have read, understood, and agreed to the collection and use of your personal information as described in this Policy. If you do not agree with any part of this Policy, you must discontinue use of the nustqr platform immediately.

This Policy should be read together with the nustqr Terms & Conditions and the Responsible Gaming Policy, which together form the complete legal framework governing your use of the nustqr platform.

For the purposes of the Data Privacy Act of 2012, nustqr acts as the Personal Information Controller (PIC) with respect to the personal data it collects directly from players and processes for the purposes described in this Policy.

Where nustqr engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification vendors, and game software suppliers — those providers act as Personal Information Processors (PIPs) under binding data processing agreements that require them to process personal data only on nustqr's documented instructions and in compliance with applicable Philippine privacy law.

For all data-related inquiries, requests, or complaints, you may contact nustqr's designated Data Protection Officer (DPO) at: [email protected] with the subject line "Data Privacy Request".

nustqr collects the following categories of personal data from players and prospective players:

nustqr does not intentionally collect sensitive personal information as defined under the DPA (such as health data, political opinions, or religious beliefs) unless it is strictly necessary — for example, health information provided voluntarily by a player in the context of a responsible gaming self-exclusion request. Any such data is handled with heightened protection.

nustqr collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal through the nustqr Cashier, contact customer support via live chat or email, participate in promotions, or update your account profile.
• Automatically: When you access the nustqr platform, our servers and analytics tools automatically record technical data such as your IP address, device identifiers, browser fingerprint, and session activity. This occurs whether or not you are logged in to an account.
• From third parties: nustqr may receive personal data from identity verification partners (for KYC and AML purposes), payment processors (for transaction confirmation and fraud detection), and, where applicable, from fraud prevention and responsible gaming databases that we consult to verify player eligibility.
• Cookies and similar technologies: nustqr uses cookies, web beacons, and similar tracking technologies on the nustqr platform to maintain session state, remember player preferences, and gather aggregated analytics. See Section 9 (Cookies & Tracking) for details.

nustqr processes your personal data only for specific, legitimate purposes and only where a valid legal basis exists under the Data Privacy Act of 2012. The primary purposes and their corresponding legal bases are as follows:

Where nustqr relies on consent as the legal basis for processing — specifically for marketing communications — you have the right to withdraw that consent at any time by updating your notification preferences in Account Settings or by contacting nustqr support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

nustqr does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share personal data only in the circumstances described below:

• Payment Processors: GCash (G-Xchange, Inc.), Maya (Voyager Innovations), BPI, BDO, Metrobank, UnionBank, and other payment service providers receive the financial and identity data strictly necessary to process your transactions, verify payment ownership, and comply with e-money and banking regulations.
• Identity Verification Providers: Third-party KYC and age verification vendors receive identity documents and biometric data (where required) solely for the purpose of confirming your identity and age (21+) in compliance with our regulatory obligations.
• Game Software Providers: Licensed game studios and live dealer operators whose games are integrated into the nustqr platform may receive anonymized or pseudonymized session data necessary to operate game rounds. They do not receive your full identity or financial data.
• Fraud Prevention & AML Databases: nustqr may share data with industry fraud prevention and responsible gaming databases to protect the integrity of the platform and the welfare of Filipino players.
• Legal & Regulatory Authorities: Where required by applicable Philippine law, court order, or the direction of a competent regulatory authority (including PAGCOR, the NPC, or the AMLC), nustqr will disclose personal data as legally mandated. nustqr will notify affected players of such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or transfer of nustqr's business assets, player personal data may be transferred to the acquiring entity, subject to the same or equivalent privacy protections as described in this Policy. Affected players will be notified in advance.

All third parties with whom nustqr shares personal data are bound by contractual data processing agreements that require them to maintain the confidentiality and security of your data and to process it only for the specified purposes.

nustqr retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the duration of your account relationship with nustqr and for a period thereafter as required by applicable Philippine law and regulatory obligations.

After the applicable retention period expires, nustqr will securely delete or anonymize your personal data such that it can no longer be associated with your identity. Anonymized, aggregated data may be retained indefinitely for statistical and analytical purposes.

nustqr implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your browser or device and the nustqr platform is protected using TLS 1.2 or higher encryption (HTTPS). This includes login credentials, payment data, and all account communications.
• Encryption at Rest: Sensitive personal data stored in nustqr's databases — including identity documents and payment method details — is encrypted at rest using industry-standard AES-256 encryption.
• Access Controls: Access to systems containing personal data is restricted to authorized nustqr personnel on a strict need-to-know basis. Multi-factor authentication is enforced for all administrative system access. All access events are logged and audited.
• Password Security: Player account passwords are stored as salted cryptographic hashes. nustqr support staff cannot view your password in plaintext. If you forget your password, you must use the account recovery process — nustqr will never send your password to you.
• Vulnerability Management: nustqr conducts regular security assessments, penetration testing, and vulnerability scans of its platform infrastructure. Critical vulnerabilities are remediated on a priority basis.
• Incident Response: nustqr maintains a documented data breach response procedure. In the event of a personal data breach that poses a significant risk to the rights and freedoms of affected players, nustqr will notify the National Privacy Commission (NPC) within 72 hours and will notify affected players without undue delay, as required by the DPA and NPC Circular No. 16-03.

nustqr uses cookies and similar tracking technologies on the nustqr platform to provide a functional, secure, and personalized gaming experience. A cookie is a small text file placed on your device by the nustqr platform when you access it. The following types of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the nustqr platform to function. They maintain your login session, remember your language and display preferences, and enable secure navigation between platform sections. These cookies cannot be disabled without breaking core platform functionality.
• Analytical / Performance Cookies: These cookies collect aggregated, anonymized information about how players interact with the nustqr platform — such as which game categories are most popular, average session duration, and pages most frequently visited. This data helps nustqr improve the platform experience for Filipino players. You may opt out of analytical cookies via the Cookie Preferences panel on the platform.
• Functionality Cookies: These cookies remember choices you make on the nustqr platform — such as preferred game view, sound settings, and responsible gaming reminder preferences — so you do not need to re-configure them on each visit.
• Marketing / Targeting Cookies: Where you have opted in to marketing communications, nustqr may use cookies to track which promotions you have viewed or interacted with, in order to personalize the bonus offers presented to you. These cookies are only activated upon your explicit consent.

You can manage your cookie preferences at any time through the Cookie Preferences panel accessible in the nustqr platform footer. You may also control cookies through your browser settings; however, disabling strictly necessary cookies will impair or prevent your ability to use the nustqr platform.

nustqr does not use cookies to track your activity on websites or platforms other than nustqr.net.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by nustqr. To exercise any of these rights, contact nustqr's Data Protection Officer at [email protected] with subject line "Data Privacy Request — [Right Being Exercised]".

The nustqr platform is strictly intended for individuals who are 21 years of age or older in accordance with Philippine gambling regulations. nustqr does not knowingly collect personal data from persons under 21 years of age.

During the registration process, nustqr collects date of birth information and enforces an age gate to prevent access by underage individuals. Prior to processing any withdrawal, nustqr requires KYC verification of age via a government-issued Philippine ID. Any account found to belong to a person under 21 years of age will be immediately closed, all funds will be returned to the originating payment method, and any gaming activity conducted will be voided.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account on nustqr or accessed the platform, please contact nustqr support immediately at [email protected]. We will investigate and take appropriate action, including permanent account closure and deletion of any personal data belonging to the minor, as quickly as possible.

nustqr also recommends that parents and guardians use internet filtering and parental control software to restrict access to online gambling platforms by minors in the household.

nustqr primarily stores and processes personal data within the Philippines. However, some of nustqr's third-party service providers — including certain game software providers, cloud infrastructure partners, and identity verification vendors — may process data on servers located outside the Philippines.

Where such cross-border data transfers occur, nustqr ensures that adequate safeguards are in place as required by Section 21 of the Data Privacy Act of 2012 and NPC regulations on cross-border data transfers. These safeguards include:

• Contractual clauses in data processing agreements with international processors that impose data protection obligations equivalent to those required under Philippine law.
• Transfers only to jurisdictions that have been assessed as providing an adequate level of data protection, or to processors in non-adequate jurisdictions where specific contractual safeguards have been implemented.
• Data minimization — only the minimum personal data necessary for the specific processing purpose is transferred internationally.

By using the nustqr platform, you consent to the transfer of your personal data to nustqr's approved international processors subject to the safeguards described above.

nustqr reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC regulatory guidance, or platform functionality. The "Last Updated" date at the top of this page will be revised accordingly.

Where changes are material — meaning they significantly affect how nustqr collects, uses, or shares your personal data — nustqr will notify active account holders via their registered email address at least seven (7) days before the amended Policy takes effect, and will display a prominent notice on the nustqr platform during that period.

Your continued use of the nustqr platform after the effective date of any amended Privacy Policy constitutes your acknowledgment and acceptance of the updated Policy. If you do not agree with material changes, you must cease using the platform and may request account closure by contacting nustqr support prior to the effective date.

We encourage all nustqr players to review this Policy periodically to stay informed of how your personal data is being protected.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by nustqr, please contact our Data Protection Officer through the following channel:

DPO Email: [email protected] — Subject line: "Data Privacy Request"

nustqr's support team is available 24/7, including Philippine public holidays. We are committed to acknowledging all data privacy requests within one (1) business day and providing a substantive response within fifteen (15) working days in accordance with NPC guidelines.

If you feel that your data privacy rights have not been adequately addressed by nustqr, you have the right to file a complaint directly with the National Privacy Commission (NPC) of the Philippines, the independent supervisory authority responsible for enforcing the Data Privacy Act of 2012.