Nuntar Privacy
Policy

This Privacy Policy ("Policy") describes how Nuntar ("Nuntar," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of users ("you," "your," or "Player") who access or use the Nuntar online gaming platform, including the website at nuntar.com and the Nuntar mobile application (collectively, the "Platform").

Nuntar is committed to protecting the privacy and personal data of all players, particularly those based in the Philippines. This Policy is drafted in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations ("IRR"), as enforced by the National Privacy Commission ("NPC").

By registering for an account, accessing the Platform, or otherwise using any part of the Nuntar service, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately.

Nuntar collects the following categories of personal data, depending on how you interact with the Platform:

Nuntar does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required by applicable law or regulation (for example, information relevant to responsible gaming assessments).

Nuntar collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting support, or responding to surveys and promotions.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and similar tracking technologies.
• Third-party sources: Data received from payment processors (such as GCash, PayMaya, BPI, BDO, and Metrobank), identity verification service providers, fraud prevention agencies, and analytics partners, where permitted by applicable law.
• Publicly available sources: In limited circumstances, data from publicly available sources such as government registries, where relevant to compliance obligations.

Nuntar uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your Nuntar account, including verifying your identity and age (21+ requirement).
• Service delivery: To provide access to games, process wagers, credit winnings, and deliver all features of the Platform.
• Payment processing: To process deposits and withdrawals through your chosen payment method, and to verify that payment methods are registered in your name.
• Legal and regulatory compliance: To comply with anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, tax reporting obligations, and any other applicable legal or regulatory requirements.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats.
• Responsible gaming: To monitor gaming behavior, identify potential problem gambling patterns, and apply responsible gaming tools where appropriate.
• Customer support: To respond to your inquiries, resolve disputes, and improve our support services.
• Marketing communications: To send you promotional offers, bonuses, and platform updates where you have consented to receive such communications. You may opt out at any time.
• Platform improvement: To analyze usage patterns, conduct research, and improve the features, performance, and user experience of the Platform.

Nuntar will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

Under the Data Privacy Act of 2012 of the Philippines, Nuntar processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you – that is, to provide the Nuntar gaming service, process payments, and manage your account.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML/KYC obligations, tax reporting, and regulatory requirements.
• Legitimate interests: Processing necessary for Nuntar's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, such as for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Nuntar does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard, for the purpose of processing your financial transactions.
• Identity verification providers: Third-party KYC and age verification service providers who assist Nuntar in verifying player identities and complying with regulatory requirements.
• Fraud prevention and security providers: Specialist providers who assist Nuntar in detecting and preventing fraudulent activity and unauthorized access.
• Analytics providers: Service providers who help Nuntar analyze Platform usage and improve the user experience. These providers process data only in aggregated or anonymized form where possible.
• Legal and regulatory authorities: Government agencies, law enforcement bodies, the National Privacy Commission, and other regulatory authorities, where disclosure is required by law or necessary to protect the rights, property, or safety of Nuntar, its players, or the public.
• Professional advisers: Lawyers, auditors, and other professional advisers who are bound by confidentiality obligations.

All third-party service providers who process personal data on Nuntar's behalf are required to enter into data processing agreements that obligate them to protect your data in accordance with applicable law and Nuntar's data protection standards.

Nuntar uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how the Platform is used.

Nuntar uses the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These cannot be disabled. They include session management cookies, security tokens, and authentication cookies.
• Functional cookies: Used to remember your preferences and settings, such as language preferences and display options, to provide a more personalized experience.
• Analytics cookies: Used to collect information about how players use the Platform, including which pages are visited most frequently and how players navigate between pages. This data is used in aggregated form to improve the Platform.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorized access, and other security threats.

You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled as they are required for the Platform to operate.

Nuntar retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your account and for a period of five (5) years following account closure, in accordance with AML and regulatory record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by applicable financial regulations.
• Identity verification documents: Retained for the duration of your account and for five (5) years following account closure.
• Support communications: Retained for three (3) years from the date of the communication, or longer where relevant to an ongoing dispute or legal proceeding.
• Technical and usage data: Retained for up to two (2) years from collection, unless required for longer for security or fraud investigation purposes.
• Marketing consent records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, as evidence of the consent given.

When personal data is no longer required, Nuntar will securely delete or anonymize it in accordance with our internal data retention and disposal procedures. Anonymized data that can no longer be linked to an individual may be retained indefinitely for analytical purposes.

Nuntar implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and Nuntar's servers is encrypted using TLS 1.2 or higher.
• Encryption at rest: Sensitive personal data stored on Nuntar's servers is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorized Nuntar personnel and service providers on a strict need-to-know basis. All access is logged and audited.
• Regular security assessments: Nuntar conducts regular vulnerability assessments and penetration testing to identify and remediate security weaknesses.
• Incident response: Nuntar maintains a documented incident response plan for data security events, including procedures for breach notification in accordance with the Data Privacy Act of 2012.
• Staff training: All Nuntar personnel with access to personal data receive regular data protection and security training.

While Nuntar takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. Nuntar cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials and for notifying Nuntar immediately of any suspected unauthorized access to your account.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by Nuntar:

To exercise any of these rights, please contact Nuntar's support team. We will respond to all valid requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case we will notify you of the extension and the reason for it.

Nuntar will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. We may request proof of identity before processing a rights request to ensure we do not disclose personal data to an unauthorized person.

The Nuntar Platform is strictly intended for individuals who are 21 years of age or older. Nuntar does not knowingly collect personal data from individuals under the age of 21. If Nuntar becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian and believe that your child has provided personal data to Nuntar, please contact our support team immediately so that we can take appropriate action.

Nuntar's primary operations and data storage are based in the Philippines. In some cases, personal data may be transferred to and processed by service providers located in other countries, for example where cloud infrastructure or specialist technology providers are based outside the Philippines.

Where personal data is transferred outside the Philippines, Nuntar ensures that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012. These safeguards may include contractual clauses approved by the National Privacy Commission, adequacy decisions, or other legally recognized transfer mechanisms.

By using the Nuntar Platform, you acknowledge and consent to the transfer of your personal data to countries outside the Philippines where necessary for the purposes described in this Policy, subject to the safeguards described above.

Nuntar reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the features of the Platform. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

Where changes are material, Nuntar will notify registered players by email or through a prominent notice on the Platform prior to the changes taking effect. We encourage you to review this Policy periodically to stay informed about how Nuntar protects your personal data.

Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must cease using the Platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or Nuntar's data practices, please contact our support team or Data Protection Officer (DPO). We are committed to addressing all privacy-related inquiries promptly and transparently.

General Support:
[email protected]
Live chat is available within your Nuntar account dashboard, 24 hours a day, 7 days a week.

Data Protection Officer:
[email protected]
For data rights requests, privacy complaints, and data breach notifications, please mark your message as "Privacy Request" for priority handling.

Response Time: Nuntar aims to acknowledge all privacy-related inquiries within 72 hours and to provide a substantive response within 30 days of receipt.