nutar Privacy Policy

1. Introduction

At nutar, we recognise that the personal information you share with us is your information — and that you have every right to know exactly what we do with it. This Policy is written in plain, direct English so that every Filipino player can clearly understand how their data is handled from the moment they visit nutar.org through to account closure and beyond.

nutar is committed to processing personal data lawfully, fairly, and transparently. We collect only the minimum data required to deliver a safe, compliant, and high-quality online gaming experience. We do not sell, rent, or trade your personal data to third-party advertisers under any circumstances.

This Policy applies to all nutar services accessible at nutar.org, including the nutar casino lobby, sportsbook, live dealer tables, bingo, Dragon Tiger, Tower, slot games, and all account management functions accessible via nutar Login.

2. Data Controller

nutar is the data controller responsible for the personal information collected through the nutar platform. As data controller, nutar determines the purposes and means of processing your personal data and is accountable for ensuring that processing is conducted in accordance with the Data Privacy Act of 2012 and this Policy.

For all data privacy matters, inquiries, and formal data subject requests, you may contact nutar's designated Data Protection Officer (DPO) by writing to nutar support using the contact details provided in Section 14 of this Policy.

3. Personal Data We Collect

nutar collects the following categories of personal data from players and platform visitors:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, government-issued ID number, nationality	Account registration and KYC verification
Contact Data	Email address, Philippine mobile number, residential address	Account registration and profile updates
Financial Data	GCash number, Maya account, bank account name and number (BPI, BDO, Metrobank), deposit and withdrawal history	Payment processing and KYC verification
Transaction Data	Deposit amounts, withdrawal requests, bonus claims, wagering history, game round records	Ongoing platform use
Technical Data	IP address, device type, browser type and version, operating system, session timestamps, cookies	Automatically on platform access
Usage Data	Pages visited, games played, features used, click patterns, session duration	Automatically during platform use
Communications Data	Support chat transcripts, email correspondence, complaint records	When you contact nutar support
Verification Documents	Scanned or photographed government ID (passport, PhilSys ID, driver's licence), proof of address, selfie for liveness check	KYC verification process

nutar does not intentionally collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect biometric data beyond liveness verification photographs required for KYC, and we do not collect information about your religious beliefs, political opinions, or health status unless you voluntarily disclose such information in a support context.

4. How We Collect Your Data

nutar collects personal data through the following channels:

• Direct interactions: Data you provide when registering your nutar account, completing KYC verification, making deposits or withdrawal requests, contacting nutar support, or participating in nutar promotions.
• Automated technologies: Technical and usage data collected automatically when you access and navigate nutar.org, including cookies, web beacons, server logs, and similar tracking technologies described in Section 9.
• Third-party sources: Identity and address verification data received from accredited KYC and anti-money laundering (AML) screening service providers; payment confirmation data from GCash, Maya, BPI, BDO, Metrobank, and other payment processors; fraud-risk signals from cybersecurity monitoring partners.
• Publicly available sources: Where permitted by applicable law, nutar may supplement player records with information from publicly accessible Philippine government databases for the purpose of identity verification and AML compliance.

5. Purpose and Legal Basis for Processing

nutar processes your personal data for the following specific purposes, each supported by a lawful basis under the Data Privacy Act of 2012:

• Account creation and management — to register your nutar account, verify your identity, manage your profile, and provide access to all nutar platform features. Legal basis: Performance of contract.
• Payment processing — to process deposits via GCash, Maya, InstaPay, PesoNet, and supported Philippine banks, and to fulfill withdrawal requests to your verified payment method. Legal basis: Performance of contract.
• KYC and age verification — to verify that you are at least 21 years of age and to confirm your identity in compliance with nutar's regulatory obligations. Legal basis: Legal obligation and legitimate interest.
• AML and fraud prevention — to screen transactions, detect suspicious activity, and comply with Philippine Anti-Money Laundering Act (AMLA) reporting obligations. Legal basis: Legal obligation and legitimate interest.
• Platform improvement and analytics — to understand how players use nutar, identify technical issues, and improve game performance, site speed, and user experience. Legal basis: Legitimate interest.
• Customer support — to respond to your inquiries, resolve complaints, and maintain records of support interactions. Legal basis: Performance of contract and legitimate interest.
• Responsible gaming — to monitor gaming behavior for signs of problem gambling, administer self-exclusion requests, and enforce deposit and session limits set by you. Legal basis: Legal obligation and legitimate interest.
• Marketing communications — to send you promotional offers, bonus notifications, and nutar news via email or SMS, where you have opted in to receive such communications. Legal basis: Consent (withdrawable at any time).

nutar will not use your personal data for any purpose that is incompatible with the purposes listed above without obtaining your prior consent or establishing a separate lawful basis.

6. Sharing Your Personal Data

nutar does not sell or rent your personal data to any third party. nutar shares personal data only in the following limited circumstances:

• Payment processors: GCash (Mynt), Maya (PayMaya Philippines), BPI, BDO, Metrobank, and other Philippine payment partners receive the minimum data necessary to process your transactions securely.
• KYC and identity verification providers: Accredited third-party KYC service providers process your identity documents and liveness verification data solely for the purpose of verifying your nutar account under nutar's direction as data processor.
• Cloud and infrastructure providers: nutar's platform is hosted on enterprise-grade cloud infrastructure. Hosting providers may store or process data on nutar's behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: nutar will disclose personal data to the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), or other competent Philippine authorities when required by law, court order, or regulatory directive.
• Business transfers: In the event of a merger, acquisition, or sale of nutar's business assets, personal data may be transferred to the successor entity, subject to the same data protection standards established in this Policy.

All third-party service providers acting as data processors on nutar's behalf are required to execute data processing agreements that obligate them to process nutar player data only on nutar's documented instructions, implement appropriate technical and organizational security measures, and not engage sub-processors without nutar's prior written consent.

7. Data Retention

nutar retains personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the duration of your nutar account and for any additional period required to comply with applicable Philippine legal, regulatory, tax, and accounting obligations.

• Active account data: Retained for the full duration of your nutar account relationship.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure, in accordance with AMLA and related Philippine regulatory requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction for AML compliance and audit purposes.
• Support communications: Retained for three (3) years from the date of the relevant interaction, or longer where the matter relates to a dispute or regulatory inquiry.
• Marketing consent records: Retained for the duration of the marketing relationship plus three (3) years following withdrawal of consent, to evidence compliance.
• Technical and usage logs: Retained for up to twelve (12) months unless required longer for security investigation purposes.

When personal data is no longer required for any lawful purpose, nutar will securely delete or anonymize it in accordance with nutar's internal data lifecycle management procedures.

8. Security Measures

nutar implements a layered set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or mobile device and nutar's servers.
• Encryption at rest for sensitive data stored in nutar's databases, including payment details and identity documents.
• Strict role-based access controls ensuring that nutar staff can only access personal data that is necessary for their specific job function.
• Multi-factor authentication (MFA) for nutar staff accessing administrative systems that contain personal data.
• Continuous security monitoring, intrusion detection systems, and regular penetration testing of nutar's platform infrastructure.
• Regular staff training on data privacy obligations and secure data handling practices consistent with the Data Privacy Act of 2012.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, nutar will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay where required by law.

9. Cookies and Tracking Technologies

nutar uses the following types of cookies and similar technologies when you visit nutar.org:

• Strictly necessary cookies: Essential to the operation of the nutar platform — for example, session cookies that keep you logged in to your nutar account and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impacting platform functionality.
• Functional cookies: Remember your preferences such as your preferred game category, language setting, and display preferences within the nutar lobby, so you don't have to re-configure them on every visit.
• Analytics cookies: Help nutar understand how players navigate the platform, which games are most popular, and where technical errors occur. nutar uses this aggregated, anonymized data to improve platform performance and the overall nutar player experience.

nutar does not use third-party advertising or retargeting cookies that track your behavior across other websites. You can control cookie settings through your browser preferences. Note that disabling strictly necessary cookies will prevent you from logging in to your nutar account.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by nutar:

• Right to be informed: The right to know whether nutar holds personal data about you and to receive clear information about how it is processed — which this Policy provides.
• Right of access: The right to request a copy of the personal data nutar holds about you, along with information about the purposes and recipients of that data.
• Right to correction: The right to request that nutar corrects any inaccurate, incomplete, or outdated personal data held in your nutar account profile.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and no overriding legal retention obligation applies.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or processing based on nutar's legitimate interests, where your individual circumstances justify objection.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to request its transmission to another controller, where technically feasible.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time by contacting nutar support or using the unsubscribe link in any nutar marketing email. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe nutar has violated your data privacy rights. We encourage you to contact nutar first so we can attempt to resolve your concern directly.

To exercise any of the above rights, submit a written request to nutar support. nutar will acknowledge your request within three (3) business days and provide a substantive response within fifteen (15) business days, extendable by a further fifteen (15) business days where the complexity of the request requires additional time.

nutar may request additional information to verify your identity before processing a data subject request, to ensure that personal data is not disclosed to or altered by unauthorized individuals.

11. Minors and Age Restriction

nutar does not knowingly collect personal data from individuals under the age of 21. The nutar platform is strictly for adults aged 21 years and above. If nutar discovers or has reasonable grounds to believe that personal data has been collected from a person under 21 years of age, nutar will immediately suspend the relevant account, void any associated balances, and securely delete the personal data of the underage individual as soon as practicable.

If you are a parent or guardian and believe that a minor in your household has registered on nutar, please contact nutar support immediately so that the account can be closed and the data removed without delay.

12. Cross-Border Data Transfers

As an online platform, nutar may engage cloud infrastructure and technology service providers whose servers are located outside the Philippines. Where personal data is transferred to a jurisdiction outside the Philippines, nutar ensures that appropriate safeguards are in place, including contractual data transfer agreements that provide a level of data protection equivalent to that required under the Data Privacy Act of 2012 and the standards set by the National Privacy Commission.

nutar will not transfer your personal data to a country or territory that does not provide an adequate level of data protection without first implementing the appropriate contractual or regulatory safeguards required by Philippine law.

13. Changes to This Privacy Policy

nutar reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, new regulatory requirements, or improvements to our platform. When material changes are made, nutar will publish the updated Policy on nutar.org and update the "Last Updated" date at the top of this document.

Where changes materially affect how nutar processes your personal data, nutar will notify registered players by email or via an in-platform notification upon next login, allowing you to review the changes before continuing to use the nutar platform. Continued use of nutar after the effective date of any update constitutes your acknowledgment of the revised Policy.

14. Contact and Complaints

For all data privacy inquiries, data subject access requests, consent withdrawals, or complaints regarding nutar's handling of your personal data, please contact nutar's Data Protection Officer through nutar support.

nutar's support contact email is displayed in the footer of this page as plain text. Please include "Data Privacy Request" in the subject line of your message, along with your registered nutar account email address so we can locate your records and respond promptly.

If you are not satisfied with nutar's response to your complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines (NPC), which is the independent supervisory authority responsible for upholding the rights of data subjects under the Data Privacy Act of 2012.