numstar Privacy Policy

Who We Are

numstar is an online sportsbook and casino platform operating under the domain numstar.net, serving Filipino players across Manila, Cebu, Davao, Quezon City, Makati, and other cities nationwide. numstar operates in compliance with the regulatory framework established by PAGCOR (Philippine Amusement and Gaming Corporation) and adheres to the data protection requirements of Republic Act No. 10173, the Data Privacy Act of 2012 (DPA).

For the purposes of this Privacy Policy, numstar is the data controller responsible for the personal data of registered players and website visitors. numstar is responsible for ensuring that personal data is collected, processed, stored, and disposed of in accordance with the DPA and its implementing rules and regulations.

If you have any questions about how numstar handles your personal data, you can reach our Data Protection Officer (DPO) at any time by emailing [email protected] with the subject line "Data Privacy Enquiry".

Personal Data We Collect

numstar collects only the personal data that is necessary to provide you with a safe, secure, and personalised gaming experience. The categories of personal data we collect are set out in the table below:

How We Collect Your Data

numstar collects personal data through the following channels:

• Direct Collection: Information you provide when you register a numstar account, complete identity verification, make a deposit or withdrawal, contact customer support, respond to a survey, or participate in a promotion.
• Automated Collection: Technical and usage data collected automatically when you visit numstar.net or use the numstar platform, including via cookies, log files, and similar tracking technologies as described in Section 8.
• Third-Party Sources: Identity verification data from KYC and anti-fraud service providers; transaction data from payment processors (GCash, Maya, BPI, BDO, Metrobank); fraud-screening data from industry risk databases used to protect our platform and players.
• PAGCOR & Regulatory Sources: In certain circumstances, numstar may receive information from regulatory bodies such as PAGCOR in connection with its licensing and compliance obligations.

numstar will always inform you at the point of collection what data is being collected and why. Where data collection is optional, we will make this clear.

How We Use Your Data

numstar uses the personal data it collects for the following purposes:

• Account Management: To create, verify, maintain, and manage your numstar player account, including processing your registration, verifying your age (21+ as required by PAGCOR regulations), and administering your account settings and preferences.
• Gaming Services: To provide access to numstar's sportsbook, live casino, slots, bingo, and fishing game services; to process your bets and wagers; and to settle winnings accurately and promptly.
• Payment Processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, and Metrobank; to verify payment method ownership; and to maintain transaction records as required by law.
• Legal & Regulatory Compliance: To comply with PAGCOR licensing conditions, the Philippine DPA, Anti-Money Laundering Act (AMLA) obligations, tax reporting requirements, and any other applicable Philippine law or regulation.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, and other prohibited conduct on the numstar platform.
• Responsible Gaming: To monitor gaming patterns for signs of problem gambling; to enforce player-requested responsible gaming tools such as deposit limits, cool-off periods, and self-exclusion; and to fulfill numstar's duty of care to players.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Platform Improvement: To analyse usage data in aggregate to improve the numstar platform's features, performance, and user experience.
• Communications: To send you transactional communications (e.g., deposit confirmations, withdrawal notifications, security alerts) and, where you have opted in, promotional communications about numstar offers and games.

Legal Basis for Processing

Under the Philippine Data Privacy Act 2012, numstar processes your personal data on the basis of one or more of the following lawful criteria:

• Contractual Necessity: Processing that is necessary to perform our contract with you — i.e., to operate your numstar account, process your bets, and pay out your winnings.
• Legal Obligation: Processing required to comply with numstar's legal obligations under Philippine law, including PAGCOR licensing conditions, AML regulations, and tax reporting requirements.
• Legitimate Interests: Processing that serves numstar's legitimate interests in operating a secure, fair, and sustainable gaming platform — including fraud detection, security monitoring, and platform analytics — provided those interests are not overridden by your data protection rights.
• Consent: Where numstar relies on your consent as the legal basis for processing — primarily for optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Sharing Your Data

numstar does not sell, rent, or trade your personal data to third parties for their own marketing purposes. numstar may share your personal data with the following categories of third parties only to the extent necessary for the purposes described in this Policy:

• Payment Service Providers: GCash (Mynt), Maya (PayMaya Philippines), BPI, BDO, and Metrobank — for the purpose of processing your deposits and withdrawals. These providers process your data under their own privacy policies and applicable Philippine financial regulations.
• Identity Verification Providers: Third-party KYC and anti-fraud service providers engaged by numstar to verify player identities and screen for prohibited activity. These providers act as data processors on numstar's behalf and are contractually bound to process your data only for the specified purpose.
• Regulatory & Law Enforcement Authorities: PAGCOR and other Philippine regulatory bodies, law enforcement agencies, and courts — where numstar is legally required to disclose personal data, or where disclosure is necessary to protect the legal rights of numstar or third parties.
• Technology Service Providers: Cloud hosting, platform infrastructure, cybersecurity, and analytics service providers engaged by numstar to support platform operations. All such providers are bound by data processing agreements that restrict their use of your personal data.
• Game Content Providers: Game studios and content providers whose games appear on the numstar platform may receive limited gameplay data (e.g., bet amounts, game outcomes) for the purpose of operating game sessions and calculating RTP (Return to Player) statistics. No directly identifying personal data (such as your name or contact details) is shared with game providers without your explicit consent.

Data Retention

numstar retains your personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law and PAGCOR regulations:

• Account Data: Retained for the duration of your active numstar account plus a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements.
• Financial & Transaction Data: Retained for a minimum of five (5) years following the date of the transaction, as required by the Anti-Money Laundering Act (AMLA) and its implementing rules.
• Identity Verification Documents: Retained for a minimum of five (5) years from the date of submission, or such longer period as may be required by PAGCOR or other applicable regulation.
• Gaming Activity Logs: Retained for a minimum of three (3) years for responsible gaming monitoring and dispute resolution purposes.
• Support Communications: Retained for a minimum of two (2) years from the date of the relevant communication.
• Marketing Consent Records: Retained for the duration of your consent plus three (3) years to evidence compliance in the event of a regulatory enquiry.

Upon expiry of the applicable retention period, numstar will securely delete or anonymise your personal data in a manner that prevents reconstruction or identification of individual players.

Cookies & Tracking Technologies

numstar uses cookies and similar technologies on the numstar.net platform. The following types of cookies are in use:

• Strictly Necessary Cookies: Essential for the numstar platform to function. These cookies maintain your login session, remember your game preferences, and enable core platform features. They cannot be disabled without significantly impairing your use of numstar.
• Performance & Analytics Cookies: Used to collect anonymised information about how players use numstar.net — for example, which pages are visited most frequently and whether error messages are displayed. This data is used exclusively to improve the platform and is not linked to your personal identity.
• Functionality Cookies: Used to remember choices you make on numstar (such as your preferred language or display settings) to personalise your experience.

numstar does not use advertising cookies, third-party tracking pixels, or any technology designed to track your browsing activity across other websites for the purpose of serving targeted advertisements.

Security Measures

numstar implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Transport Layer Security (TLS): All data transmitted between your device and numstar servers is encrypted using TLS 1.2 or higher. The numstar.net domain enforces HTTPS on all pages.
• Encryption at Rest: Sensitive personal data stored in numstar databases — including identity documents and financial data — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to player personal data within numstar is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data undergo background checks and are bound by confidentiality agreements.
• Intrusion Detection: numstar employs automated monitoring systems to detect and respond to unusual access patterns or potential security incidents in real time.
• Penetration Testing: numstar conducts regular security assessments and penetration tests to identify and remediate vulnerabilities in the platform.
• Incident Response: In the event of a data breach that is likely to affect your rights and freedoms as a data subject, numstar will notify you and the National Privacy Commission (NPC) in accordance with the requirements of the Philippine DPA and its implementing rules.

While numstar takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are encouraged to use a strong, unique password for your numstar account and to enable two-factor authentication where available.

Your Rights Under DPA 2012

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to the personal data numstar holds about you:

• Right to be Informed: You have the right to be informed of the personal data being collected, the purposes for which it is processed, and the identity of third parties with whom it is shared — all of which are set out in this Privacy Policy.
• Right of Access: You have the right to obtain a copy of the personal data numstar holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data numstar holds about you. You may update most personal data directly through your numstar account settings.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and there is no other lawful basis for processing. This right is subject to numstar's legal and regulatory retention obligations described in Section 7.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time, and to object to processing based on legitimate interests where you believe your individual rights override numstar's stated interests.
• Right to Data Portability: Where technically feasible and lawfully permissible, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated. Information on how to file a complaint with the NPC is available through official Philippine government channels.

Children & Minors

The numstar platform is strictly intended for adults aged 21 years and above, in compliance with PAGCOR regulations governing online gaming in the Philippines. numstar does not knowingly collect personal data from individuals under the age of 21.

If numstar discovers or has reasonable grounds to believe that personal data has been collected from an individual who is under 21 years of age, numstar will immediately:

• Suspend the associated account pending investigation.
• Delete all personal data associated with the underage registration as soon as reasonably practicable.
• Forfeit any balance in the account in accordance with the numstar Terms & Conditions.
• Report the matter to PAGCOR where required by applicable regulation.

Cross-Border Data Transfers

In some cases, numstar may transfer your personal data to third-party service providers or technology partners that operate outside the Philippines — for example, cloud infrastructure providers or game content studios based in other countries. Where such transfers occur, numstar ensures that adequate safeguards are in place to protect your personal data to a standard equivalent to that provided by the Philippine DPA 2012.

These safeguards may include:

• Contractual clauses that impose the same data protection obligations on the recipient as apply under the Philippine DPA.
• Transfers only to jurisdictions that have been assessed to provide an adequate level of data protection.
• Certification or binding commitments from the recipient organisation to comply with applicable data protection standards.

numstar will not transfer your personal data to a third party in another jurisdiction unless the transfer meets the conditions set out in the Philippine DPA and its implementing rules and regulations.

Policy Updates

numstar may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. When material changes are made to this Policy, numstar will notify registered players through in-platform notifications or by email to the address registered on your account.

The "Effective Date" displayed at the top of this Privacy Policy indicates when the current version came into force. We encourage you to review this Policy periodically to stay informed about how numstar protects your personal data. Your continued use of the numstar platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

The most current version of this Privacy Policy will always be available at numstar.net/privacy-policy.

Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or the way numstar handles your personal data, please contact us using one of the following channels:

• Email (Data Privacy Enquiries): [email protected] — please use the subject line "Data Privacy Enquiry" or "Data Privacy Request" as appropriate.
• Live Chat: Available 24/7 on the numstar platform — for urgent data privacy concerns, live chat is the fastest way to reach a numstar representative.

numstar takes all privacy complaints seriously and is committed to responding to all data privacy enquiries within fifteen (15) business days. Where a complaint cannot be resolved to your satisfaction through direct contact with numstar, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines through official government channels.