Nurtar Privacy Policy – How We Protect Your Data

01 Overview & Who We Are

This Privacy Policy applies to all services operated by Nurtar ("we," "us," "our") through our website at nurtar.best and any related mobile-optimised interfaces. Nurtar is the data controller responsible for the personal information collected from registered players and visitors across the Philippines.

We built Nurtar for Filipinos — from Luzon to Mindanao — and we understand that trust is the foundation of everything. That's why we take data privacy seriously, not just because the law requires it, but because our players deserve nothing less. Every data decision we make is guided by the question: is this genuinely necessary, and does it serve the player?

By registering an account, depositing funds, or simply browsing nurtar.best, you acknowledge that you have read and understood this Privacy Policy. If anything here is unclear, please reach out — our Data Protection Officer is always available to help.

02 What Personal Data We Collect

We collect personal data in three main ways: directly from you when you register or interact with the platform, automatically as you use our services, and occasionally from third parties as part of our legal verification obligations.

a) Information You Provide Directly

• Identity data: Full legal name, date of birth, nationality, and government-issued ID number (e.g., Philippine passport, UMID, SSS ID, driver's licence)
• Contact data: Email address, mobile number, and residential address
• Financial data: GCash number, Maya account details, bank account numbers (BDO, BPI, UnionBank), and Visa/Mastercard card details used for deposits and withdrawals
• Account credentials: Username and encrypted password (we never store passwords in plain text)
• Verification documents: Copies of government IDs, proof of address, and selfie photos when KYC (Know Your Customer) verification is required

b) Data Collected Automatically

• IP address and approximate geographic location
• Device type, operating system, and browser information
• Session timestamps, pages visited, and gameplay activity logs
• Transaction history including deposits, withdrawals, and bet amounts
• Cookies and similar tracking technologies (see Section 6)

c) Data from Third Parties

• Identity verification results from PAGCOR-accredited KYC service providers
• Fraud prevention signals from our payment processor partners
• AML screening results from compliance databases as required by Philippine law

03 How We Use Your Personal Data

Nurtar uses your personal data only for the purposes stated below. We do not use your data for anything beyond what is described here without your explicit consent.

• Account management: Creating and maintaining your player account, verifying your identity, and processing login authentication
• Game and betting services: Processing your bets, managing your gaming activity, and calculating and paying out winnings
• Payment processing: Handling deposits and withdrawals via GCash, Maya, bank transfers, and cards in Philippine Peso (₱)
• Legal compliance: Meeting our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012
• Fraud prevention and security: Detecting and preventing cheating, money laundering, multiple accounts, and unauthorised access
• Customer support: Responding to your inquiries, resolving disputes, and improving our support quality
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling and enforcing player-requested limits or exclusions
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates — only if you have opted in and only through channels you have approved
• Platform improvement: Analysing anonymised usage data to improve game performance, UI design, and overall user experience

04 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, Nurtar processes your personal data on the following lawful bases:

• Contractual necessity: Processing required to fulfil the gaming service agreement you enter when you register (e.g., account creation, payment processing)
• Legal obligation: Processing mandated by PAGCOR, AMLC, and the National Privacy Commission (e.g., KYC verification, transaction records)
• Legitimate interests: Processing for fraud prevention, security monitoring, and responsible gaming purposes that do not override your fundamental rights
• Consent: Processing for marketing communications, optional profiling, and non-essential cookies — which you may withdraw at any time

05 Sharing Your Personal Data

Nurtar does not sell, rent, or trade your personal data to any third party for commercial or advertising purposes. Period. We share your data only in the following limited and necessary circumstances:

• Payment processors: GCash, Maya, BDO, BPI, UnionBank, Visa/Mastercard networks — to process your transactions securely
• KYC and identity verification providers: PAGCOR-accredited partners who assist with age and identity verification
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC) as legally required
• IT and cloud service providers: Certified hosting and infrastructure partners who process data on our behalf under strict data processing agreements
• Legal and law enforcement: When compelled by a valid court order, subpoena, or lawful request from Philippine law enforcement agencies

06 Cookies & Tracking Technologies

Nurtar uses cookies and similar technologies to keep the platform running smoothly, keep you securely logged in, and understand how players use our services. Here's a breakdown of what we use and why:

• Essential cookies: Required for the platform to function — session management, login authentication, CSRF protection. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and game display options.
• Analytics cookies: Help us understand which games are popular and where players encounter issues, using anonymised aggregate data. You can opt out.
• Marketing cookies: Used to show you relevant bonus offers within the platform. Only active if you have given consent.

You can manage your cookie preferences through your browser settings at any time. Note that disabling essential cookies will affect your ability to use the platform. For more details, see the cookie notice displayed when you first visit nurtar.best.

07 How Long We Keep Your Data

Nurtar retains your personal data only for as long as it is needed for the purposes described in this policy, or as required by Philippine law. Specific retention periods are as follows:

• Active account data: Retained for the duration of your active account plus 5 years after account closure, as required by PAGCOR and AMLA regulations
• Transaction records: Minimum 5 years from the date of each transaction, as mandated by the Anti-Money Laundering Act
• KYC documents: 5 years after account closure or last transaction, whichever is later
• Customer support communications: 2 years from the date of the last interaction
• Marketing preferences: Until you withdraw consent or request deletion
• Technical logs (IP, device): 90 days for standard logs; up to 1 year for security-flagged events

Once the applicable retention period expires, your data is securely deleted or anonymised in accordance with our data disposal procedures.

08 How We Protect Your Data

Nurtar takes data security seriously. We implement technical and organisational measures that are appropriate to the sensitivity of the data we handle. Here's what that looks like in practice:

• 256-bit SSL/TLS encryption on all data in transit between your browser and our servers
• AES-256 encryption for all sensitive data stored at rest, including financial details and ID documents
• Bcrypt hashing for all passwords — we never store passwords in a readable form
• Two-factor authentication (2FA) available for all player accounts
• Regular penetration testing by independent cybersecurity firms
• Role-based access controls (RBAC) — only authorised staff who need data to do their jobs can access it
• 24/7 security monitoring with automated alerts for suspicious activity

09 Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have several rights regarding your personal data. Nurtar is committed to honouring every one of these rights — hindi lang basta sulat, ginagawa namin talaga ito.

To exercise any of these rights, contact our Data Protection Officer at support@nurtar.best. We will respond within 15 business days. You also have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your rights have been violated.

10 Children & Minors

Nurtar is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 21. All registration forms include age verification steps, and we conduct KYC checks on all accounts.

If we discover that we have inadvertently collected personal data from a minor, we will immediately suspend the account, delete all associated data, and notify the parent or guardian if contact information is available. If you believe a minor has created an account on Nurtar, please contact us immediately at support@nurtar.best.

11 Changes to This Privacy Policy

Nurtar may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify registered players via email and display a notice on the platform at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page will always reflect when the most recent revision was made. We encourage you to review this policy periodically. Your continued use of nurtar.best after any changes constitutes your acceptance of the updated policy.

12 Contact Our Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or the way Nurtar handles your personal data, please contact our designated Data Protection Officer (DPO):

If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which oversees enforcement of the Data Privacy Act of 2012.