arenapl Privacy Policy

1.Introduction and Scope

This Privacy Policy ("Policy") describes how arenapl ("arenapl," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of users ("you," "Player," or "User") of the arenapl online gaming platform accessible at arenapl.net (the "Platform").

arenapl is committed to protecting the privacy and personal data of all players in the Philippines. This Policy is prepared in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC").

By registering an account with arenapl or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree to this Policy, please do not register or use the arenapl Platform.

This Policy applies to all personal data collected through the arenapl Platform, including data collected via the website, mobile applications, customer support interactions, and any other arenapl services.

2.Personal Data We Collect

arenapl collects the following categories of personal data from players:

2.1 Registration and Identity Data. When you create an arenapl account, we collect your full legal name, date of birth, gender, nationality, and a valid Philippine mobile number. We may also collect a government-issued identification number for KYC (Know Your Customer) verification purposes.

2.2 Contact Data. We collect your email address, mobile number, and residential address in the Philippines (city/municipality, province). This information is used for account communications, verification, and support.

2.3 Financial Data. We collect information necessary to process deposits and withdrawals, including your GCash or PayMaya mobile number, bank account details (account name, account number, bank name), and debit card information where applicable. arenapl does not store full card numbers; payment data is processed through secure, PCI-DSS compliant payment processors.

2.4 Gaming Activity Data. We collect records of your gaming activity on the arenapl Platform, including game history, wager amounts, win/loss records, session duration, and bonus usage. This data is used for account management, regulatory compliance, and responsible gaming monitoring.

2.5 Technical and Device Data. We automatically collect certain technical data when you access the arenapl Platform, including your IP address, device type, operating system, browser type and version, and unique device identifiers. This data is used for security, fraud prevention, and platform optimization.

2.6 Communications Data. We retain records of your communications with arenapl customer support, including live chat transcripts, email correspondence, and support ticket history.

2.7 Verification Documents. For KYC purposes, arenapl may collect copies of government-issued identification documents (such as a Philippine passport, driver's license, SSS ID, UMID, or PhilSys ID), proof of address, and proof of payment method ownership.

3.How We Collect Your Data

arenapl collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated collection: Technical and device data collected automatically through cookies, web beacons, log files, and similar tracking technologies when you access the Platform;
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from security partners; payment data from payment processors such as GCash, PayMaya, and banking partners;
• Regulatory sources: Information provided by PAGCOR or other regulatory authorities in connection with licensing, compliance, or investigation requirements.

4.How We Use Your Personal Data

arenapl uses your personal data for the following purposes:

• Account management: To create, maintain, and manage your arenapl account, including processing deposits, withdrawals, and bonus claims;
• Identity verification: To verify your identity and age (21+) in compliance with Philippine law and PAGCOR regulations;
• Gaming services: To provide access to arenapl's games, live casino, slots, bingo, and sports betting services;
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance;
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct on the Platform;
• Regulatory compliance: To comply with applicable Philippine laws, PAGCOR regulations, anti-money laundering (AML) requirements, and other legal obligations;
• Responsible gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits and self-exclusion;
• Communications: To send you account notifications, transaction confirmations, security alerts, and (where you have opted in) promotional communications;
• Platform improvement: To analyze usage patterns, improve the Platform's features and performance, and develop new services.

5.Legal Basis for Processing

arenapl processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Consent: Where you have given your explicit consent to the processing of your personal data for a specific purpose, such as receiving promotional communications;
• Contractual necessity: Where processing is necessary for the performance of the contract between you and arenapl (i.e., the Terms & Conditions governing your use of the Platform);
• Legal obligation: Where processing is required to comply with a legal obligation applicable to arenapl, including PAGCOR licensing requirements, AML regulations, and tax reporting obligations;
• Legitimate interests: Where processing is necessary for the legitimate interests of arenapl, such as fraud prevention, platform security, and responsible gaming monitoring, provided that such interests are not overridden by your rights and freedoms.

6.Sharing and Disclosure of Personal Data

arenapl does not sell, rent, or trade your personal data to third parties for their own marketing purposes. arenapl may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya / Maya, and banking partners, for the purpose of processing deposits and withdrawals;
• KYC and identity verification providers: Third-party service providers engaged to verify player identity and age in compliance with regulatory requirements;
• Game providers: Licensed game software providers whose games are available on the arenapl Platform, to the extent necessary to provide gaming services;
• IT and security service providers: Cloud hosting, cybersecurity, and fraud prevention service providers engaged to operate and secure the Platform;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where required by law or regulatory obligation;
• Legal and professional advisors: Lawyers, auditors, and other professional advisors engaged by arenapl, subject to professional confidentiality obligations.

All third-party service providers engaged by arenapl are required to process personal data only in accordance with arenapl's instructions and applicable data protection laws.

7.Cookies and Tracking Technologies

7.1 What Are Cookies. Cookies are small text files placed on your device when you visit the arenapl Platform. arenapl uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the Platform, remember your preferences, and analyze usage patterns.

7.2 Types of Cookies Used. arenapl uses the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function, including session management and security cookies. These cannot be disabled.
• Functional cookies: Used to remember your preferences and settings, such as language and display preferences.
• Analytics cookies: Used to collect anonymized data about how players use the Platform, to help arenapl improve its services.
• Security cookies: Used to detect and prevent fraudulent activity and unauthorized access.

7.3 Managing Cookies. You may control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the arenapl Platform.

8.Data Retention

arenapl retains your personal data for as long as your arenapl account is active and for a period thereafter as required by applicable law and regulatory obligations. Specifically:

• Account and identity data is retained for a minimum of five (5) years following account closure, as required by Philippine AML regulations;
• Financial transaction records are retained for a minimum of five (5) years following the date of the transaction;
• Gaming activity records are retained for a minimum of three (3) years;
• Customer support communications are retained for a minimum of two (2) years.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with arenapl's data retention and disposal procedures.

9.Data Security

arenapl implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the arenapl Platform;
• Encryption of sensitive data at rest, including financial data and identification documents;
• Access controls limiting personal data access to authorized arenapl personnel on a need-to-know basis;
• Regular security assessments and penetration testing of the Platform;
• Employee training on data privacy and security obligations;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

While arenapl takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. arenapl cannot guarantee absolute security of your data.

10.Your Rights Under the Data Privacy Act

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by arenapl:

• Right to be informed: The right to be informed of how your personal data is being collected and processed;
• Right of access: The right to request a copy of the personal data arenapl holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to arenapl's legal and regulatory retention obligations;
• Right to object: The right to object to the processing of your personal data on grounds relating to your particular situation;
• Right to data portability: The right to receive your personal data in a structured, commonly used format;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact arenapl's Data Protection Officer using the contact details in Section 13 of this Policy. arenapl will respond to all data subject requests within thirty (30) days of receipt.

11.Children's Privacy

The arenapl Platform is strictly intended for individuals who are at least twenty-one (21) years of age. arenapl does not knowingly collect personal data from individuals under the age of 21. If arenapl becomes aware that personal data has been collected from a person under 21, arenapl will take immediate steps to delete such data and close the associated account.

If you believe that arenapl may have inadvertently collected personal data from a person under 21, please contact arenapl's Data Protection Officer immediately.

12.Changes to This Privacy Policy

arenapl reserves the right to update or modify this Privacy Policy at any time. Any changes will be posted on the arenapl Platform with an updated effective date. Where changes are material, arenapl will endeavor to notify registered players via email or in-platform notification prior to the changes taking effect.

Your continued use of the arenapl Platform following the posting of any changes to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you must cease using the arenapl Platform and may request closure of your account in accordance with the Terms & Conditions.

13.Contact and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by arenapl, please contact our Data Protection Officer:

• Data Protection Officer: arenapl Data Privacy Office
• Email: [email protected]
• Live Chat: Available 24/7 via the arenapl Platform

arenapl aims to respond to all data privacy inquiries and requests within thirty (30) days of receipt. For urgent security concerns, please use the live chat channel for the fastest response.

If you are not satisfied with arenapl's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines:

• National Privacy Commission (NPC)
• Address: 3rd Floor, Core G, GSIS Headquarters, Financial Center, Roxas Boulevard, Pasay City, Metro Manila
• Website: privacy.gov.ph

⚠️ Responsible Gaming Reminder: Gambling is addictive. Know when to stop. arenapl is strictly for players aged 21 and above. If gaming is affecting your daily life, please visit the Responsible Gaming page for support tools and resources.