Privacy Policy

1. Who We Are

arenapls ("we," "us," or "our") operates the online gaming platform accessible at arenapls.one. We are a PAGCOR-compliant online gaming operator serving Filipino players across the Philippines, including Metro Manila, Cebu, Davao, Quezon City, and Makati.

For the purposes of the Philippine Data Privacy Act of 2012, arenapls acts as the Personal Information Controller in respect of the personal data you provide when registering for and using our Platform. We are responsible for ensuring that your personal data is processed lawfully, fairly, and transparently.

This Privacy Policy applies to all personal data collected through the arenapls website, mobile platform, customer support channels, and any other services we provide. By registering for an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

2. Data We Collect

arenapls collects the following categories of personal data from players and visitors:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (e.g., Philippine National ID, passport, driver's licence, SSS/GSIS number).
• Contact Data: Email address, mobile number, and residential address (including barangay, city/municipality, province, and postal code).
• Financial Data: Payment method details (e.g., GCash account number, PayMaya account, BPI/BDO/Metrobank account details), transaction history, deposit and withdrawal records, and account balance information.
• Account Data: Username, encrypted password, account preferences, bonus history, and gaming activity records.
• Technical Data: IP address, device type, browser type and version, operating system, time zone, and session data collected automatically when you access the Platform.
• Usage Data: Information about how you use the Platform, including pages visited, games played, wagers placed, session duration, and clickstream data.
• Communications Data: Records of your communications with our customer support team, including chat logs, email correspondence, and support ticket history.
• KYC Verification Data: Copies of government-issued identification documents and proof of address submitted during the Know Your Customer (KYC) verification process, as required by PAGCOR regulations and anti-money laundering laws.

3. How We Collect Your Data

arenapls collects personal data through the following means:

• Direct Interactions: Data you provide when registering for an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Technologies: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access and navigate the Platform.
• Third-Party Sources: Identity verification data from KYC service providers; fraud prevention data from anti-money laundering screening services; and payment data from our authorised payment processors (GCash, PayMaya, BPI, BDO, Metrobank).
• Regulatory Sources: Information received from PAGCOR or other regulatory authorities in connection with our licensing obligations, including self-exclusion register data.

4. How We Use Your Data

arenapls uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your arenapls player account, including processing registrations, verifying your identity, and managing your account preferences.
• Service Delivery: To provide you with access to our games, process your deposits and withdrawals, and deliver the gaming services you have requested.
• Regulatory Compliance: To comply with our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and other applicable Philippine laws, including conducting KYC verification and filing mandatory regulatory reports.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the Platform.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, enforce self-exclusion requests, and administer responsible gaming tools such as deposit limits and cooling-off periods.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided your consent to receive such communications. You may withdraw your consent at any time.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the functionality, security, and user experience of the arenapls Platform.

5. Legal Basis for Processing

arenapls processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and arenapls (i.e., the Terms and Conditions), including account management, service delivery, and payment processing.
• Legal Obligation: Processing is required to comply with our legal and regulatory obligations under PAGCOR regulations, the AMLA, and other applicable Philippine laws.
• Legitimate Interests: Processing is necessary for our legitimate interests in operating a secure, fair, and commercially viable gaming platform, including fraud prevention, security monitoring, and platform improvement, provided such interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Sharing Your Data

arenapls does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other authorised payment service providers, for the purpose of processing your deposits and withdrawals.
• KYC & Compliance Providers: Identity verification and anti-money laundering screening service providers engaged to assist us in meeting our regulatory obligations.
• Technology Service Providers: Cloud hosting, data storage, cybersecurity, and platform infrastructure providers who process data on our behalf under strict data processing agreements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law or regulatory mandate.
• Law Enforcement: Philippine law enforcement agencies, where disclosure is required by a valid court order, subpoena, or other lawful process.

7. Cookies & Tracking Technologies

arenapls uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session security, and analyse usage patterns. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including session management, authentication, and security. These cookies cannot be disabled without affecting Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings and game preferences, to provide a more personalised experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players use the Platform, enabling us to improve functionality and user experience.
• Marketing Cookies: Used, with your consent, to deliver relevant promotional content and measure the effectiveness of our marketing campaigns.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For more information about the specific cookies we use, please contact our Data Protection Officer.

8. Data Retention

arenapls retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

• Active Accounts: Personal data associated with active player accounts is retained for the duration of the account relationship.
• Closed Accounts: Following account closure, arenapls retains personal data for a minimum of five (5) years, as required by PAGCOR regulations and the AMLA.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years from the date of the last transaction, in accordance with AMLA requirements.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Marketing Data: Data processed on the basis of consent for marketing purposes is retained until you withdraw your consent or request erasure, subject to any overriding legal retention obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

9. Data Security

arenapls implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the arenapls Platform.
• Encryption of sensitive data at rest, including financial data and KYC documents.
• Multi-factor authentication options for player accounts.
• Regular security audits, vulnerability assessments, and penetration testing conducted by independent cybersecurity specialists.
• Strict access controls limiting employee access to personal data on a need-to-know basis.
• Comprehensive data breach response procedures, including notification to the National Privacy Commission and affected players within the timeframes prescribed by the Data Privacy Act of 2012.

10. Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by arenapls:

• Right to be Informed: The right to be informed of how your personal data is being collected and processed, as set out in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data we hold about you and information about how it is being processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the contact details provided in Section 14 of this Policy. We will respond to all verified requests within fifteen (15) days, as required by the Data Privacy Act of 2012.

11. Children's Privacy

The arenapls Platform is strictly intended for individuals who are at least twenty-one (21) years of age, as required by Philippine law and PAGCOR regulations. arenapls does not knowingly collect personal data from individuals under the age of 21.

If we become aware that we have inadvertently collected personal data from an individual under the age of 21, we will immediately suspend the associated account, delete the personal data, and report the matter to PAGCOR in accordance with our regulatory obligations.

If you believe that a minor has registered for an arenapls account, please contact our customer support team immediately at [email protected].

12. International Data Transfers

arenapls primarily processes and stores personal data within the Republic of the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines (for example, cloud infrastructure providers), arenapls ensures that such transfers are conducted in accordance with the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

International data transfers are subject to appropriate safeguards, including contractual data processing agreements that require recipient organisations to implement data protection standards equivalent to those required under Philippine law. arenapls will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without your explicit consent or without implementing appropriate safeguards.

13. Changes to This Privacy Policy

arenapls reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is indicated at the top of this page.

When material changes are made to this Privacy Policy, arenapls will notify registered players via email or through a prominent notice on the Platform. Your continued use of the Platform following the effective date of any revision constitutes your acknowledgement of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how arenapls protects your personal data.

14. Contact & Data Protection Officer

arenapls has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our DPO:

• Data Protection Officer: arenapls Privacy Office
• Email: [email protected]
• Subject Line: Data Privacy Request – [Your Full Name]
• Response Time: Within 15 days of receipt of a verified request