arena.ph Privacy Policy

01 Introduction

This Privacy Policy applies to all personal data collected, processed, and stored by arena.ph in connection with your use of the arenaph.vip website and all associated services, games, promotions, and features. It applies to all registered players, visitors to the website, and any other individuals whose personal data we process in connection with the operation of arena.ph.

arena.ph takes its obligations as a personal information controller under Philippine law seriously. We have implemented comprehensive data governance practices to ensure that your personal data is handled lawfully, fairly, and transparently at all times. This policy is designed to give you a clear and complete picture of how we handle your information — not just to satisfy a legal requirement, but because we believe you deserve to know.

This Privacy Policy should be read alongside our Terms and Conditions, which govern your use of the arena.ph platform. Capitalized terms not defined in this policy have the meanings given to them in the Terms and Conditions.

02 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, arena.ph is the personal information controller in respect of all personal data collected through the arenaph.vip platform. As the personal information controller, arena.ph determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data privacy law.

arena.ph has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data privacy regulations. If you have any questions or concerns about how arena.ph handles your personal data, you may contact our DPO through the contact details provided in Section 14 of this policy.

03 Personal Data We Collect

arena.ph collects the following categories of personal data in connection with the operation of the platform:

arena.ph does not collect sensitive personal information (as defined under the Data Privacy Act) beyond what is strictly necessary for identity verification and regulatory compliance purposes. We do not collect biometric data, health information, or political or religious affiliations.

04 How We Collect Your Data

arena.ph collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing identity verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access and use the arenaph.vip platform, including through cookies, web beacons, and server logs. See Section 8 for more details on cookies.
• Third-Party Sources: Identity verification data from KYC service providers; transaction data from payment processors (GCash, Maya, banks); fraud and risk data from security service providers; and publicly available information where relevant to AML compliance.
• Regulatory Sources: Information received from PAGCOR, the AMLC, or other Philippine regulatory authorities in connection with our compliance obligations.

05 How We Use Your Personal Data

arena.ph uses your personal data for the following purposes:

• Account Management: Creating and maintaining your arena.ph player account, verifying your identity and age (21+ requirement), and managing your account settings and preferences.
• Service Delivery: Processing deposits and withdrawals, crediting bonuses, providing access to games, and delivering customer support.
• Legal & Regulatory Compliance: Fulfilling our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), the Data Privacy Act (RA 10173), and other applicable Philippine laws and regulations.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, cheating, and other prohibited conduct on the platform.
• Responsible Gaming: Monitoring gaming activity to identify signs of problem gambling, enforcing deposit limits and self-exclusion requests, and complying with PAGCOR's responsible gaming requirements.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates — but only where you have consented to receive such communications. You may opt out at any time.
• Platform Improvement: Analyzing usage patterns and technical data to improve the performance, security, and user experience of the arena.ph platform.
• Dispute Resolution: Investigating and resolving complaints, disputes, and legal claims involving your account or transactions.

arena.ph will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

06 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, arena.ph processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your arena.ph account, process transactions, and deliver gaming services as described in our Terms and Conditions.
• Legal Obligation: Processing required to comply with our legal and regulatory obligations under Philippine law, including PAGCOR licensing conditions, AML/CTF requirements, and tax reporting obligations.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, and improving our services — provided these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

07 Data Sharing & Disclosure

arena.ph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, Maya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) — to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC service providers engaged to verify your identity and age in compliance with our regulatory obligations.
• Game Software Providers: Licensed game developers and live dealer studios whose games are available on the arena.ph platform — limited to data necessary to deliver the game service.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and other Philippine government agencies — where required by law or regulatory obligation.
• Law Enforcement: Philippine law enforcement agencies, including the NBI and PNP, where required by a valid legal order or where disclosure is necessary to prevent or investigate criminal activity.
• Professional Advisors: Legal counsel, auditors, and other professional advisors engaged by arena.ph — subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of arena.ph's assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

All third parties with whom arena.ph shares personal data are required to handle that data in accordance with applicable Philippine data privacy law and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

08 Cookies & Tracking Technologies

arena.ph uses cookies and similar tracking technologies on the arenaph.vip website to enhance your experience, maintain your session, and analyze platform usage. A cookie is a small text file placed on your device when you visit a website.

We use the following types of cookies:

• Strictly Necessary Cookies: Essential for the operation of the arena.ph platform, including maintaining your login session and enabling core platform functionality. These cookies cannot be disabled without affecting your ability to use the platform.
• Performance & Analytics Cookies: Used to collect anonymized information about how visitors use arenaph.vip, helping us identify areas for improvement. This data does not identify individual users.
• Functionality Cookies: Used to remember your preferences and settings, such as your preferred language and display options, to provide a more personalized experience.
• Security Cookies: Used to detect and prevent fraudulent activity, protect against unauthorized access, and maintain the integrity of the arena.ph platform.

You can control cookie settings through your browser preferences. Note that disabling certain cookies may affect the functionality of the arena.ph platform. For strictly necessary and security cookies, disabling them may prevent you from accessing your account or using certain features.

09 Data Retention

arena.ph retains your personal data for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve disputes and enforce our agreements. The following retention periods apply:

• Account Data: Retained for the duration of your active account relationship with arena.ph, plus a minimum of five (5) years following account closure, in compliance with PAGCOR licensing requirements and Philippine AML regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and BIR regulations.
• KYC & Identity Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the transaction for which verification was conducted.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, or longer if the matter is subject to ongoing dispute or legal proceedings.
• Marketing Consent Records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, as evidence of the consent given.
• Technical & Usage Logs: Retained for up to twelve (12) months for performance and security purposes, after which they are anonymized or deleted.

When personal data is no longer required for any of the above purposes, arena.ph will securely delete or anonymize it in accordance with our data disposal procedures.

10 Data Security

arena.ph implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

• Encryption: All data transmitted between your device and arenaph.vip is encrypted using SSL/TLS protocols. Sensitive data at rest, including financial information and identity documents, is encrypted using AES-256 or equivalent standards.
• Access Controls: Access to personal data is restricted to arena.ph personnel and authorized third parties who have a legitimate need to access it. All access is logged and subject to regular review.
• Two-Factor Authentication: arena.ph supports two-factor authentication (2FA) for player accounts to provide an additional layer of security against unauthorized access.
• Regular Security Audits: arena.ph conducts regular security assessments, penetration testing, and vulnerability scans to identify and address potential security weaknesses.
• Incident Response: arena.ph maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission and affected individuals in accordance with the Data Privacy Act's breach notification requirements.
• Staff Training: All arena.ph personnel with access to personal data receive regular training on data privacy obligations and security best practices.

11 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by arena.ph:

• Right to Be Informed: The right to be informed about how your personal data is collected, used, and processed — which this Privacy Policy is designed to fulfill.
• Right of Access: The right to request a copy of the personal data arena.ph holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you. You may update most of your account information directly through your arena.ph account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe that arena.ph has violated your data privacy rights.

To exercise any of these rights, please contact our Data Protection Officer through the contact details in Section 14. We will respond to all data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. We may need to verify your identity before processing your request.

12 Children's Privacy

arena.ph is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. The arena.ph platform employs age verification measures during registration to prevent underage access.

If arena.ph becomes aware that personal data has been collected from an individual under 21 years of age, we will immediately take steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has registered on arena.ph, please contact our support team immediately so we can investigate and take appropriate action.

arena.ph takes its obligations regarding the protection of minors seriously and cooperates fully with PAGCOR and other Philippine authorities on matters relating to underage gambling prevention.

13 Changes to This Privacy Policy

arena.ph reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. We will provide notice of material changes through one or more of the following methods: a prominent notice on arenaph.vip, an email notification to your registered email address, or an in-platform notification upon your next login.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the arena.ph platform following the effective date of any revision constitutes your acknowledgment of the updated policy.

If any change to this Privacy Policy requires your consent under applicable law, we will seek that consent before the change takes effect in respect of your personal data.

14 Contact Our Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the way arena.ph handles your personal data, please contact our Data Protection Officer through the following channels:

• Live Chat: Available 24/7 through your arena.ph account dashboard — the fastest way to reach our support and DPO team.
• Email: privacy arenaph.vip — for formal data subject requests and privacy-related inquiries. We aim to respond within fifteen (15) business days.

For complaints that cannot be resolved directly with arena.ph, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information about the NPC's complaint process is available through official Philippine government channels.