arenaph Privacy Policy – How We Handle Your Data

1. Who We Are

arenaph ("arenaph", "we", "us", "our") operates the online casino and sports betting platform accessible at arenaph.one. arenaph holds a valid license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and conducts its operations in compliance with Philippine law, including the Data Privacy Act of 2012 (Republic Act No. 10173, hereinafter "DPA") and its Implementing Rules and Regulations.

As the personal information controller under the DPA, arenaph is responsible for determining the purposes and means of processing the personal data of its registered players and website visitors. This Privacy Policy applies to all personal data collected by arenaph through the Platform, including via the arenaph website, mobile-optimized interface, customer support channels, and any promotional communications.

2. Personal Data We Collect

arenaph collects the following categories of personal data, depending on how you interact with the Platform:

Registration & Identity Data:

• Full legal name as it appears on your government-issued ID;
• Date of birth (for mandatory age verification — arenaph is 21+ only);
• Gender (optional, for personalization);
• Nationality and country of residence;
• Email address and Philippine mobile number (09xx format).

KYC Verification Data:

• Copies of government-issued identification documents (PhilSys National ID, Passport, UMID, Driver's License, or SSS/GSIS ID);
• Proof of address (utility bill, bank statement, or barangay certificate) where required;
• Selfie or liveness verification image for facial matching.

Financial Data:

• GCash or Maya account number linked to your arenaph wallet;
• Bank account details (BPI, BDO, Metrobank, UnionBank) for bank transfer transactions;
• Cryptocurrency wallet addresses for USDT TRC20 transactions;
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment methods used.

Technical & Usage Data:

• IP address and approximate geolocation at the time of login;
• Device type, operating system, and browser version;
• Session duration, pages visited, and navigation behavior on the Platform;
• Game play history, wagering activity, wins and losses.

Communications Data:

• Records of live chat conversations with arenaph customer support;
• Email correspondence and support ticket submissions;
• Responses to surveys or promotional opt-in communications.

3. How We Collect Your Data

arenaph collects personal data through the following means:

• Direct submission: information you provide when registering your account, completing KYC, making deposits, requesting withdrawals, or contacting support;
• Automated collection: technical data gathered automatically via cookies, server logs, and analytics tools when you browse or use the arenaph Platform;
• Third-party sources: identity verification results from KYC service providers; payment status data from GCash, Maya, and banking partners; fraud signals from anti-fraud and AML screening services.

4. Legal Basis for Processing

arenaph processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: processing required to fulfil the player account agreement — including account registration, payment processing, game delivery, and customer support;
• Legal obligation: processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160), AMLA amendments (RA 10365, RA 11521), and other applicable Philippine regulatory requirements;
• Legitimate interests: fraud prevention, platform security, responsible gaming monitoring, and analytics to improve the arenaph service;
• Consent: optional processing such as marketing communications and personalization features, where you have provided explicit opt-in consent that you may withdraw at any time.

5. How We Use Your Personal Data

arenaph uses the personal data collected for the following purposes:

• Creating, managing, and verifying your arenaph player account;
• Processing deposits, withdrawals, and bonus transactions;
• Conducting mandatory KYC and AML identity verification as required by PAGCOR and Philippine law;
• Detecting, investigating, and preventing fraud, bonus abuse, collusion, and other prohibited conduct;
• Enforcing the 21+ age restriction and responsible gaming obligations;
• Providing customer support and resolving disputes or complaints;
• Complying with regulatory reporting requirements, including suspicious transaction reports (STRs) to the Anti-Money Laundering Council (AMLC);
• Sending transactional communications (account confirmation, withdrawal receipts, security alerts);
• Sending promotional communications where you have opted in — you may unsubscribe at any time;
• Improving Platform functionality and user experience through aggregated, anonymized analytics.

6. Data Sharing & Disclosure

arenaph does not sell your personal data. We share personal data only in the following circumstances:

• KYC and identity verification providers: third-party services that process ID documents and liveness checks on arenaph's behalf under data processing agreements;
• Payment processors: GCash, Maya, BPI, BDO, Metrobank, UnionBank, and other payment service providers, to the extent necessary to process your transactions;
• Regulatory authorities: PAGCOR, AMLC, and other Philippine government agencies when required by law, court order, or regulatory directive;
• Game software providers: limited technical data shared with licensed game content providers (e.g., Pragmatic Play, PG Soft, Jili) solely for the purpose of delivering the games you play;
• Fraud prevention and AML screening services: to detect prohibited activities and comply with AMLA obligations;
• Corporate transactions: in the event of a merger, acquisition, or asset sale, subject to the same privacy protections.

All third-party service providers are contractually bound to process arenaph player data solely for the specified purpose and in compliance with applicable data protection law.

7. Cookies & Tracking Technologies

arenaph uses cookies and similar tracking technologies to operate the Platform effectively. The categories of cookies used include:

• Strictly necessary cookies: session management, security tokens, and login authentication — these cannot be disabled without impairing basic Platform functionality;
• Functional cookies: remembering your language preference, display settings, and responsible gaming limit configurations;
• Analytics cookies: aggregated, anonymized usage data to help arenaph understand how the Platform is used and identify areas for improvement.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core arenaph Platform.

8. Data Retention

arenaph retains personal data for the period necessary to fulfil the purposes described in this Privacy Policy and to comply with applicable legal and regulatory retention obligations:

• Account and KYC records: retained for a minimum of five (5) years following account closure, as required by PAGCOR and AMLA;
• Financial transaction records: retained for five (5) years from the date of each transaction;
• Support communications: retained for three (3) years from the date of the interaction;
• Technical and usage logs: retained for up to twelve (12) months for security and fraud monitoring purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with arenaph's data deletion procedures.

9. Data Security

arenaph implements technical and organizational security measures appropriate to the sensitivity of the personal data we process, including:

• TLS/SSL encryption for all data transmitted between your device and the arenaph Platform;
• AES-256 encryption for sensitive data at rest;
• One-way cryptographic hashing of account passwords (passwords are never stored in plain text);
• Two-factor authentication (2FA) available to all registered players and mandatory for staff accounts;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular penetration testing and security audits of the arenaph Platform infrastructure.

While arenaph employs industry-standard security measures, no electronic system is entirely immune to security incidents. In the event of a data breach that is likely to adversely affect your rights and freedoms, arenaph will notify affected data subjects and the National Privacy Commission (NPC) in accordance with the DPA breach notification requirements.

10. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data processed by arenaph:

• Right to be informed: the right to know that your personal data is being collected and processed;
• Right of access: the right to obtain a copy of your personal data held by arenaph;
• Right to rectification: the right to correct inaccurate or incomplete personal data;
• Right to erasure: the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations;
• Right to object: the right to object to processing based on legitimate interests, including direct marketing;
• Right to data portability: the right to receive your personal data in a structured, commonly used format;
• Right to file a complaint: the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, contact arenaph's Data Protection Officer at: [email protected]. arenaph will respond to data subject requests within thirty (30) calendar days.

11. Children & Minors

The arenaph Platform is strictly prohibited for individuals under the age of twenty-one (21) years, in compliance with PAGCOR regulations. arenaph does not knowingly collect personal data from individuals under 21. If arenaph becomes aware that personal data has been collected from an underage individual, the account will be immediately closed, all funds will be handled in accordance with PAGCOR guidelines, and the personal data will be deleted from arenaph's systems.

Parents and guardians who believe that their child may have registered an account on arenaph are encouraged to contact arenaph's support team immediately at: [email protected]

12. Third-Party Services & Links

The arenaph Platform may reference or integrate with third-party services, including game software providers, payment processors, and analytics tools. arenaph is not responsible for the privacy practices of third-party services. Where arenaph shares personal data with third parties as described in Section 6 of this Policy, such sharing is governed by data processing agreements that bind those parties to applicable data protection standards.

13. Updates to This Privacy Policy

arenaph may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or Platform functionality. Material changes will be communicated to registered players via email or a prominent notice on the arenaph Platform prior to the effective date of the updated Policy. We encourage you to review this Privacy Policy periodically. Your continued use of the arenaph Platform following notification of updates constitutes acceptance of the revised Policy.

14. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or arenaph's data processing practices, please contact arenaph's Data Protection Officer:

Email: [email protected]
Response time: within 30 calendar days of receipt of a valid data subject request.

Complaints that cannot be resolved directly with arenaph may be escalated to the National Privacy Commission (NPC) of the Philippines through official NPC channels.