arenapl Privacy Policy

arenapl ("we," "us," or "our") is committed to protecting the privacy and personal data of all players and visitors who use the arenapl platform (the "Platform"), accessible at arenapl.com. This Privacy Policy describes how arenapl collects, uses, stores, shares, and protects personal information in connection with the Platform and all related services.

This Privacy Policy applies to all users of the arenapl Platform, including registered players, prospective players who browse the Platform without registering, and any individual who contacts arenapl through our support channels. By accessing or using the arenapl Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

This Privacy Policy should be read together with the arenapl Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

For the purposes of applicable data protection law, arenapl acts as the data controller in respect of personal data collected through the Platform. As data controller, arenapl determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

If you have any questions about this Privacy Policy or wish to exercise any of your data rights, you may contact arenapl's data protection team using the contact details provided in Section 14 of this Policy.

arenapl collects the following categories of personal data from players and Platform users:

arenapl does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required by applicable law (for example, problem gambling self-exclusion records maintained for responsible gaming purposes).

arenapl collects personal data through the following means:

• Direct Interactions: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting support, or participating in promotions on the arenapl Platform.
• Automated Technologies: Technical and usage data collected automatically when you access the arenapl Platform, including through cookies, web beacons, server logs, and similar tracking technologies.
• Third-Party Sources: Identity and fraud verification data received from third-party KYC providers, payment processors (such as GCash and PayMaya), and fraud prevention services engaged by arenapl.
• Publicly Available Sources: In limited circumstances, arenapl may supplement player records with information from publicly available sources for the purpose of identity verification or fraud prevention.

arenapl uses the personal data we collect for the following purposes:

• Account Management: To register and maintain your arenapl player account, verify your identity and age, and manage your account preferences and settings.
• Service Delivery: To provide access to games, betting markets, promotions, and all other features of the arenapl Platform.
• Payment Processing: To process deposits and withdrawals via your chosen payment method, including GCash, PayMaya, BPI, BDO, and Metrobank, and to maintain accurate transaction records.
• Legal and Regulatory Compliance: To comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and responsible gaming obligations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on the arenapl Platform.
• Responsible Gaming: To monitor player behaviour for signs of problem gambling and to administer self-exclusion, deposit limits, and other responsible gaming tools in accordance with the arenapl Responsible Gaming Policy.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance through arenapl's support channels.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent or where arenapl has a legitimate interest in doing so. You may opt out of marketing communications at any time through your account settings.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the features, performance, and user experience of the arenapl Platform.

arenapl processes your personal data on the following legal bases under applicable Philippine data protection law:

• Contractual Necessity: Processing required to perform the contract between you and arenapl, including account registration, game access, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML, KYC, and responsible gaming obligations.
• Legitimate Interests: Processing carried out for arenapl's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent, including for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

arenapl does not sell or rent your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers engaged to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and age verification service providers engaged by arenapl to verify player identity and age in compliance with applicable regulations.
• Fraud Prevention Services: Third-party fraud detection and prevention service providers who assist arenapl in identifying and preventing fraudulent activity on the Platform.
• IT and Platform Service Providers: Cloud hosting, data storage, and technology service providers who support the operation and maintenance of the arenapl Platform.
• Regulatory and Law Enforcement Authorities: Philippine government agencies, regulatory bodies, and law enforcement authorities where arenapl is required by law to disclose personal data, or where disclosure is necessary to protect the rights, property, or safety of arenapl or its players.
• Professional Advisers: Legal, accounting, and compliance advisers engaged by arenapl in connection with the operation of the Platform, subject to professional confidentiality obligations.

arenapl retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

As a general rule, arenapl retains player account data for a minimum period of five (5) years following account closure, in accordance with applicable Philippine anti-money laundering regulations. Transaction records are retained for the period required by applicable financial regulations.

Where personal data is no longer required for any lawful purpose, arenapl will securely delete or anonymise such data in accordance with its internal data retention and disposal procedures.

arenapl implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the arenapl Platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Access controls limiting personal data access to authorised arenapl personnel on a strict need-to-know basis.
• Regular security assessments and penetration testing of the arenapl Platform infrastructure.
• Incident response procedures for the detection, reporting, and management of personal data breaches.

While arenapl takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, arenapl will notify you and the relevant Philippine regulatory authority as required by applicable law.

The arenapl Platform uses cookies and similar tracking technologies to enhance your browsing experience, analyse Platform usage, and support security functions. The following types of cookies are used:

You can control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies may affect the functionality of the arenapl Platform. Disabling other cookie types will not prevent you from using the Platform but may limit certain personalisation features.

Subject to applicable Philippine data protection law, arenapl players have the following rights in respect of their personal data:

• Right of Access: You have the right to request a copy of the personal data arenapl holds about you, together with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data arenapl holds about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to arenapl's legal retention obligations.
• Right to Restrict Processing: You have the right to request that arenapl restricts the processing of your personal data in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format where processing is based on consent or contractual necessity.
• Right to Object: You have the right to object to arenapl's processing of your personal data where processing is based on legitimate interests, including for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact arenapl's support team using the details in Section 14. arenapl will respond to all valid data rights requests within the timeframe required by applicable Philippine law. arenapl may need to verify your identity before processing a data rights request.

The arenapl Platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine gaming regulations. arenapl does not knowingly collect or process personal data from individuals under the age of 21.

If arenapl becomes aware that personal data has been collected from an individual under the age of 21, arenapl will take immediate steps to delete such data and close the associated account. If you believe that arenapl may have inadvertently collected data from a minor, please contact our support team immediately.

arenapl reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. Where changes are material, arenapl will provide reasonable notice to registered players via email or a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is indicated at the top of this Privacy Policy. Your continued use of the arenapl Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or arenapl's data practices, please contact our dedicated data protection team. We are available 24 hours a day, 7 days a week, including Philippine public holidays.