Privacy Policy

Welcome to the arenaplusph Privacy Policy. This document explains how arenaplusph ("we," "us," or "our") — the operator of the arenaplusph online gaming platform accessible at arenaplusph.vip — collects, processes, stores, and protects the personal data of our users ("you" or "your") in connection with your use of our website, mobile platform, games, and related services (collectively, the "Platform").

We take your privacy seriously. As a platform serving Filipino players across Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond, we understand that trust is the foundation of everything we do. This Privacy Policy is designed to be transparent, readable, and genuinely informative — not just a legal formality.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. If you have any questions about how we handle your data, our Data Protection Officer is available at the contact details provided in Section 14 of this policy.

arenaplusph collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect are described below.

2.1 Identity & Contact Information

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Philippine mobile number
• Email address
• Residential address (province, city/municipality, barangay)
• Nationality and country of residence

2.2 Identity Verification (KYC) Documents

• Copies of government-issued photo ID (e.g., Philippine passport, SSS ID, UMID, PhilSys National ID, driver's license, PRC ID, or voter's ID)
• Proof of address documents (e.g., utility bill, bank statement, barangay certificate)
• Selfie or liveness verification image for identity matching
• Proof of payment method ownership where required

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method references
• GCash account reference numbers, PayMaya account references, BPI/BDO/Metrobank account details (masked), and card details (masked — we do not store full card numbers)
• Account balance history and bonus transaction records
• Wagering history, game session records, and betting activity logs

2.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, browser type and version
• Session timestamps, login history, and session duration
• Pages visited, features used, and clickstream data within the Platform
• Error logs and crash reports

2.5 Communications Data

• Records of your communications with our customer support team via live chat, email, or any other channel
• Feedback, survey responses, and complaint records
• Marketing preferences and communication opt-in/opt-out records

arenaplusph collects your personal data through the following means:

3.1 Directly From You

The majority of your personal data is collected directly from you when you:

• Register an account on the arenaplusph Platform
• Complete identity verification (KYC) procedures
• Make deposits or request withdrawals
• Contact our customer support team
• Participate in promotions, surveys, or loyalty programs
• Update your account profile or preferences

3.2 Automatically Through Platform Use

When you access and use the arenaplusph Platform, we automatically collect certain technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device information, session data, and browsing behavior within the Platform. Please refer to Section 7 (Cookies & Tracking) for full details.

3.3 From Third Parties

In certain circumstances, arenaplusph may receive personal data about you from trusted third parties, including:

• Payment processors (e.g., GCash, PayMaya, BPI, BDO, Metrobank) — transaction confirmation and fraud screening data
• Identity verification service providers — results of automated KYC checks and document authentication
• Fraud prevention and anti-money laundering screening services — watchlist and sanctions screening results
• PAGCOR and other regulatory bodies — where required by law or regulation

arenaplusph uses your personal data for the following purposes:

Under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, arenaplusph processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — i.e., to provide the arenaplusph gaming services you have registered for, including account management, payment processing, and game delivery.
• Legal Obligation: Processing is required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, anti-money laundering obligations under RA 9160, and tax reporting requirements.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services — provided these interests are not overridden by your privacy rights.
• Consent: For marketing communications and certain non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

arenaplusph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following limited circumstances:

6.1 Service Providers

We share personal data with carefully selected third-party service providers who assist us in operating the Platform. These include payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, cloud hosting providers, customer support software providers, and fraud detection services. All service providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection law.

6.2 Regulatory & Law Enforcement Authorities

We are required by Philippine law to share certain personal data and transaction records with regulatory and law enforcement authorities, including:

• PAGCOR — as our licensing and regulatory authority
• Anti-Money Laundering Council (AMLC) — for suspicious transaction reporting under RA 9160
• National Privacy Commission (NPC) — in the event of a data breach or upon regulatory request
• Philippine National Police (PNP) or National Bureau of Investigation (NBI) — pursuant to a valid court order or lawful request

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of arenaplusph's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and ensure that your data continues to be protected in accordance with this Privacy Policy.

6.4 With Your Consent

We may share your personal data with other third parties where you have given your explicit consent to such sharing.

The arenaplusph Platform uses cookies and similar tracking technologies to enhance your experience, maintain your session, and analyze Platform usage. A cookie is a small text file placed on your device when you visit our website.

7.1 Types of Cookies We Use

7.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling strictly necessary cookies may affect the functionality of the arenaplusph Platform and prevent you from accessing certain features, including your account.

For optional cookies (functional, analytics, and marketing), you may update your preferences at any time through the cookie settings panel accessible from the footer of the arenaplusph website.

arenaplusph retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following retention periods apply:

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymized in accordance with our data disposal procedures. Where data is anonymized, it may be retained indefinitely for statistical and analytical purposes as it can no longer be linked to you personally.

arenaplusph implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security framework includes:

• SSL/TLS Encryption: All data transmitted between your device and the arenaplusph Platform is encrypted using industry-standard SSL/TLS protocols.
• Data Encryption at Rest: Sensitive personal data stored on our servers — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is strictly limited to authorized arenaplusph personnel who require it to perform their job functions. All staff with access to personal data are subject to confidentiality obligations and regular data protection training.
• Two-Factor Authentication: arenaplusph supports two-factor authentication (2FA) for player accounts to provide an additional layer of login security.
• Regular Security Audits: Our Platform undergoes regular penetration testing and security audits by independent third-party security specialists.
• Incident Response: We maintain a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected users without undue delay.

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by arenaplusph. You may exercise any of these rights by contacting our Data Protection Officer using the details in Section 14.

We will respond to all valid data subject requests within 30 calendar days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it. We may need to verify your identity before processing your request.

The arenaplusph Platform is strictly intended for adults aged 21 years and older, in accordance with Philippine law and PAGCOR regulations governing online gaming and casino-style gambling. We do not knowingly collect personal data from individuals under the age of 21.

If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data in question, and take appropriate steps to prevent recurrence. If you believe that a minor has registered on the arenaplusph Platform, please notify us immediately at [email protected].

arenaplusph uses age verification technology and manual review processes as part of our KYC procedures to prevent underage access. We take our responsibility to protect minors seriously and continuously invest in improving our age verification capabilities.

In the course of providing the arenaplusph Platform, your personal data may be transferred to and processed in countries other than the Philippines — for example, where our cloud hosting providers or technology partners operate data centers outside the Philippines.

Whenever arenaplusph transfers personal data outside the Philippines, we ensure that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012 and the standards set by the National Privacy Commission. These safeguards may include:

• Contractual clauses requiring the recipient to protect your data to Philippine data protection standards
• Transfers to countries that have been assessed as providing an adequate level of data protection
• Binding corporate rules where transfers occur within a corporate group

By using the arenaplusph Platform, you acknowledge and consent to the transfer of your personal data to other countries as described in this section, subject to the safeguards described above.

arenaplusph reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, PAGCOR regulations, or the features and services offered on the Platform. We are committed to keeping you informed of any material changes.

When we make significant changes to this Privacy Policy, we will:

• Post the updated Privacy Policy on this page with a revised "Last Updated" date
• Display a prominent notice on the arenaplusph Platform informing you of the update
• Send a notification to your registered email address where the changes are material and affect your rights

Your continued use of the arenaplusph Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you must discontinue use of the Platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data. The current version of this Privacy Policy is always accessible at arenaplusph.vip/privacy-policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way arenaplusph handles your personal data, you may contact our dedicated Data Protection Officer (DPO) using the details below. We are committed to responding to all privacy-related inquiries promptly and thoroughly.

When submitting a privacy request or complaint, please include your full name, registered email address, and a clear description of your request or concern. This will help us verify your identity and process your request as efficiently as possible.

If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.