Privacy Policy of the
arenaplis Platform

arenaplis ("arenaplis," "we," "us," or "our") operates the online casino platform accessible at arenaplis.org, offering a range of gaming products and services to players in the Philippines, including slots, live casino games, bingo, e-sports betting, and other entertainment products.

For the purposes of this Privacy Policy, arenaplis acts as the data controller in respect of the personal data of registered players and visitors to the arenaplis platform. As data controller, arenaplis determines the purposes and means by which your personal data is processed.

This Privacy Policy applies to all personal data collected through the arenaplis website, mobile platform, customer support channels, and any other touchpoints through which you interact with arenaplis. By using the arenaplis platform, you acknowledge that you have read and understood this Privacy Policy.

arenaplis collects personal data from you in the following categories, depending on how you interact with our platform:

2.1 Registration and Identity Data

• Full legal name, date of birth, and gender;
• Government-issued identification details (e.g., Philippine passport, SSS ID, driver's license, PhilSys national ID);
• Residential address, city (e.g., Manila, Cebu, Davao, Quezon City, Makati), province, and postal code;
• Email address, mobile number, and chosen username.

2.2 Financial and Transaction Data

• Payment method details (e.g., GCash account number, PayMaya details, BPI, BDO, or Metrobank account information);
• Deposit and withdrawal history, transaction amounts in Philippine Peso (PHP / ₱);
• Source of funds declarations where required for KYC compliance.

2.3 Gaming Activity Data

• Game history, bet amounts, win/loss records, and session durations;
• Bonus and promotion usage history;
• Responsible gaming tool settings and self-exclusion records.

2.4 Technical and Device Data

• IP address, device type, operating system, and browser type;
• Geolocation data (country and region level) to verify eligibility;
• Cookie identifiers and session tokens;
• Platform access logs and timestamps.

2.5 Communications Data

• Records of your communications with arenaplis customer support;
• Survey responses, feedback submissions, and promotional opt-in preferences.

arenaplis uses the personal data we collect for the following purposes:

Purpose	Data Used
Account registration and management	Identity data, contact data
Identity verification (KYC)	Identity data, financial data
Processing deposits and withdrawals	Financial data, transaction data
Providing gaming services	Gaming activity data, technical data
Fraud prevention and security	Technical data, transaction data, identity data
Regulatory compliance and AML	Identity data, financial data, gaming data
Customer support	Communications data, account data
Responsible gaming monitoring	Gaming activity data, account data
Marketing communications (with consent)	Contact data, gaming preferences
Platform improvement and analytics	Technical data, gaming activity data

arenaplis will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

arenaplis processes your personal data on the following legal bases as recognized under the Philippine Data Privacy Act of 2012 and applicable regulations:

• Contractual necessity: Processing required to perform our contract with you, including account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, PAGCOR licensing requirements, and tax obligations.
• Legitimate interests: Processing necessary for arenaplis's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, and informed consent, such as for marketing communications. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

arenaplis does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary and for the purposes described in this Privacy Policy:

5.1 Service Providers

arenaplis engages trusted third-party service providers to assist in operating the platform, including payment processors (such as GCash, PayMaya, and banking partners), identity verification providers, cloud hosting services, and customer support platforms. These providers are contractually bound to process your data only on arenaplis's instructions and in accordance with applicable data protection laws.

5.2 Regulatory and Law Enforcement Authorities

arenaplis may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities where required by law, court order, or regulatory directive.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of arenaplis's business, your personal data may be transferred to the relevant successor entity, subject to equivalent data protection obligations.

arenaplis retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting requirements. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with Philippine AML and gaming regulatory requirements.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming activity data: Retained for a minimum of three (3) years from the date of each gaming session.
• Customer support communications: Retained for two (2) years from the date of the last interaction.
• Marketing consent records: Retained until consent is withdrawn and for one (1) year thereafter as evidence of consent.

Where retention beyond these periods is required by law or for the establishment, exercise, or defense of legal claims, arenaplis will retain the relevant data for the additional period required.

arenaplis uses cookies and similar tracking technologies on the platform to enhance your user experience, maintain session security, and gather analytics data. The following types of cookies are used:

Cookie Type	Purpose	Duration
Strictly Necessary	Session management, login authentication, security tokens	Session
Functional	Remembering your preferences, language settings, and game history	Up to 1 year
Analytics	Understanding how players use the platform to improve performance	Up to 2 years
Marketing	Delivering relevant promotions and offers (with consent only)	Up to 1 year

You can manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may affect the functionality of the arenaplis platform, including your ability to log in and play games.

arenaplis implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the arenaplis platform is encrypted using 256-bit SSL/TLS technology. Sensitive data at rest is encrypted using industry-standard algorithms.
• Access Controls: Access to personal data is restricted to authorized arenaplis personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Security Audits: arenaplis conducts regular internal and third-party security audits and penetration testing to identify and remediate vulnerabilities.
• Intrusion Detection: Real-time monitoring systems are in place to detect and respond to unauthorized access attempts and suspicious activity.
• Incident Response: arenaplis maintains a documented data breach response plan to ensure rapid containment and notification in the event of a security incident.

While arenaplis takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the security of your arenaplis login credentials and for notifying us immediately of any suspected unauthorized access to your account.

Under the Philippine Data Privacy Act of 2012 and its implementing rules, you have the following rights in relation to your personal data held by arenaplis:

• Right to be Informed: The right to be informed of how your personal data is being collected and processed, as set out in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data arenaplis holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to arenaplis's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

The arenaplis platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. arenaplis does not knowingly collect personal data from individuals under the age of 21.

If arenaplis becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the arenaplis platform, please contact our customer support team immediately so that we can investigate and take appropriate action.

arenaplis primarily processes and stores personal data within the Philippines. In certain circumstances, your personal data may be transferred to and processed in countries outside the Philippines, for example where arenaplis engages service providers located in other jurisdictions.

Where such international transfers occur, arenaplis ensures that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses that require the recipient to apply data protection standards equivalent to those required under Philippine law.

By using the arenaplis platform, you acknowledge and consent to the transfer of your personal data to other countries where necessary for the purposes described in this Privacy Policy, subject to the safeguards described above.

arenaplis reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. Where changes are material, arenaplis will provide reasonable advance notice to registered players via email or a prominent notice on the platform.

The effective date of the current version of this Privacy Policy is displayed at the top of this page. Your continued use of the arenaplis platform following the effective date of any updated Privacy Policy constitutes your acceptance of the changes.

We encourage you to review this Privacy Policy periodically to stay informed about how arenaplis protects your personal data. The most current version is always available on the arenaplis website.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way arenaplis handles your personal data, please contact our Data Protection Officer through the following channels:

• Customer Support: Available 24/7 through the arenaplis platform live chat and help center.
• Email: [email protected] (plain text — not a clickable link)

arenaplis is committed to resolving all privacy-related inquiries promptly and transparently. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.