Privacy Policy

01 Overview & Scope

1.1 This Policy applies to all personal data collected by arena.ph in connection with the operation of the platform, including data collected through the website, mobile application, customer support channels, and any other means by which you interact with arena.ph.

1.2 This Policy does not apply to third -party websites, services, or applications that may be linked to or from the arena.ph platform. arena.ph is not responsible for the privacy practices of any third-party service providers beyond what is described in this Policy.

1.3 arena.ph is the data controller in respect of personal data collected through the platform. All data processing activities are conducted in accordance with the principles of transparency, legitimate purpose, and proportionality as required under Philippine law.

02 Data We Collect

2.1 arena.ph collects the following categories of personal data:

2.2 arena.ph does not intentionally collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. Where sensitive information is collected (such as a copy of a government ID), it is handled with heightened security measures.

03 How We Collect Data

3.1 Directly from you. The majority of personal data arena.ph holds is provided directly by you when you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.

3.2 Automatically. When you access the arena.ph website or mobile application, certain technical and usage data is collected automatically through cookies, server logs, and similar technologies. This includes your IP address, device identifiers, and browsing behavior on the platform.

3.3 From third parties. arena.ph may receive data about you from third-party identity verification providers, payment processors (such as GCash and PayMaya), and fraud prevention services. This data is used solely to verify your identity, process transactions, and protect the integrity of the platform.

3.4 From public sources. In limited circumstances, arena.ph may verify information against publicly available sources or government databases as part of its regulatory compliance obligations under Philippine anti-money laundering laws.

04 Purpose & Legal Basis

4.1 arena.ph processes your personal data for the following purposes and on the following legal bases:

• Account registration and management — necessary for the performance of the contract between you and arena.ph;
• Identity and age verification (KYC) — necessary for compliance with Philippine gaming and anti-money laundering regulations, and to enforce the 21+ age requirement;
• Processing deposits and withdrawals — necessary for the performance of the contract and to facilitate payment transactions via GCash, PayMaya, BPI, BDO, and Metrobank;
• Providing gaming services — necessary for the performance of the contract, including delivering game content, recording bet outcomes, and crediting winnings;
• Customer support — necessary for the performance of the contract and our legitimate interest in resolving player queries and complaints;
• Fraud prevention and security — necessary for our legitimate interest in protecting the platform and its players from fraudulent activity, money laundering, and unauthorized access;
• Regulatory compliance — necessary to comply with applicable Philippine laws, including reporting obligations to relevant gaming and financial regulatory authorities;
• Responsible gaming — necessary for our legitimate interest in promoting safe gaming and complying with responsible gaming obligations, including enforcing self-exclusion requests;
• Marketing communications — based on your consent, where you have opted in to receive promotional emails or notifications from arena.ph. You may withdraw this consent at any time.

4.2 arena.ph will not process your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

05 Data Sharing & Disclosure

5.1 arena.ph does not sell, rent, or trade your personal data to any third party. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors — GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing deposits and withdrawals;
• Identity verification providers — third-party KYC and age verification services used to confirm your identity and age in compliance with regulatory requirements;
• Fraud prevention and security services — providers of fraud detection, risk assessment, and cybersecurity services that help protect the platform and its players;
• IT and hosting providers — cloud infrastructure and technology service providers that host and maintain the arena.ph platform;
• Regulatory and law enforcement authorities — Philippine government agencies, including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and law enforcement bodies, where disclosure is required by law or court order;
• Professional advisers — lawyers, auditors, and other professional advisers where necessary for legal compliance or dispute resolution.

5.2 All third-party service providers who process personal data on behalf of arena.ph are required to handle such data in accordance with applicable Philippine data protection laws and are bound by appropriate data processing agreements.

5.3 In the event of a merger, acquisition, or sale of all or part of arena.ph's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

06 Data Retention

6.1 arena.ph retains your personal data for as long as your account is active and for a period thereafter as required by applicable Philippine law and regulatory obligations.

6.2 Active accounts. Personal data associated with an active arena.ph account is retained for the duration of the account's existence and for a minimum of five (5) years following account closure, in compliance with Philippine anti-money laundering regulations.

6.3 Transaction records. Records of deposits, withdrawals, bets, and game outcomes are retained for a minimum of five (5) years from the date of the transaction, as required by applicable gaming and financial regulations.

6.4 KYC documents. Identity verification documents are retained for the period required by Philippine law, which is generally five (5) years from the date of verification or account closure, whichever is later.

6.5 Marketing data. Where you have consented to receive marketing communications, your contact details for marketing purposes are retained until you withdraw your consent or request deletion, subject to any overriding legal retention obligations.

6.6 Upon expiry of the applicable retention period, arena.ph will securely delete or anonymize your personal data in accordance with its data disposal procedures.

07 Data Security

7.1 arena.ph implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the arena.ph platform;
• Encryption of sensitive data at rest on arena.ph servers;
• Access controls limiting personal data access to authorized personnel only, on a need-to-know basis;
• Regular security assessments and vulnerability testing of the platform;
• Two-factor authentication options for player accounts;
• Secure data disposal procedures for data that has reached the end of its retention period.

7.2 While arena.ph takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. arena.ph cannot guarantee the absolute security of data transmitted over the internet and is not liable for breaches that result from circumstances beyond its reasonable control.

7.3 Data Breach Notification. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, arena.ph will notify the National Privacy Commission and affected players in accordance with the requirements of the Philippine Data Privacy Act and its implementing rules.

08 Cookies & Tracking

8.1 arena.ph uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that help us recognize you, maintain your session, and understand how you use the platform.

8.2 arena.ph uses the following types of cookies:

• Strictly necessary cookies — required for the platform to function, including session management and security. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings and game display options to improve your experience.
• Analytics cookies — collect anonymized data about how players use the platform, helping arena.ph identify areas for improvement. No personally identifiable information is shared with analytics providers.

8.3 arena.ph does not use third-party advertising or behavioral tracking cookies. We do not participate in cross-site tracking or retargeting advertising networks.

8.4 You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the arena.ph platform.

09 Your Rights

9.1 Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by arena.ph:

• Right to be informed — you have the right to be informed about how your personal data is collected and processed, as set out in this Policy;
• Right of access — you have the right to request a copy of the personal data arena.ph holds about you;
• Right to rectification — you have the right to request correction of inaccurate or incomplete personal data;
• Right to erasure — you have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations;
• Right to object — you have the right to object to the processing of your personal data for direct marketing purposes at any time;
• Right to data portability — you have the right to receive your personal data in a structured, commonly used format where technically feasible;
• Right to lodge a complaint — you have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data protection rights have been violated.

9.2 To exercise any of the above rights, please contact the arena.ph Data Privacy Officer using the contact details provided in Section 13 of this Policy. arena.ph will respond to all valid data subject requests within thirty (30) days of receipt, in accordance with applicable law.

9.3 arena.ph may need to verify your identity before processing a data subject request to ensure that personal data is not disclosed to unauthorized persons.

10 Protection of Minors

10.1 arena.ph strictly prohibits the use of the platform by persons under 21 years of age. arena.ph does not knowingly collect personal data from individuals under 21.

10.2 If arena.ph becomes aware that personal data has been collected from a person under 21 years of age, it will immediately suspend the associated account, delete the personal data collected, and return any deposits made to the original payment method.

10.3 If you believe that a minor has registered on arena.ph or that personal data of a minor has been collected, please contact arena.ph support immediately so that appropriate action can be taken.

11 Cross-Border Data Transfers

11.1 arena.ph primarily processes and stores personal data within the Philippines. In limited circumstances, personal data may be transferred to or processed by service providers located outside the Philippines, such as cloud infrastructure providers or international payment processors.

11.2 Where personal data is transferred outside the Philippines, arena.ph ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses consistent with the requirements of the Philippine Data Privacy Act and the standards set by the National Privacy Commission.

11.3 By using the arena.ph platform, you consent to the transfer of your personal data outside the Philippines where necessary for the purposes described in this Policy, subject to the safeguards described above.

12 Changes to This Policy

12.1 arena.ph reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. Where changes are material, arena.ph will notify registered players by email or by displaying a prominent notice on the platform.

12.2 The effective date at the top of this Policy indicates when it was last updated. Your continued use of the arena.ph platform after any update constitutes your acceptance of the revised Policy.

12.3 The most current version of this Privacy Policy is always available at arenaph.app/privacy-policy. We encourage you to review this Policy periodically to stay informed about how arena.ph protects your data.

13 Contact & Data Queries

13.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by arena.ph, please contact our Data Privacy Officer:

Data Privacy Officer, arena.ph
Email: support@arenaph.app
Platform: arenaph.app

13.2 arena.ph will acknowledge all data privacy inquiries within 48 hours and aim to resolve them within 30 days. For complex requests, we may require additional time and will inform you accordingly.

13.3 If you are not satisfied with arena.ph's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.

Please do not include sensitive account information such as passwords or full payment details in any communication sent to arena.ph support.