Arena Play Privacy Policy

1Introduction

This Privacy Policy explains how Arena Play ("we", "us", "our", or "the Platform") collects, uses, stores, and protects the personal information of individuals ("you", "your", or "Player") who access and use the Arena Play website at arenaplay.asia and all associated services.

Arena Play is an online gaming platform operating in the Philippines, offering services including Live Casino, Sabong, NBA Betting, Tongits, Pusoy, Roulette, and Virtual Sports. Because we ask you to share personal information when registering and using our services, we want to be completely upfront about what happens with that information.

This policy applies to all personal data collected through the Arena Play website, mobile browser experience, and any direct communication between you and Arena Play support. By creating an Arena Play account, you acknowledge that you have read and understood this Privacy Policy.

2Data Controller

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and applicable implementing regulations, Arena Play is the personal information controller responsible for the data collected through this platform.

If you have questions about how Arena Play handles your personal data, or if you wish to exercise your data privacy rights, you may contact our Data Protection Officer using the details in Section 14 of this policy.

3Data We Collect

Arena Play collects personal data in the following categories, depending on how you interact with the platform:

Registration and Account Data

• Full legal name
• Date of birth
• Email address
• Philippine mobile phone number
• Username and encrypted password
• Residential address (required for identity verification)

Identity Verification Data

• Government-issued ID (such as Philippine passport, SSS ID, PhilSys National ID, or driver's licence)
• Selfie or photograph for liveness verification, where required
• Proof of address documents

Financial and Transaction Data

• GCash or Maya mobile number (for payment processing)
• Bank account details used for deposits or withdrawals (BDO, BPI, UnionBank, etc.)
• Transaction history including deposit amounts, withdrawal amounts, and timestamps
• Bet history and game activity records

Technical and Usage Data

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session timestamps and duration
• Pages visited on the Arena Play platform and features used

Communication Data

• Content of emails or chat messages sent to Arena Play support
• Call records where phone support is used (if applicable)
• Survey or feedback responses you choose to submit

4How We Collect Your Data

Arena Play collects personal data through the following methods:

• Directly from you — when you register, verify your identity, make deposits or withdrawals, contact support, or fill in any form on the platform.
• Automatically through platform use — technical data such as IP address, device information, and session behaviour is collected automatically when you access Arena Play via your browser.
• Through payment processors — when you transact through GCash, Maya, or bank transfer, Arena Play receives confirmation data from those payment providers to process your transaction.
• Through cookies and similar technologies — Arena Play uses cookies and session tracking tools as described in Section 9 of this policy.
• Through identity verification providers — where third-party KYC (Know Your Customer) services are used to verify your identity documents, data may flow through those providers in accordance with their own privacy commitments.

5How Arena Play Uses Your Data

Personal data collected by Arena Play is used for specific, legitimate purposes. We do not use your data in ways that go beyond what is described here without first obtaining your consent or updating this policy.

• Account management: To create, maintain, and authenticate your Arena Play account.
• Identity verification: To verify your age and identity in compliance with anti-money laundering (AML) and know-your-customer (KYC) requirements.
• Payment processing: To process deposits, withdrawals, and any other financial transactions you initiate on the platform.
• Gameplay operations: To record game sessions, bet history, and results to ensure accurate account balances and support any dispute resolution.
• Customer support: To respond to your queries, resolve complaints, and assist with account-related matters.
• Security and fraud prevention: To detect and prevent fraudulent activity, money laundering, and unauthorised account access.
• Legal and regulatory compliance: To meet obligations under Philippine law, including tax reporting, AML reporting, and data retention requirements.
• Platform improvement: Aggregated, anonymised usage data is used to understand how players interact with Arena Play and to improve our features and user experience.
• Marketing communications (where you have opted in): To send you information about Arena Play promotions, new features, and relevant offers. You may unsubscribe from marketing emails at any time.

6Legal Basis for Processing

Under the Data Privacy Act of 2012, Arena Play relies on the following legal bases for processing your personal information:

• Contractual necessity: Processing required to fulfil the Arena Play service agreement — including account creation, transaction processing, and gameplay — is done on the basis of the contract between you and Arena Play.
• Legal obligation: Processing required to comply with applicable Philippine laws, including AML regulations, tax obligations, and data retention requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where our legitimate interests do not override your data privacy rights.
• Consent: For marketing communications and any processing that is not covered by the above bases, Arena Play will obtain your explicit consent and will honour any withdrawal of that consent promptly.

7Sharing Your Data

Arena Play does not sell personal data. We share your data only in the following circumstances, and only to the extent necessary for the stated purpose:

• Payment service providers: GCash, Maya, BDO, BPI, UnionBank, and other payment providers receive the minimum data necessary to process your transactions. These providers are bound by their own privacy policies and Philippine payment regulations.
• Identity verification providers: Third-party KYC service providers may process identity documents on Arena Play's behalf to complete your account verification. They are contractually bound to handle your data securely and only for the stated purpose.
• Game content providers: Live casino and game content is provided by third-party suppliers. These providers may receive technical data (such as player session tokens) to operate the games. They are prohibited from using your data for their own marketing purposes.
• Regulatory and law enforcement authorities: Arena Play is required by law to report certain transactions and to respond to lawful requests from Philippine regulatory bodies and law enforcement agencies.
• Professional advisors: Lawyers, auditors, and other professional service providers may access personal data where necessary to carry out their professional duties for Arena Play, subject to confidentiality obligations.

8Data Retention

Arena Play keeps personal data only for as long as it is needed for the purposes described in this policy, or as required by Philippine law. Retention periods vary by data type:

• Account and identity data: Retained for the duration of your account plus up to 5 years after account closure, in line with AML and regulatory requirements.
• Transaction records: Retained for at least 5 years following each transaction, as required by anti-money laundering regulations applicable in the Philippines.
• Game activity logs: Retained for up to 2 years from the date of each session, for dispute resolution and audit purposes.
• Support communications: Retained for up to 2 years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution.
• Technical/log data: Typically retained for up to 12 months, after which it is deleted or anonymised.

Once the applicable retention period ends, Arena Play securely deletes or irreversibly anonymises your personal data. Anonymised data — which can no longer be linked back to you — may be retained indefinitely for statistical and analytical purposes.

9Cookies and Tracking Technologies

Arena Play uses cookies and similar technologies (such as local storage and session identifiers) to operate the platform, remember your preferences, maintain your login session, and understand how players use the site.

Types of Cookies Used by Arena Play

• Essential cookies are required for the platform to function and cannot be switched off. They include session authentication tokens and security cookies.
• Functional cookies remember your preferences — such as language settings or last login details — to make your experience smoother.
• Analytics cookies help Arena Play understand how players navigate the site, which features are used most, and where improvements are needed. This data is collected in aggregate and does not identify individual players.
• Marketing cookies are only used where you have consented, and may be used to deliver relevant Arena Play promotions. You can withdraw consent at any time.

You can control cookie preferences through your browser settings. Note that disabling essential cookies will affect the functionality of your Arena Play account.

10Security Measures

Arena Play implements a range of technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include:

• Encryption of data in transit using TLS (Transport Layer Security)
• Encryption of sensitive data at rest in Arena Play databases
• Role-based access controls, ensuring staff can only access data relevant to their role
• Regular security reviews and vulnerability assessments of the Arena Play platform
• Multi-factor authentication options for player accounts
• Incident response procedures to detect, investigate, and report data breaches within required timeframes

While Arena Play takes these measures seriously, no system is completely immune to security risks. We encourage players to use strong, unique passwords for their accounts and to enable any available two-factor authentication features.

If Arena Play becomes aware of a data breach that poses a risk to your rights and freedoms, we will notify affected players and the National Privacy Commission of the Philippines within the timeframes required by law.

11Your Data Privacy Rights

Under the Data Privacy Act of 2012, Filipino players have the following rights with respect to their personal information held by Arena Play:

To exercise any of these rights, contact the Arena Play Data Protection Officer at privacy@arenaplay.asia. Please include your full name, registered email address, and a description of your request. Arena Play will acknowledge your request within 5 business days and respond in full within 30 business days.

12Protection of Minors

Arena Play is strictly an 18+ platform. We do not knowingly collect personal information from individuals under the age of 18. During registration, players are required to confirm their age, and identity verification procedures are in place to support this restriction.

If Arena Play becomes aware that a minor has created an account or provided personal data through the platform, we will take prompt steps to delete that data and close the account. If you believe a minor may be using Arena Play, please contact us immediately at support@arenaplay.asia.

13Updates to This Privacy Policy

Arena Play may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. The effective date at the top of this page will be updated whenever changes are made.

For significant changes that affect how we use your personal data, Arena Play will notify registered players by email or through a prominent notice on the platform. Your continued use of Arena Play after any update constitutes acceptance of the revised Privacy Policy. If you disagree with a material change, you may close your account at any time.

14Contact and Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the Arena Play Data Protection Officer:

• Data Privacy Email: privacy@arenaplay.asia
• General Support Email: support@arenaplay.asia
• Support Hours: 24 hours a day, 7 days a week
• Platform Live Chat: Available within your Arena Play account dashboard

Arena Play takes data privacy matters seriously. All formal data privacy requests will be handled with confidentiality and in accordance with the timelines required by the Data Privacy Act of 2012 and National Privacy Commission guidelines.