arenaph Privacy Policy

This Privacy Policy ("Policy") describes how arenaph ("arenaph," "we," "us," or "our") collects, uses, stores, shares, and protects personal information provided by users ("Player," "you," or "your") of the arenaph platform, including the website at arenaph.co and all associated gaming services. By registering an account with arenaph or using any part of the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

1. Introduction

arenaph is committed to protecting the privacy and personal data of all players on its platform. This Policy has been prepared in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all issuances by the National Privacy Commission (NPC). It also reflects arenaph's obligations as a PAGCOR-licensed gaming operator, which include data protection requirements specific to the gaming and financial services sectors.

The arenaph Platform is designed exclusively for Filipino players and operates entirely within the regulatory framework of the Philippines. All personal data collected by arenaph is processed and stored in accordance with Philippine law. Where data is transferred to third-party service providers, arenaph ensures that appropriate safeguards are in place consistent with the requirements of the Data Privacy Act.

2. Data Controller Information

arenaph is the data controller responsible for personal data collected through the Platform. As data controller, arenaph determines the purposes and means of processing your personal information. For all data privacy inquiries, requests, or complaints, you may contact our Data Protection Officer (DPO) via the contact details provided in Section 14 of this Policy.

3. Personal Data We Collect

arenaph collects personal data that is necessary and proportionate to the purposes for which it is collected. The categories of personal data we process include:

• Identity Data: Full legal name, date of birth, nationality, and government-issued Philippine identification number (e.g., UMID, PhilSys, passport, or driver's license number).
• Contact Data: Mobile phone number, email address, and residential address.
• Financial Data: GCash wallet number, Maya account details, bank account details (BPI, BDO, Metrobank), deposit and withdrawal history, and transaction records.
• Account Data: Username, encrypted password, account balance, gaming history, bonus usage records, and session logs.
• Verification Data: Photographs of government-issued ID documents and selfie images submitted for KYC (Know Your Customer) verification purposes.
• Technical Data: IP address, device type and identifiers, browser type and version, operating system, and platform access timestamps.
• Usage Data: Pages visited on arenaph, games played, session duration, in-game actions, and click-stream data.
• Communications Data: Records of your interactions with arenaph customer support via live chat or email, including the content and timestamps of those communications.

arenaph does not intentionally collect sensitive personal information as defined under the Data Privacy Act (e.g., health data, religious beliefs, or political affiliations) unless specifically required for responsible gaming or regulatory compliance purposes, in which case your explicit consent will be obtained.

4. How We Collect Your Data

arenaph collects personal data through the following means:

• Direct submission: Information you provide when registering, completing KYC verification, making deposits or withdrawals, contacting support, or updating your account profile.
• Automated collection: Technical and usage data collected automatically when you access and interact with the arenaph Platform, through server logs, cookies, and similar tracking technologies.
• Third-party sources: Identity verification data from PAGCOR-approved KYC service providers, payment verification data from GCash, Maya, and banking partners, and fraud screening data from licensed anti-fraud service providers.

5. How We Use Your Personal Data

arenaph processes your personal data for the following purposes:

• Creating and managing your arenaph player account, including authentication and access control
• Verifying your identity and age in compliance with PAGCOR's KYC requirements and the Data Privacy Act
• Processing deposits and withdrawals via GCash, Maya, InstaPay, PesoNet, and other local payment channels
• Detecting, preventing, and investigating fraud, money laundering, and other prohibited activities as required by Philippine AML laws
• Personalizing your gaming experience, including game recommendations and promotional offers relevant to your play history
• Sending transactional communications, including deposit confirmations, withdrawal notifications, and account security alerts
• Sending promotional and marketing communications where you have consented or where arenaph has a legitimate interest — subject to your right to opt out at any time
• Administering responsible gaming tools, including deposit limits, session limits, and self-exclusion, and monitoring for signs of problem gambling behavior
• Fulfilling arenaph's legal and regulatory obligations to PAGCOR, the NPC, the Anti-Money Laundering Council (AMLC), and other relevant Philippine authorities
• Maintaining the security, performance, and integrity of the arenaph Platform
• Resolving disputes, enforcing arenaph's Terms and Conditions, and responding to legal claims

6. Legal Basis for Processing

Under the Data Privacy Act of 2012, arenaph processes your personal data on the following legal bases:

• Performance of a contract: Processing necessary to fulfill our obligations to you as an account holder, including account creation, payment processing, and game delivery.
• Legal obligation: Processing required to comply with PAGCOR regulations, AML obligations, tax reporting requirements, and NPC directives.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and improvement of our services — where these interests are not overridden by your rights.
• Consent: Processing for marketing communications and optional personalization features, where you have provided explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Sharing Your Personal Data

arenaph does not sell, rent, or trade your personal information to any third party for their own commercial purposes. arenaph shares your personal data only in the following circumstances and with the following categories of recipients:

• Payment processors: GCash, Maya, Instapay, PesoNet, BPI, BDO, Metrobank, and other payment service providers, to the extent necessary to process your financial transactions.
• KYC and identity verification providers: PAGCOR-approved third-party verification services that process your ID documents and biometric data for the purpose of identity verification.
• Fraud prevention and AML services: Licensed providers that assist arenaph in screening transactions for fraud, money laundering, and sanctions compliance.
• Cloud and IT infrastructure providers: Hosting, storage, and security service providers that process data on arenaph's behalf under contractual data processing agreements consistent with the Data Privacy Act.
• Regulatory authorities: PAGCOR, the NPC, the AMLC, the Bureau of Internal Revenue (BIR), and other Philippine government agencies, when disclosure is required by law or regulatory direction.
• Legal and professional advisors: Lawyers, auditors, and accountants engaged by arenaph, subject to professional confidentiality obligations.

All third-party service providers engaged by arenaph are required to process personal data only for the specific purpose for which it was shared and in accordance with arenaph's instructions and applicable Philippine data protection law.

8. Data Retention

arenaph retains your personal data for as long as your account is active and for a minimum period of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and Philippine AML regulations. Transaction records may be retained for longer periods where required by applicable law. After the applicable retention period, personal data is securely deleted or anonymized.

Where you request deletion of your personal data before the end of the retention period, arenaph will assess the request against its legal and regulatory obligations. Where deletion would conflict with a statutory retention requirement, arenaph will restrict processing of the relevant data to the minimum extent required by law and notify you accordingly.

9. Security Measures

arenaph implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and arenaph's servers
• AES-256 encryption for sensitive data stored in arenaph's databases, including payment details and ID documents
• Two-factor authentication (2FA) available for all player accounts
• Access controls limiting staff access to personal data on a strict need-to-know basis
• Regular security assessments and penetration testing of Platform infrastructure
• Employee training on data protection obligations and secure data handling practices

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a personal data breach that is likely to result in harm to affected individuals, arenaph will notify the NPC within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with NPC Circular 16-03.

10. Cookies and Tracking Technologies

arenaph uses cookies and similar tracking technologies on the Platform to enable core functionality, improve user experience, and gather analytical data. The categories of cookies used include:

• Strictly necessary cookies: Required for the Platform to function correctly. These cannot be disabled. Examples include session authentication tokens and security cookies.
• Functional cookies: Remember your preferences, such as language settings and display options, to personalize your experience.
• Analytics cookies: Collect aggregated, anonymized data about how players use the Platform, to help arenaph improve performance and content.

You may manage non-essential cookie preferences via your browser settings. Disabling certain cookies may affect the functionality of the arenaph Platform.

11. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by arenaph:

• Right to be informed: The right to know what personal data arenaph holds about you, how it was collected, the purposes for which it is processed, and with whom it has been shared.
• Right of access: The right to request a copy of the personal data arenaph holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to arenaph's legal and regulatory retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or processing based on arenaph's legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe arenaph has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, contact arenaph's Data Protection Officer via the details in Section 14. arenaph will respond to data subject requests within fifteen (15) business days. Identity verification may be required before processing your request.

12. Children's Privacy and Age Restriction

arenaph strictly enforces a minimum age of 21 years for all account holders, consistent with PAGCOR regulations governing online gaming in the Philippines. arenaph does not knowingly collect personal data from individuals under 21 years of age. Age verification is conducted as part of the mandatory KYC process. 21+ Only

If arenaph becomes aware that personal data has been collected from an individual who did not meet the age requirement at the time of registration, the account will be immediately closed, all data will be deleted to the extent permitted by law, and any deposited funds will be returned to the source payment method where technically feasible.

13. Changes to This Privacy Policy

arenaph reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or arenaph's data processing practices. Material changes will be communicated to registered players via email or in-platform notification at least seven (7) days before taking effect. The date at the top of this Policy reflects the date of the most recent revision. Continued use of the Platform after the effective date of any revised Policy constitutes acceptance of the updated terms.

14. Contact and Data Protection Officer

For all data privacy inquiries, access requests, corrections, complaints, or to exercise any of your rights under the Data Privacy Act, please contact arenaph's Data Protection Officer:

• Live Chat: 24/7 via the arenaph Platform
• Email: [email protected]
• Support Hours: 24 hours / 7 days — Philippines Time (PHT, GMT+8)

This Privacy Policy was last reviewed and updated in June 2026. It supersedes all previously published versions of the arenaph Privacy Policy.