Privacy Policy

1. Introduction

arenabet ("arenabet," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses the arenabet online gaming platform at arenabet.asia (the "Platform"). This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you register an account, access the Platform, or interact with our customer support team.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations as administered by the National Privacy Commission (NPC). By using the arenabet Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This Privacy Policy should be read together with our Terms & Conditions. Capitalized terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

2. Data Controller

arenabet is the data controller responsible for your personal information collected through the Platform. As data controller, arenabet determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with applicable Philippine data privacy laws.

If you have any questions, concerns, or requests relating to your personal data, you may contact our Data Protection Officer (DPO) using the contact details provided in Section 14 of this Policy.

3. Personal Data We Collect

arenabet collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is processed. The categories of personal data we collect include:

Category	Examples	When Collected
Identity Data	Full name, date of birth, government-issued ID number	Registration and KYC verification
Contact Data	Email address, mobile number, home address	Registration and account updates
Financial Data	GCash number, bank account details, transaction history	Deposits, withdrawals, and payment processing
Gaming Data	Game history, wager amounts, session duration, win/loss records	During active gameplay
Technical Data	IP address, device type, browser type, operating system	Automatically upon Platform access
Usage Data	Pages visited, features used, click patterns, session timestamps	Automatically during Platform use
Communications Data	Support chat logs, email correspondence, feedback submissions	When you contact arenabet support

We do not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, unless specifically required for responsible gaming assessments or regulatory compliance purposes.

4. How We Use Your Personal Data

arenabet uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your arenabet account, including verifying your identity and age (21+ requirement) as required by PAGCOR regulations.
• Transaction Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels.
• Regulatory Compliance: To comply with anti-money laundering (AML) obligations under the Anti-Money Laundering Act (AMLA) of the Philippines, PAGCOR reporting requirements, and other applicable laws.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Responsible Gaming: To monitor gaming patterns, enforce deposit limits, process self-exclusion requests, and identify players who may need support.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the features, security, and performance of the arenabet Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided consent or where we have a legitimate interest, and always with an easy opt-out mechanism.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on the Platform.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, arenabet processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our obligations under the Terms & Conditions you agreed to upon registration — including account management, payment processing, and game delivery.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR licensing conditions, AML regulations, and NPC data privacy requirements.
• Legitimate Interests: Processing is necessary for our legitimate interests in operating a secure, fair, and commercially viable gaming platform — provided those interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and certain optional data processing activities, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

arenabet does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to process your financial transactions.
• Game Providers: Third-party game studios and live dealer operators whose games are available on the arenabet Platform, to the extent necessary to deliver game services.
• Identity Verification Providers: KYC and AML compliance service providers who assist us in verifying player identities and screening for prohibited persons.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government agencies, where required by law or regulatory directive.
• IT and Security Providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on our behalf under strict data processing agreements.
• Professional Advisors: Lawyers, auditors, and accountants, where necessary for legal, compliance, or financial purposes.

All third-party service providers who process personal data on behalf of arenabet are required to implement appropriate technical and organizational security measures and to process data only in accordance with our instructions.

7. Cookies and Tracking Technologies

arenabet uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how you use the Platform.

We use the following types of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled without affecting core functionality such as login sessions and security features.
• Performance Cookies: Collect anonymized data about how players use the Platform, helping us identify areas for improvement.
• Functional Cookies: Remember your preferences such as language settings and display options to personalize your experience.
• Analytics Cookies: Help us understand aggregate usage patterns and measure the effectiveness of Platform features.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the arenabet Platform.

8. Data Retention

arenabet retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting obligations. Specifically:

• Account and identity data is retained for the duration of your account and for a minimum of five (5) years after account closure, as required by PAGCOR and AML regulations.
• Financial transaction records are retained for a minimum of five (5) years in accordance with the Anti-Money Laundering Act.
• Marketing consent records are retained for the duration of your consent and for a reasonable period thereafter to demonstrate compliance.
• Support communications are retained for two (2) years from the date of the interaction.

When personal data is no longer required, arenabet will securely delete or anonymize it in accordance with our data retention and disposal procedures.

9. Data Security

arenabet implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• TLS/SSL encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data at rest using industry-standard algorithms.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

While arenabet takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. You are responsible for keeping your account credentials confidential and for notifying us immediately if you suspect unauthorized access to your account.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by arenabet:

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 14. We will respond to verified requests within thirty (30) days in accordance with NPC guidelines. We may need to verify your identity before processing your request.

11. Children's Privacy

The arenabet Platform is strictly intended for individuals who are 21 years of age or older, as required under Philippine gaming regulations. arenabet does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from an underage individual, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the Platform, please contact us immediately at the details provided in Section 14.

12. Cross-Border Data Transfers

arenabet primarily stores and processes personal data within the Philippines. In certain circumstances, personal data may be transferred to or accessed by service providers located outside the Philippines — for example, cloud infrastructure providers or international game studios. Where such transfers occur, arenabet ensures that appropriate safeguards are in place, including contractual data protection clauses consistent with NPC requirements, to ensure your data receives an equivalent level of protection regardless of where it is processed.

13. Updates to This Privacy Policy

arenabet reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or Platform features. Material changes will be communicated to registered players via email or a prominent notice on the Platform prior to the changes taking effect. The "Last updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact the arenabet Data Protection Officer:

• Email: [email protected] (plain text — not a clickable link)
• Platform: arenabet.asia
• Response Time: Within 30 days of receiving a verified request

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data privacy rights have not been adequately addressed by arenabet.