ArenaPluz Privacy Policy

This Privacy Policy applies to all services operated under the ArenaPluz brand, accessible at arenapluz.com and any related mobile or web applications operated by ArenaPluz ("we", "us", "the Platform"). ArenaPluz is an online gaming and sports betting platform serving players in the Philippines.

For the purposes of the Philippine Data Privacy Act of 2012, ArenaPluz acts as the Personal Information Controller for data collected through the registration, operation, and management of player accounts. Where ArenaPluz engages third-party service providers to process data on its behalf – such as payment processors or identity verification services – those providers act as Personal Information Processors under written data processing agreements.

This policy covers all personal data collected from the time you first visit arenapluz.com, through registration, active account use, and for as long as ArenaPluz is legally required to retain your data after account closure.

ArenaPluz collects personal data in several categories depending on how you interact with the platform. Here is a clear breakdown of what we collect and why each category is necessary:

ArenaPluz collects personal data through the following channels:

• Registration form: When you create an ArenaPluz account, you provide your name, date of birth, email, and mobile number directly.
• Identity verification: When completing KYC verification, you upload copies of your government-issued ID and proof of address. These are processed by ArenaPluz and, where applicable, by our authorised verification partner.
• Deposits and withdrawals: When you initiate a financial transaction, payment details are collected as needed to process the transaction via GCash, Maya, bank transfer, or card.
• Platform activity: ArenaPluz automatically logs technical and usage data as you navigate the platform – pages visited, bets placed, games played, session durations.
• Cookies and tracking technologies: ArenaPluz uses cookies and similar technologies on its website to maintain session integrity, detect fraud, and (with your consent) analyse platform usage. See Section 8 for full details.
• Support interactions: If you contact ArenaPluz support, records of those conversations including any information you provide are retained.
• Third-party sources: ArenaPluz may receive verification data from identity checking services or fraud prevention databases to confirm the accuracy of the information you have provided.

ArenaPluz processes personal data on the basis of one of four legal grounds: fulfilment of a contract with you (operating your account), compliance with legal obligations, our legitimate interests in operating a secure and fair platform, and your explicit consent where required. Here is how your data is used across each purpose:

• Account creation and management: Your identity and contact data are used to create and maintain your ArenaPluz account, verify your age, authenticate your logins, and communicate with you about account status, security alerts, and support queries.
• Processing transactions: Financial data is used exclusively to facilitate deposits, withdrawals, and any bonus credits or deductions. ArenaPluz does not use payment data for any other purpose.
• Regulatory compliance (KYC/AML): Philippine gaming regulations and anti-money laundering laws require ArenaPluz to verify the identity of players and maintain records of significant transactions. This is a legal obligation, not an optional process.
• Fraud prevention and security: Technical and usage data are analysed to detect suspicious activity, prevent account takeovers, and identify potential bonus abuse or collusion between players.
• Responsible gaming monitoring: ArenaPluz uses gaming activity data to identify patterns that may indicate problem gambling behaviour, enabling the platform to offer appropriate responsible gaming tools or interventions.
• Platform improvement: Aggregated and anonymised usage data helps ArenaPluz understand how the platform is used, identify friction points, and improve the overall experience for Filipino players.
• Marketing communications (with consent): If you have opted in to marketing communications, ArenaPluz may send you information about promotions, tournaments, and new features. You can opt out at any time from your account settings or by contacting support.

ArenaPluz does not sell your personal data. We share it only with the following categories of recipients, each of whom is bound by strict data protection obligations:

• Payment processors: GCash, Maya, GrabPay, Coins.ph, BDO, BPI, UnionBank, and Visa/Mastercard acquiring banks receive the financial data necessary to process your specific transaction. They do not receive your full ArenaPluz account profile.
• Identity verification providers: If ArenaPluz uses a third-party KYC service to verify your identity, that provider will receive the documents and information needed to complete the verification check. Their processing is governed by a data processing agreement with ArenaPluz.
• Regulatory and law enforcement authorities: ArenaPluz is required by Philippine law to report certain transactions and provide account information to gaming regulators and law enforcement when lawfully requested. These disclosures are mandatory, not discretionary.
• Fraud prevention databases: ArenaPluz may check or submit data to fraud prevention and AML screening services to detect suspicious activity. Outcomes of those checks may affect your ability to access certain account features.
• Platform infrastructure providers: Cloud hosting, cybersecurity, and analytics services used to operate arenapluz.com may process technical data as part of service delivery. All providers are assessed for data security compliance before engagement.

ArenaPluz retains personal data only for as long as necessary to fulfil the purpose it was collected for, or as required by law. The following retention periods apply:

After the applicable retention period expires, ArenaPluz will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual.

ArenaPluz implements a layered approach to data security combining technical, organisational, and procedural controls to protect your personal information from unauthorised access, disclosure, alteration, or destruction.

• TLS encryption in transit: All data transmitted between your device and ArenaPluz servers is protected by Transport Layer Security (TLS) encryption. You can verify this by the padlock icon in your browser address bar when on arenapluz.com.
• Encryption at rest: Sensitive personal data stored in ArenaPluz databases is encrypted using industry-standard algorithms. Even in the event of a server breach, encrypted data cannot be read without the decryption keys.
• Access controls: ArenaPluz staff access to personal data is governed by role-based permissions. Only staff who need access to specific data to perform their job function are granted it. All access is logged and audited.
• Two-factor authentication: ArenaPluz strongly recommends enabling two-factor authentication on your account, which adds a second verification step to protect against unauthorised logins even if your password is compromised.
• Regular security assessments: ArenaPluz conducts periodic security reviews of its platform infrastructure, including penetration testing and vulnerability assessments, to identify and remediate weaknesses before they can be exploited.
• Data breach response: ArenaPluz maintains an incident response plan for data breaches. In the event of a breach that poses a risk to your rights and freedoms, affected players and the National Privacy Commission will be notified within the timeframes required by Philippine law.

ArenaPluz uses cookies and similar tracking technologies on its platform. A cookie is a small text file stored on your device when you visit a website. Here is how ArenaPluz uses them:

• Strictly necessary cookies: These are required for the ArenaPluz platform to function at all. They maintain your login session, remember your language and display preferences, and keep your basket or bet slip intact while you navigate. You cannot opt out of these without breaking the platform.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and CSRF attacks. These are part of ArenaPluz's platform security layer.
• Analytics cookies (optional): With your consent, ArenaPluz uses first-party analytics cookies to understand how players use the platform in aggregate. This helps us improve the experience. These do not identify you personally. You can opt out from your account settings or browser cookie controls.
• No third-party advertising cookies: ArenaPluz does not use advertising networks, social media pixels, or cross-site tracking cookies that follow you to other websites. Your browsing activity outside ArenaPluz is none of our business.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent ArenaPluz from functioning correctly. For analytics cookies, your preference is respected and stored for 12 months before we ask again.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ArenaPluz. To exercise any of these rights, contact our Data Protection Officer at support@arenapluz.com with "Data Rights Request" in the subject line.

ArenaPluz is strictly for individuals aged 21 and above. We do not knowingly collect or process personal data from anyone under this age. If ArenaPluz discovers that a player account belongs to a minor, the account will be immediately closed, any funds reviewed under applicable minor protection procedures, and all associated personal data handled in accordance with regulatory requirements.

If you are a parent or guardian and believe your child has created an ArenaPluz account, please contact support immediately at support@arenapluz.com so we can take appropriate action.

ArenaPluz may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify registered players via email and post a notice on the platform at least 7 days before the updated policy takes effect.

The "Effective date" at the top of this document will always reflect when the current version came into force. We recommend reviewing this policy periodically. Your continued use of ArenaPluz after the effective date of any update constitutes acceptance of the revised policy.

Previous versions of the ArenaPluz Privacy Policy are available on request from our support team.

If you have any questions about this Privacy Policy, want to exercise your data rights, or want to raise a concern about how ArenaPluz has handled your personal information, please reach out through the following channels:

• Email: support@arenapluz.com – mark the subject as "Privacy Enquiry" or "Data Rights Request" for faster routing
• Live Chat: Available 24/7 from the ArenaPluz platform – ask to be transferred to a privacy matter if needed
• FAQ: Answers to common privacy questions are available at arenapluz.com/faq