1. Introduction
arenaliveph ("the Company," "we," "us," "our") operates the online gaming platform accessible at arenaliveph.co and its associated mobile applications ("the Platform"). We are committed to protecting the privacy and personal data of our players and website visitors ("you," "data subject") in accordance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission ("NPC") of the Philippines.
This Privacy Policy describes how arenaliveph collects, processes, stores, discloses, and protects your personal data in connection with your use of the Platform. By registering an account on arenaliveph or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy.
2. Data Controller
arenaliveph acts as the Personal Information Controller (as defined under the DPA) in respect of the personal data collected through the Platform. arenaliveph is regulated by the Philippine Amusement and Gaming Corporation ("PAGCOR") and is required by PAGCOR regulations to collect, verify, and retain certain categories of player data as a condition of its operating license.
For all privacy-related inquiries, requests, and complaints, you may contact our Data Protection Officer (DPO) using the contact details provided in Section 14 of this Policy.
3. Personal Data We Collect
arenaliveph collects the following categories of personal data from players and Platform users:
- Identity Data: Full legal name, date of birth, nationality, gender, and government-issued identification numbers (e.g., Philippine passport number, SSS/GSIS number, driver's license number, PhilSys reference number, UMID number).
- Contact Data: Email address, Philippine mobile number, and residential address.
- Financial Data: Payment method details (e-wallet account identifiers such as GCash and Maya; bank account details for BPI, BDO, or Metrobank transactions), transaction amounts, and deposit and withdrawal history.
- KYC Verification Data: Scanned or photographed copies of valid Philippine government-issued identification documents and, where required, proof of address documents (e.g., utility bills, barangay clearance).
- Gaming Activity Data: Account login times, game history, bet amounts, game results, session durations, and bonus usage records.
- Device and Technical Data: IP address, device identifiers, browser type and version, operating system, referring URL, and approximate geolocation derived from IP address.
- Communications Data: Records of communications between you and arenaliveph's customer support team, including live chat transcripts and support ticket records.
- Responsible Gaming Data: Self-exclusion requests, deposit limit settings, session time preferences, and any responsible gaming assessments conducted by arenaliveph.
4. How We Collect Your Data
arenaliveph collects personal data through the following means:
- Direct collection: Data you provide during account registration, KYC verification, deposit and withdrawal requests, and when contacting arenaliveph support.
- Automated collection: Data collected automatically when you access and use the Platform, including through cookies, web beacons, server logs, and analytics tools.
- Third-party sources: Where permitted by law, arenaliveph may receive data from payment processors, identity verification service providers, and fraud prevention agencies to verify your identity and safeguard the Platform.
- PAGCOR and regulatory sources: arenaliveph may receive data from PAGCOR, including information about excluded persons or players subject to regulatory restrictions.
5. Purpose & Legal Basis for Processing
arenaliveph processes your personal data for the following purposes and on the following legal bases under the DPA:
- Account management and contract performance: To register and manage your arenaliveph player account, verify your identity, process deposits and withdrawals, and provide the gaming services you request. Legal basis: performance of a contract to which you are a party.
- Regulatory compliance: To fulfill arenaliveph's obligations under PAGCOR's licensing conditions, the Anti-Money Laundering Act (AMLA), the DPA, and other applicable Philippine laws, including mandatory KYC verification and transaction monitoring. Legal basis: compliance with a legal obligation.
- Security and fraud prevention: To detect, investigate, and prevent fraud, cheating, money laundering, and unauthorized access to the Platform. Legal basis: legitimate interests of arenaliveph and the protection of other players.
- Responsible gaming: To monitor gaming behavior, identify at-risk players, and administer self-exclusion, deposit limits, and other responsible gaming tools. Legal basis: compliance with PAGCOR responsible gaming requirements and legitimate interests in player welfare.
- Customer support: To respond to your inquiries, resolve disputes, and improve the quality of arenaliveph's support services. Legal basis: performance of contract and legitimate interests.
- Marketing and promotions: To send you information about arenaliveph promotions, bonuses, and new game releases, where you have provided your consent or where permitted under applicable law. You may opt out of marketing communications at any time by contacting arenaliveph support.
- Platform improvement: To analyze usage patterns, conduct internal research, and improve the arenaliveph Platform's features, performance, and user experience. Legal basis: legitimate interests.
6. Sharing Your Personal Data
arenaliveph does not sell your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:
- PAGCOR and Philippine regulatory authorities: arenaliveph is required to report certain player data and transactions to PAGCOR and, where applicable, to the Anti-Money Laundering Council (AMLC) and the National Privacy Commission.
- Payment service providers: We share financial data with GCash, Maya, and banking partners (BPI, BDO, Metrobank) solely to process deposits and withdrawals to and from your arenaliveph account.
- Identity verification providers: We engage accredited third-party KYC and identity verification service providers to assist with document verification and sanctions screening.
- Technology and infrastructure providers: Cloud hosting, content delivery, and cybersecurity service providers who process data on arenaliveph's behalf under binding data processing agreements.
- Game content providers: Third-party game studios and live dealer operators whose games are available on arenaliveph may receive limited session and bet data necessary for game operation and RNG certification.
- Law enforcement: Where required by a valid court order, subpoena, or lawful request from Philippine law enforcement authorities.
All third parties with whom arenaliveph shares personal data are required to handle such data in accordance with the DPA and are bound by contractual obligations of confidentiality and data security.
7. Data Retention
arenaliveph retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law. The following retention periods apply as a minimum:
- KYC and identity documents: Retained for a minimum of five (5) years after account closure, in compliance with AMLA and PAGCOR record-keeping requirements.
- Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
- Gaming activity records: Retained for a minimum of three (3) years from the date of activity.
- Support communications: Retained for a minimum of two (2) years from the date of the interaction.
Upon expiry of the applicable retention period, arenaliveph will securely delete or anonymize your personal data unless further retention is required by law or regulatory directive.
8. Data Security
arenaliveph implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the arenaliveph Platform.
- Encryption of sensitive data at rest, including KYC documents and financial data.
- Role-based access controls limiting employee access to personal data to those with a legitimate need.
- Regular security assessments, penetration testing, and vulnerability scanning of the arenaliveph Platform infrastructure.
- Incident response procedures compliant with the NPC's mandatory breach notification requirements under the DPA.
In the event of a personal data breach that is likely to adversely affect your rights and freedoms, arenaliveph will notify affected players and the NPC in accordance with applicable law.
9. Cookies & Tracking Technologies
arenaliveph uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:
- Strictly necessary cookies: Essential for the Platform to function correctly, including maintaining your login session and security tokens. These cannot be disabled.
- Functional cookies: Remember your preferences such as language settings and game lobby configurations.
- Analytics cookies: Collect aggregated, anonymized data on how players use arenaliveph to help us improve the Platform's performance and content.
- Security cookies: Assist in fraud detection and prevention by identifying anomalous access patterns.
You may manage non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of the arenaliveph Platform. arenaliveph does not use cookies to serve third-party advertising.
10. Your Data Subject Rights
Under the Data Privacy Act of 2012 and applicable NPC regulations, you have the following rights in respect of your personal data held by arenaliveph:
- Right to be informed: The right to know whether arenaliveph holds personal data about you and how it is processed.
- Right of access: The right to request a copy of the personal data arenaliveph holds about you.
- Right to rectification: The right to request correction of inaccurate or incomplete personal data.
- Right to erasure or blocking: The right to request deletion or blocking of your personal data where processing is no longer necessary or lawful, subject to arenaliveph's legal retention obligations.
- Right to object: The right to object to processing of your personal data for marketing purposes at any time.
- Right to data portability: The right to receive your personal data in a structured, commonly used format where processing is based on consent or contract.
- Right to damages: The right to claim compensation for any damages suffered as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data by arenaliveph.
- Right to file a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe arenaliveph has violated your data privacy rights.
To exercise any of the above rights, please contact arenaliveph's DPO using the details in Section 14. arenaliveph will respond to data subject requests within fifteen (15) working days of receipt.
11. Minors
arenaliveph is strictly a 21+ platform. arenaliveph does not knowingly collect personal data from any person under the age of 21. If arenaliveph becomes aware that a minor has provided personal data or created an account on the Platform, that account will be immediately closed, all associated data will be deleted, and any deposits will be returned to the originating payment method. If you believe a minor has registered on arenaliveph, please notify our DPO immediately.
12. Cross-Border Data Transfers
arenaliveph's primary data infrastructure is hosted within the Philippines. Where it is necessary to transfer your personal data to service providers or technology partners located outside the Philippines (for example, international cloud infrastructure providers or globally operated game studios), arenaliveph will ensure that such transfers are subject to appropriate safeguards as required by the DPA and applicable NPC guidelines, including contractual clauses that oblige recipient parties to protect your data to a standard equivalent to that required under Philippine law.
13. Changes to This Policy
arenaliveph reserves the right to update this Privacy Policy at any time. When we make material changes to this Policy, we will notify registered players via email and/or a prominent in-Platform notification at least fourteen (14) days before the changes take effect. The date of the most recent revision is displayed at the top of this page. Your continued use of the arenaliveph Platform following the effective date of any revision constitutes your acknowledgment of the updated Policy.