arenaive Privacy Policy

1. Who We Are

arenaive ("arenaive," "we," "us," or "our") operates the online gaming platform accessible at arenaive.one. arenaive is the data controller responsible for the personal data of players who register and use the arenaive Platform in the Philippines.

This Privacy Policy applies to all personal data collected through the arenaive website, mobile browser experience, customer support channels, and any other interaction you have with arenaive. It should be read together with our Terms & Conditions and Responsible Gaming Policy.

By registering an arenaive account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2. Personal Data We Collect

2.1 Registration and Identity Data

When you create an arenaive account, we collect the following information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Philippine mobile number
• Email address
• Username and encrypted password
• Residential address in the Philippines

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) regulations and PAGCOR requirements, arenaive may collect:

• Copies of government-issued photo identification (e.g., Philippine passport, driver's licence, SSS ID, UMID, PhilSys National ID)
• Proof of address documents (e.g., utility bills, bank statements)
• Proof of payment method ownership (e.g., GCash or PayMaya account screenshots)
• Source of funds documentation where required by applicable regulations

2.3 Financial and Transaction Data

arenaive collects records of all deposits, withdrawals, bonus transactions, and gameplay activity associated with your account. This includes payment method details (e.g., GCash mobile number, bank account name) sufficient to process transactions, but arenaive does not store full bank account numbers or card numbers on its servers.

2.4 Technical and Usage Data

When you access the arenaive Platform, we automatically collect certain technical information, including:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited, features used, and session duration
• Referring URL and search terms used to find arenaive
• Error logs and crash reports

2.5 Communications Data

If you contact arenaive via live chat, email, or any other channel, we retain records of those communications, including the content of your messages and our responses, for quality assurance and dispute resolution purposes.

3. How We Collect Your Data

arenaive collects personal data through the following means:

• Direct collection: Information you provide when registering, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically through cookies, web beacons, and server logs when you access the Platform.
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment confirmation data from GCash, PayMaya, BPI, BDO, and Metrobank.

4. How We Use Your Personal Data

arenaive uses your personal data for the following purposes:

• To create and manage your arenaive account and verify your identity
• To process deposits, withdrawals, and bonus transactions
• To comply with KYC, AML, and PAGCOR regulatory requirements
• To detect and prevent fraud, cheating, money laundering, and other prohibited conduct
• To provide customer support and resolve disputes
• To send you transactional communications (e.g., deposit confirmations, withdrawal notifications, account security alerts)
• To send you promotional communications about arenaive bonuses and offers, where you have consented to receive such communications
• To personalise your gaming experience and recommend relevant games or promotions
• To monitor and enforce responsible gaming obligations, including age verification and self-exclusion
• To improve the Platform through analysis of aggregated usage data
• To comply with applicable Philippine laws and respond to lawful requests from regulatory authorities

5. Legal Basis for Processing

arenaive processes your personal data on the following legal bases under the Data Privacy Act of 2012 (Republic Act No. 10173):

• Contractual necessity: Processing required to perform our contract with you, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable Philippine laws, including AML regulations, PAGCOR requirements, and tax obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and improvement of our services, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

arenaive does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly as necessary:

• Payment processors: GCash, PayMaya, BPI, BDO, and Metrobank, to process your deposits and withdrawals.
• KYC and AML service providers: Third-party identity verification and compliance screening providers engaged by arenaive to fulfil regulatory obligations.
• Game software providers: Licensed game studios whose titles are available on the arenaive Platform, to the extent necessary to deliver gameplay and resolve technical disputes.
• IT and hosting providers: Cloud infrastructure and cybersecurity service providers who process data on arenaive's behalf under strict data processing agreements.
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government bodies, where disclosure is required by law or regulatory directive.
• Professional advisers: Legal counsel, auditors, and accountants, where necessary for the conduct of arenaive's business.

All third-party service providers engaged by arenaive are contractually required to process personal data only for the specified purpose, to implement appropriate security measures, and to comply with applicable data protection laws.

7. Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit the arenaive Platform. They allow arenaive to recognise your device, remember your preferences, and collect usage data to improve the Platform experience.

7.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and game lobby layout. Disabling these may affect your experience.
• Analytics cookies: Collect aggregated, anonymised data about how players use the Platform to help arenaive identify areas for improvement.
• Marketing cookies: Used to deliver relevant promotional content about arenaive. These are only placed with your consent.

7.3 Managing Cookies

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will prevent you from logging in to your arenaive account. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

8. Data Retention

arenaive retains your personal data for as long as your account is active and for a period thereafter as required by applicable Philippine law. Specifically:

• Account and transaction records are retained for a minimum of five (5) years after account closure, in accordance with AML regulations and PAGCOR requirements.
• KYC documents are retained for a minimum of five (5) years after the end of the business relationship.
• Customer support communications are retained for three (3) years.
• Technical and usage logs are retained for up to twelve (12) months.
• Marketing consent records are retained for the duration of your account and for three (3) years thereafter.

After the applicable retention period, personal data is securely deleted or anonymised in accordance with arenaive's data disposal procedures.

9. Data Security

arenaive implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and arenaive's servers
• AES-256 encryption for sensitive data stored at rest, including KYC documents and payment details
• Multi-factor authentication (MFA) for all arenaive staff with access to player data
• Role-based access controls limiting data access to staff with a legitimate business need
• Regular penetration testing and vulnerability assessments by independent cybersecurity firms
• 24/7 intrusion detection and security monitoring
• Regular staff training on data protection and information security

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, arenaive will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012.

10. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by arenaive:

• Right to be informed: The right to know what personal data arenaive collects and how it is processed — which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data arenaive holds about you.
• The right to correct inaccurate or incomplete personal data held by arenaive.
• Right to erasure or blocking: The right to request deletion or blocking of your personal data where processing is no longer necessary, subject to arenaive's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe arenaive has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Privacy Request." arenaive will respond to all verified requests within fifteen (15) business days. We may require you to verify your identity before processing your request.

11. Children's Privacy

The arenaive Platform is strictly intended for adults aged 21 years and older. arenaive does not knowingly collect personal data from individuals under the age of 21. If arenaive becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all associated data will be deleted, and any deposits will be returned to the payment source.

If you are a parent or guardian and believe your child has registered an arenaive account, please contact us immediately at [email protected] so we can take prompt action.

12. Changes to This Privacy Policy

arenaive reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, arenaive will notify registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect.

The date of the most recent update is displayed at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the arenaive Platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.

13. Contact Our Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or arenaive's handling of your personal data, please contact our Data Protection Officer through the following channels:

• Email: [email protected] (subject line: "Data Privacy Request")
• Live Chat: Available 24/7 via the arenaive Platform

arenaive is committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.