arenapuls Privacy Policy

1. Introduction

arenapuls ("we," "us," "our," or "the Platform") operates the online casino and sports betting platform accessible at arenapuls.asia. As part of providing our services to players across the Philippines — from Manila and Makati to Cebu, Davao, and Quezon City — we necessarily collect and process certain personal data about you.

This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by arenapuls. It applies to all users of the arenapuls platform, including registered account holders, visitors browsing the site, and any person who contacts arenapuls through any channel.

By accessing or using the arenapuls platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, you must not use the arenapuls platform.

This Privacy Policy should be read alongside the arenapuls Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Data Controller

For the purposes of applicable Philippine data protection law, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, arenapuls acts as the personal information controller in respect of the personal data it collects and processes in connection with the arenapuls platform.

arenapuls is responsible for ensuring that personal data is collected, stored, and processed in a manner consistent with the Data Privacy Act of 2012 and the regulations issued by the National Privacy Commission (NPC) of the Philippines.

3. Data We Collect

arenapuls collects the following categories of personal data from users of the platform:

arenapuls does not collect sensitive personal information as defined under the Data Privacy Act of 2012 (such as health data, political opinions, or religious beliefs) unless strictly required by law or with your explicit consent.

4. How We Collect Data

arenapuls collects personal data through the following means:

• Direct interactions: Data you provide when registering an arenapuls account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated technologies: Technical and usage data collected automatically when you access the arenapuls platform, including through cookies, web beacons, and server logs;
• Third-party sources: Identity verification data from KYC service providers; fraud and risk data from fraud prevention agencies; payment data from payment processors such as GCash, PayMaya, BPI, BDO, and Metrobank;
• Regulatory sources: Data received from PAGCOR or other Philippine regulatory authorities in connection with licensing compliance or investigations.

5. How We Use Your Data

arenapuls uses the personal data it collects for the following purposes:

• To create, verify, and manage your arenapuls account;
• To process deposits, withdrawals, and other financial transactions on the platform;
• To verify your identity and age in compliance with Philippine gambling regulations and KYC requirements;
• To detect, investigate, and prevent fraud, money laundering, and other illegal activity;
• To comply with legal and regulatory obligations, including reporting requirements under Philippine anti-money laundering laws;
• To provide customer support and respond to your inquiries and complaints;
• To monitor your gaming activity for responsible gaming purposes and to enforce self-exclusion or limit requests;
• To send you service-related communications, including account notifications, security alerts, and policy updates;
• To improve the arenapuls platform, analyze usage patterns, and develop new features;
• To personalize your arenapuls experience based on your preferences and gaming history;
• To send you promotional communications about arenapuls offers and bonuses, where you have consented to receive such communications.

arenapuls will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

6. Legal Basis for Processing

arenapuls processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the contract between you and arenapuls, including account management, payment processing, and service delivery;
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including KYC, AML, and PAGCOR reporting requirements;
• Legitimate interests: Processing necessary for arenapuls's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights;
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, particularly for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing

arenapuls does not sell your personal data to third parties. arenapuls may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your financial transactions;
• KYC and identity verification providers: Third-party services engaged to verify your identity and age in compliance with Philippine regulations;
• Fraud prevention and AML services: Agencies and platforms used to detect and prevent fraud, money laundering, and other financial crimes;
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where required by law or regulatory directive;
• Technology and infrastructure providers: Cloud hosting, data storage, and platform technology providers engaged by arenapuls to operate the platform, subject to strict data processing agreements;
• Professional advisors: Legal counsel, auditors, and other professional advisors, where necessary for the conduct of arenapuls's business.

All third parties with whom arenapuls shares personal data are required to handle such data in accordance with applicable Philippine data protection law and arenapuls's data protection standards.

8. Data Retention

arenapuls retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

In general, arenapuls applies the following retention periods:

• Account and identity data: retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with Philippine AML regulations;
• Financial transaction records: retained for a minimum of five (5) years from the date of the transaction;
• Customer support communications: retained for three (3) years from the date of the communication;
• Technical and usage data: retained for up to two (2) years from collection, unless required longer for security or legal purposes;
• Marketing consent records: retained for the duration of your consent and for one (1) year following withdrawal of consent.

Upon expiry of the applicable retention period, arenapuls will securely delete or anonymize your personal data in accordance with its data disposal procedures.

9. Data Security

arenapuls implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the arenapuls platform;
• Encryption of sensitive data at rest, including financial data and identity documents;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Multi-factor authentication for all arenapuls administrative systems;
• Regular security audits, vulnerability assessments, and penetration testing;
• Comprehensive staff training on data protection and information security;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, arenapuls will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected users without undue delay, in accordance with the Data Privacy Act of 2012.

While arenapuls takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for keeping your arenapuls Login credentials confidential and for notifying arenapuls immediately if you suspect any unauthorized access to your account.

10. Cookies & Tracking

arenapuls uses cookies and similar tracking technologies to enhance your experience on the platform, analyze usage patterns, and support security functions. The following types of cookies may be used:

• Strictly necessary cookies: Essential for the operation of the arenapuls platform, including session management, authentication, and security. These cannot be disabled without affecting platform functionality;
• Functional cookies: Used to remember your preferences and settings, such as language and display options, to provide a more personalized experience;
• Analytics cookies: Used to collect aggregated, anonymized data about how users interact with the arenapuls platform, helping us improve performance and usability;
• Security cookies: Used to detect and prevent fraudulent activity, protect against unauthorized access, and maintain platform integrity.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the arenapuls platform. arenapuls does not use cookies to serve third-party advertising or to track your activity across unrelated websites.

11. Your Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by arenapuls:

• Right to be informed: You have the right to be informed about how your personal data is collected and processed, as set out in this Privacy Policy;
• Right of access: You have the right to request a copy of the personal data arenapuls holds about you;
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data arenapuls holds about you;
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to arenapuls's legal retention obligations;
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing;
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe arenapuls has not handled your personal data in accordance with applicable law.

To exercise any of these rights, please contact arenapuls at [email protected]. arenapuls will respond to all verified data subject requests within thirty (30) days of receipt, in accordance with the Data Privacy Act of 2012.

12. Minors

The arenapuls platform is strictly intended for users who are 21 years of age or older, in accordance with Philippine gambling regulations. arenapuls does not knowingly collect personal data from persons under the age of 21.

If arenapuls becomes aware that personal data has been collected from a person under 21 years of age, it will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an account on arenapuls, please notify us immediately at [email protected].

Parents and guardians are encouraged to use parental control tools and to monitor their children's online activity to prevent underage access to gambling platforms.

13. International Transfers

arenapuls primarily processes personal data within the Philippines. In certain circumstances, personal data may be transferred to and processed in countries outside the Philippines — for example, where arenapuls engages technology or service providers whose infrastructure is located abroad.

Where personal data is transferred outside the Philippines, arenapuls ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012. Such safeguards may include contractual clauses approved by the National Privacy Commission, or transfers to countries recognized as providing an adequate level of data protection.

14. Policy Changes

arenapuls reserves the right to update or modify this Privacy Policy at any time. When changes are made, the revised Privacy Policy will be published on this page with an updated effective date. For material changes that significantly affect how arenapuls processes your personal data, arenapuls will provide notice via email or in-platform notification where reasonably practicable.

Your continued use of the arenapuls platform after any update to this Privacy Policy constitutes your acceptance of the revised terms. arenapuls encourages you to review this Privacy Policy periodically to stay informed about how your data is being protected.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way arenapuls handles your personal data, please contact our Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you are not satisfied with arenapuls's response to your data privacy concern.