arenaliv Privacy Policy

01 Introduction

arenaliv ("we", "us", "our") operates the online gaming platform accessible at arenaliv.one (the "Platform"). As a data controller, arenaliv is responsible for the personal data of all registered Players and visitors to the Platform.

This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of your personal data. It applies to all interactions you have with the arenaliv Platform, including account registration, deposits and withdrawals, gameplay, customer support communications, and marketing communications.

By registering an account on arenaliv or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Privacy Policy, you must discontinue use of the Platform.

This Policy should be read together with the arenaliv Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

02 Data We Collect

arenaliv collects the following categories of personal data from Players and Platform visitors:

2.1 Identity & Contact Data

• Full legal name as it appears on a government-issued ID;
• Date of birth (for age verification — Players must be 21 or older);
• Nationality and country of residence;
• Email address and mobile phone number;
• Residential address, including barangay, city, and province.

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's licence);
• Proof of address documents (e.g., utility bills, bank statements);
• Selfie or liveness verification images where required;
• Source of funds documentation where required by AML regulations.

2.3 Financial Data

• GCash mobile number or PayMaya account details;
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) for withdrawal processing;
• Transaction history, including deposit amounts, withdrawal amounts, and dates;
• Bonus and promotional credit history.

2.4 Gaming Activity Data

• Game session logs, including games played, bet amounts, and outcomes;
• Account balance history;
• Responsible gaming tool usage (deposit limits, session timers, self-exclusion requests).

2.5 Technical & Usage Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Pages visited, time spent on the Platform, and clickstream data;
• Login timestamps and session duration.

2.6 Communications Data

• Records of customer support interactions via live chat or email;
• Feedback, complaints, and dispute records;
• Marketing communication preferences and opt-in/opt-out records.

03 How We Collect Data

arenaliv collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey;
• Automatically — through cookies, web beacons, and similar tracking technologies when you browse or use the Platform;
• From third parties — including identity verification service providers, payment processors (such as GCash and PayMaya), fraud prevention services, and regulatory databases where permitted by law;
• From public sources — including publicly available government records or databases where relevant to our legal obligations.

04 Purposes of Processing

arenaliv processes your personal data for the following purposes:

05 Legal Basis for Processing

arenaliv processes your personal data on the following legal bases as recognised under the Philippine Data Privacy Act of 2012 (RA 10173):

• Contractual necessity — processing required to perform our obligations under the arenaliv Terms & Conditions, including account management, payment processing, and game provision;
• Legal obligation — processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, AML obligations under RA 9160 (as amended), and tax reporting requirements;
• Legitimate interests — processing necessary for fraud prevention, platform security, responsible gaming monitoring, and business analytics, where such interests are not overridden by your rights;
• Consent — processing for marketing communications and non-essential cookies, where you have provided explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

06 Sharing Your Data

arenaliv does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

6.1 Regulatory Authorities

arenaliv is required to share certain player data with PAGCOR and other competent Philippine regulatory and law enforcement authorities upon lawful request or as required by our operating licence.

6.2 Payment Service Providers

To process deposits and withdrawals, arenaliv shares necessary financial and identity data with payment processors including GCash, PayMaya, and Philippine banking partners (BPI, BDO, Metrobank). These providers are bound by their own privacy policies and applicable financial regulations.

6.3 Identity Verification Providers

arenaliv uses third-party KYC and AML service providers to verify player identities and screen against sanctions lists. These providers process identity and document data solely for verification purposes.

6.4 Technology & Infrastructure Providers

arenaliv works with cloud hosting, cybersecurity, and analytics service providers who may process technical and usage data on our behalf. All such providers are contractually bound to process data only on arenaliv's instructions and to maintain appropriate security standards.

6.5 Game Software Providers

Certain game providers integrated into the arenaliv Platform may receive anonymised or pseudonymised gaming session data for the purpose of game performance monitoring and fairness auditing.

6.6 Business Transfers

In the event of a merger, acquisition, or sale of all or part of arenaliv's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer in advance where required by law.

07 Data Retention

arenaliv retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, in compliance with Philippine AML regulations;
• Financial transaction records: Retained for a minimum of five (5) years as required by the Anti-Money Laundering Act (RA 9160, as amended);
• Gaming activity logs: Retained for three (3) years following the relevant gaming session;
• Customer support records: Retained for three (3) years following resolution of the relevant matter;
• Marketing consent records: Retained for the duration of your account and for two (2) years following account closure or withdrawal of consent;
• Technical and usage data: Retained for up to twelve (12) months, unless required for longer periods for security or legal purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with arenaliv's data disposal procedures.

08 Data Security

arenaliv implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the arenaliv Platform;
• Encryption at rest for sensitive personal and financial data stored on arenaliv servers;
• Multi-factor authentication options for Player accounts;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing of the Platform infrastructure;
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with the requirements of the National Privacy Commission (NPC).

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, arenaliv will notify the NPC and affected Players in accordance with the timelines prescribed under RA 10173 and NPC regulations.

While arenaliv takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials.

09 Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by arenaliv:

• Right to be informed — the right to know what personal data arenaliv collects and how it is processed;
• Right of access — the right to request a copy of the personal data arenaliv holds about you;
• Right to rectification — the right to request correction of inaccurate or incomplete personal data;
• Right to erasure or blocking — the right to request deletion or blocking of personal data that is no longer necessary, was unlawfully processed, or where consent has been withdrawn, subject to arenaliv's legal retention obligations;
• Right to object — the right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation;
• Right to data portability — the right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to lodge a complaint — the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact the arenaliv Data Protection Officer (DPO) using the contact details in Section 13. arenaliv will respond to all verified data subject requests within thirty (30) days of receipt, as required by law.

10 Cookies & Tracking Technologies

arenaliv uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function, including session management and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and responsible gaming tool configurations.
• Analytics cookies: Collect anonymised data about how Players use the Platform to help us improve performance and user experience. Used only with your consent.
• Marketing cookies: Used to deliver relevant promotional content. Used only with your explicit consent.

You may manage your cookie preferences at any time through your browser settings or the arenaliv cookie preference centre. Please note that disabling certain cookies may affect the functionality of the Platform.

11 Minors

The arenaliv Platform is strictly intended for persons aged 21 years and above, in accordance with Philippine gaming regulations. arenaliv does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete such data and close the associated account.

If you believe that a minor has registered on the arenaliv Platform, please contact us immediately at [email protected].

12 Changes to This Policy

arenaliv reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, we will notify registered Players by email or by posting a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the arenaliv Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically.

13 Contact & Data Protection Officer

arenaliv has appointed a Data Protection Officer (DPO) in accordance with the requirements of RA 10173. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact:

• Data Protection Officer, arenaliv
• General support: [email protected]
• Privacy & DPO enquiries: [email protected]

arenaliv aims to acknowledge all privacy-related enquiries within five (5) business days and to resolve them within thirty (30) days. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.