arenappus Privacy Policy

1.Introduction

arenappus ("we," "us," or "the Platform") is committed to protecting the privacy and personal data of all users who access and use the arenappus online gaming platform at arenappus.org. This Privacy Policy describes how we collect, use, store, share, and protect your personal information, and explains the rights you have in relation to your data.

By registering an account with arenappus or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, please discontinue use of the Platform immediately.

This Privacy Policy should be read together with our Terms & Conditions, which govern your use of the arenappus Platform.

2.Data We Collect

arenappus collects personal data that is necessary to provide you with a safe, fair, and enjoyable gaming experience. The categories of personal data we collect include:

2.1 Registration Data

• Full legal name;
• Date of birth (for age verification – you must be 21 or older);
• Email address;
• Mobile number;
• Residential address (city, province, Philippines);
• Username and encrypted password.

2.2 Identity Verification (KYC) Data

• Government-issued identification (e.g., Philippine passport, SSS ID, PhilSys ID, driver's license);
• Proof of address documents;
• Selfie or photo verification where required.

2.3 Financial Data

• GCash or PayMaya account details (mobile number only – we do not store PINs or passwords);
• Bank account details for BPI, BDO, Metrobank, or other linked banks;
• Transaction history including deposits, withdrawals, and bonus credits.

2.4 Gaming Activity Data

• Game history, bets placed, and outcomes;
• Session duration and frequency of play;
• Responsible gaming tool usage and self-exclusion records.

2.5 Technical Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Cookies and session identifiers (see Section 6).

2.6 Communications Data

• Records of your communications with arenappus customer support;
• Feedback, complaints, and survey responses.

3.How We Use Your Data

arenappus uses the personal data we collect for the following purposes:

arenappus does not use your personal data for automated decision-making that produces significant legal effects without human review.

4.Legal Basis for Processing

arenappus processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose, such as receiving promotional communications;
• Contractual Necessity: Processing necessary for the performance of our contract with you, including account management, payment processing, and game provision;
• Legal Obligation: Processing required to comply with applicable laws and regulations, including PAGCOR licensing requirements and anti-money laundering (AML) obligations;
• Legitimate Interests: Processing necessary for our legitimate interests, such as fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights.

5.Data Sharing & Disclosure

arenappus does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only where necessary:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely for the purpose of processing your financial transactions;
• Identity Verification Providers: Third-party KYC service providers engaged to assist with age and identity verification;
• Game Software Providers: Licensed game developers whose games are hosted on the arenappus Platform, where game data must be shared for technical operation;
• Regulatory Authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other Philippine government authorities where required by law;
• IT and Security Service Providers: Cloud hosting, cybersecurity, and technical support providers operating under strict data processing agreements;
• Legal and Professional Advisors: Lawyers, auditors, and compliance consultants where necessary for legal proceedings or regulatory compliance.

All third parties with whom arenappus shares personal data are required to handle such data in accordance with applicable data protection laws and are prohibited from using it for any purpose other than that for which it was shared.

6.Cookies & Tracking Technologies

arenappus uses cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how the Platform is used.

Types of cookies we use:

• Essential Cookies: Required for the Platform to function correctly, including session management and security features. These cannot be disabled;
• Functional Cookies: Remember your preferences such as language settings and login status to provide a more personalized experience;
• Analytics Cookies: Help us understand how players use the Platform so we can improve performance and user experience. Data collected is aggregated and anonymized;
• Security Cookies: Used to detect and prevent fraudulent activity and unauthorized access.

You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the arenappus Platform. arenappus does not use third-party advertising cookies or behavioral tracking for marketing purposes.

7.Data Retention

arenappus retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

Specifically:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by PAGCOR regulations and AML obligations;
• Financial Transaction Records: Retained for a minimum of five (5) years in accordance with Philippine financial regulations;
• KYC Documents: Retained for a minimum of five (5) years following the end of the business relationship;
• Customer Support Records: Retained for three (3) years following resolution of the relevant matter;
• Technical and Analytics Data: Retained in anonymized or aggregated form for up to two (2) years.

When personal data is no longer required, arenappus will securely delete or anonymize it in accordance with our data disposal procedures.

8.Data Security

arenappus implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit;
• Encryption of sensitive data at rest, including financial information and KYC documents;
• Strict role-based access controls limiting data access to authorized personnel only;
• Regular security audits and penetration testing;
• Multi-factor authentication for administrative access;
• Continuous monitoring for suspicious activity and potential data breaches;
• Staff training on data protection and security best practices.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, arenappus will notify the National Privacy Commission (NPC) and affected players in accordance with the requirements of the Philippine Data Privacy Act.

9.Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by arenappus:

• Right to be Informed: The right to be informed about how your personal data is collected and processed;
• Right of Access: The right to request a copy of the personal data arenappus holds about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure: The right to request deletion of your personal data, subject to our legal retention obligations;
• Right to Object: The right to object to the processing of your personal data in certain circumstances;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 13. arenappus will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request.

10.Children's Privacy

The arenappus Platform is strictly intended for individuals who are twenty-one (21) years of age or older. arenappus does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered on the arenappus Platform, please contact us immediately at the details provided in Section 13 so that we can take appropriate action.

11.International Data Transfers

arenappus primarily stores and processes personal data within the Philippines. In certain circumstances, personal data may be transferred to or accessed from locations outside the Philippines, for example where we use cloud-based service providers or game software partners with international operations.

Where such transfers occur, arenappus ensures that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses consistent with the requirements of the Philippine Data Privacy Act. We will not transfer your personal data to countries that do not provide an adequate level of data protection without implementing appropriate safeguards.

12.Changes to This Privacy Policy

arenappus reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform services. When material changes are made, we will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the arenappus Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your data.