Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by ArionPH ("ArionPH", "we", "us", "our") and applies to all personal information collected from users ("you", "Player", "Data Subject") who access or use the ArionPH website, mobile application, and all associated gaming services (collectively, the "Platform").

ArionPH is committed to processing your personal data lawfully, fairly, and transparently in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). This Policy describes what personal information we collect, the purposes for which we use it, with whom we share it, how long we retain it, and the rights available to you as a data subject.

2. Data Controller

ArionPH acts as the Personal Information Controller (PIC) in respect of the personal data collected through the Platform, as that term is defined under the Philippine Data Privacy Act of 2012. As PIC, ArionPH determines the purposes and means of processing your personal information and is responsible for ensuring that such processing complies with applicable Philippine data protection law.

ArionPH has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection legislation. Contact details for the DPO are provided in Section 14 of this Policy.

3. Personal Data We Collect

ArionPH collects the following categories of personal data in connection with your use of the Platform:

3.1 Identity and Contact Information

• Full legal name as it appears on your government-issued identification;
• Date of birth (used to verify that you are at least 21 years of age);
• Residential address, including barangay, city or municipality, province, and postal code;
• Email address and mobile phone number;
• Government-issued identification number (e.g., Philippine passport number, SSS number, UMID number, driver's license number).

3.2 Financial Information

• GCash or PayMaya mobile wallet number;
• Bank account details for BPI, BDO, Metrobank, or other supported Philippine banks (account name and number only — ArionPH does not store full card numbers or CVV codes);
• Transaction history, including deposit amounts, withdrawal amounts, and timestamps;
• Source of funds declarations where required for KYC or AML compliance.

3.3 Gaming and Account Activity Data

• Username and encrypted password;
• Game session logs, including games played, wager amounts, outcomes, and session duration;
• Bonus and promotion participation history;
• Responsible gaming settings, including deposit limits and self-exclusion status;
• Customer support interaction records.

3.4 Technical and Device Data

• IP address and approximate geolocation derived therefrom;
• Device type, operating system, and browser type and version;
• Session identifiers and authentication tokens;
• Log data, including access times, pages viewed, and error reports.

Data Category	Examples	Required?
Identity & Contact	Full name, date of birth, address, email, mobile number	Mandatory
Financial	GCash number, bank account details, transaction history	Mandatory for transactions
Gaming Activity	Game logs, wager history, session data	Automatically collected
Technical & Device	IP address, device type, browser, session tokens	Automatically collected
KYC Documents	Passport, UMID, SSS ID, proof of address	Required for verification

4. How We Collect Your Data

ArionPH collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion;
• Automatically — through cookies, server logs, and similar tracking technologies when you access and interact with the Platform;
• From third-party service providers — including payment processors (e.g., GCash, PayMaya, BPI, BDO, Metrobank), identity verification services, and fraud detection providers, where such sharing is necessary to operate the Platform and comply with Philippine law;
• From regulatory and law enforcement authorities — where ArionPH is required by law to receive or disclose information in connection with anti-money laundering investigations or other legal proceedings.

5. Purpose and Legal Basis for Processing

ArionPH processes your personal data for the following purposes, each of which is supported by a lawful basis under the Philippine Data Privacy Act of 2012:

5.1 Account Registration and Management

We process your identity and contact information to create and maintain your ArionPH account, verify your eligibility to use the Platform (including age verification to confirm you are 21 years of age or older), and provide you with access to our gaming services. Legal basis: Performance of a contract.

5.2 Payment Processing

We process your financial information to facilitate deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported Philippine payment channels. Legal basis: Performance of a contract; compliance with legal obligations under the Anti-Money Laundering Act (RA 9160, as amended).

5.3 Identity Verification and KYC Compliance

We process identity documents and related information to comply with our Know Your Customer (KYC) obligations under Philippine law and PAGCOR regulatory requirements. Legal basis: Compliance with a legal obligation.

5.4 Fraud Prevention and Security

We process technical, device, and gaming activity data to detect and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct. Legal basis: Legitimate interests of ArionPH and compliance with legal obligations.

5.5 Responsible Gaming

We process gaming activity data and responsible gaming settings to monitor for signs of problem gambling, enforce self-exclusion requests, and provide players with tools to manage their gaming behavior in accordance with our Responsible Gaming Policy. Legal basis: Legitimate interests; compliance with regulatory requirements.

5.6 Customer Support

We process your contact information and interaction records to respond to your inquiries, resolve disputes, and improve our customer service. Legal basis: Performance of a contract; legitimate interests.

5.7 Marketing and Promotions

Where you have provided your consent, we may use your contact information to send you information about ArionPH promotions, bonuses, and new game releases. You may withdraw your consent to marketing communications at any time by contacting our support team or updating your account preferences. Legal basis: Consent.

5.8 Legal and Regulatory Compliance

We process personal data as necessary to comply with applicable Philippine laws and regulations, including but not limited to the Anti-Money Laundering Act, the Data Privacy Act of 2012, and directives issued by PAGCOR and the NPC. Legal basis: Compliance with a legal obligation.

6. Data Sharing and Disclosure

ArionPH does not sell, rent, or trade your personal information. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment service providers — GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors, solely to facilitate your deposits and withdrawals;
• Identity verification and KYC providers — third-party services engaged to verify your identity and age in compliance with Philippine regulatory requirements;
• Fraud detection and security providers — services that assist ArionPH in detecting and preventing fraudulent activity on the Platform;
• IT infrastructure and cloud service providers — companies that provide hosting, data storage, and technical infrastructure for the Platform, subject to data processing agreements that require them to protect your data;
• Regulatory and law enforcement authorities — including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and Philippine law enforcement agencies, where disclosure is required by law or court order;
• Professional advisers — lawyers, auditors, and accountants engaged by ArionPH, subject to professional confidentiality obligations.

7. Data Retention

ArionPH retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

As a general rule, ArionPH retains account and transaction records for a minimum of five (5) years following the closure of your account, in accordance with the record-keeping requirements of the Philippine Anti-Money Laundering Act and PAGCOR regulations. Identity verification documents are retained for the same minimum period.

Gaming activity logs and session data are retained for a minimum of three (3) years. Marketing consent records are retained for the duration of your account and for one (1) year following account closure or withdrawal of consent, whichever is later.

When personal data is no longer required for any lawful purpose, ArionPH will securely delete or anonymize it in accordance with our internal data retention and disposal procedures.

8. Security Measures

ArionPH implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• TLS encryption for all data in transit between your device and ArionPH servers;
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial information;
• Role-based access controls limiting access to personal data to authorized ArionPH personnel on a need-to-know basis;
• Multi-factor authentication for administrative access to systems containing personal data;
• Regular security assessments, penetration testing, and vulnerability scanning;
• Staff training on data protection and information security obligations.

While ArionPH takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your ArionPH account credentials and for notifying us immediately if you suspect unauthorized access to your account.

9. Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device when you visit the ArionPH Platform. They allow the Platform to recognize your device, maintain your session, and remember your preferences. ArionPH also uses similar technologies such as web beacons and local storage for the same purposes.

9.2 Types of Cookies We Use

• Strictly necessary cookies — required for the Platform to function, including session management, authentication, and security. These cannot be disabled.
• Performance and analytics cookies — used to collect anonymized information about how players use the Platform, helping us identify and fix technical issues and improve the user experience.
• Functional cookies — used to remember your preferences, such as language settings and responsible gaming limits you have set.

ArionPH does not use third-party advertising or behavioral tracking cookies. You can manage or disable non-essential cookies through your browser settings; however, doing so may affect the functionality of certain features on the Platform.

10. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ArionPH:

• Right to be informed — the right to be notified of how your personal data is being collected and processed, as set out in this Policy;
• Right of access — the right to request a copy of the personal data ArionPH holds about you;
• Right to rectification — the right to request correction of inaccurate or incomplete personal data;
• Right to erasure or blocking — the right to request deletion or blocking of your personal data where it is no longer necessary for the purpose for which it was collected, subject to ArionPH's legal retention obligations;
• Right to object — the right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation;
• Right to data portability — the right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible;
• Right to damages — the right to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data;
• Right to file a complaint — the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer using the contact details provided in Section 14. ArionPH will respond to all verified data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

11. Minors and Age Restriction

The ArionPH Platform is strictly intended for persons who are 21 years of age or older. ArionPH does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the account registration and KYC process.

If you are a parent or guardian and believe that your child has registered an account on ArionPH, please contact our Data Protection Officer immediately using the contact details in Section 14.

12. Cross-Border Data Transfers

ArionPH primarily stores and processes personal data within the Republic of the Philippines. Where it is necessary to transfer personal data to service providers or infrastructure located outside the Philippines — for example, cloud hosting providers — ArionPH will ensure that such transfers are made only to countries or organizations that provide an adequate level of data protection, or that appropriate safeguards are in place, in accordance with the requirements of the Philippine Data Privacy Act of 2012 and NPC regulations.

ArionPH will not transfer your personal data to any jurisdiction that does not provide adequate protections without first obtaining your consent or ensuring that appropriate contractual safeguards are in place.

13. Changes to This Privacy Policy

ArionPH reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When material changes are made, ArionPH will notify registered players via the email address associated with their account and by displaying a prominent notice on the Platform prior to the changes taking effect.

The revised Policy will display the updated effective date at the top of the document. Your continued use of the ArionPH Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how ArionPH protects your personal information.

14. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ArionPH, please contact our Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe that ArionPH has not handled your personal data in accordance with the Data Privacy Act of 2012. Information on how to file a complaint with the NPC is available on the NPC's official website.

For responsible gaming concerns, self-exclusion requests, or account closure, please visit our Responsible Gaming page or contact our 24/7 live support team directly through the Platform.