areplus Privacy Policy

1. Introduction

areplus ("areplus", "we", "us", "our") respects the privacy of every player on our platform and is fully committed to protecting your personal data. This Privacy Policy describes in plain, legally accurate language how areplus collects, processes, stores, shares, and protects personal information in connection with the provision of our online casino, sports betting, bingo, and slot gaming services to players based in the Philippines.

areplus is a PAGCOR-regulated online gaming operator serving Filipino players. As a regulated entity, we are subject to the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). Our data processing activities are conducted in compliance with these legal frameworks at all times.

This Privacy Policy should be read together with the areplus Terms & Conditions, which are incorporated herein by reference. Capitalised terms not defined in this Privacy Policy carry the meaning given to them in the Terms & Conditions.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, areplus acts as the Personal Information Controller (PIC) in respect of all personal data collected through the areplus platform. This means areplus determines the purposes for which, and the manner in which, your personal data is processed.

Where areplus engages third-party service providers to carry out specific processing activities on our behalf (such as payment processing, identity verification, or analytics), those providers act as Personal Information Processors (PIPs) and are contractually bound to process your data only on areplus's documented instructions and in compliance with applicable Philippine data protection laws.

Our designated Data Protection Officer (DPO) oversees all data privacy compliance matters at areplus. If you have any questions or concerns about how your personal data is handled, you may contact our DPO directly at the email address listed in Section 13 of this Policy.

3. Personal Data We Collect

areplus collects the following categories of personal data in the course of providing our services:

3.1 Identity and Registration Data

• Full legal name as it appears on a government-issued ID
• Date of birth (for 21+ age verification purposes)
• Nationality and country of residence
• Government-issued identification number (e.g., Philippine National ID, passport, driver's licence, SSS/GSIS number)
• Copies of identification documents submitted during KYC verification

3.2 Contact Data

• Email address
• Mobile phone number (Philippine mobile number)
• Residential address (city, province, postal code)

3.3 Financial Data

• GCash or PayMaya account number linked to your areplus account
• Bank account details (BPI, BDO, Metrobank, UnionBank, or other Philippine bank) where used for withdrawals
• Transaction history: deposits, withdrawals, bonus credits, and wager records
• Source-of-funds documentation requested during AML review

3.4 Technical and Usage Data

• IP address and geolocation data (to confirm Philippine jurisdiction)
• Device type, operating system, and browser information
• Login timestamps and session duration records
• Game activity logs, bet history, and platform interaction data
• Cookie and tracking pixel data (see Section 9)

3.5 Communications Data

• Records of live chat conversations with areplus support agents
• Email correspondence sent to or received from [email protected]
• Responses to surveys, promotions, or feedback requests

4. How We Collect Your Data

areplus collects personal data through the following means:

• Direct collection: Information you provide when registering an areplus account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated collection: Technical data collected automatically through cookies, web beacons, and server logs when you access and use the areplus platform.
• Third-party sources: Identity verification and fraud screening data received from licensed third-party KYC and AML service providers engaged by areplus. areplus may also receive information from payment processors to reconcile transaction records.
• PAGCOR and regulatory sources: areplus may receive information about a player from PAGCOR or other Philippine regulatory bodies in connection with a compliance inquiry, self-exclusion registry check, or similar regulatory process.

5. Purpose and Legal Basis for Processing

areplus processes your personal data for the purposes and on the legal bases set out in the table below:

Where processing is based on your consent, you have the right to withdraw that consent at any time by updating your communication preferences in your areplus account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Data Sharing and Disclosure

areplus does not sell your personal data. We may share your personal data with the following categories of recipients only to the extent necessary and in accordance with applicable law:

6.1 Regulatory and Law Enforcement Bodies

areplus is legally obligated to share player data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government authorities upon valid legal request, court order, or as required by our operating licence conditions.

6.2 Payment Service Providers

To process your deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, 7-Eleven, and Cebuana, areplus shares the minimum necessary payment and identity data with the relevant payment service provider. These providers operate under their own privacy policies and are regulated under Philippine financial services law.

6.3 Identity Verification and KYC Providers

areplus engages licensed third-party KYC and identity verification service providers to assist with document validation and age verification. These providers act as Personal Information Processors and are contractually bound by strict data processing agreements.

6.4 Technology and Hosting Providers

areplus uses third-party cloud hosting, content delivery, and cybersecurity service providers to operate the platform. These providers may process technical data (such as server logs and IP addresses) in the course of providing their services to areplus.

6.5 Game Software Providers

Certain anonymised and aggregated gameplay data may be shared with licensed game software providers (such as slot and live casino providers) for the purposes of game performance analysis and regulatory reporting. No directly identifiable personal data is shared with game providers beyond what is technically required for game session authentication.

7. Data Retention

areplus retains your personal data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention period required by law. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be attributed to you as an identifiable individual.

8. Security Measures

areplus implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• Encryption: All data transmitted between your device and the areplus platform is encrypted using TLS (Transport Layer Security). Sensitive data at rest, including financial records and identification documents, is encrypted using AES-256.
• Access controls: Access to personal data within areplus is restricted on a strict need-to-know basis. All staff who handle personal data undergo regular data protection training.
• Two-factor authentication: areplus supports and encourages the use of two-factor authentication (2FA) for player accounts to add an additional layer of protection against unauthorised login.
• Penetration testing: The areplus platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident response: areplus maintains a documented personal data breach response procedure. In the event of a breach, we will notify affected players and the National Privacy Commission within 72 hours of becoming aware of the incident, where required by law.

While areplus takes all reasonable precautions to safeguard your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your areplus account credentials and for promptly notifying us if you suspect unauthorised access to your account.

9. Cookies and Tracking Technologies

areplus uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit the areplus website. We use the following types of cookies:

• Strictly necessary cookies: Required for the platform to function correctly. These include session management cookies that keep you logged in during your gaming session. These cookies cannot be disabled without impairing platform functionality.
• Performance and analytics cookies: Used to collect anonymised data about how players interact with the areplus platform — for example, which pages are visited most frequently. This data helps us identify areas for improvement. These cookies do not identify you personally.
• Functionality cookies: Used to remember your preferences, such as language settings and responsible gaming limits you have configured, so you do not need to re-enter them on each visit.
• Security cookies: Used to detect and prevent fraudulent access attempts, bot activity, and other security threats to the areplus platform.

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of the areplus platform. areplus does not use third-party advertising or cross-site tracking cookies.

10. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by areplus:

1. Right to be informed: You have the right to be told how your personal data is being collected, processed, and used — which is the purpose of this Privacy Policy.
2. Right of access: You may request a copy of the personal data areplus holds about you, together with information about how it is being processed.
3. Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. You can update most account information directly through your areplus account settings.
4. Right to erasure: You may request that areplus delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under PAGCOR and AMLA rules.
5. Right to object: You may object to the processing of your personal data where areplus relies on legitimate interests as the legal basis, or where your data is processed for direct marketing purposes.
6. Right to data portability: Where processing is carried out by automated means on the basis of your consent or a contract, you may request that areplus provide your personal data in a structured, commonly used, and machine-readable format.
7. Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time through your areplus account settings or by contacting support.
8. Right to lodge a complaint: If you believe that areplus has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

11. Minors and Age Restriction

The areplus platform is strictly intended for adults aged 21 years and above, in accordance with PAGCOR regulations governing online casino gaming in the Philippines. areplus does not knowingly collect personal data from individuals under the age of 21.

If areplus becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all funds will be returned to the originating payment method, and the personal data will be deleted from our systems as promptly as technically practicable.

If you are a parent or guardian and believe that a minor in your care has registered an areplus account, please contact us immediately at [email protected] so that we can take the necessary action.

12. Changes to This Privacy Policy

areplus reserves the right to update or amend this Privacy Policy at any time. Any material changes to the way we process your personal data will be communicated to you by email to your registered areplus email address and by a prominent notice on the areplus platform prior to the change taking effect.

The revised Privacy Policy will be posted on this page with an updated effective date. Your continued use of the areplus platform after a revised Privacy Policy has been posted and, where required, you have been notified, constitutes your acceptance of the updated terms. If you do not agree to the revised Privacy Policy, you should close your areplus account before the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how areplus protects your personal data.

13. Contact and Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the way areplus handles your personal data, please contact our Data Protection Officer using the details below:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe that areplus has not handled your personal data in accordance with the Data Privacy Act of 2012. Information on how to file a complaint with the NPC is available through official Philippine government channels.

For all other account and gaming-related support, the areplus customer service team is available 24/7 via live chat on the platform and by email at [email protected].