This policy explains what data ArenaOS collects, how we use it and how we protect it. By using the platform you agree to it.
Data we collect
- Center owners and staff: name, username, phone, email and center details.
- The center's customers (players): name, username, phone or email if entered, balance, session and purchase history, and RFID tag ID if used.
- Devices: device name, MAC address, hardware fingerprint, status, temperature and resource use, and games launched.
- Payments: we record amount, method and transaction reference. Card details are processed by the payment gateway and never stored by us.
How we use data
- To run the service: billing, sessions, balances, reports and notifications.
- To protect accounts, prevent fraud and recover passwords.
- To improve the platform using aggregated statistics that don't identify individuals.
Who can see data
Each center's data is isolated from other centers. Owners and their staff see only their own center, within their permissions. We never sell data. We share it only with providers needed to run the service (hosting, payment gateways, notification services) or when required by a competent authority.
Owners control their players' data
The center owner is the controller of their players' data and we process it on their behalf. Owners must inform their customers in line with local law.
Retention and deletion
We keep data for the duration of the subscription. Owners can request an export or deletion; we delete data within 30 days after the subscription ends unless asked otherwise or required by law.
Security
We use encrypted connections (HTTPS), encryption of sensitive values such as gateway keys, regular backups and role-based permissions.
Contact
Privacy questions: [email protected].
