Legal

Privacy Policy

Last updated: April 23, 2026

ArenaBIT takes your privacy seriously. This Policy describes what data we collect, how we use it, and what rights you have over it.

1. Data Collected

We collect the following data categories: (a) Registration data: username, email address and password (stored as bcrypt hash); (b) Wallet data: Polygon/Gnosis Safe wallet address linked to the account; (c) Transaction data: deposits, withdrawals, subscriptions and referral commission history; (d) Usage data: platform access, bot interactions, notification settings and language preferences; (e) Technical data: IP address, device type, browser, operating system and session tokens.

2. Use of Data

We use your data to: (a) Provide and improve Platform services; (b) Process payments and confirm subscriptions via blockchain; (c) Send system notifications, account alerts and plan updates; (d) Detect fraud, multiple accounts and suspicious activities; (e) Calculate and pay referral program commissions; (f) Aggregated and anonymous platform usage analysis; (g) Comply with legal and regulatory obligations.

3. Data Sharing

We do not sell your personal data. We may share it with: (a) Essential service providers (cloud infrastructure, transactional email) under confidentiality agreements; (b) Legal authorities when required by law or court order; (c) Blockchain analytics partners for suspicious transaction detection. Your data is never shared for third-party marketing purposes.

4. Storage and Security

Your data is stored on servers protected with encryption at rest and in transit (TLS 1.3). Passwords are protected with bcrypt (cost 12). Wallet private keys are stored via HashiCorp Vault with restricted access. We apply role-based access controls (RBAC) and conduct periodic security audits. Despite our measures, no system is 100% secure.

5. Cookies and Similar Technologies

We use cookies and local storage (localStorage) to: (a) Maintain authenticated sessions (JWT token); (b) Store user preferences (language, theme, sidebar state); (c) Page performance analytics. We do not use third-party tracking cookies for advertising.

6. Push Notifications

With your authorization, we may send push notifications via PWA (iOS and Android). You can revoke this permission at any time in device settings or in Settings > Notifications on the Platform.

7. Data Retention

We retain your data as long as necessary to provide services and fulfill legal obligations. Blockchain transaction data is permanent by the nature of the technology. After account closure, personal data is pseudonymized within 30 days, unless law requires retention for a longer period.

8. Your Rights (LGPD/GDPR)

You have the right to: (a) Confirm whether your data is being processed; (b) Access your data; (c) Correct incomplete, inaccurate or outdated data; (d) Request anonymization, blocking or deletion of unnecessary data; (e) Data portability; (f) Withdraw consent. To exercise your rights, contact: privacidade@arenabit.digital

9. International Transfer

Your data may be processed on servers located outside Brazil. In such cases, we ensure the level of protection is adequate through standard contractual clauses or other mechanisms recognized by the ANPD.

10. Minors

The Platform is not intended for users under 18 years of age. We do not intentionally collect data from minors. If we become aware that a minor has provided data, we will close the account and delete the data immediately.

11. Changes to this Policy

We may update this Policy periodically. We will notify you of material changes by email or via Platform notification at least 7 days in advance.

12. Contact and DPO

For privacy questions or to exercise your rights: privacidade@arenabit.digital Data Protection Officer (DPO): available upon request at the email above.