Thank you for your interest in our company, website, services and/or products.

When you want to establish a relationship with us and use the services of our company ARENALIFE SRL , You entrust us with information about you, also known as personal data, and we thank you for your trust. The protection and confidentiality of personal data is a very important topic for us and we strive to store it securely and process it carefully, and in this regard we explain to you in a clear and transparent way what our practices are regarding the confidentiality of your data.

We are an online platform dedicated to recruiting in the iGaming industry, connecting employers with professionals in the field quickly and efficiently. We offer a safe, discreet and industry-specific space, facilitating the hiring process for companies and providing candidates with relevant, risk-free opportunities. With a focus on agility, efficiency and trust, we aim to become the first choice for iGaming recruitment.

This information is presented in this document (hereinafter referred to as the “Privacy Policy”, "This document" or "The Document" ) and please read them together with the Terms and Conditions section.Our Privacy Policy wishes to inform you about the processing of your Personal Data in connection with your visit to our web platform Job in Gaming hereinafter referred to as the " Platform " ) and your use of any additional services offered by the Company.

When visiting the Platform or interacting with us by any means, please read this Privacy Policy carefully. If you do not agree with what is described in this Document, please do not use our services.

We inform you that ARENALIFE is a personal data controller within the meaning of the GDPR for the processing of personal data.

1. Definitions.

Personal data - means any information relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity;

Special categories of data – means data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership and the processing of genetic data, biometric data for unique identification, data concerning health or data concerning sex life or sexual orientation or information on criminal convictions and offences:

Processing - means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction ;

GDPR (General Data Protection Regulation) or RGPD (General Data Protection Regulation) or Regulation - means REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF THE EUROPEAN UNION No. 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC;

The Operator or Company or We - means ARENALIFE SRL, a Romanian company with its registered office in Hărman Commune, Strada MARULUI, No. 29, Brașov County , registered in the Trade Register under order no. 8/1928/18.06.2024 , with fiscal registration code 41957731;

Data subject - represents any identified or identifiable natural person whose data is processed by us as an operator, such as candidate users, employer users or visitors to the site;

Consent - means any free, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear action, signifies agreement to the processing of personal data concerning him or her;

Anonymization - means the irreversible removal of the identification of personal data, so that the person cannot be identified using a reasonable period of time, cost and technology, either by the Operator or by any other person, to identify that natural person. The principles of personal data processing do not apply to anonymized data, as they are no longer personal data.

2. Who are we?

Below you will find our identification data:

Name	ARENA LIFE SRL
Headquarters	Hărman Commune, MARULUI Street, No. 29, Brașov County
Trade Register Number	J8/1928/18.06.2024
Tax registration code	41957731
	info@arenalife.org

In accordance with the legislation in force, our company is a personal data controller , and in order for your data to be processed securely, we make every effort to implement reasonable and appropriate technical and organizational measures to protect your personal data.

3. Who are you?

According to the law, you, the individual accessing the Platform, the representative or contact person of a company that is our client or potential client, the visitor to the Platform or the person in any kind of relationship with us, are a “data subject”, that is, an identified or identifiable natural person. In order to be completely transparent about data processing and to allow you to easily exercise your rights at any time, we have implemented measures to facilitate the exercise of your rights.

4. Purpose of the privacy policy

The purpose of this Privacy Policy is to explain to you what information we process (collect, use, share), why we process it, how we process it, your rights under the GDPR and how you can update, manage, export and delete it, and for this purpose we act as a controller and, by law, we are obliged to provide you with this information.

5. Processing and type of personal data - Rights of visitors/registered users

Personal data or personal information is all information about an individual that can help identify that person, and does not include data where the identity has been removed (anonymized data).

When you browse the Platform or when you contact us for any purpose and using any communication channel, you may communicate your personal data to us. It will be necessary for us to collect, use, store or transfer certain personal data, directly from you or from other sources.

5.1. Processing of personal data

The company will process personal data in the following ways:

a) As a simple visitor. In this case, personal data will be kept strictly for your visit to the site.

b) As a registered user of the Platform. Once a year, the Company will ask the registered user to confirm the veracity of the data it holds and to update it in case of changes, in order to ensure the accuracy of the personal data. The registered user may modify or rectify his data at any time by logging into his account, with his username and password.

5.2 . Type of personal data and purpose of processing

In particular, the personal data that each candidate user must provide (either as a visitor or as a registered candidate user) to manage the relationship CONTRACT or pre-contractual with Users Recruiters are as follows:

5.2.1 Data you provide directly

1. Creating a user account

When you create a user account, you must provide us with a series of data, such as name, surname, email address/mobile phone number, date of birth, company details (in the case of an employer user account), etc.

1. Registered user profile data

You can include a range of information in your user profile, as well as in the CVs that are part of your Candidate User account, such as education, professional experience, skills, photos, preferences regarding the desired job, information on abilities, etc.

1. Other data you provide directly when you use the Platform or interact with the Platform

We will store the information we have received from you as a result of requests sent via email or chat, or when you participate in our surveys and questionnaires; also, if you use our services dedicated to remote interviews (Video Interview) , we will process your image and voice through the online conferencing services implemented in the Platform .

5.2.2 Data collected or generated by us as a result A interaction you with the Platform

We log information about when and/or how you visit or otherwise use the Platform (e.g. whether or not you have updated your CV, whether or not you have applied for a job).

We also use cookies and similar technologies to recognize you and your devices. We also allow others to use cookies. How we use these technologies is described in our Cookie Policy.

Also, when you use the Platform (including cookies or similar technologies on third-party sites), we receive information about your IP address, IP-based location, proxy server, operating system, web browser and plug-ins, device identifier. If you use our services from a mobile device, that device will send us data related to your geographic location, based on the settings of the mobile device used. We will ask you to opt-in before using the geolocation feature or other tools to identify your location.

5.2.3 Data obtained from third parties

We receive information about your visits and interaction with services provided by other entities when you visit other providers' services that include advertisements, cookies or similar technologies.

In the case of contacts designated by employer users (other than account holders), data is collected from the respective account holder.

The registered visitor/user is also informed that for the Company's communications with him, in the context of Law No. 365 of June 7, 2002 on electronic commerce, it processes the contact data provided by the user.

6. Purpose of processing personal data

In order to be able to access the Platform, as well as to be able to make all the functionalities of the Platform available to you, we process your personal data for the following purposes:

6.1. Account creation

The account created on the Platform is a true control panel that allows you to centralize information about your purchases and preferences.

Here you can also choose your preferences for our marketing communications (personalized offers and communications about discounts, products, services, Platform events, as well as requests for product reviews).

The user account allows you to access a series of services dedicated to candidate users, such as creating a CV, applying for a job, viewing job advertisements, contacting recruiter users, receiving announcements and alerts regarding recruitment advertisements published by recruiter users, etc.

also be accessed by employer users from abroad, including outside the European Economic Area, to jurisdictions that have been recognized as having an adequate level of protection . If you apply for a position published by such an employer user, your data may be transferred to such a jurisdiction.

We process your personal data contained in your CV and professional experience to display recommendations of employers and jobs on the Platform. The services offered in the form of recommendations on the Platform facilitate your job search and application process.

We will also use a range of data that you provide to us to optimize the way we make job recommendations or suggestions for completing your CV. We also use the data we receive from candidate users to create filtering facilities for candidate users based on various criteria of interest to employer users. We have a legitimate interest in improving our Services and providing suggestions/advice to Candidate Users to maximize the success of our Services. At the same time, we want to ensure the most efficient indicator search service for candidate users.

6.2. Managing the relationship with employer users

We process personal data for the purpose of managing the contractual or pre-contractual relationship with employer users. In the case of employer users (authorized natural persons) the legal basis is the conclusion and execution of the contract or the performance of pre-contractual formalities. In the case of personal data of employer user representatives, the legal basis is legitimate interest. We have a legitimate interest in adequately carrying out our

contractual relationships with our legal entity clients. The rights and interests of natural persons (i.e. employer user representatives) are not prejudiced since from the perspective of the legal entity client, the processing is necessary in the context of the development of the employment/collaboration relationships that they have with the natural persons whose data are provided/associated with the employer user account.

6.3. Reviews

We want to know your opinion about our products, services and Platform. At the same time

By posting reviews on the Platform, we process your first and last name, email address, the grades given, and the content of the review.

The purpose of processing your personal data is to manage and publish your reviews of products and services sold through the Platform.

6.4. Managing marketing communications

Regarding our marketing communications, we attach great importance to the messages we send you. Our marketing communications may contain information about Platform events, collecting feedback or requesting opinions and reviews about the Platform.

6.5. Customer service

To support you in resolving situations that may arise and answer your questions, you have several options to contact us, namely:

1. through the complaints section of the Platform;
2. through the contact section within the Platform;
3. by e-mail, to the address user@arenalife.org (will be insert email address where they can be reached customers ) .

To manage phone calls and messages, as well as to learn your opinion about the Platform, we will process certain data about you. Depending on the nature of the request, this data may be shared with other internal services or partners.

For this purpose, we will process the data necessary to manage the call or message: name, surname, e-mail address and telephone number and the data from the content of the call / message. We will also process your data by recording the telephone conversation in order to improve the quality of the services we offer and for evidentiary purposes. You are not obliged to provide us with your personal data, but in the absence of them we may not be able to handle your request.

At the same time, to ensure that we provide services through the Platform at the highest standards, we will process your personal data to resolve any malfunctions regarding the Platform.

6.6. Statistical purposes

In certain situations, we may use your personal data collected in accordance with the above processing purposes for statistical or scientific research purposes. Statistical information is not considered personal data because it does not allow the individualization of natural persons.

The statistical information obtained (e.g. in the form of charts) will contain anonymous data. This means that we will not be able to associate the statistical information with you or any other natural person. Since the statistical information obtained does not contain personal data, it can be stored for an unlimited period of time.

We inform you that the processing of your data for statistical purposes does not mean that we will no longer be able to identify you in accordance with the other activities involving the processing of your data. We will continue to process your personal data in accordance with the above purposes. For example, we will continue to hold information about you if you have a customer account with _____(name of online store)______ or if you have written a product review.

6.7. Plugin connection

USERS candidates can log in or they can create account by INTERMEDIATE plugin Facebook , which allows CONNECTING by personal Facebook account . Then When USERS candidate USED this facility, the Platform take over partial DATES user 's public

candidate from Facebook (e.g. name , surname , email address , phone number ). Use these data is needed for creation User account ..​

6.8. Data processing on social networks

This Privacy Policy is applicable to the official Facebook, Instagram, TikTok pages of the Platform as well as other official pages managed by the Company.

The Company is the administrator of the official pages and communities of the Platform ("Platform Pages") and the controller of your personal data processed through these pages. At the same time, Facebook is the controller of your personal data with regard to, for example, the transfer of data to other countries.

In some situations, the Company and Facebook share obligations regarding your data and have the status of associated operators (e.g. statistical data made available to the Company by Facebook, collected following your interaction with the Platform pages.

6.6.1. What personal data do we process?

a) When you visit the Platform pages, we will process the following data:

• if you like / share or leave a comment on our posts, we have access to your public profile (name, surname, photos and other public profile details), as well as to the content of the comment;

• if you send us a private message, we have access to your public profile, as well as the content of the message sent. For example, we may request your private phone number or email address to manage your request or to validate the winners of some contests;

• if you are a person who receives a tag from a friend in the posting of a contest/raffle organized on one of the Platforms, we will have access to your first and last name and your public profile.

b) Content sharing. As a rule, Stories published on the Instagram page are automatically transferred to the official Facebook page.

At the same time, we may share content from partner pages (e.g. influencer or entity pages) or followers' pages on our pages. For example, we may share a Story in which we are tagged by an influencer or follower, we may share a post by an influencer or partner that you have commented on, been tagged in, or in which your image/voice appears , or we may repost /share a post of yours in which your image/voice and your public profile appear.

c) When Facebook/Instagram users interact with the Platform pages, Facebook provides us with general statistics regarding the users' actions. For example, no. of page views, no. of clicks on a post and no. of interactions with the page content ( like , share , comment, etc.). These statistics are anonymized, the Company cannot identify you based on them.

d) When we personalize advertising campaigns on Facebook/Instagram, we set interest categories that may include you. Facebook uses predefined categories of people and shows our advertisement to people who belong to the category indicated by us.

We process your data for the purpose of promoting the Platform's brand, products, services or certain public events or charitable actions in which the Company is an organizer or partner, to respond to public or private messages, to analyze statistics regarding the audience of our pages and to personalize the audience of posts or advertising campaigns.

We note that providing data is not mandatory, but Facebook or other social media providers operate in a uniform manner for all pages and all users, so if you interact with our pages, we will automatically have access to certain data about you, as we have shown above.

7. Storage period of personal data

The data of the user not registered on the Platform will be stored and processed by the Company strictly for the duration of the visit to the Platform.

The data of the user registered on the Platform will be kept and processed by the Company until he requests the deletion of his account or, for any processing of his data based on his consent, until he declares the withdrawal of consent for the purpose of providing the Platform services. However, the personal data as long as necessary to fulfill the purposes for which they were collected, in compliance with the internal procedures regarding data retention, including the applicable archiving rules, if they provide for longer periods.

We inform you that we do not collect any Special Categories of personal data about you.

8. What happens if you don't provide us with your data?

When we ask you to fill in your personal data to provide you with access to certain functionalities or services of the Platform, we will mark some fields as mandatory because this is information that we need to be able to provide you with the service or to provide you with access to that functionality.

Please note that if you decide not to provide us with this information, you may not be able to complete your registration as a user or benefit from these services or functionalities.

We inform you that we will use your personal data only for the purposes for which we collected it, unless we reasonably believe that we need to use it for another reason and that reason is compatible with the original purpose.

Please note that we may process your personal data without informing you or requiring your consent, in accordance with the rules above, where the law allows us to do so.

9. Legal grounds for processing personal data

Our legal grounds for processing your personal data will generally be as follows:

1. There is your consent for the processing of personal data;
2. The processing is necessary for the conclusion or performance of a contract between you and us;
3. Processing is necessary for the purposes of our legitimate interests or those of another party.

10. Disclosure of personal data and data transfers

We inform you that we may disclose your data, in compliance with applicable law, to business partners or other third parties. We constantly make reasonable efforts to ensure that these third parties have implemented appropriate protection and security measures. We have contractual clauses with these third parties so that your data is protected. In these situations, we will ensure that any transfer is legitimate according to the law.

We may also transmit the data to other parties with your consent or according to your instructions, for example, in the event that you exercise a portability request or to authorized state bodies, based on and within the limits of legal provisions and as a result of expressly formulated requests.

The transfer of personal data to a third country may only take place if the country to which the transfer is intended ensures an adequate level of protection.

The transfer of data to a country whose legislation does not provide a level of protection at least equal to that offered by the General Data Protection Regulation is only possible if there are sufficient guarantees regarding the protection of the fundamental rights of the data subjects. These guarantees will be established by us through contracts concluded with the suppliers/service providers to whom your personal data will be transferred.

Whenever we transfer your personal data outside the EEA, we will ensure that a similar level of protection is in place through one of the following safeguards:

1. we will transfer personal data to countries where it has been demonstrated by the European Commission that they provide an adequate level of security for personal data.
2. When we use certain service providers, we will be able to use certain contract models provided and approved by the European Commission that provide personal data with the same protection as they have in Europe.

1 1. Data security

We understand how important the security of personal data is and we take the necessary measures to protect our clients and other persons whose data we process, from unauthorized access to personal data, as well as from unauthorized modification, disclosure or destruction of the data we process in the course of our daily activities.

We have implemented the following technical and organizational measures for the security of personal data:

Dedicated policies	We adopt and constantly review internal personal data processing practices and policies (including physical and electronic security measures) to protect our systems from unauthorized access or other potential threats to their security. These policies are subject to constant checks to ensure that we comply with legal requirements and that the systems are functioning properly.
Data minimization	We ensure that your personal data that we process is limited to what is necessary, adequate and relevant for the purposes stated in this Policy.
Restricting access to data	We try to restrict access to the personal data we process to the minimum necessary: employees, collaborators and other persons who need to access this data to process it and perform a service. Our partners and collaborators are subject to strict confidentiality obligations (either by contract or by law).
Specific technical measures	We use technologies that ensure the security of our customers, always trying to implement the most optimal solutions for data protection. We also make periodic data back-ups to be able to recover them in the event of a possible incident and we have implemented periodic audit procedures regarding the security of the equipment used. However, no website, no application and no internet connection is completely secure and untouchable.
Ensuring the accuracy of your data	Sometimes we may ask you to confirm the accuracy or timeliness of your data to ensure that it reflects reality.
Staff training	We constantly train and test our employees and collaborators on legislation and best practices in the field of personal data processing.
Data anonymization	Where we can, we try as much as possible to anonymize/pseudo-anonymize the personal data we process, so that we can no longer identify the persons to whom they refer.

However, although we make constant efforts to ensure the security of the data you entrust to us, we may also experience less fortunate events and have security incidents/breaches. In these cases, we will strictly follow the security incident reporting and notification procedure and will take all necessary measures to return the situation to normal as soon as possible.

1 2. Your rights - questions, requests and exercising rights

For any further information regarding his/her data, as well as their processing and protection, each data subject may contact the Company's data protection officer ( data protection officer) at the e-mail address user@arenalife.org . Your rights under the GDPR Regulation are as follows:

The right to be informed about the processing of your data.	You have the right to be informed about your personal data and the ways in which it is processed.
Right of access to data	You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed and, if so, access to the data and information provided for in Article 15(1) of the GDPR.
The right to rectify inaccurate or incomplete data	You have the right to obtain from us, without undue delay, the rectification of inaccurate personal data concerning you.
Right to erasure ("right to be forgotten")	In the situations provided for in Article 17 of the GDPR, you have the right to request and obtain the deletion of personal data.
Right to restriction of processing	In the cases provided for in Article 18 of the GDPR, you have the right to request and obtain restriction of processing.
The right to transmit the data we have about you to another controller ("right to portability").	The right to transmit the data we have about you to another controller (“right to portability”)
The right to object to data processing	In the cases provided for in Article 21 of the GDPR, you have the right to object to the processing of your data.
The right not to be subject to a decision based solely on automated processing, including profiling which has legal effects or similar significant effects on you.	Except for the exceptions provided for in Article 22 of the Regulation.
The right to seek justice to defend your rights and interests.	The right to seek justice to defend your rights and interests is a fundamental principle of the rule of law, guaranteed by international human rights law.

Please note that the rights listed above are not absolute. There are exceptions, therefore each request received will be analyzed in order to decide whether it is well-founded or not. To the extent that the request is well-founded, we will facilitate the exercise of your rights, and if the request is unfounded, we will reject it, but we will inform you of the reasons for the refusal and of your rights to file a complaint with the Supervisory Authority and to seek legal action.

We will also try to respond to your request within 30 (thirty) days. However, this period may be extended depending on various aspects, such as the complexity of the request, the large number of requests received or the impossibility of identifying you within a reasonable time. If, despite our best efforts, we are unable to identify you and you do not provide us with additional information to enable us to identify you, we are not obliged to comply with the request.

Also, for any kind of problem or uncertainty regarding the processing of personal data, you can file a complaint with the personal data supervisory authority, but please first send us a request to the address mentioned in this document, and we will make every effort to resolve your request as soon as possible, amicably.

For Romania, the contact details are as follows:

Name	National Supervisory Authority for Personal Data Processing
Address	B-dul G-ral. Gheorghe Magheru no. 28-30, Sector 1, postal code 010336, Bucharest, Romania
Phone	+40.318.059.211 or +40.318.059.212
E-mail	anspdcp@dataprotection.ro

13. Accessing third-party sites

This Privacy Policy does not cover other third-party applications and websites that you may reach by following links from our website, and we encourage you to review the Privacy Policy on any website and/or application before providing any personal data.

We are also not responsible for any links from our commercial partners or advertisers on our Platform, including those on social media profiles. When you click on those links, third parties may collect or share data about you.

You should be aware that we do not control any link that is placed on the site by us or by other Users (such as, for example, links left in comments, videos, community, on social networks, etc.) and that you are fully responsible when you access such links and assume any damage (direct or indirect) that may arise.

14. Changes/Modifications/Updates to the Privacy Policy

If we materially update this Privacy Policy, we will notify you of the changes, in accordance with the provisions of the GDPR. All updates and changes to this document are effective immediately upon notification. Even if you do not receive a notification, we encourage you to access and read the Privacy Policy periodically to be aware of the latest versions.

Privacy policy updated on 13.03.2025.