Does arr66 sell my personal data to other parties?

No, arr66 has never and will never sell, rent, or share your personal data with any third party for marketing or commercial purposes. Your data is entirely your own. Limited data sharing occurs in three circumstances only: with payment providers to process transactions (Touch 'n Go eWallet, GrabPay, and others), with Malaysian authorities where required by law, and in cases of suspected fraud or money laundering for investigation purposes. In all these cases, sharing is minimal and strictly limited to what is necessary.

How do I request a copy or deletion of my personal data from arr66?

To request a copy of your personal data (right of access) or data deletion (right to be forgotten), contact the arr66 support team via live chat or email at support@arr66.my. Please clearly state the nature of your request — whether it is for access, correction, deletion, or data portability. We will require sufficient identity verification before processing any request. Access and data portability requests will be fulfilled within 14 business days. Correction requests are processed within 7 business days. Please note that certain data may need to be retained to fulfil legal obligations even after your account is closed.

Does arr66 store my credit card or bank account details?

No, arr66 does not directly store your credit card numbers, bank account numbers, or other sensitive financial information. All financial transactions on the arr66 platform are processed through approved third-party payment providers — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX. Your sensitive financial details interact only with the respective payment provider's servers, which maintain their own PCI-DSS security standards. arr66 receives only a transaction confirmation response (successful or failed) and never receives or stores your sensitive financial details.

Can I opt out of receiving promotional emails from arr66?

Yes, you can opt out of marketing and promotional communications from arr66 at any time. There are two ways to do this: first, log in to your arr66 account and go to Account Settings to disable the promotional email preference. Second, click the "Unsubscribe" link found at the bottom of any promotional email you receive from arr66. Changes will take effect within 5 business days. Please note that unsubscribing from promotional communications does not stop important account-related notices such as transaction confirmations, security alerts, and necessary policy updates.

What happens to my data if I close my arr66 account?

When you close your arr66 account, we will immediately disable your access to the platform. However, certain data must be retained to fulfil Malaysia's legal obligations — specifically, financial transaction records which are required to be kept for 7 years under applicable tax and financial laws. Data not subject to mandatory retention requirements will be deleted or anonymised within 90 days of account closure. Once the mandatory retention period expires (typically 7 years after the last transaction), all remaining data will be permanently deleted using methods that meet industry data security standards.

arr66 | Privacy Policy and Personal Data Protection

1 Introduction & Scope of This Policy

This Privacy Policy describes how arr66 ("we", "the arr66 platform") collects, processes, stores, and protects your personal information when you use our online casino platform, accessible at arr66.my. This document applies to all users of the arr66 platform, including registered members, visitors, and anyone who interacts with our services.

Arr66 is committed to protecting your privacy and ensuring that the personal information you share with us is handled with transparency, integrity and full compliance with the Malaysia Personal Data Protection Act 2010 (PDPA). We believe your trust is the most valuable asset we have, and we will never take it for granted.

Important: By registering an arr66 account or using any of our services, you agree to the terms of this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of the arr66 platform and contact us if you wish to have your data deleted.

Arr66 follows a data minimisation principle — we only collect information that is genuinely necessary to deliver our services safely and effectively. We do not collect excessive data purely for business interests without clear justification.

2 Types of Personal Data We Collect

Arr66 collects various types of personal information depending on how you interact with our platform. Below are the categories of data we collect and the purposes for which they are collected:

Data Category	Example Information	Primary Purpose
Identity Data	Full name, date of birth, MyKad number	Age & identity verification
Contact Data	Malaysian phone number, email address	Account communications, security OTPs
Financial Data	Deposit records, withdrawals, betting history	Transaction processing, legal compliance
Technical Data	IP address, device type, web browser, OS	Security, fraud detection
Usage Data	Game history, session duration, game preferences	Personalise your experience, analytics
Location Data	General location based on IP (country/city)	Geo-restriction compliance, security

Arr66 not collect credit or debit card numbers directly. All financial transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX are processed by their respective payment providers, each with their own privacy policies and security standards.

arr66 will never ask for your PIN, digital wallet password, or other sensitive information through any communication channel. If you receive such a request claiming to be from arr66, please report it to our support team immediately.

3 How We Use Your Data

Every piece of information we collect has a clear and legitimate purpose. arr66 uses your personal data for the following:

Account Management: Creating and managing your arr66 account, including registration, login, identity verification, and password recovery.
Transaction Processing: Processing deposits and withdrawals in MYR (RM) via supported Malaysian payment methods, securely and accurately.
Gaming Service Provision: Enabling you to access and enjoy all games on the arr66 platform, including slots, Live Casino, Lightning Dice, Deal or No Deal, Spaceman, and more.
Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, account breach attempts, and any activity that violates arr66's Terms and Conditions.
Legal Compliance: To meet the legal and regulatory obligations applicable to arr66 in Malaysia, including reporting requirements to the relevant authorities where mandated.
Service Communications: Sending important account notices, security updates, promotional information (if you have opted in) and transaction notifications.
Platform Improvements: Analysing aggregated usage patterns (without identifying individuals) to improve the user experience, platform speed, and game selection.
Customer Support: Managing enquiries, complaints, and assistance requests submitted to the arr66 support team.

arr66 does not use your data to make automated decisions that negatively affect you without human involvement. Any significant decisions relating to your account are subject to review by qualified arr66 staff.

4 Data Sharing With Third Parties

Arr66 not sold, not rented, and not disclosed your personal information to third parties for marketing or commercial purposes without your explicit consent. However, there are a limited number of circumstances where data sharing is necessary and legally permissible:

Payment Service Providers: arr66 shares minimal transaction information with approved payment providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX processors, solely to facilitate transaction processing. These providers are bound by strict confidentiality agreements.
Game Providers: Minimal technical information may be shared with licensed game software providers for technical purposes related to game delivery. No personally identifiable data is shared.
Malaysian Authorities: arr66 will disclose personal data to Malaysian authorities (such as the Royal Malaysia Police, Bank Negara Malaysia, or the Securities Commission) if required by a valid court order or applicable legal provision.
Fraud Prevention: In cases of suspected fraud or money laundering, relevant information may be shared with Malaysian law enforcement agencies or relevant industry bodies.

In all legitimate data-sharing cases outlined above, arr66 ensures that receiving parties are bound by confidentiality agreements and data protection obligations equivalent to or exceeding arr66's own standards.

5 arr66 Data Security Measures

Arr66 continuously invests in security infrastructure to ensure your personal data is protected against a wide range of cyber threats. The key security measures we have implemented include:

256-bit SSL/TLS Encryption: All communications between your browser and arr66's servers are encrypted using TLS 1.3 protocol with 256-bit key length, ensuring your data remains unreadable to unauthorised parties even if intercepted.
Hashed Password Storage: Your password is stored as a one-way hash using modern cryptographic algorithms. arr66 staff are unable to view your actual password.
Two-Factor Authentication (2FA): arr66 supports and encourages the use of two-factor authentication via SMS OTP to your registered Malaysian mobile number as an added layer of security.
24/7 Security Monitoring: arr66's automated monitoring system runs around the clock to detect suspicious login attempts, unusual account changes, or abnormal transaction patterns.
Multi-Layered Firewall: arr66 servers are protected by multiple layers of firewalls that block unauthorised external access.
Internal Access Controls: Internal access to member data within arr66 is restricted to staff with a legitimate business need only, with all access recorded and audited.
Regular Data Backups: arr66 data is automatically and regularly backed up to secure locations to ensure swift recovery in the event of a technical disruption.

While arr66 takes all reasonable steps to protect your data, no system is 100% immune to cyber threats. You also play an important role in keeping your account secure — ensure your password is strong, unique, and not shared with anyone.

6 Cookies, Tracking Technologies & Server Logs

Arr66 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse how the platform is used. The following are the types of cookies we use:

Essential Cookies (Required): Cookies required for the arr66 platform to function correctly, including login session cookies, CSRF security cookies, and language preference cookies. These cookies cannot be disabled.
Performance Cookies: Collecting information on how pages are used — which pages are visited most often, page load times, and error messages. This information is used in aggregated form to improve the platform.
Functional Cookies: Saves your preferences such as display settings, selected language, and previously configured game settings to make your experience smoother.
Security Cookies: Used to detect and prevent fraudulent activity, suspicious login attempts, and other cyber threats.

Arr66 server logs automatically record technical information including IP addresses, browser type, operating system, and access timestamps. These logs are used solely for security purposes, technical debugging, and legal compliance. Server logs are retained for 90 days before being automatically deleted.

You can manage your cookie settings through your web browser settings. However, disabling essential cookies may affect the functionality of the arr66 platform and your gaming experience.

7 Your Rights Regarding Personal Data

As an arr66 member and as an individual under Malaysia's PDPA, you have the following rights regarding your personal data held by arr66:

Right of Access

You have the right to request a copy of the personal data we hold about you. arr66 will provide this information within 14 business days of receiving your request.

Right to Rectification

If any personal data arr66 holds about you is inaccurate or incomplete, you have the right to request a correction. We will update your records within 7 business days.

Right to Erasure

You may request the deletion of your personal data from arr66's systems. Please note that closing an active account will result in loss of access to all arr66 services. Certain data may need to be retained for legal compliance purposes.

Right to Object to Processing

You have the right to object to the processing of your data for specific purposes such as marketing communications. You can unsubscribe from promotional communications at any time through your arr66 account settings.

Right to Data Portability

You have the right to request your personal data in a machine-readable format (such as CSV or JSON) for transfer to another platform. Such requests will be processed within 14 business days.

Right to Withdraw Consent

Where data processing is based on your consent, you have the right to withdraw that consent at any time without affecting the validity of any processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the arr66 support team via live chat or email at [email protected] stating the right you wish to exercise along with sufficient proof of identity.

8 Data Retention Period

Arr66 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. The following are general guidelines for our retention periods:

Active Account Data: Retained for the duration your arr66 account is active and for 7 years after account closure for legal and tax compliance purposes.
Financial Transaction Records: Retained for 7 years in accordance with applicable Malaysian financial and tax legal requirements.
Security Logs: Retained for 90 days before being automatically deleted, unless required for an ongoing investigation.
Support Communication Data: Customer support conversation records are retained for 2 years for quality control and dispute resolution purposes.
Marketing Data: Retained until you withdraw your consent or request deletion.

Once the retention period expires, your personal data will be securely deleted or permanently anonymised so it can no longer be linked to you as an individual. This deletion process follows industry-standard methods to ensure the data is completely unrecoverable.

9 Protection of Children & Minors

The arr66 platform is strictly for individuals aged 18 years and above. arr66 strictly prohibits the registration and use of its platform by anyone under the age of 18.

Arr66 does not knowingly collect or process the personal data of minors. If we become aware that we have collected data from someone under the age of 18, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian and believe that your child under the age of 18 has registered for or used the arr66 platform, please contact us immediately at [email protected]. We will investigate and take appropriate action as promptly as possible.

Online gambling by individuals under the age of 18 is illegal in Malaysia. arr66 operates a strict zero-tolerance policy on underage gambling and will report suspected cases to the relevant authorities.

10 Changes to This Privacy Policy

Arr66 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or new service features. We will notify you of any material changes via:

A prominent notice on the arr66 platform's main page
Push notifications or email to registered members for important changes
Update the "Last Updated" date at the top of this page

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Continued use of the arr66 platform following any published changes to this Privacy Policy constitutes your acceptance of those changes.

If the changes are significant and require your renewed consent, arr66 will seek your explicit consent before continuing to process your data under the revised terms.

11 Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we manage your personal data, please contact the arr66 privacy team through the following channels:

Privacy Email: [email protected] (please state "Privacy Enquiry" in the email subject line)
Live Chat: Available 24/7 via the chat icon on the arr66 platform — select the "Privacy & Data" category
Language of Service: Bahasa Malaysia and English
Response Time: Under 5 minutes via live chat, within 2 business days via email

If you are dissatisfied with arr66's response to your privacy request, you have the right to lodge a complaint with Department of Personal Data Protection (JPDP) Malaysia which is the regulatory body for the PDPA in Malaysia.

For frequently asked questions about privacy and your account, visit the Frequently Asked Questions us for an immediate response. You can also read Terms & Conditions us for complete information on the use of the arr66 platform.

Arr66 Privacy Policy – Our Commitment to Your Data Security

How arr66 Protects Your Data

Bank-Grade Encryption

Your Data Is Never Sold

Full Control Over Your Data

Malaysia PDPA Compliance

Secure Data Storage

Bahasa Malaysia Privacy Support