Ar66 Privacy Policy – Your Personal Data Protection

Introduction & Scope of Privacy Policy

Ar66 ("we", "the ar66 platform") takes the privacy and security of all our members' personal data very seriously. This Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and clearly explains how we handle the information you provide when using the ar66 platform.

This policy applies to all information collected through the ar66 website, the ar66 mobile app, and all our official communication channels — including customer support via live chat and email. By registering as an ar66 member or continuing to use our services, you consent to the collection and use of your personal data as described in this document.

We understand that your trust is our most valuable asset. That is why ar66 never sells, rents, or transfers your personal data to any third party for marketing purposes without your explicit consent. This is a commitment we uphold firmly.

Types of Personal Data Collected

Ar66 collects various types of personal data from members for legitimate and stated purposes. The following are the main categories of data we collect:

We only collect data that is strictly necessary for the stated purposes. ar66 does not collect sensitive data such as your medical information, political views, or religious beliefs.

How ar66 Uses Your Personal Data

Ar66 uses the personal data collected solely for the following legitimate and specified purposes:

• Account management: Creating and maintaining your member account, and processing registration and login securely.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions efficiently and securely through registered payment channels.
• Identity verification (KYC): Verifying your identity to comply with anti-money laundering laws and consumer protection requirements.
• Customer support: Providing accurate and effective assistance in resolving your inquiries, complaints, and requests.
• Platform security: Detecting, investigating, and preventing fraud, unauthorized access, and illegal activity on the ar66 platform.
• Personalize experience: Personalizing game recommendations, promotions, and platform content based on your preferences and gaming habits.
• Marketing communications: Sending you information about promotions, bonuses, and the latest offers — only if you have agreed to receive them.
• Responsible gaming: Monitoring gaming habits to identify signs of problem gambling and provide appropriate support.
• Legal compliance: Fulfilling legal obligations, regulations, and directives from relevant authorities.

Data Sharing & Disclosure

Ar66 does not sell, rent, or transfer your personal data to third parties for their own commercial purposes. However, in the course of platform operations, we may share your data with selected parties as follows:

• Payment service providers: Approved payment partners such as FPX, DuitNow, Touch 'n Go eWallet, and GrabPay processors to securely handle your transactions.
• Gaming platform providers: Licensed game software companies that provide game content on the ar66 platform, subject to strict confidentiality agreements.
• Technology service providers: Technical infrastructure providers, cloud services, and cybersecurity partners that help us operate the platform securely.
• Regulatory bodies and law enforcement: When required by law, court order, or direction from a competent authority in Malaysia.
• Companies within the ar66 group: Related entities within the ar66 group for internal management and operational support purposes, subject to the same privacy protections.

Every third party with whom we share your data is bound by strict confidentiality and data protection agreements. They are only permitted to use your data for purposes specified by ar66.

Data Protection Security Measures

Ar66 implements a comprehensive range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL encryption: All data transmitted between your device and ar66's servers is protected by industry-standard SSL encryption.
• Two-factor authentication (2FA): An additional security layer for account login to prevent unauthorized access.
• 24/7 security monitoring: The ar66 cybersecurity team continuously monitors platform activity to detect any threats or suspicious activity.
• Internal access controls: Only authorised staff may access members' personal data, and such access is restricted on a need-to-know basis.
• Regular security audits: ar66 conducts regular security assessments and penetration testing to identify and address any system vulnerabilities.
• Secure data storage: Your personal data is stored on secure servers with strict physical and digital access controls.

While ar66 takes all reasonable steps to protect your data, no security system is entirely foolproof. You also play an important role in keeping your account secure by using a strong password and not sharing your login credentials.

Cookies, Tracking Technologies & Analytics

The ar66 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly. Cookies are small text files stored on your device when you visit the ar66 platform.

Types of cookies we use:

• Essential cookies: Required for core platform operations such as login session management, security, and navigation. These cookies cannot be disabled.
• Performance cookies: Helping us understand how members use the platform so we can continuously improve the overall user experience.
• Functionality cookies: Saving your preferences such as language and display settings so you do not need to reconfigure them each time.
• Analytics cookies: Collecting aggregated data on platform usage patterns for service improvement purposes.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality and user experience of the ar66 platform.

Your Rights Regarding Personal Data

As an ar66 member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the ar66 customer support team via live chat or our official email. We will process your request within 14 business days.

Data Retention Period

Ar66 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law. The following are our general data retention guidelines:

• Active account data: Retained for the duration your account is active and for a reasonable period after account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements.
• KYC records and identity verification: Retained for a minimum of 5 years after the business relationship ends, in accordance with anti-money laundering legal requirements.
• Customer support communication records: Retained for 3 years for reference and service improvement purposes.
• Technical log data: Retained for 90 days for security and technical troubleshooting purposes.

When data is no longer needed, ar66 will delete or destroy it securely and irreversibly.

Children's Privacy

Ar66 strictly prohibits use of the platform by individuals under 18 years of age. The ar66 platform is not designed for children, and we do not knowingly collect personal data from minors.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who become aware that their child has registered on the ar66 platform are urged to contact us immediately so that appropriate action can be taken.

Amendments to the Privacy Policy

Ar66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, the latest legal requirements, or platform service improvements. The "Last Updated" date at the top of this document will be updated each time an amendment is made.

For material amendments, ar66 will notify members via in-platform notifications or their registered email at least 14 days before the changes take effect. Continued use of the ar66 platform after notice is given constitutes your acceptance of the amended policy. We encourage you to review this page periodically.

Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how ar66 handles your personal data, please contact our Data Protection Officer team via:

• Live Chat: Available 24/7 directly on the ar66 platform — the fastest way to get a response
• Privacy Email: [email protected]
• General Support Email: [email protected]

We are committed to responding to all privacy-related enquiries within 5 business days. For more complex requests such as data deletion or data export, the processing period is 14 business days.