Privacy Policy arr66 –
Player Personal Data Protection

1 Introduction and Scope of This Privacy Policy

This Privacy Policy is published by arr66 ("we", "Platform" or "arr66") and applies to all users who access or use arr66 services through the website https://arr66.pro or the arr66 mobile app. This document outlines our privacy practices in a comprehensive and transparent manner.

Arr66 takes the protection of user personal data extremely seriously. We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. All data you provide us is handled with care, stored securely, and used only for the purposes stated in this Privacy Policy.

By registering and using the arr66 platform, you agree to the data collection and usage practices described herein. If you do not agree with any part of this Privacy Policy, please discontinue use of the arr66 platform and contact us for assistance with your account.

2 Types of Personal Data We Collect

Arr66 only collects personal data necessary to provide our services safely and effectively. The following are the categories of data we collect:

We may also collect data from legitimate third-party sources such as identity verification providers and fraud prevention agencies, solely to ensure platform security and comply with legal requirements.

3 How arr66 Uses Your Personal Data

The personal data we collect is used responsibly and only for the following legitimate purposes:

• Account management: Creating, verifying, and managing your arr66 account, including the KYC process, wagering limit settings, and password management.
• Transaction processing: Securely processing all deposits and withdrawals via your chosen payment methods, including FPX, DuitNow, Touch 'n Go eWallet, and GrabPay.
• Platform Security: Detecting and preventing fraudulent activity, money laundering, bot usage, and any unauthorized access to the arr66 platform.
• Responsible wagering: Monitoring your gaming patterns to detect signs of problem wagering and providing appropriate self-control tools when needed.
• Legal compliance: Meeting compliance obligations under applicable Malaysia laws, including anti-money laundering (AML) reporting requirements and KYC.
• Service communications: Sending account notifications, security alerts, policy updates, and technical information relevant to your use of arr66.
• Promotions and offers: Delivering bonus offers, promotions, and new game information – only if you have given consent to receive marketing communications.
• Platform improvement: Analyzing aggregated and anonymized usage patterns to improve platform design, performance, and overall user experience.

4 Data Sharing and Disclosure to Third Parties

Arr66 does not sell or rent your personal data to any third party. We only share your personal data in limited circumstances as follows:

• Payment service providers: Required financial data is shared with approved payment gateway providers solely to process your transactions. All payment providers are bound by strict confidentiality agreements.
• Game software providers: Limited technical information is shared with licensed game providers to enable access to games within the arr66 platform. These providers are not permitted to use your data for any other purpose.
• Identity verification providers: KYC documents are shared with licensed third-party identity verification services to meet anti-money laundering compliance requirements.
• Legal requirements: arr66 may disclose your personal data to relevant authorities when required to do so by Malaysian law, court order, or law enforcement investigation.
• arr66 rights protection: In cases of fraud, breach of Terms, or legal action, relevant data may be disclosed to legal counsel or the appropriate authorities.

All third parties receiving data from arr66 are required to uphold the same or higher data protection standards, and may only use that data for permitted purposes. arr66 is responsible for ensuring all data-sharing agreements comply with PDPA 2010.

5 arr66 Data Security and Encryption Technology

Arr66 employs a multi-layered security infrastructure to protect your personal data from unauthorised access, loss, misuse, or unauthorised disclosure.

• 256-bit SSL encryption: All communications between your device and arr66 servers are encrypted using industry-standard TLS/SSL 256-bit protocol, ensuring transmitted data cannot be intercepted by third parties.
• Data-at-rest encryption: Sensitive personal data stored in the arr66 database is encrypted using AES-256, the encryption standard used by leading financial institutions worldwide.
• Two-factor authentication (2FA): arr66's 2FA system adds an extra layer of protection to your account, ensuring only the legitimate account owner can gain access even if the password has been leaked.
• Real-time monitoring: arr66's threat detection system continuously monitors account activity 24/7, instantly identifying and blocking any suspicious or unusual behaviour.
• Internal access controls: Access to users' personal data among arr66 staff is restricted on a need-to-know basis only, with all access logged and monitored on a regular basis.
• Regular security audits: The arr66 platform undergoes periodic independent security audits by qualified third parties to identify and address any potential system vulnerabilities.

6 Use of Cookies and Tracking Technologies

Arr66 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and help us understand how the platform is used.

• Essential cookies: These cookies are required for the core functions of the arr66 platform, such as login authentication, game session management, and security settings. Without them, the platform cannot operate properly.
• Performance cookies: Helping us analyze how users interact with the platform, which pages are most frequently visited, and where users encounter issues, for the purpose of technical improvements.
• Functional cookies: Saving your personal preferences such as language, display settings, and game preferences so you do not need to reconfigure them each time you access arr66.
• Analytics cookies: arr66 uses internal analytics tools that do not share data with third-party advertising platforms, to monitor platform performance and usability.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality and user experience of the arr66 platform. For more information, please refer to your web browser's help documentation.

7 Personal Data Retention Period

Arr66 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.

• Active account data: While your arr66 account is active, we retain all relevant data to ensure smooth and secure service delivery.
• After account closure: Upon account closure, arr66 retains your personal data and transaction records for a minimum of 7 years as required by Malaysia's financial and anti-money laundering laws.
• Security log data: Activity and security logs are retained for 2 years to support investigations in the event of any security incident or dispute.
• Marketing data: If you have withdrawn your marketing consent, data related to marketing communications will be deleted within 30 days from the date of withdrawal.

8 Your Rights as a Data Subject

As an arr66 user protected under Malaysia's PDPA 2010, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the arr66 Privacy Officer via email [email protected]. arr66 will process your request within 21 business days from the date of receipt of your completed application.

9 Children's Data Protection

The arr66 platform is exclusively for individuals aged 18 and above. arr66 does not knowingly collect, store, or process personal data from children under the age of 18.

If we find that we have inadvertently collected personal data from individuals under the age of 18, we will take immediate action to delete that data and close the relevant account without delay. If you believe a minor has registered an account at arr66, please notify us immediately via our support email.

10 Changes to This Privacy Policy

Arr66 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform improvements. All changes take effect immediately upon publication on the arr66 platform.

For significant changes that materially affect your privacy rights, arr66 will endeavour to provide advance notice via in-platform notifications or email to the address registered on your account. The "Updated" date at the top of this page will always reflect the most recent update.

Your continued use of the arr66 platform after any Privacy Policy changes are published will be considered your acceptance of the updated privacy terms. We encourage you to review this page periodically to stay informed about how we protect your data.

11 Contact the arr66 Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how arr66 handles your personal data, please contact us through the following channels:

• Privacy Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week, directly within the arr66 platform.
• Response time: arr66 aims to respond to all privacy enquiries within 3 business days.

You may also visit the Frequently Asked Questions (FAQ) us or read Terms and Conditions for more information on using the arr66 platform.