🔒
🔒 arr66 Personal Data Protection

Arr66 Privacy Policy – Our Commitment to Protecting Your Personal Data in Malaysia

Your privacy is our priority. This document transparently explains how arr66 collects, stores, uses, and protects the personal information of every member in Malaysia.

Updated: 1 January 2026  |  Malaysia PDPA Compliance
256-bit SSL
PDPA compliance
No Data Sales
Encrypted Data
Full Right of Access
Important Note:

By using our services arr66, you agree to this Privacy Policy. Please read it carefully. If you disagree with any part, please discontinue use of the platform and contact us to close your account.

1. Introduction

arr66 ("we", "platform", "Company") respect the privacy of every individual using our services on arr66.ws. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards.

This document explains in detail how arr66 collect, process, store, and protect your personal data when you register as a member, make deposits via Touch 'n Go eWallet, GrabPay, DuitNow, or other local Malaysian payment methods, or use any of our online casino, Sports Betting, or digital entertainment services on our platform.

arr66 is committed to: We will not sell, rent, or disclose your personal data to any third party without your explicit consent — unless required by applicable Malaysian law.

This Privacy Policy applies to all members, visitors, and users of the arr66 platform, regardless of how you access our services — whether via web browser, mobile app, or any other means.

2. Personal Data We Collect

Arr66 only collects data that is genuinely necessary to deliver quality, secure services that meet legal requirements. The following are the categories of data we collect:

2.1 Data You Provide Directly
  • Identity Information: Full name, date of birth, MyKad number or passport number
  • Contact Information: Email address, mobile number, residential address in Malaysia
  • Financial Information: Bank account details (for withdrawals), deposit and withdrawal transaction records via TNG eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u, CIMB Clicks), or other local payment methods
  • KYC Documents: MyKad copy, bank statements, and proof of address documents during the Know Your Customer process
  • Password: Stored in encrypted (hashed) form – we cannot read your original password
2.2 Automatically Collected Data
  • Technical Data: IP address, browser type, operating system, screen resolution
  • Usage Data: Pages visited, session duration, games played, bets placed
  • Device Data: Unique device identifier, phone model (if using the mobile version)
  • Location Data: General state or city based on IP address (not precise GPS)
  • Cookies and Similar Technologies: Please refer to Section 8 for more information on cookies
2.3 Data from Third-Party Sources

In certain circumstances, arr66 may receive data relating to you from the following sources:

  • Identity verification service providers (for KYC checks)
  • Payment processors such as FPX, TNG eWallet, or partner banks
  • Fraud prevention and anti-money laundering (AML) agencies

3. How We Use Your Data

Arr66 uses your personal data solely for legitimate and reasonable purposes, including:

Purpose of Use Legal Basis Required?
Member account management & identity verificationContractual complianceMandatory
Deposit & withdrawal processingContractual complianceMandatory
Malaysia KYC and AML ComplianceLegal obligationMandatory
24/7 customer supportContractual complianceMandatory
Fraud prevention & platform securityLegitimate interestsMandatory
Delivery of relevant promotions & bonusesYour consentOptional
Usage analytics for platform improvementLegitimate interestsOptional
Legal compliance & court ordersLegal obligationMandatory
Marketing Communications

Arr66 will only send promotional emails, bonus notifications, or marketing messages if you have given your consent during registration. You may withdraw this consent at any time through your account settings or by contacting our customer support.

4. Data Sharing with Third Parties

arr66 does not sell your data. This is our absolute commitment. However, in certain limited and strictly controlled circumstances, your data may be shared with the following parties:

4.1 Approved Service Providers
  • Payment Processors: Touch 'n Go eWallet, GrabPay, Boost, DuitNow, FPX, and associated banking institutions receive only the minimum transaction data required to process payments.
  • Game Providers: Licensed third-party casino game software providers receive game session data for technical management purposes only.
  • KYC Services: Licensed third-party identity verification platforms receive document copies solely for verification purposes.
  • Hosting & Cloud Services: Our data servers are operated by certified cloud service providers under strict security agreements.
4.2 Legal Obligations

Arr66 may be required to disclose your data to Malaysian authorities (such as Bank Negara Malaysia, PDRM, or the Emergency Commission) if:

  • Required by a court order or valid legal directive
  • A criminal or fraud investigation involving your account is underway
  • Required for compliance with the Anti-Money Laundering Act 2001

All third-party service providers engaged by arr66 are bound by strict data confidentiality agreements and are only permitted to use your data for the stated purposes. We do not share data with advertisers or external marketing companies.

5. Data Security at arr66

Arr66 continually invests in industry-grade security infrastructure to ensure your personal data is protected at all times. The security measures we employ include:

  • SSL 256-bit Encryption: All communications between your browser and arr66's servers are encrypted using 256-bit SSL technology — the same level of encryption used by leading banking institutions.
  • Sensitive Data Encryption: Financial information, passwords (hashed with bcrypt), and KYC documents are stored in encrypted form in our database.
  • Two-Factor Authentication (2FA): You can enable 2FA for an additional layer of security on your arr66 account.
  • 24/7 Monitoring: Our intrusion detection system (IDS) monitors for abnormal activity in real time, around the clock.
  • Regular Security Audits: Penetration testing is conducted periodically by accredited independent cybersecurity firms.
  • Internal Access Controls: arr66 staff only have access to data necessary for their specific roles, and all access is logged and monitored.
Shared Responsibility

While arr66 takes comprehensive security measures, digital security is a shared responsibility. Please keep your password confidential, never share your login credentials with anyone, and contact us immediately if you suspect any unauthorised activity on your account.

6. Data Retention Period

Arr66 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by Malaysian law.

Data TypeRetention PeriodReason
Active account dataFor as long as the account remains activeService management
Financial transaction records7 years after transactionMalaysian legal compliance
KYC Documents5 years after account closureAnti-money laundering requirements
Security & activity logs2 yearsFraud prevention & auditing
Support communication data3 yearsCustomer service records
Preference cookie dataMaximum 24 monthsUser experience improvements

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered. Data required for legal purposes will be retained until all related obligations have been fulfilled.

7. Your Rights as a Data Subject

Under Malaysia's PDPA and arr66's privacy policy, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of all personal data we hold about you. Requests will be processed within 21 business days.

Right to Rectification

If any of your data is inaccurate or out of date, you have the right to request an immediate correction. Log in to "Profile" or contact our support team.

Right to Erasure

You may request data deletion in certain circumstances. Please note that some data must be retained to comply with Malaysian law.

Right to Object

You may object to data processing for marketing purposes at any time via your account settings or by emailing our team.

Data Portability Rights

You may request your data in a machine-readable format (JSON/CSV) for transfer to another platform if needed.

Right to Restriction

In certain circumstances, you may request a restriction on the processing of your data while a dispute or review is pending.

To exercise any of the above rights, please contact us by email at support@arr66.ws with the subject line "Privacy Rights Request". arr66 will respond within 21 working days.

8. Cookie Policy

Arr66 uses cookies and similar tracking technologies to enhance your experience on the platform. The following are the types of cookies we use:

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect the functionality of the arr66 platform.

9. Protection of Children's Data

Minimum Age Policy: 18 Years

The arr66 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from minors. Should we discover that data from an underage individual has been collected, we will delete it immediately and close the account in question.

If you believe a minor has registered on the arr66 platform, please contact us at support@arr66.ws immediately so that we may take the appropriate action.

10. Privacy in Payments & KYC

Arr66 embeds a "privacy by design" approach across all financial processes. When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, your payment information is processed directly by licensed payment service providers and not stored in full on arr66 servers.

  • Your bank account or e-wallet number is stored in masked form (e.g. ****1234) for withdrawal verification purposes.
  • The KYC process is carried out through a secure system, and all documents are encrypted during transmission and storage.
  • Arr66 staff handling the KYC process are bound by strict confidentiality agreements and undergo regular data protection training.
  • Your financial information will not be shared with game providers or any party not directly involved in processing your transactions.

11. Privacy Policy Amendments

Arr66 reserves the right to update or amend this Privacy Policy at any time. Members will be notified of any material changes via:

  • Notification emails to your registered address
  • Prominent notice on the arr66 platform homepage
  • In-account notification upon your next login

Continued use of the arr66 platform after the effective date of any amendments constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request data deletion in accordance with the procedure outlined in Section 7.

12. Contact arr66's Privacy Officer

For any questions, concerns, or requests regarding your privacy and data protection, please reach us through the following channels:

Privacy Email
support@arr66.ws
Live Chat
Available 24/7 on the platform
Response Time
Within 21 business days

You may also lodge a data protection complaint with the Department of Personal Data Protection, Ministry of Communications and Digital Malaysia, if you believe your privacy rights have been violated.

This document was last updated: 1 January 2026
Version 3.1 – Bahasa Melayu (ms-MY)  |  Malaysia PDPA Compliance  |  © 2026 arr66.ws
🛡️
arr66 Personal Data Protection Commitment
arr66 operates in compliance with the Personal Data Protection Act 2010 (PDPA) Malaysia. Your data is protected by SSL 256-bit encryption, encrypted at rest, and will never be sold to any third party. Your trust is our most valued asset.
✓ SSL 256-bit
✓ PDPA Compliant
✓ No Data Selling

🔐 How arr66 Protects Your Privacy Every Day

Not just words on paper — these are real, concrete measures we implement to protect your data.

End-to-End Encryption

Every bit of data transmitted between your device and arr66's servers is encrypted with 256-bit SSL. No one — including your internet service provider — can read your data in transit.

No Data Sales

Unlike many digital platforms, arr66 has never and will never sell members' personal data to advertisers, data brokers, or any third party for commercial purposes. Your data is not our product.

Full Control in Your Hands

You may access, correct, download, or request deletion of your data at any time. Your marketing communication preferences are also fully within your control via your account settings.

Malaysia PDPA Compliance

Arr66's Privacy Policy is formulated in compliance with Malaysia's Personal Data Protection Act 2010. We stay current with any amendments to data protection legislation and update our policy accordingly.

Payment Privacy

Transactions via TNG eWallet, GrabPay, DuitNow, and FPX are processed securely. Your financial account details are not stored in full on arr66's systems — only the minimum data required for verification is retained.

Immediate Change Notification

In the event of a data security breach affecting your personal information, arr66 is committed to notifying you within 72 hours and taking immediate steps to contain the impact.

Related Documents

This Privacy Policy forms part of arr66's data governance framework. You are encouraged to read the related documents: Terms & Conditions | Responsible Gaming | FAQ. All documents together form the complete agreement between you and arr66.

🔒

Play with Peace of Mind — Your Data is Safe at arr66

Arr66 takes your privacy seriously. Register today and enjoy a safe, trusted online casino and sports betting experience that complies with Malaysia's privacy laws.

✓ SSL 256-bit ✓ PDPA Compliant ✓ No Data Selling ✓ RM500 Bonus
Bahasa Melayu