This Privacy Policy explains how arr66 collects, uses, stores, and protects the personal data of registered Players and visitors to the arr66 platform. Please read it carefully before registering an account.
Last Updated: 11 June 2026 | Language: English | Applicable to: Malaysian Players
arr66 ("arr66," "we," "us," "our") operates the online gaming platform accessible at arr66.net (the "Platform") and associated mobile applications. arr66 is committed to protecting the privacy and personal data of all individuals who interact with the Platform, whether as registered Players or as visitors.
This Privacy Policy ("Policy") describes what personal data arr66 collects, the purposes for which it is processed, the legal bases relied upon, how it is stored and secured, the circumstances in which it may be shared with third parties, how long it is retained, and the rights you have in respect of your personal data.
This Policy applies to all personal data processed by arr66 in connection with the operation of the Platform and the delivery of gaming, betting, payment, support, and related services to Malaysian users and other eligible players.
By registering an arr66 Account or using any Service on the arr66 Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside the arr66 Terms & Conditions.
arr66 collects the following categories of personal data from Players and Platform visitors:
2.1 Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification document details (such as Malaysian MyKad number or passport number) provided during account registration or identity verification.
2.2 Contact Data: Email address, mobile telephone number, and residential address (including city, state, and postcode within Malaysia).
2.3 Account Data: arr66 username, encrypted password credentials, account creation date, account status, and any communication preferences set by the Player.
2.4 Financial Data: Payment method details used for deposits and withdrawals — including Touch 'n Go eWallet identifiers, DuitNow account references, FPX transaction references, and bank account details associated with Malaysian banking platforms (Maybank, CIMB, Public Bank, Hong Leong Connect). arr66 does not store full payment card numbers.
2.5 Transaction Data: Details of all deposits, withdrawals, bonuses credited, wagering activity, game results, and account balance history associated with your arr66 Account.
2.6 Technical Data: IP address, device type, operating system, browser type and version, mobile device identifiers, and time zone settings collected automatically when you access the arr66 Platform.
2.7 Usage Data: Information about how you interact with the arr66 Platform, including pages visited, games played, session duration, bet frequency, and feature usage patterns.
2.8 Communications Data: Records of communications between you and arr66 customer support, including live chat transcripts, email correspondence, and any feedback or complaints submitted.
2.9 Verification Data: Copies of identity documents, selfie photographs, and proof of address documentation submitted during Know Your Customer (KYC) verification or enhanced due diligence procedures.
arr66 collects personal data through the following means:
arr66 uses the personal data it collects for the following purposes:
arr66 processes personal data on the following legal bases:
arr66 does not sell your personal data to third parties. arr66 may share personal data in the following circumstances:
All third parties engaged by arr66 to process personal data on its behalf are required to process such data only in accordance with arr66's documented instructions and in compliance with applicable data protection law.
arr66 uses cookies and similar tracking technologies on the Platform for the following purposes:
You may control non-essential cookies through your browser settings or through any cookie consent mechanism provided on the arr66 Platform. Disabling certain cookies may affect the functionality of parts of the Platform.
arr66 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal or regulatory obligations. Specifically:
Upon expiry of the applicable retention period, arr66 will securely delete or anonymise personal data in accordance with its data destruction procedures.
arr66 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
Notwithstanding these measures, no method of electronic data transmission or storage is entirely immune to risk. arr66 cannot guarantee the absolute security of data transmitted to or from the Platform. Players are encouraged to use strong, unique passwords for their arr66 Accounts and to enable two-factor authentication where available.
Subject to applicable law, you have the following rights in respect of your personal data held by arr66:
To exercise any of the above rights, please contact arr66 via the live chat on the Platform or by emailing [email protected] (plain text address — not a clickable link). arr66 will respond to verified requests within a reasonable timeframe and in any event within the period required by applicable law.
The arr66 Platform is strictly intended for persons aged 21 years and above. arr66 does not knowingly collect personal data from individuals under the age of 21. If arr66 discovers that personal data has been collected from a minor, the relevant Account will be immediately closed, all associated data will be securely deleted to the extent permitted by applicable law, and any balance will be voided. If you have reason to believe that a minor has registered an arr66 Account, please contact the arr66 support team immediately.
The arr66 Platform integrates with third-party services including payment processors (such as Touch 'n Go eWallet and DuitNow), game software providers, and analytics platforms. When you interact with these integrated services, those third parties may process your data in accordance with their own privacy policies. arr66 is not responsible for the privacy practices of third-party services, though arr66 selects and contractually binds its service providers to appropriate data protection standards.
arr66 reserves the right to amend this Privacy Policy at any time. The most current version will always be published at arr66.net/privacy-policy with the effective date noted at the top of the document. Where material changes are made, arr66 will endeavour to notify registered Players via their registered email address. Continued use of the arr66 Platform following notification of an updated Policy constitutes acceptance of the revised terms.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by arr66, please contact us via:
arr66 aims to acknowledge privacy-related queries within 48 hours and to resolve substantive requests within 30 calendar days, subject to complexity and the need to verify identity before disclosing or modifying personal data.
A plain-language summary of how arr66 handles your personal data — always refer to the full policy above for complete details.
All data transmitted between your device and arr66 is encrypted using 256-bit SSL — the same standard used by Maybank, CIMB, and Touch 'n Go eWallet. Your login credentials and financial data are never sent in plaintext.
arr66 does not sell your personal data to any third party. Data is shared only with service providers who process it under strict contractual controls, or where required by law — never for commercial purposes outside arr66.
arr66 collects age verification data to enforce the 21+ age restriction on the Platform. Accounts belonging to persons under 21 are closed and their data deleted. Protecting minors is a non-negotiable commitment at arr66.
You have the right to access, correct, delete, or export your arr66 personal data. You may also object to certain processing or withdraw marketing consent at any time. Contact arr66 support to exercise any of these rights.
Payment references from Touch 'n Go eWallet, DuitNow, and Malaysian banks are stored in encrypted form. arr66 does not store full card numbers. All withdrawal identity checks protect your funds from unauthorised access.
arr66 retains your personal data only for as long as legally necessary — a minimum of five years for financial records, and no longer than required for other data categories. Data is securely deleted when retention periods expire.
arr66 handles your data responsibly so you can focus on enjoying the platform. Sign in to your arr66 account or download the app to get started. 21+ only.
arr66 Login Terms & Conditions