AR66 Privacy Policy – Our Commitment to Data & Privacy Protection Every Malaysian Player

AR66 collects your personal information in several situations throughout your use of our platform. The types of information collected are as follows:

Information You Provide Directly:

• Full name as it appears on your Malaysian identity card (MyKad).
• An active, reachable email address.
• A Malaysian mobile number registered in your name.
• Date of birth for age verification (18 years and above).
• Residential address in Malaysia.
• Your payment method details (e-wallet or bank account number) — stored in encrypted form.
• Identity verification documents such as a copy of your MyKad when KYC is required.

Automatically Collected Information:

• The IP address of the device you use to access AR66.
• Your web browser type and device operating system.
• A timestamped log of every login session and activity on the platform.
• Your betting history and financial transactions within your AR66 account.
• App usage data, including games played and session duration.
• Geolocation data at the country or city level (not precise coordinates) for regional verification.

AR66 uses the personal information collected solely for the following purposes:

• Account Management: Creating and maintaining your AR66 account, processing your registration, and ensuring account security.
• Transaction Processing: Processing deposits via Malaysian payment methods, verifying withdrawals, and maintaining financial transaction records.
• Identity Verification: Verifying your age and identity as part of the KYC process required by regulation.
• Platform Security: Detecting and preventing fraud, multi-account abuse, money laundering, and other unlawful activities.
• Customer Support: Addressing enquiries and resolving issues you raise with the AR66 support team.
• Service Improvement: Analysing usage patterns in aggregate (not at the individual level) to improve the AR66 platform.
• Service Communications: Sending important account-related notifications such as transaction confirmations, security alerts, and policy updates.
• Marketing Communications: Sending you promotional information and bonuses — only where you have given consent, which can be withdrawn at any time.
• Responsible Gaming: Monitoring betting patterns to identify players who may need support related to responsible gaming.
• Legal Compliance: Complying with legal and regulatory obligations, including Malaysia's PDPA and anti-money laundering (AML) regulations.

AR66 does not sell, rent, or disclose your personal data to third parties for commercial purposes. However, in the following limited situations, AR66 may share your personal data:

• Third-Party Service Providers: AR66 engages contracted service providers to assist with platform operations — including game providers (such as Evolution Gaming, Pragmatic Play, PG Soft), Malaysian payment gateways, and hosting services. These providers are only permitted to use your data for the purposes specified in their contract with AR66 and are bound by strict confidentiality obligations.
• Legal Compliance: If AR66 is required by law, court order, or a directive from a legitimate Malaysian authority to disclose certain information, AR66 will comply with that requirement after verifying the validity of the request.
• Fraud Prevention: AR66 may share necessary information with relevant industry bodies or authorities for the purpose of fraud detection and prevention, particularly in the context of anti-money laundering.
• Business Transfers: In the event of a merger, acquisition, or sale of AR66 assets, user data may be transferred to the succeeding entity — provided that an equivalent or higher standard of privacy policy is maintained.

In all of the above situations, AR66 will disclose only the minimum data necessary for the identified purpose, and will take reasonable steps to ensure the receiving party handles that data to an equivalent standard of protection.

AR66 continuously invests in security infrastructure to protect your personal and financial data. The security measures we have in place include:

• 256-bit SSL Encryption: All data transmitted between your device and AR66's servers is encrypted using the latest TLS protocol.
• Data-at-Rest Encryption: Sensitive data such as payment information and verification documents is stored in encrypted form within AR66's databases.
• Layered Access Controls: Access to players' personal data by AR66 staff is restricted on a need-to-know basis — only staff who require access to carry out their duties are granted permission.
• Audit Logs: All access to player personal data is automatically logged to enable regular security audits.
• Penetration Testing: AR66 conducts regular security testing, including penetration testing by independent security experts, to identify and address system vulnerabilities.
• 24/7 Monitoring: AR66's automated monitoring system operates around the clock to detect suspicious activity and cyber threats.

While AR66 takes all reasonable steps to protect your data, no system can guarantee 100% security in an online environment. In the event of a security breach affecting your personal data, AR66 will notify you within the timeframe required by applicable law.

AR66 retains your personal data only for as long as necessary for the purposes outlined in this Privacy Policy, or as required by Malaysian law. The general data retention guidelines are as follows:

Once the retention period expires, AR66 will delete or anonymise the relevant data in a secure manner. Anonymised data — where an individual can no longer be identified — may be retained for a longer period for analytics and platform improvement purposes.

AR66 uses cookies and similar tracking technologies to keep the platform running smoothly and to improve your overall experience. The types of cookies we use are as follows:

You can manage your cookie settings through your web browser settings. However, disabling essential cookies may affect the functionality of the AR66 platform. AR66 does not use third-party cookies for advertising or cross-site tracking purposes.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and AR66's privacy commitments, you have the following rights regarding your personal data:

To exercise any of the rights above, contact the AR66 privacy team at support@ar66.run stating the right you wish to exercise along with your identity verification details. AR66 will respond within the timeframe stipulated by Malaysia's PDPA.

AR66 takes child protection very seriously. The AR66 platform is strictly intended for individuals aged 18 and above.

• AR66 does not knowingly collect personal data from individuals under the age of 18.
• Should AR66 discover that we have inadvertently collected data from an underage individual, that data will be deleted immediately and the account in question will be closed.
• AR66's age verification system is designed to detect and prevent registration by underage individuals.
• Parents or guardians who have reason to believe their child has registered an AR66 account should contact our support team immediately at support@ar66.run for prompt action.

In operating the AR66 platform, your personal data may be processed or stored outside Malaysia by the international service providers we work with. This includes game providers and cloud hosting services.

• AR66 only engages third-party providers that have agreed to handle data to a standard of protection equal to or greater than what is required under Malaysia's PDPA.
• All international providers handling AR66 player data are bound by data processing agreements that require them to comply with the specified privacy standards.
• AR66 ensures that all data transfers are protected through appropriate mechanisms, including legally binding data protection agreements.

By using the AR66 platform, you consent to such data transfers, provided that all transfers are carried out with adequate safeguards as described above.

If you have any questions, concerns, or complaints regarding AR66's Privacy Policy or the way we handle your personal data, we encourage you to reach out to us directly:

If you are dissatisfied with how AR66 has handled your privacy enquiry, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Communications. That said, we strongly encourage you to contact AR66 first so we have the opportunity to resolve your concerns directly and promptly.