Transparent Collection
We clearly explain what personal data ar66 collects from you, whether provided directly, gathered automatically or obtained from third-party verification services during KYC.
What this policy covers
Our Six Privacy Commitments to You
Lawful Processing Basis
ar66 processes personal data only where a valid legal basis exists — such as contractual necessity, legal obligation, legitimate interest or your explicit consent where required.
Secure Data Storage
Personal information is stored using industry-standard security measures including encryption and access controls. ar66 applies data minimisation principles to limit unnecessary retention.
No Unauthorised Sale of Data
ar66 does not sell your personal data to unaffiliated third parties for their own marketing purposes. Data sharing is limited to operational partners and regulatory requirements.
Your Rights Respected
Users retain meaningful rights over their personal data, including access, correction, erasure and portability requests, subject to legal retention obligations.
Clear Contact Channel
Privacy queries, data subject requests and complaints can be directed to the ar66 support team. We commit to acknowledging requests promptly and responding within applicable timeframes.
1. Introduction
ar66 ("we", "us", "our") is committed to protecting the privacy and personal data of all users who access or interact with the ar66 platform at https://ar66.cam ("Platform"). This Privacy Policy ("Policy") sets out how ar66 collects, uses, processes, stores and protects personal information in connection with the provision of its online casino and sports betting information services.
This Policy applies to all users of the Platform, including registered account holders and visitors who browse the site without creating an account. It should be read in conjunction with the ar66 Terms and Conditions, which are incorporated by reference.
By accessing the Platform or creating an account, you acknowledge that you have read and understood this Policy and consent to the data practices described herein to the extent that consent constitutes the applicable legal basis for processing. Where processing is grounded in other lawful bases, your continued use of the Platform constitutes acknowledgment of those practices.
2. Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
- "Personal Data" — any information relating to an identified or identifiable natural person ("data subject"), whether identification is direct or indirect.
- "Processing" — any operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, combination, restriction or erasure.
- "Data Controller" — the entity that determines the purposes and means of processing personal data. For this Policy, the Data Controller is ar66.
- "Data Processor" — a third party that processes personal data on behalf of the Data Controller under contractual instruction.
- "Consent" — a freely given, specific, informed and unambiguous indication of agreement to the processing of personal data for a stated purpose.
- "KYC" — Know Your Customer verification processes requiring identity and address documentation to comply with regulatory obligations.
- "Cookie" — a small text file stored on your device by a web browser that records information about your browsing session or preferences.
3. Data We Collect
ar66 collects personal data that is necessary for the provision of its services, fulfilment of legal obligations and maintenance of platform security. The categories of data we collect include the following:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID or passport number | Account registration, KYC verification, age confirmation |
| Contact Data | Email address, phone number, residential address | Account communications, support, notifications |
| Financial Data | Payment method details, transaction history, deposit and withdrawal records | Payment processing, fraud prevention, regulatory compliance |
| Technical Data | IP address, device type, browser type, operating system, session identifiers | Security monitoring, platform optimisation, fraud detection |
| Usage Data | Pages visited, features accessed, game session data, betting activity | Service improvement, responsible gambling monitoring, analytics |
| Communication Data | Support chat transcripts, email correspondence, complaint records | Support provision, dispute resolution, quality assurance |
| Verification Documents | Copies of identity documents, proof of address, payment method verification | KYC compliance, anti-money laundering obligations |
4. How We Collect Data
ar66 collects personal data through several channels, depending on the nature of your interaction with the Platform:
4.1 Information You Provide Directly
This includes data submitted during account registration, KYC verification processes, deposit and withdrawal requests, promotional opt-ins, support interactions and any correspondence you initiate with ar66 via email or live chat.
4.2 Automatically Collected Data
When you access the Platform, ar66 systems automatically collect technical and usage data through cookies, web beacons, server logs and similar tracking technologies. This includes your IP address, device identifiers, approximate geolocation, session duration and browsing behaviour on the Platform.
4.3 Third-Party Sources
ar66 may receive personal data from third-party identity verification providers, payment processors, fraud detection services and regulatory compliance partners. This data is used solely for the purposes for which it was shared and in accordance with applicable data protection obligations.
5. Legal Basis for Processing
ar66 processes personal data only where at least one of the following lawful bases applies under applicable data protection legislation:
- Contractual necessity: Processing is required to perform the contract between ar66 and the user, including account management, payment processing and service delivery.
- Legal obligation: Processing is necessary to comply with applicable laws including anti-money laundering legislation, age verification regulations and financial reporting requirements.
- Legitimate interests: Processing is necessary for purposes of fraud prevention, platform security, responsible gambling monitoring and service improvement, provided these interests are not overridden by the data subject's rights.
- Consent: Where processing activities require consent — such as certain marketing communications or optional analytics — ar66 will seek your explicit consent and provide a clear mechanism to withdraw it at any time.
6. How We Use Your Data
ar66 uses personal data for the following primary purposes:
- To register and manage your ar66 account, including identity verification and security authentication.
- To process deposits, withdrawals and financial transactions through approved Malaysian payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong and supported cryptocurrencies.
- To fulfil KYC and anti-money laundering compliance obligations as required by applicable regulations.
- To deliver and improve the ar66 platform experience, including personalising content where applicable.
- To communicate with you regarding your account, transactions, promotions you have opted into, and service updates.
- To detect, investigate and prevent fraudulent activity, unauthorised access and other prohibited conduct.
- To monitor gaming behaviour for responsible gambling purposes and to apply protective measures where indicators of problem gambling are identified.
- To respond to support requests, complaints and legal or regulatory inquiries.
- To conduct internal analytics and improve platform functionality, security and service quality.
7. Data Sharing and Disclosure
ar66 does not sell your personal data to unaffiliated third parties for their own marketing purposes. We may share your personal data with third parties only in the following circumstances:
7.1 Service Providers and Processors
ar66 engages trusted third-party service providers to perform operational functions on our behalf, including payment processing, KYC verification, fraud detection, IT infrastructure and customer support. These processors are contractually bound to handle data only as instructed by ar66 and in compliance with applicable data protection standards.
7.2 Regulatory and Legal Authorities
ar66 may disclose personal data to regulatory bodies, law enforcement agencies or courts where required to do so by applicable law, court order, or regulatory obligation. Such disclosures will be made only to the extent necessary to fulfil the relevant legal requirement.
7.3 Business Transfers
In the event of a merger, acquisition, restructuring or sale of assets involving ar66, personal data held by the platform may form part of the transferred assets. Affected users will be notified in advance where practicable, and the receiving entity will be required to honour the commitments set out in this Policy.
8. Cookies and Tracking Technologies
ar66 uses cookies and similar tracking technologies to deliver, maintain and improve the Platform experience. Cookies allow the Platform to remember your preferences, maintain your session and gather aggregated analytics data.
8.1 Types of Cookies Used
- Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without impairing core functionality.
- Functional cookies: Remember your preferences such as language or display settings to improve usability across sessions.
- Analytics cookies: Collect anonymised information about how users interact with the Platform, helping ar66 identify areas for improvement.
- Security cookies: Used to detect and prevent fraudulent activity, bot behaviour and unauthorised access attempts.
8.2 Managing Cookie Preferences
You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality. Strictly necessary cookies cannot be disabled as they are integral to the operation of the service.
9. Data Retention
ar66 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention guidelines apply:
- Account data: Retained for the duration of the account relationship and for a reasonable period thereafter to fulfil post-closure obligations.
- Transaction and financial records: Retained for a minimum of seven years in accordance with applicable financial regulation and anti-money laundering requirements.
- KYC verification documents: Retained for the period required under applicable regulatory obligations, typically a minimum of five years from account closure.
- Support and communication records: Retained for a period sufficient to resolve disputes and respond to regulatory inquiries, generally up to three years.
- Technical and usage logs: Typically retained for up to 90 days for security monitoring purposes, unless a longer period is required for an active investigation.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.
10. Data Security
ar66 implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. Our security practices include:
- Encryption of data in transit using industry-standard TLS protocols.
- Encryption of sensitive stored data, including payment information and identity documents.
- Access controls limiting data access to authorised personnel with a documented business need.
- Regular security assessments and monitoring of platform infrastructure.
- Incident response procedures to address data breaches promptly and notify affected parties in accordance with applicable law.
While ar66 takes reasonable steps to safeguard personal data, no transmission over the internet or electronic storage method is completely secure. Users are encouraged to maintain strong passwords, enable account security features and contact support immediately if they suspect unauthorised access to their account.
11. Your Rights
Subject to applicable data protection law and certain exemptions, you have the following rights in relation to your personal data held by ar66. Requests may be submitted via the contact details in Section 16.
Right of Access
You may request a copy of the personal data ar66 holds about you, along with information about how it is processed.
Right to Rectification
You may request correction of inaccurate or incomplete personal data held in your ar66 account.
Right to Erasure
In certain circumstances, you may request deletion of your personal data. Requests are subject to legal retention obligations that may override erasure.
Right to Restriction
You may request that processing of your data be restricted in certain circumstances, such as while the accuracy of data is under dispute.
Right to Data Portability
Where processing is based on consent or contract, you may request a machine-readable copy of certain data you have provided to ar66.
Right to Object
You may object to processing carried out on the basis of legitimate interests, including direct marketing and certain analytics activities.
ar66 will respond to verified data subject requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, an extension of up to an additional 60 days may apply, in which case we will notify you of the reason for the delay.
12. Children and Minors
The ar66 Platform is strictly for adults aged 21 and above. ar66 does not knowingly collect, process or retain personal data from individuals under 21 years of age. If ar66 becomes aware that personal data has been collected from a minor, such data will be promptly deleted and the associated account will be closed.
If you are a parent or guardian and believe your child has accessed or registered on the ar66 Platform, please contact us immediately at the details provided in Section 16 so that we can take appropriate action without delay.
13. International Data Transfers
ar66 operates with service providers and infrastructure partners that may process personal data in jurisdictions outside Malaysia. Where personal data is transferred internationally, ar66 ensures that appropriate safeguards are in place to maintain a level of data protection consistent with this Policy and applicable law.
Such safeguards may include standard contractual clauses, adequacy decisions recognising equivalent data protection standards, or other legally accepted transfer mechanisms. Users may request information about the specific safeguards applicable to transfers of their personal data by contacting support.
14. Third-Party Links and Services
The ar66 Platform may contain references to or links within contextual content that mention external services, payment providers or support organisations. ar66 does not operate or control these third-party services and is not responsible for their privacy practices.
This Policy applies solely to data processed by ar66 through the Platform. If you interact with a third-party service referenced on or linked from the Platform, you should review that party's privacy policy independently before submitting any personal information to them.
15. Policy Amendments
ar66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or platform functionality. The date at the top of this page indicates when the Policy was last revised.
Where changes are material, ar66 will provide reasonable notice through the Platform or via account-registered email prior to the changes taking effect. Your continued use of the Platform following publication of an updated Policy constitutes acceptance of the revised terms. If you do not agree with the updated Policy, you should discontinue use of the Platform and contact support to discuss account closure.
16. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a complaint about how your personal data has been handled, please contact the ar66 privacy team using the details below:
Privacy and Data Contact
Website email: [email protected]
Live chat: Available 24 hours a day, 7 days a week via the Platform.
Response target: Within 5 minutes via live chat; within 30 calendar days for formal data subject requests submitted by email.
When submitting a data subject request, please include sufficient information to verify your identity and to enable ar66 to locate the relevant personal data. ar66 will not process requests from unverified individuals to protect data subject security.
Continue on ar66
Questions About Your Privacy?
Our support team is available around the clock at [email protected] and via live chat. You can also explore the ar66 Terms and Conditions or visit the homepage to continue browsing.