AR66 takes the privacy of every member seriously. This Privacy Policy sets out transparently how we collect, use, store, and protect your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
Six core principles that shape how AR66 protects the personal data of every member.
AR66 is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA) — the data protection law governing how companies collect and use personal data in Malaysia. We do not merely meet the minimum legal requirements; we go beyond them to ensure the highest level of protection for every member.
All data transmitted between your device and AR66's servers is protected by 256-bit SSL encryption — the same level of security used by Maybank, CIMB, and other major Malaysian financial institutions. This ensures your login credentials, payment details, and personal information cannot be intercepted by any third party.
AR66 has never sold, rented, or commercialised our members' personal data to any third party, and never will. Your data is not our product. It is information you have entrusted to us, and we take that responsibility seriously in every operational decision we make at AR66.
Under Malaysia's PDPA, you have the right to access, correct, and in certain circumstances request the deletion of your personal data held by AR66. We provide a clear, straightforward process for exercising these rights — all requests will be processed within 14 business days of receipt.
AR66 members' personal data is stored on servers protected by multi-layered access controls, industry-grade firewalls, and round-the-clock security monitoring. Within AR66, access to member data is restricted to staff who genuinely need it for service purposes, and all access is logged and periodically audited.
You have full control over marketing communications from AR66. Every promotional email we send includes a clear and easy unsubscribe option. You can also manage your communication preferences directly in your AR66 account settings or by reaching out to our support team.
AR66 is an online sports betting and casino platform serving members in Malaysia. As a platform that handles members' financial and personal information, we take our data protection responsibilities seriously. Member trust is at the core of how we operate — and that trust starts with transparency and honesty about how your data is managed.
This Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), which governs how organisations in Malaysia collect and process individuals' personal data. AR66 is a "data controller" as defined under the PDPA — meaning we are responsible for determining the purposes and manner in which your personal data is processed.
We wrote this Privacy Policy in plain, easy-to-understand language — not dense legal jargon — because we want every AR66 member to genuinely understand what happens with their data, not just click "agree" without reading.
When you register and use the AR66 platform, we collect the following information that you provide directly:
When you use the AR66 platform, our systems automatically record the following technical information:
| Data Type | Primary Purpose | Legal Basis |
|---|---|---|
| Identity information | Account verification, KYC compliance | Legal obligation |
| Financial information | Deposit & withdrawal processing | Contract performance |
| Betting history | Customer support, responsible gaming | Legitimate interests |
| Technical data | Platform security and improvements | Legitimate interests |
| Communication preferences | Promotions & personalised offers | Consent |
AR66 uses your personal data only for legitimate, stated purposes. We do not use your data for anything unrelated to platform operations or the services provided to you as a member.
AR66 uses your betting history to monitor gameplay patterns and identify signs of problem gambling that may require attention. This data is used solely to protect your wellbeing as a member — it is not used for marketing purposes or shared with any external party.
Usage and technical data collected is used in aggregate (not at an individual level) to understand how members use the AR66 platform and to identify areas for improvement. For example, this data helps us determine the most popular games, peak traffic periods, and technical issues that need to be addressed.
AR66 does not sell, rent, or commercialise members' personal data to any third party for any reason. Data sharing only occurs in the following limited circumstances:
AR66 shares necessary data with service providers that help us operate the platform — including Malaysian payment processors (to handle DuitNow, FPX, and digital wallet transactions), licensed game providers (Evolution Gaming, Pragmatic Play, PG Soft — to deliver games), and cloud service providers that store platform data. All providers are subject to strict confidentiality agreements and may only use the shared data for the specified purposes.
AR66 may be required to disclose members' personal data when mandated by Malaysian law or a valid court order — such as in financial crime investigations, money laundering cases, or directives from Bank Negara Malaysia or other relevant authorities. In all such instances, AR66 discloses only the minimum data necessary and will notify the affected member where permitted by law.
In cases involving fraud, money laundering, or security threats affecting the AR66 platform, we may share necessary information with other platforms in the industry to prevent further misuse. Such sharing is limited strictly to the information required and only with parties bound by equivalent confidentiality obligations.
AR66 implements comprehensive technical and organisational security measures to protect members' personal data against unauthorised access, loss, damage, or disclosure.
The security of your AR66 account also depends on your own actions. We encourage you to use a strong, unique password, never share your login credentials with anyone, log out of your AR66 account when using a shared or public device, and contact AR66 support immediately if you suspect any unauthorised access.
The AR66 platform uses cookies and similar tracking technologies to ensure the platform functions properly and to enhance the user experience. The types of cookies we use are as follows:
These cookies are required for the basic operation of the AR66 platform and cannot be disabled. They include session cookies that store your login information during an active session, security tokens that protect your account against CSRF attacks, and cookies that save your language preferences and platform settings.
Analytics cookies help us understand how members use the AR66 platform — which pages are visited most frequently, which games are most popular, and general navigation patterns. This data is collected in aggregate and is not personally identifiable. You can disable analytics cookies in your browser settings without affecting the platform's core functionality.
These cookies save your preferences such as interface language, display settings, and notification choices so you do not have to reconfigure them each time you visit the AR66 platform. They enhance usability and can be cleared through your browser settings at any time.
As an additional note: AR66 does not use third-party cookies for targeted marketing or share cookie data with advertising networks. All cookies we use are strictly for internal platform operation purposes.
AR66 retains members' personal data only for as long as necessary for the purposes set out in this Privacy Policy or as required under Malaysian law. In general:
When the retention period expires or when you submit a valid deletion request (subject to legal obligations), AR66 will securely delete or anonymise your data using methods that ensure it cannot be recovered. The deletion process is subject to statutory retention requirements — data that Malaysian law requires to be retained cannot be deleted even upon your request.
When you close your AR66 account, we will retain the minimum records necessary to fulfil our legal obligations and resolve any outstanding claims or disputes. Data no longer required for these purposes will be deleted within 30 days of confirmed account closure.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to the personal data AR66 holds about you:
To exercise any of the above rights, contact the AR66 team by email at support@ar66.xyz with the subject line "Data Privacy Rights Request". We will process your request within 14 business days and may require identity verification before doing so to protect the security of your account.
The AR66 platform is exclusively for individuals aged 18 and above. AR66 does not knowingly collect personal data from anyone under the age of 18. If we discover that personal data of an underage individual has been collected without proper age verification, we will take immediate steps to delete that data and close the associated account.
If you are a parent or guardian who has discovered that your child under 18 has registered on AR66, please contact our support team immediately at support@ar66.xyz. We will investigate and take appropriate action within 24 hours.
In the course of AR66's platform operations, some data may be processed or stored outside Malaysia — primarily through cloud service providers and internationally licensed game providers such as Evolution Gaming and Pragmatic Play. In all such cases, AR66 ensures that:
AR66 ensures that any such data transfers comply with Malaysia's PDPA requirements and do not reduce the level of protection afforded to our members' personal data.
AR66 reserves the right to amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or changes in platform operations. Material amendments — meaning changes that significantly affect how we use or protect your data — will be communicated via:
Non-material amendments (such as language clarifications or spelling corrections) may take effect immediately. Continued use of the AR66 platform after any amendment comes into effect will be considered acceptance of the revised Privacy Policy.
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way AR66 handles your personal data, please reach out to us through the following channels:
Data rights requests (access, correction, deletion) will be processed within 14 business days. For more serious complaints involving privacy violations, we are committed to providing an initial response within 48 hours.
If you are not satisfied with AR66's response to your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia at www.pdp.gov.my.
Under Malaysia's PDPA, you have the following rights over the personal data we hold about you.
You may request a copy of all personal data we hold about you. Requests will be processed within 14 business days following identity verification.
If any personal data AR66 holds about you is inaccurate or outdated, you have the right to request an immediate correction.
You may object to the use of your data for marketing communications at any time — via the unsubscribe link in our emails or through your AR66 account settings.
For processing that relies on your consent, you may withdraw that consent at any time without affecting any processing that has already taken place.
Under certain circumstances, you may request the deletion of your personal data. Such requests are subject to applicable Malaysian legal retention obligations.
If you are not satisfied with AR66's response to your privacy complaint, you have the right to lodge a complaint directly with Malaysia's Department of Personal Data Protection (JPDP).
The most frequently asked questions from members regarding privacy and data protection at AR66.
The AR66 platform is built with security and privacy as top priorities. Register for free today, deposit from RM20 via DuitNow or Touch 'n Go eWallet, and enjoy over 1,000 games with full PDPA data protection.
For players aged 18 and above only. Please gamble responsibly.