AR666 Privacy Policy

This Privacy Policy (the "Policy") is issued by AR666 (hereinafter "AR666", "we", "us", or "our") and applies to all personal data collected, processed, stored, or transmitted in connection with your use of the ar666.cam website, its associated mobile interfaces, and all related gaming and betting services (collectively, the "Platform").

AR666 operates as an English-language online casino and sports betting platform serving Malaysian players. We recognise that privacy is a fundamental right and that our Malaysian user base places significant trust in us when providing personal and financial information to access our services. This Policy reflects our commitment to handling that information responsibly, transparently, and in accordance with applicable data protection principles.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which form part of the overall agreement governing your use of the AR666 Platform.

This Policy applies to all individuals who interact with the AR666 Platform in any capacity, including:

• Registered Members who hold an active or dormant account;
• Visitors who browse the Platform without registering;
• Individuals who contact our customer support team, including players from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations across Malaysia;
• Individuals who interact with AR666 promotional communications.

This Policy does not apply to third-party websites, platforms, or services that may be linked from the AR666 website. AR666 is not responsible for the privacy practices of any third-party game providers, payment processors, or external services. We encourage you to review the privacy policies of any third-party services you use in connection with our Platform.

The following terms have the meanings set out below throughout this Policy:

AR666 collects Personal Data through several channels, including your registration form, account activity, payment transactions, KYC submissions, customer support interactions, and technical data generated by your use of the Platform. The categories of data we collect are as follows:

AR666 processes your Personal Data for the following purposes, each of which is necessary for the lawful operation of our Platform:

• Account Creation and Management: To register, verify, and maintain your AR666 account, including KYC identity verification and age confirmation (21+ requirement).
• Transaction Processing: To process deposits and withdrawals in Malaysian Ringgit (MYR) via supported payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, RHB, and cryptocurrency channels.
• Platform Service Delivery: To provide access to casino games, sports betting markets, live casino tables, and all other Platform features you have registered to use.
• Customer Support: To respond to enquiries, resolve disputes, process complaints, and deliver the 24/7 English-language support service available to Malaysian players.
• Legal and Regulatory Compliance: To fulfil obligations under applicable anti-money laundering laws, responsible gambling requirements, and our operating licence conditions — including the maintenance of transaction records and reporting of suspicious activity where legally required.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account abuse, and unauthorised access — protecting both the integrity of the Platform and the security of other Members.
• Personalisation and Communication: To tailor promotional offers, loyalty programme communications, and platform notifications to your preferences and activity, where you have provided consent.
• Platform Analytics and Improvement: To analyse aggregate usage patterns, identify technical issues, and continuously improve the Platform experience — including performance optimisation for Malaysian mobile users.

AR666 processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of the Member Agreement between you and AR666 — including account registration, transaction processing, and service delivery.
• Legal Obligation: Processing is necessary to comply with applicable legal and regulatory requirements, including anti-money laundering obligations, age verification requirements, and licence conditions.
• Legitimate Interests: Processing is necessary for the legitimate interests of AR666, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and interests.
• Consent: Where processing is based on your consent — such as for the receipt of promotional communications — you have the right to withdraw that consent at any time by contacting our support team or updating your account notification preferences.

AR666 does not sell, rent, or commercially transfer your Personal Data to third parties. We may share your data with the following categories of recipients only to the extent strictly necessary:

• Payment Processors: Financial institutions and e-wallet operators (including but not limited to DuitNow, FPX partner banks such as Maybank, CIMB, Public Bank, Hong Leong, and RHB; Touch 'n Go eWallet; Boost; and cryptocurrency processing services) require transaction data to complete deposits and withdrawals in MYR.
• KYC and Identity Verification Providers: Third-party identity verification services engaged by AR666 to process KYC documentation. These providers are contractually bound to process data solely for verification purposes.
• Game Technology Providers: Software providers that supply the gaming and betting engines operated on the Platform. These providers may receive aggregated session and transaction data necessary to run game functionality and settle bets.
• Regulatory and Law Enforcement Authorities: AR666 will disclose Personal Data to competent authorities where required to do so by law, court order, or in connection with anti-money laundering and counter-terrorism financing obligations.
• Professional Advisers: Legal, accounting, and auditing professionals engaged by AR666 on a confidential basis where access to data is necessary for the engagement.

AR666 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention framework applies:

• Active Account Data: Retained for the duration of your account's active period and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction Records: All financial transaction records — including MYR deposits and withdrawals, method details, and timestamps — are retained for a minimum of seven (7) years following the date of the transaction.
• KYC Documents: Identity and verification documents are retained for the period required by applicable law, typically five (5) years following account closure or the termination of the business relationship.
• Support Communications: Records of customer support interactions are retained for three (3) years from the date of each communication.
• Technical and Log Data: Server logs and technical access data are retained for a maximum of twelve (12) months unless a specific incident or investigation requires extended retention.
• Marketing Consent Records: Records of consent to receive promotional communications are retained for the duration of your account and for one (1) year following consent withdrawal.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents reconstruction of the original data set.

AR666 implements a comprehensive set of technical and organisational security measures designed to protect Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data in transit between your browser or app and our servers is encrypted using 256-bit SSL/TLS protocols. Sensitive stored data — including payment credentials and identity documents — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. AR666 staff access to Member data is role-based, logged, and subject to regular review.
• Network Security: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and continuous monitoring for anomalous activity.
• Password Security: Member passwords are stored using strong cryptographic hashing — AR666 staff cannot view your password in plain text at any time.
• Incident Response: AR666 maintains a documented data breach response procedure. In the event of a confirmed data breach that poses risk to Member rights, AR666 will notify affected Members and relevant authorities in accordance with applicable requirements.

Whilst AR666 takes all reasonable precautions, no system is entirely immune to risk. You play an important role in your own data security — please maintain a strong, unique password for your AR666 account and contact [email protected] immediately if you suspect unauthorised access.

AR666 uses cookies and similar tracking technologies to deliver platform functionality, improve user experience, and analyse usage patterns. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for platform operation — including session authentication, security token maintenance, and basic navigation. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and previously selected game categories. These enhance your experience but are not required for core functionality.
• Analytics Cookies: Used to collect aggregate, anonymised data about how visitors interact with the Platform — including pages visited, session duration, and feature usage. This data helps us improve the Platform for Malaysian users.
• Performance Cookies: Used to monitor Platform load times, error rates, and technical performance, particularly for users on Malaysian mobile networks.

AR666 does not use cookies for cross-site behavioural advertising or for sharing data with advertising networks. You may manage cookie preferences through your browser settings, though disabling certain cookies may limit Platform functionality.

As a user of the AR666 Platform, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please contact our support team at [email protected]. AR666 will respond to all valid requests within thirty (30) days.

AR666 strictly prohibits access to the Platform by individuals under the age of 21 years. The Platform is not intended for minors and AR666 does not knowingly collect Personal Data from persons under 21.

If you are a parent or guardian and believe that a minor has registered an account on the AR666 Platform, please contact us immediately at [email protected] so that we can take prompt action. AR666 conducts age verification as part of its KYC process for all accounts, and documents confirming age may be requested at any time.

AR666 operates infrastructure that may involve the transfer of Personal Data to servers or service providers located outside of Malaysia. Where such transfers occur, AR666 takes steps to ensure that appropriate safeguards are in place — including contractual data processing agreements that impose obligations on overseas recipients equivalent to applicable data protection standards.

All international transfers of Personal Data by AR666 are conducted on the basis of legitimate operational necessity — such as the use of internationally hosted secure cloud infrastructure or global KYC verification services — and are subject to the same security controls described in Section 9 of this Policy.

AR666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. The "Last Updated" date at the top of this page will be revised whenever material changes are made.

Where changes are material — meaning they significantly alter how we collect or use your Personal Data — AR666 will notify registered Members by email to their registered address at least seven (7) days before the changes take effect. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy. If you do not agree with the amended Policy, you should cease using the Platform and may request account closure in accordance with the Terms & Conditions.

For all privacy-related enquiries, data subject rights requests, or concerns about how AR666 handles your Personal Data, please contact our customer support team using the details below. We are committed to responding to all genuine privacy enquiries within thirty (30) calendar days.

For information about responsible gambling tools and self-exclusion options, please visit our Responsible Gambling page. For the full terms governing your use of the Platform, see our Terms & Conditions.