ar88 Privacy Policy

Who We Are

ar88 is an online gaming platform serving players in Malaysia. When you create an account, make a deposit, or contact our support team, ar88 acts as the data controller — meaning we decide what data is collected and how it is used. This Privacy Policy covers all services available at ar88.today, including casino games, sports betting, and the ar88 app.

If you have questions about this policy, you can reach our Data Protection team through 24/7 Live Chat. We do not publish an email address; all queries are handled via the in-platform support channel.

Data We Collect

ar88 only collects data that is necessary for running your account, verifying your identity, processing payments, and complying with applicable regulations. The table below summarises the main categories.

We do not collect data you have not provided, and we do not purchase third-party marketing lists. When you submit a KYC document — National ID Card, Passport, or Driving Licence — it is used solely for identity verification and is not shared with advertising partners.

How We Use Your Data

ar88 uses your personal data for the following purposes. Each purpose has a lawful basis under applicable data protection law.

• Account registration and management — setting up your ar88 account, verifying age (18+), and maintaining your player profile.
• Payment processing — confirming deposits (credited within 1 minute) and processing withdrawals (typically within 6 minutes after verification).
• KYC and compliance — reviewing identity documents within 2 hours; required before your first withdrawal of RM 130 or more.
• Customer support — responding to queries through 24/7 Live Chat and tracking issue resolution.
• Responsible gaming — monitoring play patterns to support self-exclusion, deposit limits, and session reminders.
• Platform security — detecting unauthorised access, duplicate accounts, and fraudulent transactions.
• Service communications — sending account notifications (not promotional messages) about transactions and account activity.

ar88 does not use automated profiling to make decisions that significantly affect your account without human review.

Sharing Your Data

ar88 does not sell your personal data. We share data only in limited, necessary circumstances:

• Payment processors — DuitNow, FPX, Touch 'n Go eWallet, and bank partners receive only the transaction data needed to complete a payment.
• Game providers — Spribe, Sexy Gaming, JILI, Red Tiger, FA Chai, and Ezugi receive a session token and player ID. They do not receive your full name or financial details.
• Identity verification services — a licensed KYC provider receives your submitted document to confirm authenticity. Documents are not retained by the provider beyond the verification window.
• Legal and regulatory bodies — if required by law or a valid regulatory request, ar88 will disclose the minimum data necessary.

Cookies and Tracking

The ar88 website uses cookies and similar technologies. There are three types in use:

• Essential cookies — keep you logged in and maintain your session state. These cannot be turned off as the site would not function without them.
• Analytics cookies — measure page load times, navigation paths, and feature usage using first-party data only. No third-party analytics trackers are embedded.
• Security cookies — detect bot traffic and protect login forms from credential-stuffing attacks.

ar88 does not use advertising or retargeting cookies. You can clear cookies at any time via your browser settings; doing so will log you out of your account.

How Long We Keep Data

ar88 retains personal data for as long as your account is active and for a period thereafter as required by financial and gaming regulations. In practice:

• Account and transaction records are kept for a minimum of 5 years after account closure to meet anti-money-laundering obligations.
• KYC documents are stored for the same 5-year period and then securely deleted.
• Session logs and technical data are retained for 12 months, then anonymised.
• Support chat transcripts are kept for 24 months to assist with dispute resolution.

Your Rights

As an ar88 player in Malaysia, you have the following rights over your personal data. Submit a request through 24/7 Live Chat; we will respond within 30 days.

• Access — request a copy of the personal data ar88 holds about you.
• Correction — ask us to correct inaccurate data, such as a misspelled name or outdated contact number.
• Deletion — request deletion of your data after account closure, subject to our legal retention obligations.
• Restriction — ask us to pause processing of your data while a correction or complaint is being resolved.
• Objection — object to processing based on legitimate interests, including any direct communications from ar88.
• Portability — receive your transaction history in a structured, machine-readable format.

Security Measures

ar88 applies industry-standard security controls to protect player data:

• All data in transit is protected by TLS 1.3 encryption.
• Stored passwords are hashed using bcrypt; ar88 staff cannot read your password.
• Financial data is stored in isolated, access-controlled environments separate from game logs.
• Access to production systems is restricted to authorised personnel and subject to audit logging.
• The ar88 app (version 3.5.14, 32 MB) communicates only with ar88.today servers and does not request unnecessary device permissions.

If a data breach occurs that is likely to affect your rights, ar88 will notify affected players promptly through in-account notification and Live Chat.

Minors and Age Verification

ar88 is strictly an 18+ platform. We do not knowingly collect or retain personal data from anyone under the age of 18. Age is verified at registration and again at the KYC stage before any withdrawal is processed.

If we discover that a player is under 18, we will immediately close the account, return any deposits where possible, and delete the associated personal data in accordance with our retention policy.

Changes to This Policy

ar88 may update this Privacy Policy when our services change or when regulations require it. We will post the updated version at ar88.today/privacy-policy/ and update the "Last updated" date at the top of this page. For significant changes, we will send a notice through your account's notification centre at least 14 days before the change takes effect.

Continuing to use ar88 after a change takes effect constitutes acceptance of the updated policy.

Contact and Complaints

For privacy-related questions, correction requests, or data deletion, contact the ar88 Data Protection team through 24/7 Live Chat. Select "Account & Privacy" as the query category so it reaches the right team.

If you are not satisfied with our response, you have the right to raise a complaint with the relevant data protection authority in Malaysia. ar88 will cooperate fully with any regulatory investigation.