Privacy Policy arai33 –
Malaysian Player Data Protection

1 Introduction

Welcome to the arai33 Privacy Policy. We understand that your trust depends not only on the quality of the games we offer, but also on how we manage the personal information you entrust to us.

This document explains in detail how arai33 ("we", "Platform") collects, stores, uses, and protects your personal data ("Player", "you") when you use our website, mobile app, and all services we provide.

This Privacy Policy forms part of the overall agreement between you and arai33, and should be read together with Terms and Conditions us. Should you have any questions or concerns about your privacy, our team is ready to assist via live chat on the platform.

2 Data We Collect

Arai33 collects various types of information depending on how you interact with our platform. The following are the main categories of data we collect:

Account Registration Information

• Full name as stated on your official identification document.
• Date of birth for minimum age verification.
• Active email address for account communications.
• A valid Malaysian mobile phone number.
• Username and password chosen by you (stored in encrypted format).

Identity Verification (KYC) Information

• A copy of your MyKad identity card or valid passport.
• Proof of residential address, such as a recent utility bill or bank statement.
• Verification document for the payment method used.
• A selfie or facial photo for visual identity verification, if required.

Financial Transaction Data

• Records of deposits, withdrawals, and transaction history within the platform.
• Payment method details including bank account numbers (stored in encrypted format).
• History of bonus and promotion usage.

Technical & Usage Data

• IP address and network information captured during platform access.
• Device type, operating system, and web browser version used.
• Game activity logs and session history.
• Cookie data and other tracking technologies (see Section 7).

3 How We Use Your Data

The data we collect is used solely for legitimate purposes necessary to operate the arai33 platform. Below is a summary of our key data uses:

We do not use your data to make automated decisions that significantly affect you without human review. Any important decisions regarding your account will involve assessment by our team.

4 Legal Basis for Data Processing

Arai33 processes your personal data on valid legal grounds. Depending on the purpose of processing, the following bases apply:

• Contract Performance: Processing required to provide the services you have requested, including account management, transaction processing, and customer support.
• Legitimate Interest: Processing for fraud prevention, platform security, and service improvement purposes that does not affect your fundamental rights.
• Legal Obligation: Processing required to comply with legal obligations, including anti-money laundering (AML) requirements and identity verification.
• Consent: For marketing communications and optional cookie usage, we rely on your consent, which may be withdrawn at any time.

5 Data Sharing with Third Parties

Arai33 does not sell or trade your personal data to any party for commercial purposes. However, in the course of operating the platform, we work with several categories of trusted third parties:

• Payment Service Providers: Payment partners such as DuitNow, FPX, and digital wallet providers are shared only the minimum transaction information required to process your payment securely.
• Game Providers: Game software providers that supply content on our platform receive the game session data necessary to operate the games properly.
• Identity Verification Services: Registered and approved third-party KYC providers assist us in verifying player identities in accordance with compliance requirements.
• Relevant Authorities: arai33 will disclose personal data to regulatory authorities, law enforcement, or courts when required by law or a valid court order.

All third parties working with arai33 are bound by strict confidentiality and data protection agreements. We only work with third parties that meet data security standards equal to or higher than our own.

6 Data Storage & Security

Arai33 implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, loss, destruction, or accidental disclosure.

Key security measures we implement include:

• 256-bit SSL encryption for all data transmitted between your device and our servers.
• Password storage using irreversible one-way hashing algorithms.
• Role-based access control (RBAC) that limits employee access to player data.
• Periodic security audits conducted by our internal security team and independent external auditors.
• Round-the-clock system monitoring, 24 hours a day, 7 days a week, to detect suspicious activity.
• Encrypted data backups stored across multiple geographically separate secure locations.

Data retention periods vary by data type and legal requirements. Generally, active account data is retained for as long as your account remains active, while transaction data is kept for a minimum of 5 years for legal compliance purposes. Data from closed accounts will be deleted or anonymized once the mandatory retention period has expired.

7 Cookies & Tracking Technologies

Arai33 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how players interact with our platform.

The categories of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Stores your preferences such as language, display settings, and saved login details for easier future access.
• Analytics Cookies: Helps us understand how players use the platform for continuous improvement purposes. This data is collected in aggregate and anonymised form.
• Marketing Cookies: Used to display more relevant promotional content to you. You may opt out of these cookies.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of some parts of the arai33 platform.

8 Your Rights Regarding Personal Data

As an arai33 player, you have the following rights regarding your personal data. All requests will be processed within 14 business days:

• Right of Access: You may request a copy of all personal data we hold about you in a readily readable format.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete data.
• Right to Erasure: Under certain circumstances, you may request deletion of your personal data, subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances.
• Right to Data Portability: You may request that your data be delivered to you or a third party in a structured, machine-readable format.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time.

9 Children's Data Protection

Arai33 strictly prohibits the use of our platform by individuals under the age of 18. We do not knowingly collect personal data from minors.

If we find that personal data of a minor has been collected during the registration process, the account will be immediately closed and all related data will be deleted from our systems without delay. Any balance or winnings in that account will be forfeited in accordance with our Terms and Conditions.

Parents or guardians who suspect their child has registered an account on arai33 without permission are encouraged to contact our support team immediately for follow-up action.

10 Cross-Border Data Transfers

In operating the platform, some of your personal data may be transferred to, stored in, or processed in countries outside Malaysia. This occurs when we work with international service providers such as game suppliers or cloud server infrastructure.

Arai33 ensures that any cross-border data transfers are carried out with adequate safeguards, including:

• Only transfer data to countries with an equivalent or higher level of data protection.
• Ensuring appropriate data transfer agreements are in place with data recipients.
• Implementing additional technical protection measures such as encryption during data transfer.

11 Links to Third-Party Websites

The arai33 platform may contain links or references to third-party websites or services. This Privacy Policy applies solely to the arai33 platform and does not cover the privacy practices of any third party.

Arai33 is not responsible for the privacy policies or content of third-party websites. We encourage you to read the privacy policy of every website you visit. The presence of links to external sites on our platform does not imply our endorsement or validation of their content or privacy practices.

12 Changes to the Privacy Policy

Arai33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. All changes take effect immediately upon publication on this page.

For significant changes that affect your privacy rights, we will notify you via your registered email or an in-platform notification at least 7 days before the changes take effect. The "Updated" date at the top of this page will always reflect the latest version of this policy.

Your continued use of the arai33 platform after any changes to this Privacy Policy are published will be considered your acceptance of those changes. If you disagree with the changes made, you have the right to close your account.

13 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the arai33 privacy team through the following channels:

• Live chat on the arai33 platform — available 24 hours a day, 7 days a week.
• Email: [email protected] (response within 3 business days).

We will endeavour to resolve any privacy concerns promptly and fairly. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.