arai33 Privacy Policy

1. Overview

This Privacy Policy ("Policy") describes how arai33 ("we", "us", "our", or "the Platform") collects, processes, stores, and discloses personal data relating to users ("you", "your") of the website located at https://arai33.lat and all associated sub-pages, mobile interfaces, and services (collectively, the "Platform").

arai33 is Malaysia's premier online gambling platform, providing sports betting, live casino, slots, and related services to eligible users across Malaysia — including Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Bangsar, and beyond. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to be bound by this Policy.

2. Data We Collect

arai33 collects personal data through several means — directly from you when you register or interact with the Platform, automatically via technical systems, and occasionally from trusted third-party verification partners. The categories of data we collect include:

2.1 Registration and Account Data

• Full legal name as per your national identity card (MyKad) or passport
• Date of birth (used to verify you are 21 years of age or older)
• Email address and mobile phone number
• Residential address, including postcode and state within Malaysia
• Username and encrypted account credentials
• Preferred language and currency (MYR)

2.2 Financial and Transaction Data

• Bank account details for payment processing (e.g., Maybank, CIMB, Public Bank, Hong Leong)
• e-Wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay, DuitNow)
• Deposit and withdrawal transaction histories
• Bonus and promotional redemption records

2.3 Identity Verification Data (KYC)

To comply with anti-money laundering (AML) obligations and responsible gaming commitments, we collect scanned or photographed copies of government-issued identity documents, selfie verification images, and source-of-funds documentation where required.

2.4 Technical and Usage Data

• IP address and approximate geolocation (country and region level)
• Device type, operating system, and browser version
• Pages visited, time spent, click-paths, and session timestamps
• Referring URLs and search terms used to reach the Platform
• Crash reports and performance diagnostics

2.5 Communications Data

• Records of live chat sessions and support ticket correspondence
• Email and in-app message history with our support team
• Survey responses and voluntary feedback submissions

3. How We Use Your Data

arai33 processes your personal data only for specified, explicit, and legitimate purposes. We rely on one or more of the following legal bases: contractual necessity, legal obligation, legitimate interests, or your explicit consent.

• Account management: To create, maintain, and secure your arai33 account and ensure uninterrupted access to all Platform features.
• Transaction processing: To facilitate deposits and withdrawals in MYR via FPX, DuitNow, and supported e-Wallets accurately and securely.
• Identity verification: To confirm you meet the 21+ age requirement and comply with KYC and AML regulatory obligations.
• Customer support: To respond to your queries, resolve disputes, and maintain communication records for quality and training purposes.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised access, and abuse of Platform systems.
• Personalisation: To tailor game recommendations, promotional offers, and content to your preferences and betting history.
• Responsible gaming: To monitor usage patterns and intervene where gambling behaviour may indicate potential harm, including enforcing self-exclusion requests.
• Marketing communications: To send you relevant promotions, bonuses, and news — only where you have consented or where permitted by applicable law.
• Legal compliance: To fulfil statutory reporting obligations and respond to lawful requests from regulatory authorities.
• Platform improvement: To analyse aggregated usage data, fix bugs, and develop new features for a better player experience.

4. Data Sharing and Disclosure

arai33 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your information only in the following limited and necessary circumstances:

4.1 Service Providers

We engage carefully vetted third-party service providers who process data on our behalf under strict contractual data processing agreements. These include payment gateway operators (for FPX and e-Wallet transactions), identity verification services, cloud infrastructure providers, and customer support platform vendors. These parties are permitted to use your data only as instructed by arai33 and for no other purpose.

4.2 Regulatory and Legal Authorities

We may disclose your personal data to competent authorities, law enforcement agencies, or courts where required by applicable law, court order, or regulatory direction. In such cases, we will disclose only the minimum data necessary to satisfy the legal obligation, and where permitted, we will notify you of such disclosure.

4.3 Business Transfers

In the event of a merger, acquisition, asset sale, or corporate restructuring involving arai33, your personal data may be transferred to the successor entity. We will provide advance notice via email or prominent notice on the Platform before your data becomes subject to a different privacy policy.

4.4 Fraud and Security Partners

To protect the integrity of our Platform and all users, we may share data with anti-fraud networks and gaming integrity organisations on a need-to-know basis where there is a reasonable basis to believe fraudulent or harmful activity has occurred.

5. Cookies and Tracking Technologies

arai33 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and analyse user behaviour. By continuing to use the Platform after being presented with our cookie notice, you consent to the use of cookies in accordance with this section.

5.1 Types of Cookies We Use

• Strictly necessary cookies: Required for core Platform functionality, including session management, security tokens, and load balancing. These cannot be disabled without breaking the Platform.
• Functional cookies: Remember your preferences such as preferred language, currency (MYR), and display settings to personalise your experience.
• Analytics cookies: Collect aggregated, anonymised data about how users navigate the Platform, helping us identify popular features and areas for improvement.
• Marketing cookies: Used to deliver relevant promotional content based on your interaction history on the Platform. These are only set where you have provided consent.

5.2 Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings or the cookie preference centre accessible on the Platform. Note that disabling certain cookies may limit your ability to use some features of the Platform. For detailed guidance on managing cookies in common browsers, refer to the help documentation of your preferred browser.

6. Data Retention

arai33 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. Our general retention guidelines are as follows:

• Active account data: Retained for the duration of your active account and for a period of up to 7 years following account closure, in accordance with anti-money laundering legislation.
• Financial transaction records: Retained for a minimum of 7 years from the date of the transaction to comply with financial reporting requirements.
• KYC and identity documents: Retained for at least 5 years after the end of the business relationship, or longer if required by regulatory direction.
• Customer support correspondence: Retained for up to 3 years from the date of last interaction, unless required longer for dispute resolution purposes.
• Marketing consent records: Retained for as long as we rely on that consent, plus a reasonable period thereafter to demonstrate compliance.
• Technical logs: Generally retained for 12 months, unless retained longer for security investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked back to any individual. We conduct periodic data audits to ensure retention schedules are adhered to across all systems.

7. Data Security

arai33 implements a layered security framework to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our technical and organisational measures include, but are not limited to:

• Transport Layer Security (TLS 1.2+) encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data at rest, including financial records and identity documents
• Multi-factor authentication (MFA) requirements for administrative access to data systems
• Role-based access controls (RBAC) ensuring that staff access only the data necessary for their specific function
• Regular penetration testing and vulnerability assessments conducted by independent security auditors
• 24/7 intrusion detection and monitoring systems across all production environments
• Incident response protocols with defined escalation procedures and breach notification timelines

While we take every reasonable precaution to protect your data, no system is entirely immune to risk. We encourage you to use a strong, unique password for your arai33 account, enable any available two-factor authentication, and notify us immediately at [email protected] if you suspect any unauthorised access to your account.

8. Your Rights

As a user of the arai33 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our Data Protection team at [email protected] with sufficient information to verify your identity. We will respond to all verified requests within 30 calendar days.

• Right of access: You may request confirmation of whether we process your personal data and, if so, obtain a copy of that data along with supplementary information about how it is used.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request its correction or completion without undue delay.
• Right to erasure ("right to be forgotten"): Subject to legal retention obligations (for example, AML record-keeping requirements), you may request deletion of your personal data.
• Right to restriction of processing: In certain circumstances, you may ask us to restrict the processing of your data — for example, while you contest its accuracy or the lawfulness of our processing.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request receipt of your data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on our legitimate interests or for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

9. Minors and Age Restriction

arai33 operates a strict 21+ only policy across all products, games, and services offered on the Platform. We do not knowingly collect, store, or process personal data from individuals under the age of 21.

During registration, all users are required to provide their date of birth and complete identity verification to confirm they meet this age requirement. Where we have reason to believe an account belongs to a person under 21, we will suspend the account immediately, void any pending transactions, and permanently delete all associated personal data as soon as practicable.

If you are a parent or guardian and believe that your child has submitted personal information to arai33 without your consent, please contact us immediately at [email protected] so we can take prompt action.

10. Changes to This Policy

arai33 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the features and services we offer. When we make material changes, we will:

• Update the "Effective Date" at the top of this page
• Display a prominent notice on the Platform homepage for a reasonable period
• Send an email notification to the address registered on your account where required by law

Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must discontinue your use of the Platform and may request account closure by contacting our support team.

We recommend that you review this Policy periodically to stay informed about how arai33 is protecting your personal data. Archived versions of this Policy are available upon request.

11. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way arai33 handles your personal data, please do not hesitate to reach out to our Data Protection team:

We take every privacy inquiry seriously. Our team is based in Kuala Lumpur and is available to assist users across Malaysia. All communications regarding data protection matters are handled with strict confidentiality.