This Privacy Policy explains how ar666 ("the Platform", "we", "us", "our") collects, uses, stores, and protects personal data provided by Members ("you", "your") in connection with your use of ar666.org and all associated services. ar666 is committed to handling your personal information responsibly, transparently, and in accordance with applicable data protection principles.
ar666 is the data controller responsible for the personal data collected through the ar666 platform at ar666.org. As data controller, ar666 determines the purposes and means by which personal data is processed. All enquiries relating to this Privacy Policy or the exercise of data rights should be directed to the ar666 Data Protection contact channel at [email protected].
ar666 collects the following categories of personal data in connection with account registration, verification, and ongoing platform use:
| Category | Data Elements | Collection Point |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, government-issued ID number | Registration, KYC verification |
| Contact Data | Mobile phone number, email address | Registration, account updates |
| Financial Data | Payment method identifiers (e.g. Touch n Go account reference, bank account last digits), transaction amounts, deposit and withdrawal history | Cashier, payment processing |
| Account Activity Data | Login timestamps, bet history, game history, session durations, bonus usage records | Platform interaction |
| Technical Data | IP address, device type, browser type and version, operating system, referring URL | Automatic on platform access |
| Communications Data | Live chat transcripts, support ticket content, SMS OTP records | Support interactions |
ar666 does not collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or health data) except where strictly required for Responsible Gaming compliance purposes (e.g. self-exclusion records and problem gambling assessments).
ar666 processes your personal data for the following purposes:
ar666 processes personal data on the following legal bases:
ar666 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. ar666 may share your personal data with the following categories of recipient in the circumstances described:
All third parties with whom ar666 shares personal data are required to process such data in accordance with applicable data protection law and ar666's data protection standards.
Subject to applicable data protection law and regulatory retention obligations, you have the following rights in respect of your personal data held by ar666:
Request a copy of the personal data ar666 holds about you.
Request correction of inaccurate or incomplete personal data.
Request deletion of personal data where there is no lawful basis for continued retention.
Request that ar666 limits processing of your data in certain circumstances.
Request a structured, machine-readable copy of your data for transfer to another controller.
Object to processing based on legitimate interests, including direct marketing.
To exercise any of these rights, contact ar666 support at [email protected]. ar666 will respond to verified data rights requests within 30 calendar days. ar666 may request proof of identity before processing a data rights request. Note that some rights are subject to legal retention obligations — particularly AML and regulatory record-keeping requirements — which may override erasure or restriction requests.
The ar666 platform is strictly intended for individuals aged 21 years or older. ar666 does not knowingly collect, process, or retain personal data from individuals under 21 years of age. If ar666 becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, the data removed, and the account balance returned in accordance with our verification procedures. If you believe ar666 has inadvertently collected data from an individual under 21, please contact us immediately at [email protected]. 21+
For any privacy-related enquiry, data rights request, or complaint regarding ar666's handling of your personal data, please contact our support team via:
ar666 will acknowledge all privacy complaints within 5 business days and aim to resolve them within 30 calendar days. If you are not satisfied with ar666's response, you have the right to escalate your complaint to the relevant data protection supervisory authority or the international gaming authority under whose licence ar666 operates.
| Version | 2.4 |
| Updated | 11 Jun 2026 |
| Language | English |
| Market | Malaysia |
| Min Age | 21+ |
Questions about your data? Contact ar666's support team 24/7 via live chat or email.
Beyond legal compliance, these are the six concrete measures ar666 applies to keep your personal data secure and your privacy respected on the platform.
Every data exchange between your browser and the ar666 platform is protected by 256-bit SSL/TLS encryption. Your login credentials, personal details, and payment data are never transmitted in plaintext. The padlock icon in your browser confirms the encrypted connection is active on every ar666 page.
ar666 enforces role-based access controls on all internal data systems — only authorised personnel with a specific need access customer data. OTP two-factor authentication protects Member accounts from external compromise, and all internal data access is logged and audited.
ar666 collects only the personal data that is necessary for the specific purpose for which it is collected. We do not collect sensitive personal information beyond what is strictly required for Responsible Gaming and AML compliance. Payment data is tokenised — ar666 does not store full card numbers or complete e-wallet credentials.
Every third-party service provider that processes ar666 Member data — including KYC providers, payment processors like Touch n Go and Maybank, and infrastructure vendors — operates under a data processing agreement requiring them to apply security standards consistent with ar666's Privacy Policy.
ar666's technical infrastructure undergoes regular security assessments, including penetration testing and vulnerability scanning. Identified issues are remediated according to priority within defined response windows. Security assessment findings are reviewed by ar666's technical leadership team on a regular cycle.
ar666 maintains a documented data breach incident response procedure. In the event of a breach posing risk to Members, ar666 will notify the relevant regulatory authority within legally required timeframes and communicate with affected Members without undue delay. No data breach affecting ar666 Members will be concealed.
ar666 is built on transparency. Your personal data is collected only for clear purposes, protected with enterprise-grade security, and never sold to third parties. Register with ar666 and bet with confidence knowing your data is in good hands.
21+ only · Gambling involves risk · Please play responsibly 21+