Privacy Policy arai99 – Personal Data Protection for Malaysian Players

Welcome to the arai99 Privacy Policy page. This policy explains in detail how arai99 ("we", "our platform") collects, processes, stores, and protects your personal information when you use our website and services at arai99.pro.

Arai99 is an online gaming platform operating exclusively for the Malaysian market. We understand that member trust is our most valuable asset, and protecting your personal data is a core part of our responsibility as a responsible platform operator.

By registering an account, accessing, or using any part of the arai99 platform, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.

Arai99 collects various types of information to ensure our platform operates safely, fairly, and efficiently. This data collection is divided into two main categories:

Information you provide directly:

• Full name as stated on your identity card or passport.
• Identity card number (MyKad) or passport number for KYC purposes.
• Date of birth for age verification (18 years and above).
• Active Malaysia mobile phone number.
• A valid and active email address.
• Bank account or digital wallet details for processing deposits and withdrawals.
• Additional information you provide when dealing with our customer support team.

Information collected automatically:

• IP address and general location data (state/country) for security and geo-compliance purposes.
• The type of device, operating system, and web browser version you are using.
• Activity log data including pages visited, access times, and session duration.
• Gaming data including wagering, wins, losses, and transaction history.
• Cookie data and similar tracking technologies (see Section 6 for more information).

The personal data we collect is used solely for lawful and stated purposes. arai99 does not use your data for purposes unrelated to platform operations without your prior consent.

Core operational purposes:

• Processing account registration and verifying member identity through a secure KYC process.
• Processing deposits and withdrawals quickly and securely through a variety of supported Malaysia payment methods.
• Delivering fair, secure, and consistent gaming services across all devices.
• Detecting and preventing fraudulent activity, money laundering, and platform abuse.
• Complying with legal requirements including PDPA 2010, anti-money laundering laws (AMLA), and directives from relevant authorities.

Communication and marketing purposes:

• Sending important account notifications such as transaction confirmations, security alerts, and account updates.
• Informing you about relevant promotions, bonuses, and special offers (subject to your communication preferences).
• Conducting customer satisfaction surveys and gathering feedback for platform improvement purposes.

Platform improvement purposes:

• Analysing usage patterns to improve interface design and user experience.
• Identifying and resolving technical issues more quickly.
• Developing new features that are more relevant to the needs of Malaysia members.

Arai99 does not sell your personal data to any third party. However, in the course of operating the platform, we may share certain data with the following categories of third parties under limited and controlled circumstances:

• Payment service providers: Information required to process your financial transactions is shared with FPX providers, e-wallet operators, and the banks involved. This sharing is necessary to complete your transactions.
• Game software providers: Gaming data required to ensure fairness and game integrity is shared with third-party game platform providers integrated with arai99.
• KYC service providers: Identity information is shared with trusted third-party identity verification services to complete the KYC process securely.
• Authorities and law enforcement agencies: arai99 complies with all lawful directives from Malaysian authorities. Data will be disclosed when required by law or court order.
• Technical support service providers: Limited data is shared with providers who assist us in maintaining and improving the platform's technical infrastructure.

All third parties handling arai99 data are bound by strict data protection agreements and are required to maintain security standards equivalent to those of arai99. We share only the minimum data necessary for the stated purpose.

Arai99 continuously invests in the latest security infrastructure to ensure your personal data is always protected at the highest level. The security measures we implement encompass multiple layers of protection:

• Data encryption in transit: All communications between your browser and arai99 servers are encrypted using TLS 1.3 protocol with AES-256-bit encryption.
• Data encryption at rest: Sensitive data stored in our databases is encrypted using strong encryption algorithms.
• Two-factor authentication (2FA): arai99 supports 2FA for all member accounts to add an extra layer of security during login.
• 24/7 security monitoring: Our automated monitoring system detects and responds to security threats in real time.
• Strict access controls: Only authorised personnel with a legitimate business need may access member personal data, and all access is logged for audit purposes.
• Regular security assessments: arai99 conducts regular penetration testing and vulnerability assessments by independent security experts.

While we take all reasonable precautions, no digital system can guarantee 100% absolute security. We therefore encourage members to also take their own precautions, such as using strong and unique passwords, not sharing login credentials, and enabling 2FA on your arai99 account.

Arai99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for basic platform functions such as login session verification, account security, and core user preferences. These cookies cannot be disabled as the platform will not function properly without them.
• Performance Cookies: Gathering information about how visitors use our website — the pages visited most frequently, error messages received, and so on. All information collected is anonymous and used solely for website improvement.
• Functional Cookies: Allowing the website to remember choices you have made, such as language, geographic region, and display preferences, to provide a more personalised experience.
• Analytics Cookies: Helping us understand how members interact with our platform so we can continuously improve the user experience.

You can control and manage cookies through your web browser settings. Most browsers allow you to view, delete, and block cookies. Please note, however, that disabling essential cookies may affect the functionality of the arai99 platform.

As an arai99 member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data. All rights requests may be submitted to our customer support team.

Arai99 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable laws and regulations in Malaysia.

In general, data retention periods are as follows:

• Active account data: Retained for as long as your account is active and for 6 years after account closure to meet legal requirements.
• Financial transaction records: Retained for a minimum of 7 years in compliance with Malaysia's tax legislation and financial compliance requirements.
• KYC and identity verification data: Retained for 5 years after the business relationship ends, in accordance with the Anti-Money Laundering Act 2001.
• Customer support communication logs: Retained for 2 years for service quality and dispute resolution purposes.
• Analytics and technical log data: Anonymised data is retained for long-term trend analysis; identifiable data is deleted after 12 months.

When personal data is no longer needed and there is no legal obligation to retain it, arai99 will securely delete or destroy that data using methods that ensure it cannot be recovered.

The arai99 platform may contain references or integrations with third-party services such as game providers, payment processors, and technical infrastructure providers. When you interact with these third-party services, their own privacy policies will apply.

Arai99 is not responsible for the privacy practices or content of third-party websites or services that are not under our direct control. We encourage you to read the privacy policy of each third-party service you use in the context of the arai99 platform.

Nevertheless, arai99 only works with third-party providers whose data protection standards are equivalent to our own. All third-party providers handling arai99 member data are bound by data processing agreements that require them to comply with strict security and privacy standards.

The arai99 platform is exclusively for individuals aged 18 and above. We do not intentionally collect or process personal data of individuals under the age of 18.

Arai99 has robust age verification procedures in place during the registration process. Should we discover or become aware that we have inadvertently collected personal data of an individual under 18 years of age, we will:

• Immediately close the account in question.
• Deleting all personal data associated with the account.
• Refunding any deposited funds where applicable.
• Taking appropriate follow-up action in accordance with applicable laws.

If you are a parent or guardian and have reason to believe that a child under your care has registered an account at arai99, please contact our customer support team immediately so that the appropriate action can be taken.

Arai99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to our services. The "Last Updated" date at the top of this page will always reflect the latest version.

For significant changes that materially affect how we handle your personal data, arai99 will notify you via:

• Email notification to the address registered in your account.
• A clear notice on the platform's home page or within your account upon login.
• At least 14 days' notice before changes take effect, unless the changes are required immediately for security or legal reasons.

Continued use of the arai99 platform after any changes to this Privacy Policy take effect will be considered acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the arai99 privacy team is here to help.