AR88 Privacy Policy – Personal Data Protection for Malaysian Members

AR88 (ar88.life) is a digital entertainment platform operating in Malaysia, designed for adult Malaysian users. We take your privacy seriously and are committed to protecting the personal information you share with us while using this platform.

This Privacy Policy explains the types of personal data AR88 collects from you, the purposes for which it is collected and used, the parties who may receive your data under limited and specific circumstances, the security measures we take to protect your data, data retention periods, and your rights regarding the personal data we hold.

This policy applies to all AR88 services accessible via ar88.life, including account registration, use of online slots, live casino games (blackjack, baccarat, roulette, dragon tiger), football betting (Liga Super Malaysia, EPL, La Liga), e-sports betting (MLBB, Dota 2, CS2), other sports betting, deposit and withdrawal processes via Touch 'n Go eWallet, DuitNow, GrabPay, FPX, Boost, and ShopeePay, as well as all interactions with the AR88 customer support team.

This Privacy Policy forms part of the overall agreement between you and AR88, together with Terms & Conditions us. We encourage you to read both documents carefully to fully understand your rights and responsibilities as an AR88 member.

AR88 collects your personal data through various means – directly when you provide it (such as during registration or KYC), automatically as you use the platform (such as log data and cookies), and in some cases from third parties (such as payment providers). The following are the main categories of data we collect:

AR88 does not collect unnecessary sensitive data such as medical information, biometric data, or religious information. All data collected is directly required for the operation of your account, legal compliance, or improving your experience on the AR88 platform.

AR88 uses the personal data collected for legitimate and reasonable purposes only. We do not use your data for purposes unrelated to platform operations or our relationship with you as a member. The following are the primary purposes for which data is used:

• Operations & Account Management: Creating and managing your AR88 account, processing registrations, verifying identity, and keeping your account secure against unauthorised access.
• Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks), as well as processing winning withdrawals to the payment methods linked to your account.
• Legal Compliance & AML: Fulfilling legal requirements related to anti-money laundering (AML) prevention, KYC programme compliance, reporting to authorities where required, and maintaining records as mandated by law.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, bonus abuse, multiple account usage, hacking attempts, and other security threats against the AR88 platform and its members.
• Customer Support: Enables the AR88 support team to assist you efficiently and accurately with enquiries, technical issues, complaints, or account-related requests.
• Product & Service Improvements: Analysing platform usage patterns in aggregate — not at an individual level — to understand member preferences, identify areas for improvement, and develop new features relevant to Malaysian players.
• Marketing Communications (With Consent): Sending information about new promotions, bonuses, and special AR88 offers to members who have consented to receive such communications. You may withdraw this consent at any time.
• Responsible Gaming: Monitoring betting activity patterns to identify members who may benefit from responsible gaming support, and to ensure that deposit limits, betting limits, and self-exclusion tools function effectively.

AR88 processes your personal data on solid legal grounds – whether based on contractual agreement (to process transactions and manage your account), our legitimate interests (for fraud prevention and platform security), legal obligation (for AML/KYC compliance), or your consent (for marketing communications).

AR88 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, there are limited circumstances in which AR88 needs to share your data with certain parties to enable our services to function or to fulfil legal obligations:

• Payment Service Providers: To process your deposits and withdrawals, AR88 is required to share the necessary transaction information with providers such as Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, and ShopeePay. Data shared is strictly limited to what is needed to complete the transaction.
• Game Software Providers: Third-party game providers offering online slots and live casino tables on the AR88 platform may receive the session data necessary to operate those games. Your full identification details are not shared with game providers.
• Relevant Authorities: AR88 is legally required to report suspicious activity or disclose data upon receiving lawful requests from regulatory authorities, the police, or judicial bodies. Such disclosures are made solely in accordance with legal requirements and limited to what is strictly necessary.
• Technical Service Providers: Companies providing AR88 with technical infrastructure – such as cloud computing services, fraud detection systems, and platform analytics tools – may process data as data processors on AR88's behalf. All such providers are bound by strict data protection agreements.
• Business Restructuring: In the event of an AR88 merger, acquisition, or asset sale, user data may be transferred to the new entity, provided that entity adheres to an equal or stricter privacy policy. Members will be notified in advance before any such transfer takes place.

AR88 continually invests in security technology and procedures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The following are the key security layers we apply:

• Data Encryption in Transit: All communication between your web browser and AR88's servers is protected by TLS 1.3 (Transport Layer Security) with 256-bit encryption. This means that even if someone were to intercept your network traffic, the intercepted data would be completely unreadable.
• Data Encryption at Rest: Sensitive data stored in AR88's databases — including passwords (stored as non-reversible hashes) and financial information — is protected by encryption at the storage level.
• Strict Internal Access Controls: Access to your data is granted only to AR88 staff who genuinely require it to carry out their legitimate work duties, based on the principle of least privilege. All access to sensitive data is logged and monitored.
• Continuous Security Monitoring: AR88's systems are monitored 24 hours a day, 7 days a week to detect suspicious activity, intrusion attempts, and other security threats. Our security team takes immediate action whenever a threat is identified.
• Regular Security Audits: AR88 conducts regular security assessments and independent penetration testing to identify and address security vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): AR88 offers two-factor authentication for account login to members who want an added layer of security. We strongly encourage the use of this feature, especially for accounts with a high balance.

While AR88 takes all reasonable steps to protect your data, no security system can be guaranteed to be 100% impenetrable. In the unlikely event of a data breach affecting members, AR88 will notify the affected members and relevant authorities within the timeframe required by applicable law.

AR88 uses cookies and similar tracking technologies to enhance your experience on our platform, ensure smooth platform functionality, and analyze usage patterns for continuous improvement. Cookies are small text files stored on your device when you access a website.

Types of cookies AR88 uses:

• Essential Cookies: Required for core platform functionality – including login session management, security, and transaction processing. These cookies cannot be disabled without seriously affecting platform functionality.
• Performance Cookies: Collects data on how visitors use the platform – most frequently visited pages, page load times, and errors encountered. This data is used in aggregated form without identifying individuals, to improve platform performance.
• Functionality Cookies: Saves your preferences such as language, display settings, and login information (if you select "Remember Me") so you don't have to reconfigure them on every visit.
• Analytics Cookies: Helps AR88 understand how members use the platform through aggregated statistical data. This information is used to develop new features and improve platform navigation.

You can control and manage cookies through your web browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to view, delete, or block cookies. Please note, however, that blocking essential cookies may affect the functionality of the AR88 platform and your gaming experience.

AR88 retains your personal data only for as long as necessary to fulfil the purposes described in this privacy policy, or as required by law. The following are our data retention guidelines:

• Active Account Data: Retained for as long as your AR88 account remains active. This data is necessary to allow you to access your account, view your transaction history, and use all platform features.
• Financial Transaction Data: All deposit and withdrawal records are retained for a minimum of 5 years from the date of transaction, in line with Malaysia's AML legal requirements and financial audit obligations. This includes transaction records for Touch 'n Go, DuitNow, GrabPay, FPX, Boost, and ShopeePay.
• Data After Account Closure: Upon voluntary account closure, AR88 retains identification information and transaction records required for AML/KYC compliance for 5 years. After this period, data is securely deleted.
• Log & Technical Data: Access logs, IP addresses, and other technical data are typically retained for 12 to 24 months for security and analysis purposes. Aggregated data that does not identify individuals may be retained for longer.
• Support Communication Data: Live chat and email support conversation records are retained for 24 months to enable the AR88 support team to provide consistent assistance and for quality control purposes.

When data is no longer needed and there is no legal requirement to retain it, AR88 will delete or anonymize that data using secure deletion procedures that ensure it cannot be recovered.

As an AR88 member, you have important rights regarding your personal data. AR88 fully respects and upholds these rights:

AR88 is an entertainment platform restricted to individuals aged 18 and above, without exception. We do not knowingly collect, process, or store personal data from individuals under the age of 18.

During registration, all prospective members are required to confirm that they are 18 years of age or older. AR88 reserves the right to request age verification documents (MyKad or passport) at any time, particularly during the KYC process conducted prior to processing a first withdrawal.

If a parent or guardian discovers that their child under the age of 18 has registered an AR88 account or provided us with personal data without authorisation, please contact us immediately at support@ar88.life. AR88 will take prompt and appropriate action, including closing the account, processing any remaining balance refund where applicable, and permanently deleting all associated personal data from our systems.

AR88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or improvements in how we handle data. The "Last updated" date at the top of this document will always reflect the most current version of this policy.

For material changes — that is, changes that significantly affect how we use your data or impact your privacy rights — AR88 will notify you via email to the address registered with your account, or through a prominent in-platform notification, at least 14 days before the changes take effect. This gives you sufficient time to review the changes and, if necessary, take any action regarding your account.

Continued use of the AR88 platform after any privacy policy changes take effect will be considered your acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how we protect your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or how AR88 handles your personal data, our team is ready to help:

• Privacy Email: support@ar88.life – for privacy-related inquiries and data rights requests. Please include "Privacy Inquiry" in the subject line of your email.
• Live Chat: Available 24/7 directly within the AR88 platform for urgent privacy or account security enquiries.
• Response Time: General privacy inquiries – within 2 business days. Data rights requests (access, correction, deletion) – within 30 business days.

AR88's support team consists of Malay-speaking individuals who understand the local Malaysian context – you won't have to worry about communication barriers when discussing matters related to your data privacy.