Privacy Policy Arsenal88

1Introduction

Arsenal88 takes the responsibility of protecting player privacy very seriously. This Privacy Policy explains in detail how we collect, use, store, and protect your personal information when you use the Arsenal88 platform, including the official website, mobile app, and all related services.

By registering an account or using any Arsenal88 service, you confirm that you have read and understood this Privacy Policy and agree to how we process your personal information as described herein. If you do not agree, please discontinue use of our platform.

This policy applies to all registered Arsenal88 players in Malaysia and is governed by the Personal Data Protection Act 2010 (PDPA) and related data protection provisions. We are committed to being transparent in every aspect of managing your personal data.

2Information Collected

Arsenal88 collects various categories of personal information to provide each player with a safe, seamless, and responsible service. The following are the types of information we collect:

2.1 Information You Provide Directly

• Full name as shown on official identification documents.
• Identity card number (MyKad) or passport for KYC verification purposes.
• Date of birth to confirm you meet the minimum age requirement of 18 years.
• Active email address and mobile phone number.
• Bank account or digital wallet information for processing deposits and withdrawals.
• Account password (stored in hashed format and not human-readable).
• Information shared during communications with our customer support team.

2.2 Information Collected Automatically

• IP address and estimated geographic location.
• Device type, operating system, and web browser version used.
• Activity log records including logins, games played, and financial transactions.
• Platform usage data, including pages visited and session duration.
• Cookie and tracking technology information.

2.3 Information from Third Parties

• Identity verification conducted by recognised KYC service providers.
• Payment verification information from payment processors such as DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay.
• Fraud prevention data from the risk assessment services we use.

3How We Use Your Data

The personal information we collect is used responsibly and only for legitimate, necessary purposes. arsenal88 does not use player data for unrelated purposes without first obtaining your consent.

• Account management — creates, verifies, and securely maintains your player account.
• Transaction processing — processes deposits and withdrawals accurately and securely through supported payment channels.
• Identity Verification (KYC) — meets legal compliance requirements including anti-money laundering (AML) and counter-terrorism financing (CFT).
• Platform security — detects and prevents fraud, multi-account usage, and any suspicious activity.
• Customer support — addresses enquiries and resolves issues raised by players efficiently.
• Responsible gaming — monitors gaming patterns to identify signs of problem gambling and provide appropriate assistance.
• Marketing communications — sends promotions, bonuses, and the latest offer updates (subject to your communication preferences).
• Platform improvement — analyses aggregated usage data to improve the overall gaming experience.
• Regulatory compliance — fulfils reporting obligations to relevant authorities when required by law.

4Information Sharing

Arsenal88 does not sell, rent, or disclose players' personal information to third parties for their own commercial purposes. However, there are limited situations where we may need to share certain information with trusted third parties to ensure the smooth operation of the platform.

4.1 Service Providers

We share necessary information with third-party service providers acting on our behalf, including payment processors (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay), KYC and identity verification providers, cloud infrastructure and hosting providers, and analytics service providers. All these service providers are bound by strict confidentiality agreements and may only use the data for the specific purposes defined.

4.2 Legal Requirements

Arsenal88 may disclose players' personal information when required by Malaysian law or a valid court order, including to the Royal Malaysia Police (PDRM), Bank Negara Malaysia, the Prime Minister's Department, or any other competent authority. Such disclosures are made only to the extent required by law.

4.3 Business Transfers

In the event of any merger, acquisition, or transfer of arsenal88 assets, player information may be transferred as part of those business assets. Players will be notified before any such transfer takes place, and their rights under this Privacy Policy will continue to be respected.

5Cookies & Tracking Technologies

Arsenal88 uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and deliver more relevant content. The following are the types of cookies we use:

• Essential Cookies — required for core platform functions such as login session verification, cart management, and security. These cookies cannot be disabled.
• Performance Cookies — collects aggregated and anonymised information on how players use our platform, helping us identify areas for improvement.
• Functional Cookies — saves your preferences such as language, display settings, and game choices to deliver a more personalised experience.
• Security Cookies — helps us detect suspicious activity, unauthorised login attempts, and other security threats.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality of the Arsenal88 platform. Session cookies are automatically deleted when you close your browser, while persistent cookies remain until they expire or are manually deleted by you.

6Data Security

Player data security is arsenal88's top priority. We implement comprehensive technical and organisational security measures to protect your personal information from unauthorised access, misuse, disclosure, alteration, or destruction.

• 256-bit SSL/TLS encryption applied to all data communications between our servers and your device.
• Encryption of sensitive data such as financial information and personal identification within our databases.
• Multi-layer firewall system and real-time intrusion detection (IDS/IPS).
• Two-factor authentication (2FA) is available for all player accounts.
• Regular security audits conducted by independent, accredited third parties.
• Strict role-based access controls for internal staff — least privilege principle.
• Tested and documented security incident response procedures.
• Cybersecurity threat monitoring 24 hours a day, 7 days a week.

While we take all reasonable precautions, no system can be guaranteed 100% secure against all cyber threats. In the event of a data breach affecting players, arsenal88 will comply with the notification obligations prescribed by law and inform affected players without undue delay.

7Your Rights

Under Malaysia's Personal Data Protection Act (PDPA 2010) and Arsenal88's policies, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the arsenal88 support team via 24/7 live chat or email us at [email protected]. We will process your request within 30 days of receipt, in compliance with PDPA requirements.

8Data Retention

Arsenal88 retains your personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by Malaysian law. Retention periods vary depending on the type of data and the purpose for which it was processed.

• Active account data — retained for as long as your account remains active and for a reasonable period following account closure.
• Financial transaction records — retained for a minimum of 7 years in compliance with Malaysian financial and tax legislation.
• KYC Documents — retained for a minimum of 5 years following the termination of the business relationship, in line with AML/CFT requirements.
• Support communication logs — retained for 3 years for reference and dispute resolution purposes.
• Cookie and analytics data — retained for the duration set by the cookie, typically between 30 days and 2 years.

Once the retention period expires, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered or re-linked to you.

9Third-Party Links

The arsenal88 platform may contain references to third-party services such as payment processors and game providers. Please note that arsenal88 is not responsible for the privacy practices or content of those third parties.

Every payment processor integrated with arsenal88 — including DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay — has its own Privacy Policy governing how your transaction data is handled. We encourage you to review the relevant third-party privacy policies when using their services.

10Minors

Arsenal88 is an online gaming platform intended exclusively for adults aged 18 and above. We do not knowingly collect, process, or store any personal information from individuals under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that information and terminate the associated account. Parents or guardians who suspect their child may have registered an account on arsenal88 are advised to contact our support team immediately.

11Privacy Policy Amendments

Arsenal88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. The date of the most recent update is always displayed at the top of this page.

For material amendments — those that significantly change how we use your data — we will provide reasonable notice via an in-platform notification or your registered email at least 14 days before the amendment takes effect. Continued use of the Arsenal88 platform after such notice is considered your acceptance of the revised terms.

If you disagree with any material amendment, you have the right to close your account and request deletion of your personal data in accordance with the rights described in Section 7.

12Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how arsenal88 handles your personal data, please do not hesitate to reach us through the following channels:

• Live Chat 24/7 — the fastest way to receive an immediate response from our support team.
• Email — [email protected] (response within 1–2 business days).

We are committed to addressing every privacy-related inquiry thoroughly and within a reasonable timeframe. For formal requests regarding player rights under PDPA, please clearly state the type of right you wish to exercise and we will process your request in accordance with the established procedures.