Introduction
This Privacy Policy ("Policy") describes how arai333 ("Platform", "we", "us", "our") collects, processes, stores, shares, and protects personal data relating to users ("Player", "User", "you", "your") of the arai333 website at https://arai333.cam, its mobile applications, and all associated services (collectively, the "Services").
arai333 is an online casino and sports betting platform purpose-built for the Malaysian market. In providing these Services, we necessarily collect and process certain personal data. We are committed to handling that data lawfully, fairly, and transparently — in line with internationally recognised data protection principles and, where applicable, the Malaysian Personal Data Protection Act 2010 (PDPA).
This Policy should be read alongside our Terms & Conditions, which govern your overall use of the arai333 Platform. By creating an account or using the Services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
Plain-language summary: We collect the data we need to run your account, process payments, verify your identity, and keep the platform secure. We do not sell your personal data to advertisers or unrelated third parties. You have meaningful rights over your data, including the right to access, correct, and request deletion of your information. Contact us at any time to exercise those rights.
If you are under 21 years of age, you are not permitted to use the arai333 Services. We do not knowingly collect personal data from persons under the age of 21. If you have any queries about this Policy, please contact us using the details in Section 15.
Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
- "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identity card number, date of birth, email address, phone number, IP address, payment details, and account activity records.
- "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, transmission, restriction, or deletion.
- "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this context, arai333.
- "Data Processor" means any third party that processes Personal Data on behalf of arai333 pursuant to a data processing agreement, such as payment service providers, KYC verification partners, and cloud infrastructure providers.
- "Consent" means freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.
- "KYC" (Know Your Customer) means identity and age verification procedures conducted to confirm a Player's identity, age, and the legitimacy of funds.
- "Cookies" means small text files placed on your device by the Platform for session management, analytics, and functionality purposes.
- "PDPA" means the Malaysian Personal Data Protection Act 2010, which regulates the processing of personal data in commercial transactions within Malaysia.
Data We Collect
arai333 collects Personal Data through multiple channels in the course of providing the Services. The categories of data collected are as follows:
3.1 Registration Data
When you create an arai333 account, we collect: full legal name, date of birth, email address, phone number, residential address, username, and password (stored in hashed, non-reversible form). This information is required to create and administer your account.
3.2 Identity Verification (KYC) Data
To comply with our licensing obligations and prevent fraud, we collect identity verification documents including: government-issued photo identification (Malaysian MyKad or passport), proof of residential address (utility bill or bank statement), and in some cases, selfie photographs for biometric identity matching. This data is processed by our KYC verification partner under strict data processing agreements.
3.3 Financial and Payment Data
We collect data relating to financial transactions, including: deposit and withdrawal amounts, payment method identifiers (e-wallet IDs for Touch 'n Go eWallet, Boost, and GrabPay; bank account numbers for Maybank, CIMB, Public Bank, Hong Leong, FPX, and DuitNow transfers; cryptocurrency wallet addresses for BTC, USDT, and ETH transactions), and transaction timestamps. Full payment card numbers are not stored by arai333 — card payments, where applicable, are processed by PCI-DSS-compliant third-party payment processors.
3.4 Gameplay and Wagering Data
We record all gameplay activity, including: games played, wagers placed, bet amounts, game outcomes, sports bets placed (including football markets such as EPL, Liga Super Malaysia, and UFC), session durations, and bonus claims. This data is used for account administration, regulatory compliance, dispute resolution, and responsible gambling monitoring.
3.5 Technical and Device Data
We automatically collect certain technical data when you access the Platform, including: IP address, device type and operating system, browser type and version, referral URL, pages visited, session timestamps, and geolocation data (approximate, derived from IP address). This data is used for security, fraud detection, and platform performance monitoring.
3.6 Communications Data
We retain records of communications between you and our Customer Support team, including live chat transcripts, email correspondence, and support ticket records. These are retained for service quality assurance, dispute resolution, and regulatory audit purposes.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Registration Data | Name, email, date of birth, phone | Account creation & administration |
| KYC / Identity Data | MyKad, passport, proof of address | Age & identity verification, AML compliance |
| Payment Data | E-wallet IDs, bank accounts, crypto wallets | Deposit & withdrawal processing |
| Gameplay Data | Bets placed, game results, session history | Account records, responsible gambling, disputes |
| Technical Data | IP address, device info, browser type | Security, fraud prevention, platform analytics |
| Communications | Support chats, emails | Service quality, dispute resolution |
How We Use Your Data
arai333 processes your Personal Data for the following purposes:
4.1 Account Management and Service Delivery
We use your registration and payment data to create and manage your Account, process deposits and withdrawals, apply bonuses and VIP rewards, and provide customer support. This is the core purpose for which data is collected and cannot be separated from the provision of the Services.
4.2 Identity Verification and Regulatory Compliance
KYC data is processed to verify your identity and age (21+ requirement), to comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations under our international gaming licence, and to satisfy reporting obligations to licensing authorities. This processing is legally required and cannot be opted out of.
4.3 Fraud Prevention and Security
Technical and device data, combined with transaction records, are used to detect and prevent fraudulent activity, account takeovers, bonus abuse, money laundering, and other unlawful uses of the Platform. Where suspicious activity is detected, data may be shared with relevant authorities as required by law.
4.4 Responsible Gambling Monitoring
Gameplay and session data are monitored to identify patterns associated with problem gambling — including rapid deposit sequences, large loss runs, or erratic betting behaviour. This data is used to trigger responsible gambling interventions, enforce self-exclusion and deposit limits, and comply with our responsible gambling obligations.
4.5 Service Improvement and Analytics
Aggregated and anonymised gameplay and technical data are used to analyse Platform performance, identify product improvement opportunities, and optimise the user experience. Where analytics are conducted on non-anonymised data, this is on the legal basis of our legitimate interests in operating and improving the Platform.
4.6 Communications and Promotions
With your consent, we may use your contact details to send promotional communications about bonuses, VIP programme updates, and new game releases relevant to the Malaysian market. You may withdraw your consent to marketing communications at any time via Account Settings or by contacting Customer Support. Withdrawal of marketing consent does not affect the lawfulness of prior processing.
4.7 Legal Claims and Dispute Resolution
We retain relevant Personal Data to the extent necessary to defend or prosecute legal claims, resolve player disputes, and respond to regulatory enquiries or court orders.
Legal Basis for Processing
arai333 processes your Personal Data on the following legal bases, consistent with applicable data protection law:
- Contractual Necessity: Processing required to perform the contract between arai333 and the Player — including account management, payment processing, and service delivery — is conducted on the basis that it is necessary for the performance of that contract.
- Legal Obligation: Processing required to comply with applicable laws and regulatory requirements — including KYC verification, AML/CTF reporting, and licensing compliance — is conducted on the basis of legal obligation.
- Legitimate Interests: Processing for fraud prevention, security monitoring, platform analytics, and responsible gambling monitoring is conducted on the basis of our legitimate interests in operating a safe, secure, and compliant platform, where those interests are not overridden by your rights and interests.
- Consent: Processing for direct marketing communications is conducted on the basis of your freely given consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.
Where processing is based on legitimate interests, arai333 has conducted a balancing assessment to ensure that the processing does not disproportionately interfere with your rights. You may request details of this assessment by contacting us using the details in Section 15.
Data Sharing & Disclosure
arai333 does not sell, rent, or trade your Personal Data to third parties for their own marketing or commercial purposes. We may share your data in the following limited circumstances:
6.1 Data Processors
We engage third-party service providers ("Data Processors") who process Personal Data on our behalf, subject to binding data processing agreements requiring them to process data only on our instructions and to maintain appropriate security standards. These include:
- Payment Service Providers: Including processors facilitating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong transactions, and cryptocurrency network infrastructure providers.
- KYC Verification Partners: Third-party identity verification services that process identity documents and conduct biometric checks.
- Cloud Infrastructure and Hosting Providers: Providers of the server infrastructure on which the Platform operates and data is stored.
- Customer Support Platforms: Providers of the live chat and ticketing systems used to deliver Player support.
- Analytics Providers: Services that process aggregated and pseudonymised data for Platform performance analysis.
6.2 Legal and Regulatory Disclosure
We may disclose Personal Data to licensing authorities, law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or regulatory direction. Where legally permissible, we will notify affected Players of any such disclosure.
6.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of arai333's business, Personal Data held by the Platform may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations being maintained by the successor entity.
6.4 Consent-Based Sharing
Other than in the circumstances described above, Personal Data will not be shared with third parties without your explicit prior consent.
Data Retention
arai333 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Registration Data | Duration of account + 5 years post-closure | Regulatory / AML obligation |
| KYC / Identity Documents | 5 years from account closure | Anti-money laundering compliance |
| Transaction Records | 7 years from transaction date | Financial record-keeping obligations |
| Gameplay History | 5 years from account closure | Dispute resolution / regulatory compliance |
| Support Communications | 3 years from last interaction | Service quality / dispute resolution |
| Technical / Log Data | 12 months rolling | Security monitoring / fraud detection |
| Marketing Consent Records | Until consent withdrawn + 3 years | Demonstrating lawful basis for marketing |
Following the expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in accordance with our data destruction procedures.
Data Security
arai333 implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
- Encryption in Transit: All data transmitted between your device and the arai333 Platform is encrypted using 256-bit Transport Layer Security (TLS/SSL) protocols.
- Encryption at Rest: Sensitive Personal Data, including passwords (stored in hashed form) and payment identifiers, is encrypted at rest within our secure database infrastructure.
- Access Controls: Access to Personal Data is restricted to authorised personnel with a legitimate operational need. Role-based access controls and multi-factor authentication are applied to all internal systems handling Personal Data.
- Infrastructure Security: Server infrastructure is protected by firewalls, intrusion detection systems, and regular security patching. Penetration testing is conducted periodically by independent security assessors.
- Data Minimisation: We collect only the Personal Data necessary for the stated purposes and do not retain data beyond applicable retention periods.
Despite these measures, no data transmission over the internet or storage system can be guaranteed to be 100% secure. If you suspect that your Account has been compromised, please contact our Customer Support team immediately via live chat.
Data Breach Response: In the event of a Personal Data breach that presents a risk to your rights and freedoms, arai333 will notify affected Players and relevant regulatory authorities within the timeframes required under applicable law. You will be informed of the nature of the breach, its likely consequences, and the measures taken to address it.
Cookies & Tracking Technologies
arai333 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit the Platform. They enable us to recognise your browser, maintain your session, and understand how the Platform is being used.
9.1 Types of Cookies Used
- Strictly Necessary Cookies: Essential for the Platform to function — including session authentication, security tokens, and account state management. These cannot be disabled without impairing Platform functionality.
- Functional Cookies: Retain your preferences, such as language settings and remembered login state, to enhance your experience on the Platform.
- Analytics Cookies: Used to collect aggregated, pseudonymised information about how Players navigate the Platform, enabling us to identify usability improvements and performance issues.
- Security Cookies: Used to detect and prevent fraudulent activity, including bot traffic and account takeover attempts.
9.2 Cookie Management
You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use the Platform, including account login and payment functionality.
arai333 does not use third-party advertising or retargeting cookies. We do not share cookie data with advertising networks or social media platforms for commercial targeting purposes.
International Data Transfers
arai333 operates under international gaming licences and utilises cloud infrastructure and third-party service providers whose servers may be located outside Malaysia. Your Personal Data may therefore be transferred to, and processed in, countries other than Malaysia.
Where such transfers occur, arai333 ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to the protections afforded under Malaysian law and applicable international data protection principles. These safeguards may include data processing agreements incorporating standard contractual clauses, adequacy determinations, or binding corporate rules.
By using the arai333 Platform, you acknowledge and consent to the transfer of your Personal Data to other jurisdictions for the purposes described in this Policy. If you have questions about the safeguards applied to international data transfers, please contact us using the details in Section 15.
Protection of Minors
The arai333 Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect, process, or retain Personal Data relating to persons under the age of 21.
arai333 enforces the 21+ age requirement through mandatory KYC identity verification, which requires all Players to submit government-issued identity documentation confirming their date of birth before withdrawal functions are unlocked. Registration by or on behalf of an underage person is a material breach of our Terms & Conditions.
If you believe a minor has registered on arai333: Please contact our Customer Support team immediately via live chat or at [email protected] (plain text — not a clickable link). We will investigate promptly, suspend the relevant account, and ensure any data relating to the minor is securely deleted.
Your Data Rights
Subject to applicable law and certain legal exceptions (such as data required for regulatory compliance or legal claims), you have the following rights in respect of your Personal Data held by arai333:
You have the right to request a copy of the Personal Data we hold about you, along with information about how it is being processed.
You may request correction of inaccurate or incomplete Personal Data. Some data can be updated directly via your Account Settings.
You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
In certain circumstances, you may request that we limit how we process your Personal Data, for example while an accuracy complaint is being resolved.
Where processing is based on consent or contract, you may request your Personal Data in a structured, machine-readable format for transfer to another service provider.
You may object to processing based on legitimate interests, including profiling for marketing purposes. You may also withdraw consent for marketing communications at any time.
To exercise any of these rights, please submit a written request to our Customer Support team via live chat or email. We will respond within 30 days of receiving a valid, verified request. We may need to verify your identity before processing a rights request. There is no charge for exercising your data rights.
If you are dissatisfied with our response to a data rights request, or with our data handling practices generally, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.
Third-Party Services
The arai333 Platform may contain references to third-party services, including game content providers, payment processors, and analytics tools. While arai333 has contractual data protection obligations with all third-party Data Processors (as described in Section 6.1), arai333 does not control and is not responsible for the privacy practices of independently operated third parties.
Game content provided by third-party software providers (such as Pragmatic Play, PG Soft, and Habanero) may involve those providers processing certain technical data (such as session identifiers) necessary to render and operate the games. Such processing is governed by the provider's own privacy policies and our data processing agreements with them.
arai333 does not incorporate third-party advertising networks, social media widgets, or affiliate tracking pixels that would allow third parties to build profiles of you based on your arai333 browsing activity without your knowledge. Our analytics tools process data in pseudonymised, aggregated form and do not transmit personally identifiable information to third-party advertising platforms.
Policy Amendments
arai333 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page indicates when the Policy was most recently revised.
Where changes are material — for example, where we introduce a new purpose for processing Personal Data or a new category of sharing — we will notify registered Players via email or in-platform notification before the changes take effect. For non-material changes (such as clarifications of existing practices or formatting updates), the revised Policy will be published on this page without individual notification.
Your continued use of the arai333 Platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy. If you do not accept the revised Policy, you should cease using the Platform and close your account.
Contact Us
If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by arai333, please contact us through the following channels:
- Live Chat: Available 24/7 via the Platform interface — the fastest channel for account-specific data enquiries.
- Email: [email protected] (plain text — not a clickable link). For formal data rights requests, please mark your email clearly as "Data Rights Request" or "Privacy Enquiry" and include your registered username and a description of your request.
We aim to acknowledge all data-related enquiries within 2 business days and to provide a substantive response within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.
For matters relating to responsible gambling, self-exclusion, or problem gambling support, please visit our dedicated Responsible Gambling page.
Your data rights matter. arai333 takes all privacy enquiries seriously. If you are unsatisfied with our response to a data request, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. We will cooperate fully with any regulatory investigation into our data handling practices.