Arsenal88 takes the privacy of every player seriously. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you have as a registered member of our platform.
All data transmitted between your device and our servers is protected by bank-grade SSL encryption at all times.
Arsenal88 never sells, rents, or brokers your personal data to third-party advertisers or marketing companies.
Our data practices align with international privacy standards and Malaysia's Personal Data Protection Act (PDPA 2010).
Access, correct, or request deletion of your personal data at any time by contacting our support team directly.
KYC documents and financial records are stored on encrypted, access-controlled servers reviewed regularly by our security team.
We explain clearly what cookies we use, why we use them, and how you can manage or disable them through your browser.
This Privacy Policy ("Policy") is issued by Arsenal88 ("arsenal88", "we", "us", or "the Platform") and describes how we collect, use, store, share, and protect the personal data of individuals ("you", "the Player", "the Member", or "the User") who access or use any part of the arsenal88 platform, including its website, mobile interface, games, payment services, promotions, and customer support channels.
Arsenal88 is committed to protecting the privacy and personal information of all players. We process personal data in a lawful, fair, and transparent manner, and we collect only the data that is genuinely necessary for the legitimate purposes described in this Policy. By registering an account on arsenal88 or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
This Policy should be read together with our Terms & Conditions, which govern your use of the arsenal88 Platform and form part of the agreement between you and Arsenal88. If you do not agree with the practices described in this Policy, please discontinue use of the Platform immediately.
Malaysian Players: Arsenal88 recognises the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA). We are committed to processing the personal data of Malaysian players in a manner that is consistent with the principles established under the PDPA and applicable international data protection standards.
For the purposes of this Privacy Policy, the following definitions apply:
Arsenal88 collects personal data in the following categories, depending on the nature of your interaction with the Platform:
When you create an account on arsenal88, we collect: your chosen username, email address, date of birth, and password (stored in hashed form only — the plain-text password is never stored or visible to Arsenal88 staff).
As part of our mandatory KYC process, we collect copies of your government-issued photo identification (such as your Malaysian IC / MyKad, Passport, or Driver's Licence), proof of residential address, and selfie photographs for identity confirmation purposes. This data is collected only when you request your first withdrawal or when we are required to verify your identity by our compliance obligations.
We collect data related to your financial transactions with the Platform, including: deposit and withdrawal transaction records, payment method identifiers (e.g., the last four digits of your bank account or registered e-wallet phone number), transaction amounts, timestamps, and currency. Full payment card numbers and full bank account details are not stored on arsenal88 servers — these are processed exclusively by our licensed payment processing partners.
We maintain records of your gameplay activity on the Platform, including game session logs, bet amounts, win/loss outcomes, bonus participation history, and sports betting selections. This data is used for account management, dispute resolution, responsible gambling monitoring, and platform analytics.
We automatically collect certain technical information when you access the Platform, including your IP address, device type, operating system, browser type and version, session timestamps, and pages visited. This data is used for security monitoring, fraud prevention, and platform performance optimisation.
When you contact our customer support team — whether via live chat or email — we retain records of those communications, including the content of messages and the timestamps of interactions. This data is retained for quality assurance, dispute resolution, and compliance purposes.
Minimum Necessary Principle: Arsenal88 collects only the personal data that is genuinely necessary for the specific purpose for which it is collected. We do not collect personal data speculatively or for undefined future use.
Arsenal88 collects personal data through the following means:
The majority of personal data we hold is provided directly by you when you register an account, complete the KYC process, make a deposit or withdrawal, contact customer support, or participate in a promotional campaign.
Technical and device data — including IP addresses, session information, and browser data — is collected automatically through standard web server logs and cookie technologies when you access or use the Platform. Please refer to Section 9 of this Policy for a full description of our cookie practices.
When you make a deposit or withdrawal using a Malaysian payment method such as DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank online banking, or FPX, our licensed payment processing partners share transaction confirmation data with us solely for the purpose of crediting or debiting your account balance.
Where we use automated identity verification technology to assist with KYC processing, we may receive data from these providers confirming whether the documents you submitted match the information you provided during registration. These providers act as Data Processors on our behalf under written data processing agreements.
Arsenal88 processes your personal data on the following legal bases:
| Processing Activity | Legal Basis |
|---|---|
| Creating and managing your account | Performance of contract |
| Processing deposits and withdrawals | Performance of contract |
| KYC identity verification | Legal obligation (AML / gaming licence compliance) |
| Fraud detection and prevention | Legitimate interests of Arsenal88 and its players |
| Responsible gambling monitoring | Legal obligation and legitimate interests |
| Customer support and dispute resolution | Performance of contract / legitimate interests |
| Sending account-related notifications | Performance of contract |
| Sending promotional communications (opt-in) | Consent (can be withdrawn at any time) |
| Platform analytics and improvement | Legitimate interests of Arsenal88 |
| Regulatory reporting | Legal obligation |
Arsenal88 uses the personal data we collect strictly for the following purposes:
Arsenal88 does not sell, rent, trade, or otherwise transfer your personal data to third parties for their own commercial purposes. We disclose personal data only in the following limited circumstances:
We share personal data with carefully selected third-party service providers who perform functions on our behalf, including: payment processors (for deposit and withdrawal handling), identity verification providers (for KYC), cloud hosting infrastructure providers, email communication platforms, and customer support software providers. All service providers are bound by written data processing agreements requiring them to process your data only on our instructions and to maintain appropriate security standards.
Arsenal88 may disclose personal data to relevant regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, court order, or legitimate request from a governmental authority. We will notify you of such disclosures where we are legally permitted to do so.
As required under our gaming licence and applicable AML obligations, Arsenal88 may be required to report suspicious transaction activity or file reports with relevant financial intelligence units. Such disclosures may be made without notification to the Player where required by law (e.g., where a "tipping off" restriction applies).
In the event of a merger, acquisition, corporate restructuring, or sale of all or part of Arsenal88's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.
No marketing data sales: Arsenal88 has never sold player data to advertisers, data brokers, or marketing companies, and we have no intention of doing so. Your personal data is used exclusively for the purposes described in this Policy.
Arsenal88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming licence obligations. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Gaming licence and AML obligations |
| KYC documents | Duration of account + 5 years post-closure | AML / regulatory compliance |
| Transaction records | 7 years from transaction date | Financial record-keeping obligations |
| Gameplay logs | Duration of account + 2 years | Dispute resolution / responsible gambling |
| Customer support records | 3 years from last interaction | Quality assurance / dispute resolution |
| Technical / device logs | 12 months | Security monitoring |
| Marketing consent records | Until consent is withdrawn + 1 year | Demonstrating consent compliance |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data that no longer identifies you may be retained indefinitely for aggregate statistical analysis.
Arsenal88 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to enhance your experience, and to gather usage analytics that help us improve our services. A cookie is a small text file placed on your device by a website you visit.
You may manage or disable cookies through your browser settings at any time. Most modern browsers allow you to block or delete cookies, or to be notified when a cookie is set. Please note that disabling strictly necessary cookies will impair your ability to use the Platform effectively — specifically, you may not be able to log in or access the cashier.
Arsenal88 does not use third-party advertising cookies or cross-site tracking technologies that would allow advertisers to profile your browsing behaviour across unrelated websites. Our cookie use is limited to the operational and security purposes described above.
Arsenal88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
Notwithstanding these measures, no transmission over the internet and no data storage system can be guaranteed as completely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, Arsenal88 will notify you as required under applicable law.
Your Responsibility: The security of your account also depends on you. Keep your password confidential, do not share your login credentials, enable 2FA, and log out after each session — especially on shared or public devices. Report any suspected unauthorised access to your account to our support team immediately.
As a data subject whose personal data is processed by Arsenal88, you have the following rights in respect of your personal data. To exercise any of these rights, contact our support team at with the subject line "Data Rights Request". We will respond to all verified requests within 30 calendar days of receipt.
You have the right to request a copy of the personal data that Arsenal88 holds about you, together with information about how it is used, where it is stored, and with whom it has been shared.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details such as email address and date of birth, you may also update these directly in your Account settings (subject to re-verification where required).
You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where you believe the data has been processed unlawfully. Please note that erasure requests cannot be fulfilled where we are required to retain data by applicable law — for example, transaction records subject to mandatory financial record-keeping periods.
You may request that we restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being resolved, or where you have objected to processing and a determination is pending.
You have the right to object to the processing of your personal data where Arsenal88 relies on legitimate interests as the legal basis for processing. You may also withdraw consent for marketing communications at any time through your Account settings or by contacting support, with no adverse impact on your account status.
Where technically feasible and where processing is based on contract or consent, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
The arsenal88 Platform is intended exclusively for adults aged 21 years and above. Arsenal88 does not knowingly collect personal data from individuals under the age of 21. If we become aware that an account has been registered by a person under the age of 21, that account will be suspended immediately, all balances will be handled in accordance with our Terms & Conditions and applicable regulatory requirements, and all associated personal data will be dealt with appropriately.
If you believe that a minor may have registered an account on arsenal88 using false age information, please contact our support team immediately at . We take this matter extremely seriously and will act without delay upon receipt of any such report.
Arsenal88 operates as an international platform and may transfer personal data to service providers and infrastructure providers located outside of Malaysia. Where such transfers occur, Arsenal88 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that provided in Malaysia under the PDPA.
Safeguards for international transfers include: standard contractual clauses incorporated into data processing agreements with service providers; transfers only to jurisdictions that provide an adequate level of data protection as recognised by applicable authority; and technical security measures including encryption that apply regardless of the data's physical location.
For further information about the specific safeguards applied to any international data transfer, please contact us at .
The arsenal88 Platform may contain references to third-party payment services (such as the branded interfaces of DuitNow, Touch 'n Go eWallet, Maybank2u, CIMB Clicks, and other Malaysian payment providers) through which you complete transactions. Once you navigate to a third-party service — including the interface of a payment provider or e-wallet — your activity on that service is governed by that third party's own privacy policy, not by this Policy.
Arsenal88 is not responsible for the privacy practices or content of any third-party service. We encourage you to read the privacy policies of any third-party services you use in connection with your arsenal88 account before providing them with your personal data.
Arsenal88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes in the services we provide. Material changes to this Policy will be communicated to registered players via in-account notification and, where appropriate, by email to the registered account address.
The effective date of the current version is displayed at the top of this page. Continued use of the arsenal88 Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, please close your account and cease using the Platform prior to the effective date of the change.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way Arsenal88 processes your personal data, please contact us through the following channels. All privacy-related enquiries are handled by our Data Protection team.
We aim to respond to all data-related correspondence within 10 business days of receipt, and to complete substantive requests within 30 calendar days. If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.
This Privacy Policy was last reviewed and updated on 1 January 2026. Arsenal88 recommends that all Players review this page periodically to remain informed of how their personal data is used and protected.
We handle your data with the same care we apply to your withdrawals — fast, secure, and transparent. If you have any questions about this policy, our support team is available around the clock.
For players aged 21 and above only. Please gamble responsibly.