Privacy Policy aral33 — Your Personal Data Protection

1Introduction & Scope of This Policy

Aral33 is an online gaming platform operating to serve players in Malaysia. We understand that your trust is our most valuable asset. That is why we place personal data protection at the core of our daily operations — not merely to fulfil legal requirements, but because we genuinely care about the safety and privacy of every member.

This Policy applies to all individuals using the aral33 platform, including website visitors, prospective members in the registration process, registered members actively using the services, and former members whose accounts have been closed but whose data must be retained for legal compliance purposes.

We encourage you to read this entire document carefully. If any section is unclear or you would like further clarification, our support team is ready to assist via 24/7 live chat.

2Types of Personal Data We Collect

Aral33 only collects data that is strictly necessary to provide a safe, seamless, and legally compliant service. Below are the categories of data we collect:

A. Data You Provide Directly

• Full name as stated on your official identification document
• National Identification Number (MyKad) or passport number for foreign nationals
• Date of birth for age verification (18 years and above)
• An active and reachable email address
• Registered Malaysian mobile phone number
• Current residential address
• Bank account details (account number, bank name) for deposit and withdrawal processing
• Income source information when required for AML compliance purposes

B. Automatically Collected Data

• IP address and geographic location derived from IP address
• Type and version of web browser used
• Device operating system (Windows, macOS, Android, iOS)
• Session data and activity logs within the platform
• Pages visited, time of visit and navigation patterns
• Cookie data and related tracking technologies (see Section 6)

C. Transaction & Game Data

• Complete deposit and withdrawal history with timestamps
• Betting records, wins, and losses for each gaming session
• Account balance and credit movements
• Bonuses claimed and wagering requirement status

3Data Collection & Processing Purpose

Every piece of data we collect has a clear and legitimate purpose. Below is a summary of our data processing purposes and their corresponding legal basis:

4Data Sharing & Disclosure to Third Parties

Aral33 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, in the course of legitimate platform operations, we may share your data with the following parties in limited and controlled circumstances:

• Payment Processors: Certified payment service providers such as FPX and DuitNow gateways for securely processing your financial transactions
• KYC Service Providers: Accredited third-party identity verification companies to ensure the member onboarding process complies with legal requirements
• Game Providers: Game software providers supplying gaming content — data is shared only to the extent required for game operations
• Cloud Services & Hosting: The server infrastructure hosting our platform, subject to strict confidentiality agreements
• Regulatory Authority: When required by law, court order or direction from a competent authority in Malaysia
• Auditors & Legal Counsel: Professional advisors bound by strict confidentiality obligations when conducting audits or providing legal advice

5Data Security Measures

The security of your personal data is a core technical and operational priority at aral33. We continuously invest in cutting-edge security infrastructure to ensure your information is always protected against unauthorized access, loss, or misuse.

• 256-bit SSL Encryption: All data transmitted between your browser and the aral33 servers is encrypted using the latest TLS 1.3 protocol
• Secure Password Storage: Passwords are stored in hashed format using the bcrypt algorithm — no one at aral33 can ever read your original password
• Two-Factor Authentication (2FA): We provide 2FA via an authenticator app or SMS for an additional layer of security on your account
• Role-Based Access Control: Only staff who require specific data for their duties are granted access, and every access is logged and monitored
• Regular Security Audits: Our platform undergoes regular penetration testing and security audits conducted by independent cybersecurity firms
• Secure Data Centres: Data is stored in certified data centres with multi-layered physical and cyber protection
• 24/7 Monitoring: An AI-powered threat detection system monitors suspicious activity at all times and will take immediate action upon detection

6Cookies & Tracking Technologies

Aral33 uses cookies and similar tracking technologies to enhance your experience on the platform, secure your login sessions, and understand how users interact with our website. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management and security. Cannot be disabled as they are critical to platform operations.
• Performance Cookies: Collecting information on how pages are used to help us improve platform performance and speed.
• Functional Cookies: Remembering your preferences such as language, region, and personal settings to deliver a more tailored experience.
• Analytics Cookies: Used to analyse traffic and usage patterns in aggregate without identifying individual users.

You can control and delete cookies through your web browser settings. Please note that disabling essential cookies may affect platform functionality. More information on managing cookies can be found through your browser's settings.

7Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection principles, you have the following rights regarding the personal data we hold:

8Data Retention Period

Aral33 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with relevant legal and regulatory requirements. Retention periods vary depending on the type of data:

• Active account data: Retained for the duration your account is active plus 7 years after account closure for AML and financial audit purposes
• Financial transaction records: Retained for a minimum of 7 years in line with Malaysian tax and financial legal requirements
• Support communication logs: Retained for 3 years for reference and service improvement purposes
• Technical log data: Retained for 12 months before being automatically deleted
• KYC Records: Retained for 5 years after the business relationship ends, in line with AMLA requirements

9Cross-Border Data Transfers

As an online platform, aral33 may store or process your data on servers located outside Malaysia in certain circumstances. Any such data transfer will be carried out in compliance with Malaysia's PDPA requirements and only to countries or jurisdictions that provide an adequate level of data protection.

• International data transfers occur only with data processors who have signed binding data processing agreements
• We ensure that appropriate safeguarding mechanisms such as Standard Contractual Clauses are in place
• Sensitive financial data is prioritised for storage in local or regional infrastructure where possible

10Children's Privacy

The aral33 platform is strictly for individuals aged 18 and above only. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.

If we discover that we have collected personal data from a minor without proper age verification, we will take immediate steps to delete that data and close the account in question. Our rigorous age verification (KYC) process is our primary line of defence against underage registration.

11Amendments to This Privacy Policy

Aral33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technological developments, or new legal requirements. We are committed to informing you of any material changes.

• Material changes will be communicated via email or in-platform notification at least 14 days before taking effect
• The "Last Updated" date at the top of this page will be updated to reflect the latest version
• Continued use of the platform after the amendment's effective date constitutes your acceptance of the revised Policy
• Archived versions of previous Privacy Policies are available upon request from our support team

12Contact Us & Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Live Chat 24/7: Fastest way — directly via the chat icon at the bottom corner of the aral33 platform
• Email: [email protected] — for written enquiries requiring documentation
• Response Time: Live chat within 2 minutes; email within 24–48 business hours