Arwanatoto Privacy Policy — How We Protect Your Personal Data

Arwanatoto, operated through arwanatoto.biz, values the trust you place in us when you register an account and play on our platform. That trust means we have a responsibility to be transparent about how we handle your personal data.

This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and sets out in detail how Arwanatoto collects, processes, stores, protects, and in certain circumstances, shares your personal data. It applies to all users of the Arwanatoto platform — whether you are registering as a new member, an active player, or simply browsing our website without an account.

By using Arwanatoto's services, you confirm that you have read and understood this Privacy Policy and agree to the practices described herein. If you do not agree, please discontinue use of our platform.

Arwanatoto collects personal data through several channels — registration forms, platform usage, financial transactions, and interactions with our support team. We only collect data that is genuinely necessary to provide our services to you.

Every piece of data we collect has a clear and legitimate purpose. Arwanatoto does not use your data for purposes unrelated to the services you use. The following are the primary purposes for which data is used:

• Account Management: Creating and managing your Arwanatoto account, processing logins, managing balances, and handling MYR deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX, and other available methods.
• Identity Verification (KYC): To verify that you meet the age requirement (18 and above) and confirm your identity in accordance with Malaysian legal compliance requirements.
• Fraud Prevention & Security: Detecting suspicious activity, preventing multiple account abuse, monitoring unusual transaction patterns, and protecting the platform from manipulation.
• Legal Compliance: To fulfil legal obligations relating to anti-money laundering (AML), tax compliance, and record-keeping as required under Malaysian law.
• Service Communications: Sending important notifications about your account, changes to our terms, security issues, or relevant promotions (where you have given your consent).
• Platform Improvements: Analysing usage patterns to improve the gaming experience across slots, Live Casino, Malaysia Super League betting, e-sports, and all sections of the arwanatoto platform.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offer timely assistance to players who may need it.

The legal bases for our data processing are: performance of a contract (to operate your account), legal obligations, our legitimate interests (for security and fraud prevention), and your consent (for optional marketing communications).

Arwanatoto does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We only share data in limited, necessary circumstances as outlined below:

• Licensed Game Providers: PG Soft, Pragmatic Play, Evolution Gaming, SA Gaming, and other provider partners receive only the minimum session data required to operate the games. They are bound by strict data protection agreements.
• Payment Processors: Service providers such as Touch 'n Go, GrabPay, DuitNow, and FPX-affiliated banks receive the transaction information necessary to process your deposits and withdrawals. They are regulated by Bank Negara Malaysia.
• Regulatory Authority: Arwanatoto will disclose data to Malaysian law enforcement agencies, courts, or regulatory bodies when required by law or a valid court order.
• Audit & Compliance Services: Independent auditors who verify Arwanatoto's RNG and security systems may access anonymised technical log data.

Arwanatoto continually invests in security infrastructure to ensure your personal and financial data is protected at all times. We employ a layered approach to data security:

• 256-bit SSL Encryption: All data transmitted between your browser and Arwanatoto's servers is encrypted using the latest TLS protocol, ensuring your data cannot be intercepted in transit.
• Data-at-Rest Encryption: Sensitive data such as MyKad numbers, banking information, and payment details are stored in encrypted form in our databases. Even in the event of a data breach, this information cannot be read without the encryption key.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA for an additional layer of account protection. Verification is done via SMS to a registered Malaysian phone number.
• 24/7 Monitoring: An automated threat detection system continuously monitors all account activity and transactions. Suspicious patterns are flagged for manual review.
• Internal Access Controls: Only arwanatoto staff who require access to specific data in order to carry out their duties are authorised to do so. All access is logged and audited.
• Regular Security Audits: arwanatoto conducts regular penetration testing and independent security audits to identify and address any vulnerabilities.

While Arwanatoto takes all reasonable steps to protect your data, no system in the world is 100% secure. In the event of a data breach that affects you, Arwanatoto will notify you by email within a reasonable timeframe in accordance with legal requirements.

Arwanatoto uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can manage or delete cookies through your browser settings at any time. However, disabling essential cookies may affect the functionality of the arwanatoto platform.

Under Malaysia's PDPA 2010, you have specific rights regarding the personal data held by Arwanatoto. We fully respect and uphold these rights:

To submit any request relating to your data rights, please contact us by email at support@arwanatoto.biz. Arwanatoto will respond within 21 business days in accordance with the requirements of PDPA 2010. Some requests may require additional identity verification before they can be processed.

Arwanatoto does not retain your personal data longer than necessary. Retention periods vary depending on the type of data and applicable legal requirements:

• Active Account Data: Retained for as long as your account is active and for a reasonable period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in compliance with Malaysia's accounting and tax legislation.
• KYC Records (MyKad, Verification Documents): Retained for a minimum of 5 years following account closure, in line with AML compliance requirements.
• Technical & Security Logs: Retained for 90 days to 12 months for investigation and security purposes.
• Gaming Data: Game records are retained for 5 years for audit and dispute resolution purposes.
• Support Communication Data: Live chat records and emails are retained for 2 years.

Once the retention period has expired and there is no further legal requirement to keep the data, it will be securely deleted or anonymised in accordance with industry-standard data disposal procedures.

Arwanatoto takes child protection extremely seriously. Our platform is strictly intended for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

Arwanatoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or other operational reasons. The "Last Updated" date at the top of this document indicates when the latest version took effect.

For any material amendments that affect how we use your data or your privacy rights, Arwanatoto will provide clear notice at least 14 days before the changes take effect, via email to your registered address or through an in-platform notification.

We encourage you to review this Privacy Policy page periodically. Your continued use of the arwanatoto platform following any amendments constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Arwanatoto handles your personal data, please do not hesitate to reach out to us. We are committed to addressing every enquiry seriously and within a reasonable timeframe.

• Privacy Email: support@arwanatoto.biz (please include "Privacy Inquiry" in the email subject line)
• Live Chat: Available 24/7 via the Arwanatoto platform — select "Privacy & Data" from the support menu
• Response Time: Arwanatoto is committed to responding to privacy enquiries within 21 business days

If you are unsatisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital.