arah4d Privacy Policy

arah4d ("we", "us", "our") operates the online casino and sports betting platform accessible at https://arah4d.click (the "Platform"). In the course of providing our Services to registered users ("you", "your"), we necessarily collect and process certain personal data. This Privacy Policy sets out the full scope of that data processing activity in a transparent and accessible manner.

We are committed to handling your personal data responsibly and in accordance with applicable data protection principles. We collect only the minimum data necessary to deliver our Services, fulfil our legal obligations, and maintain the security and integrity of the Platform. Your data is not used for purposes beyond those described in this Policy without your explicit consent.

By registering an account with arah4d, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not register an account or submit any personal information through the Platform.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including name, contact details, identity documents, IP address, and financial information.
• "Data Controller" — arah4d, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — Any third party that processes personal data on behalf of arah4d, such as payment processors and KYC verification providers.
• "Processing" — Any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
• "Consent" — A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "KYC" — Know Your Customer — the identity and age verification process required to comply with applicable regulations and to process withdrawals.
• "Services" — All gaming, betting, lottery, support, and related services offered through the arah4d Platform.

arah4d collects the following categories of personal data in the course of providing the Services:

We do not collect sensitive categories of personal data (such as health data, racial or ethnic origin, religious beliefs, or biometric data beyond what is inherent in identity document photographs submitted for KYC purposes) unless you voluntarily provide such information in the context of a support request or responsible gambling self-exclusion application.

arah4d collects personal data through the following means:

arah4d processes your personal data for the following specific and legitimate purposes:

• Account Management: To create, maintain, and administer your account, including processing registrations, authentication, and profile updates.
• Service Delivery: To provide access to all gaming, betting, lottery, and live dealer services available on the Platform.
• Payment Processing: To process deposits and withdrawals via Malaysian payment channels including Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay. All transactions are denominated in MYR.
• KYC & Age Verification: To verify your identity and confirm that you meet the minimum age requirement of 21 years, as required by our operational policies.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, collusion, account takeover, and other prohibited activities.
• Responsible Gambling: To monitor gaming behaviour for signs of problem gambling, enforce self-exclusion requests, and maintain deposit and session limits as configured in your account settings.
• Customer Support: To respond to your enquiries, resolve disputes, and maintain records of communications for quality assurance and compliance.
• Legal Compliance: To comply with applicable anti-money laundering (AML), counter-terrorism financing (CTF), and Know Your Customer (KYC) regulatory requirements.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve platform performance, user experience, and feature development.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided consent or where permitted under applicable law. You may opt out at any time.

arah4d processes personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to fulfil our contractual obligations to you as a registered user — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable law, including KYC and AML obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out in furtherance of arah4d's legitimate business interests — such as fraud prevention, security monitoring, and platform analytics — where those interests are not overridden by your fundamental privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

arah4d does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited and controlled circumstances:

arah4d retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account relationship with arah4d, plus a minimum of five (5) years after account closure to satisfy AML and regulatory record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years following the completion of the relevant verification, or five (5) years after the end of the account relationship, whichever is later.
• Transaction Records: Financial transaction records are retained for a minimum of seven (7) years in accordance with applicable financial regulations.
• Support Communications: Customer support records and correspondence are retained for three (3) years following the close of the relevant case, unless retention is required for an ongoing dispute or regulatory matter.
• Marketing Data: Where consent for marketing communications has been withdrawn, marketing-related data will be suppressed within 30 days of the opt-out request.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents any re-identification.

arah4d employs industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Key security measures include:

• TLS Encryption: All data transmitted between your device and our servers is protected by 256-bit Transport Layer Security (TLS) encryption.
• Data Segregation: Financial data, identity documents, and gaming records are stored in logically separated systems with distinct access controls.
• Access Control: Internal access to personal data is restricted to authorised personnel on a strict need-to-know basis. All access is logged and regularly audited.
• Two-Factor Authentication: arah4d supports and encourages the use of two-factor authentication (2FA) on all player accounts as an additional layer of protection.
• Regular Security Audits: Our platform undergoes periodic third-party security assessments to identify and remediate vulnerabilities.
• Payment Security: Payment card and bank account details are never stored on arah4d servers. All financial transactions are handled through certified payment processors with their own security certifications.

While we maintain robust security practices, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in risk to your rights and freedoms, arah4d will notify affected users as promptly as practicable.

arah4d uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session continuity, and gather aggregated analytics data that helps us improve our Services. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly — including maintaining your login session, storing your account preferences, and enabling secure payment flows. These cookies cannot be disabled without impairing core Platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data on how visitors use the Platform — such as pages visited, session duration, and error rates. This data is used solely to improve Platform performance and is not linked to individual identities.
• Functional Cookies: Used to remember your preferences (such as language settings and display options) to provide a more personalised experience on return visits.
• Marketing Cookies: Used, where you have provided explicit consent, to deliver relevant promotional messages and to measure the effectiveness of marketing communications. You may withdraw consent for marketing cookies at any time via your browser settings or by contacting our support team.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the availability of some Platform features.

Subject to applicable law and certain limited exceptions, you hold the following rights in relation to your personal data held by arah4d:

arah4d's Services are strictly for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. All account registrations are subject to age verification, and the submission of false information to circumvent age requirements is a breach of our Terms & Conditions and may constitute a criminal offence.

If arah4d becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately, the associated account will be terminated, and any deposited funds will be returned to the payment method used for the original deposit pending verification.

In the course of operating the Platform, certain personal data may be transferred to, stored on, or processed by systems located outside of Malaysia. This may occur in connection with cloud hosting infrastructure, third-party analytics platforms, or KYC verification providers.

Where such transfers occur, arah4d takes appropriate steps to ensure that your personal data receives a level of protection consistent with this Privacy Policy and applicable data protection standards. These measures include entering into data processing agreements that incorporate appropriate contractual protections for cross-border data transfers.

arah4d prioritises the use of Malaysian and regionally hosted infrastructure wherever feasible, particularly for payment processing and player account data, to minimise the need for cross-border data transfers.

arah4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. When material changes are made, we will update the "Last Reviewed" date at the top of this document and, where appropriate, notify registered users via email or in-Platform notification.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this page periodically to stay informed about how we handle your personal data. If you have questions about a specific update, our support team is available 24/7.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by arah4d, please contact us through the following channels: