At arwahtoto, your privacy is more than a legal obligation — it is a genuine commitment to every member. This document clearly explains how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
Our Privacy Commitment
Before reading the full text, here are arwahtoto's six core commitments to managing the personal data of every member in Malaysia.
Arwahtoto operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) — the primary legislation governing the collection and processing of personal data in the country. This compliance is not optional; it is fundamental to how we operate.
Arwahtoto has never and will never sell, rent, or trade members' personal data to any third party for marketing purposes or any other commercial purpose unrelated to our services.
All personal data and financial transactions processed through the arwahtoto platform are protected with 256-bit SSL encryption — the same security standard used by Malaysia's leading banks such as Maybank and CIMB. Your information cannot be intercepted or read by any third party.
Arwahtoto operates on a "minimum necessary" principle — we only collect data that is strictly required to provide our services to you. Irrelevant data is not collected, and internal access to members' personal data is restricted to staff who have a genuine need for it.
As an arwahtoto member, you have the right to access, correct, or request deletion of your personal data at any time. You may also withdraw marketing consent or raise privacy-related complaints directly with our team.
If you no longer wish to receive marketing communications from arwahtoto, you may unsubscribe at any time via the link in any promotional email we send, or by contacting our support team. Your request will be processed within 5 business days.
This Privacy Policy document explains how arwahtoto ("we", "platform") collects, uses, stores, discloses, and protects your personal data when you use our services on arwahtoto.best. This policy applies to all arwahtoto platform users, including registered members, website visitors, and any individual who interacts with our services.
Arwahtoto respects every individual's right to privacy and is committed to handling personal data in a responsible, transparent, and secure manner. We are in full compliance with Personal Data Protection Act 2010 (PDPA) Malaysia and all regulations related thereto.
By registering or using the arwahtoto platform, you confirm that you have read and understood this Privacy Policy and agree to the practices described herein. If you do not agree, please do not use arwahtoto's services.
Important: This Privacy Policy forms part of the arwahtoto Terms & Conditions. Any changes to this policy will be communicated to members via their registered email or through in-platform notifications.
The types of data arwahtoto collects when you use our platform
Arwahtoto collects your personal data through various means — directly when you register or interact with the platform, automatically as you use our services, and in certain cases from legitimate third-party sources. The following are the categories of data we collect:
| Data Category | Example | Method of Collection |
|---|---|---|
| Identification Data | Full name, MyKad/passport number, date of birth, gender, nationality | Account registration & KYC |
| Contact Data | Email address, phone number, residential address | Account registration |
| Financial Data | Payment methods (TNG, GrabPay, DuitNow), deposit & withdrawal history, account balance | In-platform transactions |
| Gaming Data | Betting history, games played, wins & losses, session duration | In-platform activity |
| Technical Data | IP address, browser type, operating system, device type, cookie data | Automatically during use |
| Communication Data | Live chat records, support emails, feedback, complaints | Customer support interactions |
Arwahtoto does not collect sensitive data such as health information, political affiliation, or religious beliefs unless specifically stated and with your explicit consent. Your password is never stored in plain text — only a hashed version using the latest encryption algorithms.
Providing accurate and complete information is a requirement for full use of arwahtoto's services. Incomplete or inaccurate data may result in delays in withdrawal processing or additional verification requirements.
Data processing purposes and the legal basis applied
Arwahtoto uses your personal data only for legitimate, relevant purposes that are limited to what is genuinely necessary. The following are the primary purposes for which your personal data is used at arwahtoto:
Arwahtoto does not use your personal data to make fully automated decisions that significantly affect you without human involvement, except in cases of immediate security risk assessments that require swift action to protect the platform and other members.
When and with whom your data may be shared
Arwahtoto does not sell or disclose your personal data to third parties for their own marketing purposes. However, in the course of operating the platform, there are limited circumstances in which your personal data may need to be shared:
All third parties with whom we share data are bound by strict data processing agreements, ensuring they handle your information to the same or higher standard of protection that arwahtoto applies.
The technical and organisational measures we take to protect your data
Arwahtoto continually invests in data security to ensure your personal and financial information remains protected at all times. The following are the key protection layers we have in place:
Data Breach Notice: While arwahtoto takes all reasonable steps to protect your data, no system can guarantee absolute 100% security. In the event of a data breach that affects you, arwahtoto will notify you and the relevant authorities within the timeframe required by applicable Malaysian law.
Arwahtoto also asks members to play their part in keeping their own accounts secure — use a strong and unique password, enable 2FA, do not share your login credentials, and keep your devices updated with the latest security patches. The arwahtoto team will never ask for your password via email, phone, or live chat.
How arwahtoto uses cookies and related technologies
The arwahtoto platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and understand how our platform is used. The following types of cookies are in use:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Maintaining your login session, ensuring account security, and enabling core platform features to function | Current session |
| Functional Cookies | Remembering your language preferences, display settings, and favourite game selections | Up to 1 year |
| Analytical Cookies | Understanding how members use the platform in aggregate and anonymised form for continuous improvement | Up to 2 years |
| Security Cookies | Detecting suspicious login attempts and protecting against CSRF attacks and other cyber threats | Current session |
Essential cookies cannot be disabled as they are fundamental to how the arwahtoto platform functions. However, you can manage analytics and functional cookies through your browser settings. Please note that disabling certain cookies may affect your experience on arwahtoto.
Arwahtoto does not use third-party advertising cookies or cross-site tracking technologies to target you with marketing outside our platform. Cookie data collected is never shared with advertising networks.
Your rights under Malaysia's PDPA 2010
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you hold certain rights regarding your personal data held by arwahtoto. We fully respect these rights and provide straightforward mechanisms for you to exercise them:
You have the right to request a copy of the personal data arwahtoto holds about you. Requests will be processed within 21 working days.
If your data is inaccurate or out of date, you have the right to request prompt correction via your arwahtoto account settings or through customer support.
In certain circumstances, you may request the deletion of your data — subject to any legal retention obligations applicable to arwahtoto.
You may object to the processing of your data for direct marketing purposes at any time by contacting the arwahtoto team.
You have the right to receive your data in a structured, machine-readable format for transfer to another service provider if required.
In certain circumstances, you may request that arwahtoto restrict the processing of your data while a dispute or complaint is being resolved.
To exercise any of the above rights, contact the arwahtoto team by email at support@arwahtoto.best with the subject line "Privacy Rights Request", along with your full name, registered email address, and a description of your request. We will verify your identity before processing any data-related request to ensure the security of your account.
If you believe arwahtoto is not handling your personal data in accordance with applicable law, you have the right to lodge a complaint with Department of Personal Data Protection (JPDP) Malaysia — the PDPA enforcement body under the Ministry of Communications and Digital Malaysia.
How long arwahtoto retains your personal data
Arwahtoto retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to meet applicable legal obligations. The following are general guidelines for our data retention periods:
Once the retention period has ended, your personal data will be securely deleted or fully anonymised so that it can no longer be linked to you as an individual. arwahtoto does not retain data for longer than necessary.
Our responsibilities regarding external links and services
The arwahtoto platform contains links to third-party websites and services — including game providers such as Evolution Gaming and Pragmatic Play, and payment gateways such as DuitNow and Touch 'n Go. This Privacy Policy applies solely to the arwahtoto platform itself.
Arwahtoto conducts security and privacy compliance checks on all third-party providers before any integration takes place. We only work with providers that have a strong data security track record and comply with relevant industry standards.
How arwahtoto handles policy changes and contact channels
Arwahtoto reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. We are committed to keeping you informed of any significant changes:
For any enquiries, complaints, or requests relating to your privacy and personal data at arwahtoto, please reach us through the following channels:
This Privacy Policy is governed by the laws of Malaysia. Any disputes relating to data privacy are subject to the exclusive jurisdiction of Malaysian courts and may be referred to Department of Personal Data Protection (JPDP) Malaysia where required.
Your data is fully protected. Register for a free account and claim your Welcome Bonus of up to RM888 — minimum deposit of just RM10.
Register Free Now Log InThe arwahtoto team is ready to assist with any privacy or personal data enquiries in Bahasa Melayu.
Security Assurance
Frequently Asked Questions
Minimum age 18. Gamble responsibly. Visit Responsible Gaming for further guidance.