Privacy Policy arena39

arena39 is committed to protecting the privacy of every user who uses our online gambling platform. This Privacy Policy is drafted to transparently explain how we manage your personal information when you register, log in, make a deposit, enjoy games or interact with our support services.

This policy applies to all users who access the arena39 website from any device, including personal computers, mobile phones and tablets. It also covers all products and services we offer, including online slots, live casino, sports betting, esports betting and basketball betting.

arena39 operates under international licensing and complies with data protection requirements set by our licensing body. We also follow globally recognised gambling industry practices to ensure user information is managed responsibly.

In the process of registering and using the arena39 platform, we collect several categories of personal information. All data collection is carried out lawfully and for specific purposes.

2.1 Identity and Account Information

• Full name as shown on the identity card (MyKad) or passport
• Date of birth — to verify that the user is 21 years of age or older
• Identity card number (MyKad) or passport number
• Current residential address
• Active mobile phone number and email address

2.2 Financial Information

• e-wallet details (Touch 'n Go eWallet, Boost) used for transactions
• Bank account information for transactions via FPX or DuitNow
• Crypto wallet address (USDT, BTC, ETH) when the user selects this method
• Records of deposit and withdrawal transactions

2.3 Technical and Usage Information

• IP address and general location data
• Device type and version, and the web browser used
• Activity data within the platform including game and betting records
• Cookie and login session information

Every piece of information collected by arena39 is used for specific and lawful purposes. We do not use your data outside the scope stated here without your prior consent.

• Creating and verifying user accounts in accordance with international licensing requirements
• Carrying out the Know Your Customer (KYC) process as required by the regulatory body
• Processing deposit and withdrawal transactions securely
• Detecting and preventing fraud, money laundering and suspicious activity
• Ensuring users meet the minimum age requirement (21 years and above)
• Providing effective and responsive customer support
• Sending important communications relating to services, promotions and policy updates
• Improving platform performance and the overall user experience
• Complying with legal obligations and reporting requirements to relevant authorities

arena39 does not sell, rent or disclose users' personal information to third parties for marketing or commercial purposes without clear consent from the user concerned.

However, there are limited situations where sharing information is necessary and lawful:

• Payment service providers: Required financial information is shared with approved payment processors to complete your deposit and withdrawal transactions.
• Legal requirements: If directed by a court, regulatory body or competent authority, we may be required to disclose certain information.
• Technology providers: Our technical partners who provide the platform infrastructure may have limited access to operational data within the framework of strict confidentiality agreements.
• Corporate transactions: In the event of a merger, acquisition or asset sale, user information may be transferred provided the receiving party complies with an equivalent privacy policy.

In all of the above sharing cases, we ensure that the receiving party has adequate data protection measures in place and receives only the information strictly necessary.

We use multiple layers of technical and procedural security to ensure your personal information remains safe at all times.

• SSL/TLS encryption for all data transmissions between your browser and our servers
• Encryption of data in storage (data at rest) using industry standards
• Role-based access controls — only authorised staff can access sensitive data
• Regular security audits by independent third parties
• An intrusion detection system active 24/7
• Clear and structured security incident response procedures
• Privacy compliance and data security training for all staff

arena39 uses cookies and similar tracking technologies to improve the user experience, understand platform usage patterns and maintain the security of your login session.

Types of cookies we use:

• Essential cookies: Required for the basic functions of the platform such as login verification, session security and language preferences.
• Performance cookies: Collect anonymous data about how users interact with the platform to help us improve our services.
• Preference cookies: Store your personal settings such as display preferences and language choices.

You can manage or disable cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the arena39 platform.

As an arena39 user, you have rights that we are required to respect in the context of protecting your personal data. These rights can be exercised at any time by contacting our support team.

• Right of Access: You have the right to request a copy of all personal information we hold about you.
• Right of Rectification: You may request that we correct information that is inaccurate or incomplete.
• Right of Erasure: In certain circumstances, you may request that your personal data be deleted, subject to applicable legal retention obligations.
• Right to Restriction of Processing: You may request that we limit how we use your data in certain circumstances specified by law.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format and to transfer it to another data controller.
• Right to Object: You may object to the processing of your data for certain purposes, including direct marketing.

arena39 retains your personal information only for as long as necessary to fulfil the purpose of collection or to comply with applicable legal, tax or regulatory reporting requirements.

• Active account data is retained for as long as the account remains active and operational.
• Financial transaction records are retained for the period set by licensing requirements and applicable laws.
• When an account is closed, personal data will be retained for a set period before being securely deleted, in line with legal obligations.
• Security logs and audit data are retained in accordance with our security operations requirements.

Once the retention period has ended and no other legal requirement applies, your personal information will be securely deleted or anonymised.

arena39 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data protection practices, new legal requirements, or developments in the services we offer.

When significant changes occur, we will notify users through:

• A clear notice on the arena39 platform homepage
• Email notification to all registered users
• In-platform notification during login sessions

You are advised to review this Privacy Policy page periodically. Continued use of the arena39 platform after any changes take effect will be considered acceptance of the updated terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or the management of your personal information, please contact the arena39 support team through the following channels:

• 24/7 live chat accessible directly on the arena39 website in Malay and English
• Support email — please use the address below for privacy-related enquiries