royal88 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") is issued by royal88 ("royal88", "we", "us", "our") and governs the collection, use, storage, and disclosure of personal data relating to individuals ("Users", "you", "your") who access or use the royal88 platform available at https://royal88.lat (the "Platform").

By registering an account on or otherwise using the royal88 Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

This Policy should be read alongside the royal88 Terms and Conditions, which govern the overall use of the Platform. In the event of any conflict between this Policy and the Terms and Conditions regarding data matters, this Policy shall prevail.

2. Data Controller

royal88 acts as the data controller in respect of personal data collected through the Platform. As data controller, royal88 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection and privacy laws.

For all data protection enquiries, please contact us via live chat on the Platform or by email at [email protected].

3. Personal Data We Collect

royal88 collects the following categories of personal data in connection with the operation of the Platform:

3.1 Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the minimum age requirement of 21 years).
• National identification number (e.g., Malaysian IC number) or passport number where required for KYC verification.
• Profile photograph or image of identification document submitted during KYC.

3.2 Contact Data

• Email address registered to your royal88 account.
• Mobile telephone number (where provided for two-factor authentication or communication purposes).
• Residential address (where required for identity verification).

3.3 Financial Data

• Bank account details, e-wallet identifiers (e.g., Touch 'n Go, Boost, GrabPay), or DuitNow reference information associated with deposits and withdrawals.
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment methods used.
• Cryptocurrency wallet addresses where USDT TRC20 is used.

3.4 Technical and Usage Data

• IP address, device type, operating system, and browser type used to access the Platform.
• Login timestamps, session duration, and pages visited within the Platform.
• Game history, wagering activity, and bonus redemption records.
• Cookies and similar tracking data as described in Section 9.

3.5 Communications Data

• Records of communications between you and the royal88 support team via live chat or email.
• Correspondence submitted in connection with account enquiries, complaints, or responsible gaming requests.

4. How We Collect Your Data

royal88 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, or communicating with our support team.
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and analytics tools when you interact with the Platform.
• Third-party payment processors: Transaction confirmation data received from payment service providers (e.g., FPX, e-wallet operators, and banking intermediaries) in connection with deposits and withdrawals.
• Identity verification services: Where royal88 uses a third-party KYC or AML screening provider, that provider may supply us with identity verification results and risk assessments based on the documents you submit.

5. Purposes and Legal Basis for Processing

royal88 processes your personal data for the following purposes and on the following legal bases:

• Account management and Platform access — Necessary for the performance of the contract between you and royal88.
• Payment processing and transaction management — Necessary for the performance of the contract and compliance with financial regulatory obligations.
• KYC and AML compliance — Necessary to comply with applicable legal obligations under international anti-money laundering frameworks.
• Responsible gaming monitoring and enforcement — Necessary for compliance with our responsible gaming obligations and for the protection of players' vital interests.
• Fraud prevention and security — Necessary for the legitimate interests of royal88 in preventing fraudulent activity and maintaining Platform integrity.
• Customer support — Necessary for the performance of the contract and legitimate interest in maintaining service quality.
• Platform analytics and improvement — Based on legitimate interest in improving the Platform's technical performance and user experience.
• Marketing communications — Based on your consent, where you have opted in to receive promotional communications from royal88. You may withdraw consent at any time via your account settings.

6. Disclosure of Personal Data

royal88 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients, strictly as necessary:

• Payment service providers: FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and cryptocurrency processors, for the purpose of executing your deposit and withdrawal requests.
• Identity verification and AML service providers: Third-party KYC and screening providers engaged by royal88 to fulfil its AML compliance obligations.
• Gaming software providers: Certified game suppliers (e.g., Evolution Gaming, Pragmatic Play) who require session tokens and game-specific identifiers to operate their platforms within royal88. No additional personal data is shared beyond what is technically necessary.
• Legal and regulatory authorities: Where royal88 is required by law, court order, or regulatory demand to disclose personal data, we will do so in accordance with applicable legal requirements and will, where permitted, notify the affected User.
• Professional advisers: Lawyers, auditors, and insurers, subject to binding confidentiality obligations, where necessary in connection with legal proceedings or regulatory compliance.

All third parties with whom royal88 shares personal data are required to process that data in accordance with applicable privacy law and under contractual obligations no less protective than those contained in this Policy.

7. International Data Transfers

The royal88 Platform operates under international gaming authority licensing. As a result, some personal data may be processed by royal88 or its service providers in jurisdictions outside Malaysia. Where such transfers occur, royal88 ensures that appropriate safeguards are in place — including contractual protections equivalent to those required under applicable data protection law — to protect the security and integrity of your personal data throughout the transfer.

8. Data Retention

royal88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected and to comply with applicable legal obligations. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of the account and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for three (3) years from the date of the communication, unless the subject matter requires longer retention (e.g., dispute resolution).
• Technical and usage data: Retained for up to thirteen (13) months from the date of collection, after which it is aggregated or deleted.

Following the applicable retention period, personal data is securely deleted or irreversibly anonymised.

9. Cookies and Tracking Technologies

royal88 uses cookies and similar technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function, including session management, authentication, and security. These cannot be disabled without affecting Platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how Users navigate the Platform, enabling royal88 to identify and resolve technical issues and improve user experience.
• Preference cookies: Store User settings (such as language preference) to personalise your Platform experience across sessions.

royal88 does not deploy third-party advertising cookies or cross-site tracking cookies. You may configure your browser to block or delete cookies at any time; however, disabling strictly necessary cookies may impair Platform functionality, including your ability to log in and access your account.

10. Security Measures

royal88 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the Platform.
• Salted password hashing — royal88 staff cannot view your password in plain text.
• Two-factor authentication (2FA) available for all accounts.
• Automated login anomaly detection, including alerts for logins from unrecognised devices or unusual locations.
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of the Platform infrastructure.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is entirely free from security risk. royal88 cannot guarantee absolute security and Users are encouraged to adopt strong, unique passwords and enable 2FA on their royal88 accounts.

11. Your Data Rights

Subject to applicable law and certain exceptions, you have the following rights in respect of your personal data held by royal88:

• Right of access: You may request a copy of the personal data royal88 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to our legal obligations to retain certain data (e.g., AML records).
• Right to restrict processing: In certain circumstances, you may request that royal88 limit the ways in which it processes your data.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a structured, machine-readable copy of your personal data.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing carried out on the basis of legitimate interest, including direct marketing.

To exercise any of these rights, please contact the royal88 support team via live chat or email. We will respond to verified requests within thirty (30) days. We may need to verify your identity before actioning your request.

12. Children and Minors

The royal88 Platform is strictly intended for individuals aged 21 years and above. royal88 does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete such data and close the associated account. If you believe that a minor has registered an account on the Platform, please notify us immediately via live chat or email.

13. Changes to This Policy

royal88 reserves the right to update or amend this Privacy Policy at any time. Any material changes will be communicated to registered Users via the email address on record or by a prominent notice on the Platform prior to the change taking effect. The effective date at the top of this Policy will be updated accordingly. Your continued use of the Platform following notification of changes constitutes your acceptance of the revised Policy.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by royal88, please contact us through the following channels:

• Live chat: Available 24/7 directly on the Platform. Average response time under 3 minutes.
• Email: [email protected] (plain text — not a clickable link). Formal data requests are typically acknowledged within two (2) business days and resolved within thirty (30) days.

Malaysian Users who are unsatisfied with royal88's handling of a data protection concern may also seek guidance from the Department of Personal Data Protection (PDPD) of Malaysia, which oversees the enforcement of the Personal Data Protection Act 2010 (PDPA).