Royal888 – Privacy Policy &
User Data Protection

1 Privacy Policy Introduction & Scope

This Privacy Policy is published by royal888 ("we", "the company") and applies to all users who register, log in, or use any service on the royal888 platform — including the official website and mobile app for iOS and Android.

We understand that entrusting your personal data to any online platform is a significant decision. That is why royal888 takes this responsibility seriously. Every piece of data you share with us is handled with full respect, processed lawfully, and protected with the latest security technology.

This policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), the European Union's General Data Protection Regulation (GDPR) which we follow as international best practice, and the gaming operator licence conditions we fully adhere to.

2 Types of Personal Data We Collect

Royal888 collects your personal data through several channels — directly when you register or use the platform, and automatically via tracking technologies as you browse our site. Here is a summary of the data we collect:

3 Purpose of Using Your Personal Data

The personal data we collect is used solely for legitimate and necessary purposes in operating royal888 services. We will not use your data for any other purpose without notifying you in advance.

• Account Management: Create, verify, and manage your user account on the royal888 platform.
• Transaction Processing: Process deposits, withdrawals, and other financial records related to your account.
• Identity Verification (KYC): Verify your identity to meet legal requirements and prevent fraud and money laundering.
• Customer Support: Provide technical support and respond to your enquiries or complaints.
• Platform Security: Detect and prevent fraud, hacking, and other suspicious activities.
• Service Improvement: Analyse usage patterns to improve user experience and platform performance.
• Marketing Communications: Send you promotional information, bonuses, and the latest offers (you may unsubscribe at any time).
• Legal Compliance: Comply with legal obligations, regulatory requirements, and court orders.

4 Legal Basis for Data Processing

Every personal data processing activity we undertake has a clear legal basis under Malaysia's PDPA 2010:

• Consent: You provide explicit consent when registering an account and agreeing to this privacy policy.
• Contractual Requirement: Data processing is necessary to fulfil the service agreement between you and royal888.
• Legal Obligations: Certain processing is required to comply with Malaysian law, including AML and KYC requirements.
• Legitimate Interest: Some data processing (such as fraud detection) is based on legitimate business interests without prejudicing your rights.

5 Data Sharing with Third Parties

Royal888 does not sell, rent, or trade user personal data. However, in certain limited situations, we may share your data with trusted third parties:

• Payment Providers: Banks, e-wallet operators, and payment processors that securely handle your financial transactions.
• Game Providers: Game software companies that provide games within the Royal888 platform, with the minimum data necessary.
• Authorities: Law enforcement agencies or regulatory bodies where required by law or court order.
• IT Service Providers: Companies providing server hosting, cybersecurity, and technical support services bound by strict confidentiality agreements.
• Identity Verification Services: Third-party KYC service providers that assist in verifying your identity.

All third parties sharing data with us are subject to Data Processing Agreements (DPA) that require them to protect your data to the same or higher standards as Royal888.

6 Cross-Border Data Transfers

As royal888 operates as an international platform, some of your personal data may be transferred to and stored in countries outside Malaysia, particularly at data centres located in Europe and the Asia Pacific.

Every such data transfer is carried out with appropriate safeguards including:

• Internationally recognised standard data transfer agreements.
• Assessment of the recipient country's adequacy to ensure equivalent data protection.
• Standard Contractual Clauses binding on data recipients.

By using the royal888 platform and agreeing to this privacy policy, you consent to such data transfers, with the assurance that your data is always protected to the highest standards.

7 Data Security Measures

Royal888 invests seriously in security infrastructure to protect your personal data. Below are the layers of protection we employ:

• Data Encryption: All data in transit is protected with TLS 1.3 encryption (256-bit SSL). Data stored in our databases is also encrypted using the AES-256 algorithm.
• Access Controls: Access to user data is restricted to staff with a legitimate business need, based on the principle of least privilege.
• Two-Factor Authentication: All Royal888 internal systems are protected with two-factor authentication (2FA) to prevent unauthorised access.
• Regular Security Audits: We conduct regular penetration testing and security audits carried out by independent third parties.
• 24/7 Monitoring: An intrusion detection system (IDS) operates around the clock to detect and respond to cyber threats.
• Incident Response Plan: Royal888 has a comprehensive incident response plan to address any data breach in the shortest time possible.

8 Data Retention Period

Royal888 retains your personal data only for as long as necessary for the purpose it was collected, or as required by law. Our general data retention policy is as follows:

• Active Account Data: Retained for the duration your account is active, plus a further 5 years after account closure for legal compliance purposes.
• Financial & Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legislation.
• KYC Documents: Retained for 5 years after the end of the business relationship, in accordance with AML legal requirements.
• Communication Logs: Customer support conversation records are retained for 2 years.
• Technical Data (Logs): System logs are typically deleted after 12 months unless required for an active investigation.

Upon expiry of the retention period, your data will be securely deleted or anonymised.

9 Your Rights as a Data Subject

In accordance with Malaysia's PDPA 2010 and international best practices, you have the following rights regarding your personal data held by royal888:

10 Cookies & Tracking Technology

Royal888 uses cookies and similar tracking technologies to enhance the user experience and analyse platform performance. Cookies are small text files stored on your device when you visit our site.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Preference Cookies: Store your personal settings such as preferred language and display preferences.
• Analytics Cookies: Help us understand how users interact with the platform for improvement purposes.
• Security Cookies: Used to detect and prevent fraudulent activity and cyberattacks.

You can manage or disable non-essential cookies through your browser settings. Please note, however, that disabling certain cookies may affect the functionality of the Royal888 platform.

11 Links to Third-Party Platforms

This privacy policy applies only to the royal888 platform. If you access any third-party website or application via links on our platform, the respective privacy policy of that third party governs your experience and data on their platform. royal888 is not responsible for the privacy practices of third parties and encourages you to read the privacy policy of every website you visit.

12 Amendments to This Privacy Policy

Royal888 reserves the right to amend this privacy policy from time to time to reflect changes in law, technology, or how we conduct our business. Any material amendments will be communicated to you via your registered email or in-platform notification at least 14 days before taking effect.

The "Updated" date at the top of this document indicates when this policy was last reviewed. We encourage you to check this page periodically. Continued use of the platform after the effective date of any amendment constitutes acceptance of the updated policy.