royalbet Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by royalbet ("the Company", "we", "us", "our") and applies to all personal data collected through the royalbet website at royalbet.vu, including all sub-pages, games, betting products, and related services (collectively, the "Platform").

royalbet is committed to protecting the privacy and personal data of all players and visitors ("you", "your"). We process personal data in accordance with applicable data protection laws and the requirements imposed by the international gaming authority under which royalbet holds its operating licence.

By creating a royalbet account, accessing the Platform, or interacting with any royalbet service, you acknowledge that you have read this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, you must discontinue use of the Platform and, if you hold an account, contact our support team to request account closure.

2. Personal Data We Collect

2.1 Data You Provide Directly

royalbet collects the following categories of personal data that you provide to us voluntarily during registration, KYC verification, and ongoing use of the Platform:

• Identity data: Full legal name, date of birth, gender, nationality.
• Contact data: Email address, Malaysian mobile phone number, residential address (including postcode and state).
• Identity document data: MyKad number, passport number, and copies of identity documents submitted for KYC verification.
• Financial data: Payment account details including Touch 'n Go eWallet registration, Boost account details, bank account numbers (Maybank, CIMB, Public Bank), and transaction records.
• Account data: Username, encrypted password, account preferences, communication preferences, and responsible gaming settings.
• Support data: Records of communications with royalbet customer support, including chat transcripts and email correspondence.

2.2 Data Collected Automatically

When you access the royalbet Platform, we automatically collect certain technical and behavioural data, including:

• IP address, device type, browser type, and operating system.
• Login timestamps, session duration, and pages or game products accessed.
• Betting and gaming activity, including stake amounts, game selections, bet outcomes, and wallet transactions.
• Clickstream data and navigation patterns within the Platform.
• Cookie and similar tracking technology data, as described in Section 6.

3. How We Use Your Personal Data

royalbet processes your personal data for the following purposes:

4. Legal Basis for Processing

royalbet processes your personal data on the following legal bases:

• Contractual necessity: Processing required to deliver the royalbet Platform services under the Terms & Conditions you accepted at registration — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with KYC/AML regulations, gaming authority licence conditions, and applicable financial reporting requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such processing does not override your fundamental rights.
• Consent: Processing for direct marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Third Parties

royalbet does not sell your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors: Touch 'n Go eWallet, Boost, FPX gateway operators, and banking partners (Maybank, CIMB, Public Bank) for the purpose of processing deposits and withdrawals.
• Game and software providers: Licensed game studios and platform providers whose titles appear on royalbet. These providers may receive anonymised session data for game integrity and RNG audit purposes.
• Identity verification services: Third-party KYC and document verification providers engaged to verify identity documents submitted by players during account verification.
• Regulatory authorities: Gaming authority regulators, law enforcement agencies, and financial intelligence units, where disclosure is required by law or regulatory demand.
• IT and security service providers: Cloud hosting, cybersecurity, and platform infrastructure providers engaged by royalbet who process data on our behalf under binding data processing agreements.

All third-party data processors engaged by royalbet are contractually obligated to process personal data solely for the purposes specified, implement appropriate security measures, and comply with applicable data protection laws.

6. Cookies & Tracking Technologies

royalbet uses cookies and similar tracking technologies (web beacons, pixel tags, local storage) to operate and improve the Platform. The categories of cookies used are as follows:

• Strictly necessary cookies: Essential for Platform functionality, including maintaining your login session, preserving account preferences, and enabling secure payment flows. These cannot be disabled without affecting Platform operation.
• Performance and analytics cookies: Collect anonymised data about how players navigate the Platform — which pages are visited most, where errors occur, and how long sessions last. This data is used to improve Platform performance.
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and responsible gaming display options.
• Marketing cookies: Used only where you have explicitly opted in to marketing communications. These track whether you have opened a royalbet promotional email or interacted with a royalbet promotional placement.

You may manage cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use the royalbet Platform.

7. Data Retention

royalbet retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by law and gaming regulation:

• Account and identity data (including KYC documents): retained for a minimum of 5 years from account closure, as required by applicable anti-money laundering regulations.
• Transaction and betting records: retained for a minimum of 5 years from the date of each transaction.
• Customer support communications: retained for 3 years from the date of the interaction.
• Marketing preference records: retained until you withdraw consent or for 2 years from your last interaction with a marketing communication, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with royalbet's data disposal procedures.

8. Your Data Rights

Subject to applicable law and the conditions of royalbet's gaming licence, you have the following rights in respect of your personal data:

• Right of access: You may request a copy of the personal data royalbet holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Certain data (e.g., verified identity information) may require re-submission of documentary evidence.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data in circumstances where processing is no longer necessary, consent has been withdrawn, or processing was unlawful. Note that where retention is required by law (e.g., AML records), erasure cannot be fulfilled for that data category.
• Right to restrict processing: You may request that royalbet restrict processing of your data in certain circumstances, such as where you contest its accuracy pending verification.
• Right to data portability: You may request a copy of data you have provided to royalbet in a structured, machine-readable format, where processing is based on consent or contract.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing emails), you may withdraw consent at any time via account settings or by contacting support. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of these rights, please contact royalbet's Data Protection team via the support channels listed on the Platform. royalbet will respond to verified requests within 30 calendar days.

9. Data Security

royalbet implements and maintains a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the royalbet Platform.
• Encryption of sensitive data at rest, including stored KYC documents and financial account details.
• Two-factor authentication (2FA) available on all player accounts to prevent unauthorised login access.
• Access controls limiting internal access to personal data on a strict need-to-know basis, with audit logs maintained for all data access events.
• Regular penetration testing and third-party security audits of the Platform infrastructure.
• Incident response procedures for data breach detection, containment, and — where required by law — notification to affected individuals and regulatory authorities.

While royalbet employs robust security practices, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your own royalbet login credentials. If you suspect your account has been compromised, contact our support team immediately.

10. Children & Minors

The royalbet Platform is strictly intended for persons aged 21 years and above. royalbet does not knowingly collect personal data from individuals under 21. Age verification is a mandatory component of the KYC process, and all accounts found to belong to persons under 21 will be immediately suspended and permanently closed. Any funds held in such accounts will be returned to the originating payment method after investigation.

If you have reason to believe that a minor has registered on the royalbet Platform or accessed it using your account, please contact our support team immediately so that appropriate action can be taken without delay.

11. Changes to This Policy

royalbet reserves the right to update this Privacy Policy at any time. Where changes are material, we will notify registered players by email and display a prominent notice on the Platform for at least 14 days before the revised Policy takes effect. The "Last updated" date at the top of this Policy will be revised to reflect the date of any change. Your continued use of the royalbet Platform after a Policy update constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must stop using the Platform and contact us to close your account.

12. Contact & Data Protection Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by royalbet, please contact our Data Protection team. Our customer support is available 24/7 via live chat on the Platform. For written data protection enquiries, you may email us — our contact address is displayed in the footer of every page on royalbet.vu. Please mark your email subject line with "Privacy / Data Request" so that it is routed to the correct team without delay.

royalbet aims to respond to all data-related enquiries within 5 business days and to fully resolve all verified data subject requests within 30 calendar days of receipt.