Royal888 Privacy Policy – Malaysia Player Personal Data Protection

Welcome to the royal888 Privacy Policy. This document explains in detail how Royal888 ("we", "Platform") collects, processes, stores, and protects your personal information ("Personal Data") when you use the royal888.co website, our mobile app, and all services we offer.

This Privacy Policy applies to all users who register, visit, or interact with the royal888 platform from any location in Malaysia. It is drawn up in accordance with the requirements of the Malaysia Personal Data Protection Act 2010 (PDPA) and international best practices in data protection.

If you have any questions about how we manage your data, the royal888 data protection team is available via 24/7 Live Chat or through the support email listed on the platform.

Royal888 collects your Personal Data through several means — directly from you, automatically through your use of the platform, and in some cases, from authorised third parties.

Every piece of data we collect is used for a clear and lawful purpose. Royal888 uses your Personal Data for the following purposes:

• Create and manage your account, including the identity verification (KYC) process.
• Process deposits, withdrawal of wins, and all other financial transactions.
• Verify your eligibility for bonuses and promotions you claim.
• Detect and prevent fraud, money laundering, and other unlawful activity.
• Provide effective customer support when you contact us.
• Personalise your gaming experience based on your preferences and play history.
• Send important notifications about your account, policy changes, or security issues.
• Conduct analytics to improve platform services and user experience.
• Comply with legal and regulatory obligations applicable to our operations.

Royal888 does not sell, rent, or disclose your Personal Data to third parties for marketing purposes. However, in the normal course of business operations, we may need to share certain information with the following parties:

• Payment service providers (FPX, DuitNow, Touch 'n Go eWallet, Boost) — to process your financial transactions.
• Certified KYC service providers — to verify your identity in line with compliance requirements.
• Game service providers (Pragmatic Play, PG Soft, Evolution Gaming, etc.) — to deliver your gaming experience.
• Regulatory authorities and law enforcement — when required by law.
• Authorised cloud data processing companies — subject to strict data processing agreements.

All third parties handling your data are required to comply with data protection standards that are equally strict or stricter than those practised by royal888. Written agreements outlining data protection responsibilities are signed with every service provider.

The security of your personal data is an absolute priority for royal888. We implement comprehensive technical and organisational security measures to protect your Personal Data from unauthorised access, disclosure, alteration, or destruction.

• 256-bit SSL encryption for all communications between your browser/App and our servers.
• Encryption of sensitive personal data stored in our database.
• Role-based access control — only authorised staff can access user data.
• 24/7 security monitoring with automated intrusion detection system (IDS).
• Regular security audits by independent parties to identify and patch vulnerabilities.
• Periodically encrypted data backups to ensure service continuity.

In the event of a data security breach that materially affects your personal information, royal888 is committed to notifying you within 72 hours of becoming aware of the incident, in accordance with applicable legal requirements.

Royal888 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use three main types of cookies:

• Essential Cookies: Required for core platform functions such as login, session security, and identity verification. These cookies cannot be disabled.
• Functional Cookies: Store your preferences such as language, display settings, and favourite games to deliver a better experience.
• Analytics Cookies: Help us understand how users interact with the platform so we can improve it. This data is aggregated and does not identify you individually.

You can manage cookie settings through your browser. However, disabling essential cookies may affect platform functionality and security. Continued use of our platform after a cookie notice is displayed is considered your consent to the use of cookies.

Royal888 does not retain your Personal Data longer than necessary for the purposes stated in this policy or as required by law. Our general data retention guidelines are as follows:

Under the Malaysia Personal Data Protection Act 2010 (PDPA), you as a data subject have the following rights regarding the Personal Data we hold:

• Right of Access: You have the right to obtain a copy of the Personal Data we hold about you.
• Right to Rectification: You have the right to correct any inaccurate or incomplete Personal Data.
• Right to Erasure: Under certain circumstances, you may request that we delete your Personal Data.
• Right to Object: You have the right to object to the processing of your Personal Data for direct marketing purposes.
• Right to Withdraw Consent: You may withdraw your consent to consent-based data processing at any time.
• Right to Complain: You have the right to lodge a complaint with the Malaysia Personal Data Protection Commissioner if you believe your privacy rights have been violated.

To exercise any of these rights, contact the royal888 data protection team via in-platform Live Chat or through the support email available in your account. We will process your request within 21 business days.

The royal888 platform is an adult service restricted to users aged 18 and above. We do not intentionally collect, process, or store Personal Data from individuals under the age of 18.

If we discover that Personal Data of an individual under the age of 18 has been collected without proper age verification, we will take immediate action to delete that data and close the associated account.

Royal888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. Any updates will be published on this page with a clear revision date.

For material amendments — meaning changes that significantly affect how we use your data — we will send a notification via your registered email or an in-platform notification at least 14 days before the changes take effect.

Continued use of the royal888 platform after any amendment takes effect will be deemed as your acceptance of the updated policy. If you disagree with the amendments, you have the right to close your account and withdraw any valid balance before the amendments take effect.