RoyalBet Privacy Policy — Your Personal Data Protection

1 Introduction

Welcome to the royalbet Privacy Policy. This document has been prepared in compliance with the Personal Data Protection Act 2010 (PDPA) Malaysia and applicable international data protection standards. At royalbet, we believe your trust is our most valuable asset, and we take our responsibility to protect your privacy seriously.

When you register and use the RoyalBet platform, you entrust us with your personal information. We handle that information with full responsibility, transparency, and in accordance with applicable laws in Malaysia.

If you have any questions after reading this document, our Data Protection Officer team is available through the channels listed at the end of this policy.

2 Personal Data We Collect

Royalbet collects your personal information through several means — directly when you register or interact with the platform, automatically as you use our services, and in certain cases, through trusted third parties.

Data we collect directly:

• Full name as per valid identification document
• National identification number (MyKad) or passport number
• Date of birth and gender
• Active email address registered in your name
• Valid Malaysian mobile number
• Current residential address
• Bank account or digital wallet details for deposit and withdrawal purposes
• Selfie and copy of identity document (for the KYC process)

Data collected automatically:

• IP address and network information
• Browser type and version, and your device's operating system
• Game session data including date, time, and duration of play
• Complete financial transaction records
• Account activity and login logs
• Cookie and other tracking technology information

3 How We Use Your Data

Every piece of information we collect serves a clear purpose. royalbet does not use your data for any purpose unrelated to delivering our services or fulfilling our legal obligations.

• Identity verification (KYC): Verifying that you are the person who actually registered and are at least 18 years of age, in accordance with Malaysia's gambling laws.
• Account management: Creating, maintaining, and securely managing your gaming account, including limit settings and responsible gaming controls.
• Transaction processing: Processing your deposits and withdrawals accurately and securely through your chosen payment method.
• Customer support: Responding to enquiries, resolving complaints, and providing any technical assistance you need.
• Platform security: Detecting and preventing fraud, money laundering, and any suspicious or unlawful activity.
• Legal compliance: Meeting reporting obligations to relevant regulatory authorities and law enforcement bodies.
• Service improvement: Analysing usage patterns to enhance the gaming experience and our platform's interface.
• Relevant marketing: Sending promotional information, bonus offers, and the latest news — only if you have given your consent to receive them.

4 Data Sharing with Third Parties

Royalbet does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, there are specific circumstances where we need to share your information with certain parties in order to keep our services running smoothly.

• Payment processors: Financial institutions and payment service providers such as local banks, DuitNow, and digital wallet providers that process your transactions.
• Game software providers: Licensed game providers whose gaming platforms are integrated into royalbet.
• Cloud service providers: Hosting and infrastructure companies that store and process our data under strict data protection agreements.
• Regulatory and enforcement authorities: Malaysian government authorities and relevant international bodies when required by law.
• Analytics providers: Analytics tools that help us understand how our platform is used — data is shared in aggregated, non-identifiable form.

5 Your Data Security

Protecting your personal data from unauthorised access, disclosure, alteration, or destruction is our highest priority. RoyalBet employs multiple layers of technical and operational security to ensure comprehensive data protection.

• 256-bit SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted using bank-grade encryption protocols.
• Data-at-rest encryption: Sensitive data stored in our databases, including financial information and KYC documents, is encrypted using the AES-256 algorithm.
• Two-factor authentication (2FA): An additional security layer requiring OTP verification every time your account is accessed.
• 24/7 Monitoring: Our cybersecurity team continuously monitors the system to detect any unusual or suspicious activity.
• Regular penetration testing: Security audits conducted by independent experts to identify and close vulnerabilities before they can be exploited.
• Internal access controls: royalbet employees can only access data required to perform their duties, and all access is logged and audited.

6 Data Retention Period

Royalbet retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or to comply with legal obligations. The following are our data retention guidelines:

Once the retention period expires, your data will be securely deleted or anonymised in accordance with our established data disposal procedures.

7 Your Rights Under PDPA

As a data subject under the Personal Data Protection Act 2010 (PDPA) Malaysia, you have certain rights regarding the personal data we hold about you. royalbet fully respects these rights and will process any request within 21 business days.

8 Cookies & Tracking Technologies

Royalbet uses cookies and similar tracking technologies to keep our platform functioning properly and to provide you with a better experience. Cookies are small text files stored in your browser when you visit our site.

• Necessary cookies: These cookies are essential for core platform functions such as login authentication, session management, and security. They cannot be disabled.
• Performance cookies: Helping us understand how visitors interact with our platform through aggregated, non-identifiable traffic data.
• Functional cookies: Remembering your preferences such as language, time zone, and display settings for a more comfortable experience.
• Marketing cookies: Used to deliver more relevant promotional content. These cookies are only activated with your consent.

You can manage your cookie settings through your browser options at any time. Please note that blocking certain cookies may affect the functionality of parts of our platform.

9 Cross-Border Data Transfers

As an online platform operating internationally, your information may in some circumstances be processed or stored outside Malaysia — for example, by cloud service providers or game software vendors operating from other locations.

When your data is transferred outside Malaysia, RoyalBet ensures that:

• Transfers only take place to countries or entities that provide a level of data protection equivalent to or greater than Malaysia's PDPA.
• Binding contractual agreements (including Standard Contractual Clauses) are in place to ensure your data remains secure during and after any transfer.
• All data recipients outside Malaysia are subject to periodic compliance audits by our security team.

10 Child Protection

Royalbet is a platform accessible only to individuals aged 18 and above. We do not knowingly collect personal data from minors.

Should we discover that personal data of a minor has been collected without our knowledge, we will take immediate action to:

• Immediately closing the account in question
• Deleting all data associated with the account
• Returning any financial balance to the rightful account owner in accordance with established procedures

11 Amendments to This Privacy Policy

Royalbet reserves the right to update this Privacy Policy from time to time to reflect changes in our operations, new legal requirements, or the latest industry best practices. When significant changes occur, we will:

• Sending email notifications to all active registered members at least 14 days before the changes take effect
• Displaying a clear notice on our platform's home page
• Updating the "Last Updated" date at the top of this document
• Providing a brief comparison between the old and new versions for your reference

Your continued use of the royalbet platform after any amendments take effect constitutes your acceptance of the latest version of this Privacy Policy. It is your responsibility to review this policy periodically.

12 Contact Us

To exercise any of your rights under the PDPA, raise questions about this Privacy Policy, or file a complaint regarding how we handle your personal data, please contact our Data Protection Officer through the following channels:

We are committed to responding to all privacy-related enquiries within 5 business days. Formal complaints requiring a thorough investigation will be resolved within 21 business days as stipulated by the PDPA.

If you are unsatisfied with how we have handled your complaint, you have the right to escalate it directly to the Department of Personal Data Protection Malaysia (JPDP), the regulatory body responsible for enforcing the PDPA in this country.