Privacy Policy Royale Win – Malaysian Player Data Protection

This Privacy Policy is issued by Royale Win ("we", "platform") and applies to all users who access or use the services on royalewin.click. This Policy transparently explains how we collect, store, use, and protect your personal information as a player on our platform.

Royale Win is committed to protecting the privacy of every Malaysian player. We understand that your trust is our most valuable asset, and safeguarding your personal data is among our highest priorities. This policy is written in Bahasa Melayu to ensure all Malaysian players can clearly understand their rights and responsibilities.

This Privacy Policy is to be read together with Terms & Conditions and Responsible Gaming Policy Royale Win. By using our platform, you consent to us processing your personal data in accordance with the terms set out in this document.

Royale Win only collects information that is strictly necessary to provide safe, legitimate, and quality services to players in Malaysia. The following are the categories of information we collect:

a) Registration & Identity Information

• Full name as stated on your MyKad or official Malaysian identification document
• Date of birth (for age verification — minimum 18 years old)
• Email address and mobile phone number (for communication and verification)
• Malaysian residential address
• Encrypted username and password

b) Identity Verification Information (KYC)

• MyKad copy (front and back) for identity verification
• Bank statement or utility bill as proof of address
• Bank account or e-wallet details for payment method verification

c) Financial & Transaction Information

• Deposit and withdrawal records (amount, date, method – Touch 'n Go, GrabPay, DuitNow, FPX, ShopeePay, Boost)
• Betting history and gameplay activity on the Royale Win platform
• Account balance and records of bonuses or promotions redeemed

d) Technical & Usage Information

• IP address, device type, operating system, and web browser used
• Cookie data and website tracking technologies (details in Section 6)
• Login activity logs, including timestamps and approximate location
• In-platform behavioural data — games played, session duration, and display preferences

Royale Win uses your personal data only for legitimate and necessary purposes. We do not use your data for any other purpose without your consent. The purposes for which your data is used are as follows:

For marketing and promotional communications from Royale Win, you may opt out of receiving promotional emails or SMS at any time by clicking the "Unsubscribe" link in any of our promotional emails, or by adjusting your communication preferences in your account settings.

Royale Win does not sell, rent, or trade your personal data to third parties for their own marketing purposes. However, there are limited situations where we may need to share your information:

• Payment Service Provider: Touch 'n Go eWallet, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks), ShopeePay, and Boost receive only the information required to process your transaction. Each has its own privacy policy that they are bound to comply with.
• Game Software Provider: Our casino software providers and gaming platform partners may receive anonymised gameplay data necessary to ensure game integrity.
• Statutory Authorities: Royale Win will disclose personal information to Malaysian authorities (Royal Malaysia Police, Bank Negara Malaysia, MACC) when required by court order, warrant, or applicable laws such as AMLA 2001.
• Technical Service Providers: Cloud storage providers, fraud detection services, and IT infrastructure partners that assist us in operating the platform — all bound by strict confidentiality agreements with Royale Win.

Royale Win invests seriously in security infrastructure to ensure your personal data is always protected against both internal and external threats. The following are the security layers we have implemented:

• 256-bit SSL/TLS Encryption: All communication between your browser and Royale Win's servers is encrypted using 256-bit SSL/TLS protocol — no data travels unprotected.
• Encryption at Rest: Data stored in Royale Win's databases is also encrypted — even in the event of a physical breach of our servers, the data cannot be read without the encryption key.
• Internal Access Controls: The "least privilege" principle — Royale Win staff can only access data required to perform their specific roles. All access is logged and monitored.
• Two-Factor Authentication (2FA): All Royale Win administrator accounts are protected with mandatory 2FA. Players are also encouraged to enable 2FA on their accounts.
• Regular Security Audits: Royale Win conducts penetration testing and independent security audits on a quarterly basis.
• 24/7 Monitoring: Our threat detection system operates around the clock to identify and neutralise any unauthorised access attempts.

Royale Win uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can manage and control cookies through your web browser settings (Chrome, Firefox, Safari, Edge). However, disabling required cookies may affect certain functionality on the Royale Win platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data held by Royale Win:

To exercise any of the above rights, please submit a written request to support@royalewin.click with the subject line "Data Rights Request – [Account Number]". Royale Win will process your request within 30 calendar days from the date of receipt. Should additional time be required, we will notify you of the reason for the delay.

Royale Win retains your personal data only for as long as necessary for the purposes set out in this policy or as required under Malaysian law:

• Active account data: Retained for as long as your account remains active on Royale Win. You may request account closure at any time.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements (Companies Act 2016 and AMLA 2001).
• KYC records and identity verification: Retained for 5 years after account closure, as required under anti-money laundering legislation.
• Customer support communication logs: Retained for 3 years for reference and resolution of any disputes that may arise.
• Analytical cookie data: Automatically deleted or anonymised after 13 months.
• Data following account closure: Accounts closed at the user's request will be deleted within 30 days, except for data that must be retained as required by law.

Your personal data is primarily stored and processed within Malaysia. However, in certain circumstances, data may be transferred outside Malaysia — for example, for cloud storage services or international technical support infrastructure.

Any such data transfers are made only to countries or service providers with adequate data protection standards, under binding contractual agreements that hold the receiving party to security standards equal to or higher than those required in Malaysia.

Royale Win is a platform exclusively for individuals aged 18 years and above. We do not knowingly collect personal data from minors.

If we discover that personal data belonging to someone under the age of 18 has been collected, we will take immediate action to delete that information and close the account in question. If you are a parent or guardian and believe your child has registered on Royale Win, please contact us immediately at support@royalewin.click and we will respond within 24 hours.

The Royale Win platform may contain links to or integrations with third-party services such as payment gateways (Touch 'n Go eWallet, GrabPay, DuitNow). When you click on those links or use these third-party services, you will be subject to their respective privacy policies.

Royale Win is not responsible for the privacy practices of any third-party website or service. We encourage you to read the privacy policy of your payment service provider before carrying out any transaction.

Royale Win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in law, technology, or how we handle data. Any material changes will be communicated to you via:

• A prominent notice on the Royale Win homepage for at least 7 days before the changes take effect
• Email notifications to all registered players for changes that materially affect your privacy rights
• In-account notification upon your next login

The "Updated" date at the top of this document always reflects the latest version. We encourage you to review this policy periodically. Your continued use of Royale Win after any changes take effect constitutes your acceptance of the updated privacy terms.

If you have any questions, concerns, or complaints regarding Royale Win's Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO):

For official privacy complaints, please send an email with the subject "PDPA Privacy Complaint — [Account Number]". Royale Win is committed to responding within 30 calendar days. If you feel your complaint has not been resolved satisfactorily, you have the right to contact the Personal Data Protection Commissioner of Malaysia.