Privacy Policy Royal188 – Malaysian Player Data Protection

Royal188 collects your personal data in several ways when you interact with our platform. Below are the types of data we collect and why:

A. Data You Provide Directly

• Registration Information: Full name, MyKad number, date of birth, email address, Malaysian phone number, and your chosen password.
• KYC (Know Your Customer) Information: A copy of your MyKad or passport, Malaysian bank statement, and proof of address (utility bill or bank statement) where required for identity verification.
• Payment Information: E-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), Malaysian bank account numbers for DuitNow, Maybank2u, or CIMB Clicks. We do not store full credit or debit card numbers.
• Support Communications: Records of correspondence, complaints, requests, and all communications between you and the royal188 customer support team via live chat, email, or WhatsApp.

B. Automatically Collected Data

• Technical Data: IP address, browser type, device operating system, phone model, screen resolution, and language settings.
• Activity Data: Login records, session times, pages visited, games played, bet amounts, wins, and losses.
• Cookie Data: Session cookies, preference cookies, and analytics cookies to help us understand how you use the platform.

Royal188 uses the personal data collected solely for the following legitimate purposes:

• Account Management: Creating and managing your account, processing registrations, and conducting the required identity verification (KYC).
• Transaction Processing: Processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u, CIMB Clicks), and other approved payment methods in MYR.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, account misuse, and any other unlawful activity.
• Customer Support: Responding to enquiries, resolving complaints, and providing assistance to users across various support channels.
• Legal Compliance: Meet legal obligations under applicable Malaysian law, including anti-money laundering (AML) reporting requirements.
• Service Improvement: Analysing usage patterns to improve platform features, user experience, and game offerings.
• Marketing Communications: Sending information on promotions, bonuses, and special offers — but only where you have consented to receive them.

Your data security is royal188's highest priority. We continuously invest in our security infrastructure to ensure your data remains protected at all times.

Technical Security Measures

• Data Encryption in Transit: All data transmitted between your device and royal188's servers uses TLS 1.3 protocol with 256-bit encryption.
• Encryption of Stored Data: Sensitive data such as payment information and identification numbers are stored in encrypted form using AES-256 standards.
• Access Controls: Only authorised personnel with a legitimate business need may access player personal data. All access is logged and monitored.
• Regular Security Testing: Penetration testing and security audits are conducted regularly by independent third parties.
• Two-Factor Authentication: Royal188's internal systems use multi-factor authentication to protect against unauthorised access.

Data Breach Response Procedure

In the event of a data breach that may affect your rights or freedoms, royal188 is committed to:

• Notifying the relevant authorities within 72 hours of discovering a breach, where required by law.
• Notifying affected users directly via email or in-platform notification without undue delay.
• Taking immediate action to contain, investigate, and remediate the breach.

Royal188 does not sell your personal data to anyone. However, in the course of legitimate business operations, we may share your data with the following limited categories of third parties:

• Payment Service Providers: E-wallet operators (Touch 'n Go, GrabPay, Boost, ShopeePay), Malaysian banks (for DuitNow and FPX), and payment processors required to carry out your financial transactions. This sharing is limited solely to information needed to process the transaction.
• Game Providers: Live casino game studios and gaming software providers that supply content to the royal188 platform. Minimum data required for player verification and game management may be shared.
• KYC & Anti-Fraud Services: Third-party identity verification and fraud prevention service providers who assist us in maintaining platform security.
• Legal Authorities: Malaysian government authorities, law enforcement bodies, or courts where required by law, court order, or for the prevention of crime.
• Cloud & Hosting Services: Technical infrastructure providers that host royal188's servers and databases. All such providers are bound by strict data protection agreements.

Royal188 uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an explanation of the types of cookies we use:

Types of Cookies Used

• Essential Cookies: Required for core platform functionality — login, game sessions, and security. These cannot be disabled. Without them, the platform will not function properly.
• Performance Cookies: Collects information on how users interact with the platform (most frequently visited pages, errors encountered) to help us improve website performance.
• Functional Cookies: Saving your preferences such as language, display settings, and gaming preferences so you don't have to reconfigure them each time.
• Analytics Cookies: Used to analyse traffic patterns and platform usage in aggregate, helping us understand and improve our services.

Managing Cookies

You can manage or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality or your experience on the royal188 platform. Instructions for managing cookies can be found in the settings of Chrome, Firefox, Safari, or Edge.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices, you have the following rights regarding your personal data held by royal188:

To exercise any of the rights above, please contact us by email at support@royal188.ws stating your full name, account email, and the nature of your request. We will respond within 30 calendar days. For complex cases, this period may be extended, and you will be notified in advance.

As a platform operating in the global digital environment, royal188's servers and systems may be located in various jurisdictions. Regardless, we ensure that any transfer of your personal data outside Malaysia is carried out with adequate safeguards in place:

• Data transfers only occur to countries with a level of data protection comparable to or exceeding that of Malaysia.
• Data transfer agreements containing standard protection clauses are signed with all service providers outside Malaysia.
• Sensitive payment data for Malaysian users is always processed through systems that comply with Malaysian security standards.

Data retention periods are as stated in the table in Section 1. Upon expiry of the retention period, data is securely deleted or anonymised using industry-recognised methods.

The royal188 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process the personal data of anyone under the age of 18.

If we discover or are informed that personal data of a child under 18 has been collected without the knowledge or consent of a lawful guardian, we will take immediate steps to:

• Deleting all data relating to that individual from our systems.
• Closing the account(s) involved.
• Reporting to the relevant authorities where required.

Royal188 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or improvements to how we protect your data.

When we make significant changes to this policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a prominent notice on the royal188 homepage for a minimum period of 14 days.
• Sending email notifications to all active registered members regarding material changes.

Your continued use of the royal188 platform after the effective date of any changes constitutes your acceptance of the revised policy. We encourage you to review this page periodically to stay informed about how we protect your information.

Previous versions of this Privacy Policy are available upon request by emailing our support team, should you need to compare them with the current version.

If you have any questions or concerns, or wish to exercise any of your data rights as outlined in this Privacy Policy, please contact the royal188 privacy team through the following methods:

When contacting us regarding a personal data privacy request, please include the following information to help us process it more efficiently:

• Your full name and royal188 account email address.
• Type of request (data access, rectification, erasure, etc.).
• A brief description of your request.
• Identity verification documents where required for specific requests.

This policy is governed by Malaysian law. If you are dissatisfied with how we have handled your request, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia. For more information on the platform's terms of use, please read Terms & Conditions us.