Royal123 Privacy Policy – Malaysia User Personal Data Protection

1. Introduction & Our Commitment

Royal123 takes the responsibility of protecting users' personal data very seriously. We comply with applicable data protection laws in Malaysia, including the Personal Data Protection Act 2010 (PDPA). Every decision involving the collection and use of user data is made carefully with the interests and safety of our members as the top priority.

This policy is written in plain, easy-to-understand language — not filled with confusing legal jargon. We want you to genuinely understand what happens with your information, not simply click "I Agree" without reading. If any section remains unclear after reading, you can contact the Royal123 support team for further clarification.

2. Information We Collect

Royal123 collects several categories of information depending on how you interact with our platform. In general, we collect:

Information you provide directly:

• Full name as shown on official identification documents.
• Date of birth for age verification.
• Active email address and mobile phone number.
• Bank account or e-wallet details for fund withdrawal purposes.
• Identity document (MyKad) and selfie photo for the KYC verification process.
• Any information you share when communicating with our support team.

Automatically collected information:

• Your IP address and internet browser information.
• Device type, operating system and app version used.
• Usage data includes pages visited, session duration, and actions taken.
• Transaction data includes deposits, wagering, withdrawals, and game history.
• General location information based on IP address (not precise GPS location).

3. How We Use Your Information

Every piece of information we collect is used for legitimate and necessary purposes. Here are the main ways we use user data:

• Account management: Create, verify and maintain your account on the royal123 platform.
• Transaction processing: Process deposits, withdrawals and any financial transactions in your account securely and accurately.
• Identity verification (KYC): Verify your identity to meet legal compliance requirements and protect you from fraud.
• Account security: Detect and prevent unauthorised access, fraud and suspicious activity that may compromise your account.
• Customer support: Provide relevant and effective assistance when you contact our support team.
• Platform improvement: Analyse usage patterns to improve the experience, performance and features of the royal123 platform.
• Marketing communications: Send you promotional information and special offers — only if you have not opted out of this preference.
• Legal compliance: Fulfil legal obligations and directives from competent authorities when required.

4. Sharing & Disclosing Information

Royal123 does not sell users' personal data to third parties for commercial purposes. Your information may be shared in limited situations such as the following:

• Service providers: Third-party companies that assist in operating our platform — such as payment gateway providers, hosting services, and analytics tools — are all bound by strict confidentiality agreements.
• Authorities: When legally required by a court, law enforcement agency, or regulatory body with relevant jurisdiction.
• Fraud prevention: With an integrated fraud prevention network to identify and block illegal or suspicious activity.
• Business transfers: In the event of a merger, acquisition, or transfer of royal123 assets, where user data may be transferred as part of the business assets.

In all of the above sharing situations, we only disclose the minimum information required for that specific purpose.

5. Data Security Measures

Royal123 implements multiple layers of security protection to keep your data safe at all times:

• 256-bit SSL encryption: All data transmitted between your device and royal123 servers is encrypted using the highest industry security standards — the same as those used by leading banks.
• Two-factor authentication (2FA): An additional security layer that uses OTP to protect your account login and withdrawals.
• 24/7 activity monitoring: royal123's automated system monitors all account activity around the clock to detect signs of unauthorized access or suspicious behavior.
• Secure data storage: Sensitive information such as passwords is stored in an unreadable format (hashed) — even royal123 staff cannot view your password.
• Internal access controls: Only authorised royal123 staff who require access to carry out their duties may access user data, based on the principle of least privilege.
• Regular security audits: royal123's systems and infrastructure undergo regular security reviews to ensure there are no exploitable vulnerabilities.

While we take all reasonable precautions, no system can be guaranteed 100% secure. You are also responsible for keeping your account secure by using a strong password and not sharing your login credentials with anyone.

6. Use of Cookies & Tracking Technologies

Royal123 uses cookies and similar tracking technologies to enhance the user experience on our platform. There are several types of cookies we use:

• Essential cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collect anonymised data on how users interact with the platform to help us identify issues and make improvements.
• Functionality cookies: Save your preferences such as language, display settings and login information for your convenience.
• Analytics cookies: Helps us understand overall usage patterns to make better decisions in platform development.

You can manage your cookie settings through your internet browser. However, disabling certain cookies may affect the functionality and user experience of the Royal123 platform.

7. Your Rights as a User

Under the Royal123 Privacy Policy, you have several important rights regarding your personal data:

8. Data Retention Period

Royal123 retains users' personal data for the period necessary for the purposes stated in this policy or as required by law. Generally:

• Active account data is retained for the duration the account remains active, plus an additional 5 years after account closure for audit purposes.
• Financial transaction records are retained for a minimum of 7 years in accordance with Malaysian financial regulatory requirements.
• KYC documents are retained for the same period as financial records.
• Customer support communication logs are retained for 2 years for reference and service improvement purposes.
• Cookie and analytics data is retained for no more than 13 months.

Once the retention period expires, data is securely deleted using methods that ensure no recovery is possible.

9. Changes to the Privacy Policy

Royal123 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. The "Updated" date at the top of this document indicates when the last changes were made.

For material amendments that may significantly affect user rights, we will provide notice via the registered email address or in-app notification at least 14 days before the changes take effect. Continued use of the royal123 platform after the effective date of the amendment is considered acceptance of the updated policy.

10. Contact Us Regarding Privacy

If you have any questions, concerns or wish to exercise your rights regarding personal data, please contact the royal123 team via:

• Live Chat: Available 24/7 on the royal123 app and website — the fastest way to get a response.
• Privacy Email: [email protected] (text display only)
• FAQ: Visit page FAQ us for answers to frequently asked questions about privacy.

Our team will respond to all privacy-related enquiries within 5 business days. For more complex requests such as full data exports, resolution may take longer but we will provide regular updates on the progress of your request.