Royal36 Privacy Policy – Data Protection for Malaysian Members

Royal36 collects the personal information necessary to deliver our online casino platform services safely, fairly, and in compliance with the law. We only collect what is truly needed — nothing more.

Identity & Account Information:

• Full name as stated on your Malaysian identity card (MyKad) or passport
• Date of birth (for age verification — members must be 18 years of age or older)
• Malaysian identity card number (NRIC) or passport number
• A valid email address
• Malaysian mobile phone number
• Chosen username and password (passwords are stored in encrypted form)

Financial Information:

• Bank account number or e-wallet details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow) for deposit and withdrawal processing
• Deposit and withdrawal transaction history in Malaysian Ringgit (RM)
• FPX-related information, including the member's bank name (Maybank, CIMB, etc.)

Platform Activity Information:

• Gaming and betting history (Live Casino, slots, poker, Sports Betting)
• Game session logs including date, time, and session duration
• Records of interactions with the customer support team
• Saved preferences and responsible gaming limits

Technical Information:

• The IP address of the device used to access the platform
• Device type, operating system, and web browser
• Cookies and platform usage data (pages visited, time spent on each page)

Royal36 collects your personal information through several different channels. Understanding how your data is gathered helps you make more informed decisions about what you share with us.

• During account registration: Basic information such as your name, email address, phone number, and date of birth is collected when you complete the Royal36 registration form for the first time.
• During the identity verification process: Verification documents such as a copy of your MyKad or passport may be required prior to your first withdrawal or when requested for AML (Anti-Money Laundering) compliance purposes.
• During financial transactions: Payment-related information is collected when you make a deposit or withdrawal via Touch 'n Go eWallet, DuitNow, GrabPay, FPX, Boost, or ShopeePay.
• While using the platform: Game activity data is automatically collected when you play slots, live casino, poker, blackjack, roulette, or place sports bets on Royal36.
• Through cookies: When you visit the Royal36 website, cookies and similar technologies collect information about your browsing behaviour to improve the user experience and for analytics purposes.
• Through customer support interactions: When you contact our support team via live chat or email, the content of those conversations is recorded for quality control purposes and to assist in resolving any disputes.

Royal36 uses the personal information collected for specific and legitimate purposes. We do not use your data for any purpose not stated in this Privacy Policy without first obtaining your consent.

• Account management: To create, verify, and manage your Royal36 account, including processing requests to update your account information.
• Financial transaction processing: To process your deposits and withdrawals securely and efficiently through your preferred Malaysian payment method.
• Identity verification and legal compliance: To comply with KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements mandated under Malaysian law, including reporting suspicious transactions to the relevant authorities where necessary.
• Age verification: To verify that all Royal36 members meet the minimum age requirement of 18 years.
• Customer support: To provide effective and relevant assistance when you contact our support team.
• Security and fraud prevention: To identify and prevent fraudulent activity, collusion, bot usage, and other security threats to our platform and members.
• Service improvements: To analyze platform usage patterns for product development and user experience improvement purposes.
• Service communications: To send important notifications related to your account, changes to terms, or security issues that require your immediate attention.
• Marketing communications (with consent): To send you information about Royal36 promotions, bonuses, and special offers — only where you have given your consent to receive such communications. You may withdraw this consent at any time.
• Responsible gaming: To monitor gameplay patterns and provide support to members who may need assistance with unhealthy gambling habits.

Royal36 does not sell members' personal information to anyone. However, there are certain situations where we need to share specific information with selected third parties in order to deliver our services.

• Payment service provider: Transaction information required is shared with Malaysian payment providers — including FPX processors, Touch 'n Go, GrabPay, DuitNow, Boost, and ShopeePay — solely for the purpose of processing your financial transactions. These providers are bound by strict confidentiality agreements.
• Game software providers: Third-party game providers that supply live casino, slots, and table games may receive limited game session data necessary to operate those games. Full identity information is not shared.
• Regulatory and law enforcement authorities: Royal36 will disclose personal information to Malaysian authorities where required by law, court order, or to assist in financial crime investigations. We do not disclose information beyond what is legally required.
• Audit and compliance partners: Independent audit firms and RNG testing agencies may access certain system data for security audit and game fairness verification purposes. Such access is strictly limited and controlled.
• Business transfers: In the event of a merger, acquisition, or transfer of Royal36's assets, member data may be transferred as part of the business assets. Members will be notified in advance and their privacy rights will be protected throughout the process.

All third parties we work with are bound by strict confidentiality and data protection agreements. They are only permitted to use shared information for the purposes specified in those agreements and nothing beyond that.

The security of your personal data is Royal36's top priority. We continuously invest in the latest security infrastructure to ensure your information is always protected from unauthorised access.

• Data encryption in transit: All data communications between your device and Royal36's servers are secured with 256-bit TLS/SSL protocols. This ensures that information transmitted cannot be intercepted or read by unauthorised parties.
• Stored data encryption: Sensitive data such as financial information and identity documents is encrypted using industry-standard algorithms when stored in our database.
• Layered access controls: Our systems use role-based access control (RBAC), ensuring that every Royal36 employee only has access to the data necessary to perform their specific responsibilities.
• Comprehensive audit logs: All access to member personal data is recorded in audit logs that are stored securely. These logs allow us to detect any suspicious access and respond swiftly.
• Regular penetration testing: We conduct regular penetration testing by independent security experts to identify and address any vulnerabilities before they can be exploited.
• Data retention period: Personal data is retained for as long as your account remains active and for the period required by law following account closure (typically 7 years for financial records, as mandated by Malaysian law). Once the required retention period has elapsed, data will be securely deleted or anonymised.

While we take all reasonable precautions, no security system can be guaranteed 100% secure. In the event of a security breach affecting your personal data, Royal36 is committed to notifying you within the timeframe required by law and taking immediate action to mitigate the impact of the breach.

Royal36 uses cookies and similar technologies to enhance the user experience on our platform. This section explains the types of cookies we use and how you can manage them.

• Essential cookies (required): These cookies are essential for the platform to function correctly. They store your login session information, language preferences, and security settings. Without them, the Royal36 platform cannot operate. Essential cookies cannot be disabled.
• Performance cookies: These cookies collect information about how you use the platform — pages visited, time spent, and any errors encountered. This information is used to improve platform performance and usability. All data is collected in aggregate and does not identify you individually.
• Functional cookies: These cookies remember your preferences, such as your favorite game types, last used bet size, and display settings. This allows us to provide a more personalized and seamless experience.
• Analytics cookies: We use analytics tools to understand overall platform usage patterns. This data helps us make better decisions regarding product development and new features.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of the Royal36 platform. For more information on managing cookies in your browser, please refer to your browser's documentation.

As a Royal36 member and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal information. Royal36 is committed to making it easy for you to exercise those rights.

All requests relating to your privacy rights will be processed within 14 business days of receipt. For more complex cases, we may require up to 30 days, and you will be notified if this applies. Royal36 reserves the right to request proof of identity before processing any data request, to ensure the security of your account.

Royal36 is a gambling platform that operates exclusively for adults aged 18 and above. We do not knowingly collect or process any personal information from individuals under the age of 18.

• The Royal36 registration form requires date of birth verification, and we take reasonable steps to verify the age of all applicants.
• Accounts found to be held by minors will be closed immediately upon detection, regardless of the stage at which this is identified.
• If you believe that a minor has registered an account on Royal36 using your information or false details, please contact us immediately at support@royal36.site so we can take prompt action.
• If we discover that we have inadvertently collected personal information from a minor, we will take immediate steps to remove that information from our records.

Parents and guardians are encouraged to monitor their children's online activities and ensure they do not access gambling platforms such as Royal36. If you need assistance with this, please visit the Responsible Gaming us for helpful resources and guidance.

In the course of its operations, Royal36 may need to transfer or store your personal data on servers that may be located outside Malaysia. This occurs in the context of using third-party gaming software or cloud infrastructure services.

• All cross-border data transfers by Royal36 are carried out in accordance with Malaysia's PDPA, which requires a level of protection comparable to that provided in Malaysia.
• We ensure that all partners who receive Royal36 member data adhere to strict data protection standards and are bound by data protection agreements.
• Financial data and sensitive identity documents are prioritised for storage on servers located in Malaysia or in regions with robust data protection laws.
• If you have concerns about where your data is stored or processed, please contact us at support@royal36.site for further information.

Royal36 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. We are committed to informing you of any material changes.

• When material changes are made to this Privacy Policy, we will display a clear notice on the Royal36 homepage and send a notification to your registered email address at least 14 days before the changes take effect.
• Continued use of the Royal36 platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy.
• If you do not agree with changes to the Privacy Policy, you have the right to close your account and request the deletion of your personal data (subject to legal retention requirements).
• The latest version of this Privacy Policy is always available on this page, with the effective date clearly displayed.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by Royal36, we encourage you to reach out to us directly. Our team is ready to help and committed to addressing every enquiry seriously.

• Privacy email: support@royal36.site – please include "Privacy Inquiry" or "Data Request" in your email subject line so it can be routed to the right team promptly.
• Live chat: Royal36's support team is available 24/7 via in-platform live chat and can assist you with basic privacy enquiries or direct you to the relevant team for more complex matters.
• Response time: We are committed to responding to all privacy-related enquiries within 5 business days. More complex requests, such as data access applications, may take up to 14 business days.
• Complaints to regulatory authorities: If you are dissatisfied with our response to your privacy inquiry or complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) or the Malaysian Communications and Multimedia Commission (SKMM), as applicable.

Royal36 takes every privacy complaint seriously. We will investigate each complaint received and provide a clear, meaningful response within the stipulated timeframe. Our goal is to resolve all privacy concerns in a manner that satisfies everyone involved.