Royal123 Privacy Policy

1. Introduction

Royal123 is committed to protecting the privacy of every individual who interacts with its platform. This Privacy Policy applies to all personal data collected through the Royal123 website, account registration processes, payment facilities, support communications, and any other channel through which you provide information to Royal123.

This policy should be read alongside the Terms & Conditions and the Responsible Gambling information. Together, these documents form the complete framework governing your relationship with Royal123 as a player registered on the platform.

Royal123 may update this policy when operational requirements, regulatory developments, security enhancements, or changes to data processing practices make revisions necessary. The effective date at the top of this page will be updated accordingly. Continued use of Royal123 after the effective date of any revision constitutes acceptance of the updated policy.

2. Definitions

For the purposes of this Privacy Policy, the following terms are used with the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identity number, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Controller" means Royal123, which determines the purposes and means of processing personal data held in relation to account holders and website users.
• "Processor" means a third-party service provider engaged by Royal123 to process personal data on its behalf, including payment processors, identity verification providers, and cloud infrastructure operators.
• "KYC" means Know Your Customer — the identity and address verification procedures Royal123 conducts to confirm age, identity, account ownership, and payment legitimacy.
• "Player" or "you" means the individual who holds or applies to hold a Royal123 account, or who otherwise uses or accesses the Royal123 website.

3. Information We Collect

3.1 Information You Provide Directly

When you register with Royal123, you provide information that may include your full legal name, date of birth, residential address, Malaysian mobile number, email address, and preferred MYR payment method. During KYC, you may be asked to supply a copy of a valid identity document such as your MyKad, Passport, or Driver's License, a recent proof of address document such as a TNB utility bill or bank statement dated within three months, and a selfie photograph holding your identity document.

3.2 Payment and Transaction Data

When you make deposits or request withdrawals using methods such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, USDT TRC20, or 7-Eleven Cliqq, Royal123 records transaction references, dates, amounts, and the type of payment method used. Full card or banking credentials are not stored by Royal123 directly but are processed through compliant third-party payment channels.

3.3 Technical and Usage Data

When you visit or use Royal123, automated systems may collect data including your IP address, device type, operating system, browser version, session duration, pages visited, game activity, wagering history, and general geographic region. This data supports security monitoring, fraud prevention, platform performance analysis, and responsible gambling detection.

3.4 Communications Data

When you contact Royal123 support via live chat or email, we record the content of those communications along with the date, time, and communication channel used. This data is retained for quality assurance, dispute resolution, and regulatory purposes.

4. How We Use Your Information

Royal123 processes personal data for the following purposes and on the following legal bases:

Royal123 will not use your personal data for any purpose that is materially inconsistent with the purposes stated above without providing prior notice and, where required, obtaining your consent.

5. Data Sharing and Third-Party Processors

Royal123 does not sell, rent, trade, or auction personal data to third-party marketers. However, we may share data with trusted third-party service providers and partners who assist us in operating the platform, subject to confidentiality obligations that prohibit them from using your data for any other purpose.

5.1 Categories of Third-Party Recipients

• Payment processors and eWallet operators — for the purpose of processing deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and bank transfer networks.
• Identity verification and KYC providers — to confirm the validity of identity documents and perform age and address verification in accordance with applicable standards.
• Fraud prevention and security services — who receive device fingerprints, IP data, and transaction signals to identify and block fraudulent activity.
• Cloud infrastructure providers — who host platform data within secure, access-controlled server environments.
• Regulatory authorities and law enforcement — where Royal123 is under a legal obligation to disclose personal data.
• Game content providers — who may receive limited technical data required to deliver game sessions, subject to applicable data processing agreements.

5.2 International Transfers

Some of Royal123's service providers and game platform partners operate outside of Malaysia. Where personal data is transferred internationally, Royal123 requires that appropriate safeguards are in place, such as contractual provisions that impose data protection obligations equivalent to those applicable within the relevant jurisdiction.

6. Cookies and Tracking Technologies

Royal123 uses cookies and similar technologies to deliver and improve its services. Cookies are small data files stored on your device. The categories of cookies used include:

• Strictly necessary cookies — essential for the website to function, enabling login session management, payment security tokens, and fraud prevention signals. These cannot be disabled without impairing core functionality.
• Performance and analytics cookies — used to measure page load speeds, session counts, popular game categories, and user flow through the platform. Data is aggregated and does not identify individual players.
• Functionality cookies — used to remember your language preference, display settings, and whether you have acknowledged site notices.
• Security cookies — assist in detecting suspicious access patterns, protecting your account against unauthorised login attempts, and validating device consistency between sessions.

You may adjust browser settings to manage or block non-essential cookies. Doing so may affect certain platform features. Royal123 does not use cookies to serve third-party advertising networks or to track your activity outside of the Royal123 website itself.

7. Data Retention

Royal123 retains personal data for as long as is necessary to fulfil the purposes described in this policy, to maintain an account in good standing, and to comply with applicable legal, regulatory, and anti-money-laundering record-keeping obligations. In practice, this means:

• Account data, KYC records, and transaction history are generally retained for a minimum of five years from the date of last account activity or account closure, whichever is later.
• Support communication records are retained for a period sufficient to handle potential disputes and to satisfy regulatory requirements.
• Technical logs such as IP access records are retained for a shorter period determined by operational security needs.

When personal data is no longer required and no legal obligation requires its retention, Royal123 will delete or irreversibly anonymise the data in a secure manner.

8. Data Security

Royal123 maintains a programme of technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. Key measures include 256-bit SSL encryption for all data in transit, encryption of sensitive data at rest, strict internal access controls based on the principle of least privilege, regular vulnerability assessments and penetration testing, and dedicated security incident response procedures.

You are responsible for protecting your own account access credentials, including your password and one-time verification codes. You should not share your login details with any other person. If you suspect that your Royal123 account has been accessed without authorisation, contact support promptly using the plain-text email address displayed at the bottom of this page.

No internet-based system can guarantee absolute security. Royal123 cannot accept responsibility for breaches that result from actions outside its reasonable control or from a player's own failure to secure their account credentials.

9. Your Data Rights

Subject to applicable law and regulatory constraints, you have the following rights in relation to your personal data held by Royal123:

• Right of access — you may request a copy of the personal data Royal123 holds about you.
• Right to rectification — you may request correction of inaccurate or incomplete personal data.
• Right to erasure — you may request deletion of your personal data where it is no longer required for any lawful purpose, subject to retention obligations.
• Right to restrict processing — you may ask Royal123 to limit how your data is used while a dispute or request is being resolved.
• Right to data portability — you may request your data in a structured, commonly used, machine-readable format where technically feasible.
• Right to withdraw consent — where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to object — you may object to processing based on legitimate interests, including direct marketing communications.

To exercise any of these rights, contact Royal123 support using the email address displayed below. Please include your registered email address, the nature of your request, and any relevant account reference. Royal123 will respond within a reasonable period and may request verification of identity before processing the request.

10. Players Under 21

Royal123 is strictly intended for adults aged 21 and above. Royal123 does not knowingly collect or process personal data belonging to individuals under the age of 21. If Royal123 becomes aware that personal data has been submitted by a person under 21, it will take prompt steps to delete that data and close the associated account.

Age verification forms part of Royal123's KYC process. Players who are found during verification to be below 21 will have their accounts suspended, any deposits will be returned through the original payment method where possible, and the matter may be escalated where required by applicable regulations.

11. Privacy and Responsible Gambling

Royal123 uses certain account activity data — including deposit frequency, wager sizes, session durations, and behavioural patterns — to support responsible gambling monitoring. This processing is carried out to identify indicators that a player may be experiencing gambling-related harm and, where appropriate, to trigger safeguards such as a personal call from the player welfare team, an account review, a prompted limit-setting interaction, or a temporary account restriction.

Data processed for responsible gambling purposes is handled with particular care. It is not shared with commercial third parties and is used solely in the interest of player welfare. Full information about responsible gambling tools available at Royal123 is provided on the Responsible Gambling page.

12. Changes to This Policy

Royal123 may revise this Privacy Policy from time to time. When we make a change, we will update the effective date at the top of this page. For material changes that significantly affect how we process your personal data, we will provide a prominent notice within the platform or via email to your registered address.

We encourage you to review this page periodically. Continued use of Royal123 after the effective date of any revision constitutes your acceptance of the updated policy terms.

13. Contact and Data Requests

If you have a question about this Privacy Policy, wish to exercise a data right, or would like to raise a concern about how your personal data is being handled, please contact Royal123 support.

The support email address is displayed below as plain text — it is not a clickable link:

[email protected]

Please include your registered name, account email, and a clear description of your request. Identity verification may be required before Royal123 can action any data request that involves access to, correction of, or deletion of personal account records.