Royal36 Privacy Policy — Our Commitment to Protecting Malaysian Players' Personal Data

1Personal Data We Collect

Royal36 collects your personal data through several means — directly from you during registration and platform use, as well as automatically through standard technologies such as cookies and server logs. Below is a full breakdown of the data we collect and the purpose behind each.

Data You Provide Directly

• Registration Information: Your full name, Malaysian phone number, email address, date of birth, and the password you choose when registering your Royal36 account.
• Identity Verification Information (KYC): When required for account verification or processing large withdrawals, we may request a copy of your MyKad, bank statement, or proof of residence document.
• Financial Information: Details of the payment methods you use for deposits and withdrawals — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks). We do not store your full bank account number — only the information needed to process your transaction.
• Communication with Customer Support: Records of live chat conversations, emails, and any information you share when contacting the Royal36 support team.
• Feedback & Surveys: Any information you voluntarily provide through customer satisfaction surveys or product feedback forms.

Automatically Collected Data

• Log & Technical Data: IP address, browser type and version, device operating system, access date and time, pages visited, and any technical errors that occurred during your session.
• Gaming Data: Betting records, wins, losses, game preferences, and platform usage patterns for verification, dispute resolution, and service improvement purposes.
• Device Data: Unique device identifiers, mobile phone or computer model, and network connection information for security and fraud prevention purposes.
• Location Data: Country- or city-level location information derived from your IP address. We do not collect precise GPS location data without your explicit consent.

2How Royal36 Uses Your Personal Data

Royal36 uses your personal data only for lawful and necessary purposes. We do not use your data for purposes unrelated to the services you use, or for purposes to which you have not given consent. Below is a full breakdown of how your data is used.

• Service Delivery: To create and manage your account, process deposits and withdrawals via your preferred Malaysian payment method, and provide access to all Royal36 games including slots, live casino, football, e-sports, roulette, and table games.
• Identity Verification & Fraud Prevention: To verify your identity, prevent multiple account ownership, detect fraudulent activity or money laundering, and ensure only eligible individuals (aged 18 and above with a valid Malaysian phone number) use the platform.
• Platform Security: To monitor suspicious login activity, detect unauthorized access attempts, and protect your account from unauthorized actions.
• Service Communications: To send important notifications related to your account, transaction confirmations, security alerts, and updates to policies or terms. These communications are necessary and cannot be unsubscribed from as they are directly related to the security of your account.
• Customer Support: To understand the issue you are experiencing, provide relevant assistance, and resolve disputes or complaints effectively.
• Product & Service Improvement: To analyse aggregated (not individual) usage patterns for the purpose of improving the platform interface, adding new games relevant to Malaysian players, and enhancing the overall user experience.
• Legal Compliance: To comply with legal obligations relating to financial records, anti-money laundering, and any mandatory reporting requirements imposed by Malaysian authorities.
• Marketing Communications (With Consent): To send you information about Royal36 promotions, new bonuses, and special offers — only if you have agreed to receive marketing communications during registration or at a later time. You may withdraw this consent at any time via your account settings or by contacting us.

3Data Sharing & Disclosure to Third Parties

Royal36 does not sell or transfer your personal data to third parties for their own marketing or commercial purposes. However, there are limited situations where your personal data may be shared with other parties for legitimate and necessary reasons.

• Payment Service Providers: When you make a deposit or withdrawal via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, the transaction information required will be shared with the relevant payment gateway provider to process your transaction. These providers are bound by strict confidentiality agreements and are regulated by Bank Negara Malaysia.
• Game Providers: Companies that supply games to the Royal36 platform — including slots, Live Casino, and sports software providers — may receive game data necessary to ensure a seamless playing experience. This data is strictly limited to what is technically required.
• Identity Verification Services: For KYC (Know Your Customer) purposes, Royal36 may engage verified, PDPA-compliant third-party identity verification services. These third parties are not permitted to retain or use your data for any other purpose.
• Legal Obligations: Royal36 may be required to disclose your personal data to Malaysian authorities — including the police, courts, or relevant government agencies — when mandated by law, court order, or for the purpose of investigating financial crimes such as money laundering.
• Business Transfers: In the event of a merger, acquisition, or asset transfer involving Royal36, members' personal data may be transferred to the successor entity. You will be notified by email before any such transfer takes place and will have the right to opt out.

4Personal Data Security & Storage

Royal36 continuously invests in security infrastructure to ensure all members' personal data is protected at the highest level current technology can provide.

• Encryption in Transit: All data transmitted between your device and Royal36's servers is encrypted using TLS 1.3 with a 256-bit SSL certificate. This means that even if someone were to intercept your network traffic, all they would see is meaningless random characters.
• Encryption at Rest: Sensitive personal data stored in Royal36's databases — including identity verification information and financial details — is held in encrypted form. Your password is never stored in readable format; it is stored as a one-way cryptographic hash that cannot be reversed.
• Two-Factor Authentication (2FA): We actively encourage and support two-factor authentication for all member accounts. With 2FA enabled, even if someone obtains your password, they will still be unable to log in without the verification code sent to your registered Malaysian phone number.
• Role-Based Access Control: Within Royal36, only staff with specific roles and a genuine business need are granted access to particular data categories. Customer support managers, for example, can only view the information necessary to resolve your issue — not your full financial records.
• Regular Security Audits: Royal36's servers and infrastructure undergo penetration testing and independent third-party security audits at least twice a year to identify and address vulnerabilities before they can be exploited.
• Data Backup & Recovery: All critical data is regularly backed up to geographically separate data centers to ensure service continuity and prevent data loss in the event of an unforeseen incident.

While Royal36 takes all reasonable steps to protect your data, it is important to remember that no security system is 100% foolproof. You also play a key role in securing your account by using a strong password, keeping your login credentials private, and enabling 2FA.

5Cookies & Tracking Technologies

Royal36 uses cookies and similar technologies to enhance the user experience, maintain session security, and understand how players interact with our platform. This section explains the types of cookies we use and how you can manage them.

Cookies are small text files stored on your device by your web browser when you visit Royal36. They allow us to recognise your device on subsequent visits and deliver a more personalised and secure experience.

Types of Cookies We Use

• Essential Cookies (Cannot Be Disabled): These cookies are essential for the basic operation of the Royal36 platform. They include login session cookies that keep you signed in during your gaming session, CSRF security tokens that protect your account from certain attacks, and cookies that store your language preferences. Without these cookies, the platform will not function properly.
• Analytics Cookies: Used to understand how players interact with the Royal36 platform in aggregate — including the most visited pages, average session duration, and most popular games. This data is used to improve the user experience. You may choose to disable these cookies.
• Functional Cookies: Stores your personal preferences such as display settings, favourite table selections, and betting limits you have set. Without these cookies, you would need to reconfigure these preferences each time you visit Royal36.
• Optional Cookies (Can Be Disabled): Used for more targeted marketing purposes, such as displaying promotions relevant to the game types you enjoy. You can disable these cookies without affecting the platform's core functionality.

6Your Privacy Rights as a Royal36 Member

Under Malaysia's Personal Data Protection Act 2010, you have several important rights regarding your personal data, all of which Royal36 fully respects and facilitates.

7Special Protection for Minors

Royal36 takes the protection of minors extremely seriously. Our platform is strictly for individuals aged 18 and above, with no exceptions.

• Absolute Prohibition: Royal36 does not knowingly collect, store, or process any personal data from individuals under the age of 18. Should we discover that a child's data has been collected without our knowledge, immediate steps will be taken to delete that data.
• Age Verification System: Royal36 employs a multi-layered age verification mechanism during registration. Sign-up requires a valid MyKad number (which contains the date of birth), and we conduct background checks to verify age eligibility for accounts showing signs of uncertainty.
• Report a Concern: If you suspect that a minor is using the Royal36 platform — whether your own child or someone else's — please contact us immediately at privacy@royal36.biz. We will investigate and take prompt action.
• Parental Controls: We encourage parents and guardians to make use of parental control tools available on devices and through internet service providers to prevent children from accessing gambling websites. Royal36 supports and actively cooperates with digital safety initiatives for children in Malaysia.

8Changes to This Privacy Policy

Royal36 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer.

• Material Change Notifications: When material changes are made to how we collect or use your personal data, Royal36 will notify you at least 14 days before the changes take effect — via email to your registered address and through an in-platform notification.
• Non-Material Changes: For minor updates such as spelling corrections, language clarifications, or the addition of information that does not alter your rights or obligations, the updated version will be published on this page with a new update date and without a separate notification.
• Version History Records: Royal36 maintains an archive of previous Privacy Policy versions for reference. If you would like to access an earlier version, please contact us at privacy@royal36.biz.
• Continued Use as Consent: Your continued use of the Royal36 platform after a Privacy Policy update takes effect will be considered your acceptance of the revised terms. If you do not agree with the changes, you have the right to close your account before the effective date.

9How to Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the way Royal36 handles your personal data, there are several channels through which you can reach us.

• Privacy Email: Send an email to privacy@royal36.biz for all privacy-related inquiries and requests. This is the preferred channel for formal requests such as data access, correction, or deletion. Our privacy team will respond within 14 business days.
• Customer Support (General Enquiries): For general privacy enquiries that do not require formal action, you may reach Royal36's customer support team via live chat or email at support@royal36.biz. Support is available 24 hours a day, 7 days a week in Bahasa Malaysia and English.
• Data Protection Officer (DPO): Royal36 has a designated Data Protection Officer responsible for ensuring PDPA compliance. For escalations or complaints that cannot be resolved through regular customer support, you may contact our DPO directly via the email above with the subject line "For the Attention of the DPO".