Royal47 Privacy Policy – Malaysian Player Data Protection

1Introduction

Royal47 ("we," "the platform," "Royal47") takes user privacy seriously. This Privacy Policy is an official document outlining our personal data management practices — covering the types of data we collect, how it is used, how it is protected, and the rights you hold as a user of our platform.

We understand that when you register with Royal47 and provide personal information such as your name, phone number, and payment details, that is an act of trust. We take that trust seriously. Every decision we make about data management is guided by player protection – not corporate profit or data exploitation.

This policy applies to all Royal47 users across Malaysia, including those who play slots, roulette, live casino, e-sports betting such as MLBB and Dota 2, and all other services available on our platform. It also applies to use of the Royal47 website, mobile app, and all communication channels.

2Data We Collect

Royal47 only collects data that is necessary for clearly defined, legitimate purposes. Below are the categories of data we collect, along with specific examples:

3How We Use Your Data

Every piece of data we collect serves a specific purpose. Royal47 does not store data "just to have it" – every collection is clearly justified:

• Account management: Verifying your identity, enabling secure login, maintaining accurate account records, and processing your financial transactions.
• Service delivery: Enables you to seamlessly access slots, roulette, live casino, e-sports, and all other features on the Royal47 platform.
• Security and fraud prevention: Identifying and blocking suspicious activity, unauthorized access attempts, bonus abuse, and all forms of fraud.
• Legal compliance: To fulfil KYC (Know Your Customer), AML (Anti-Money Laundering), and other applicable legal obligations, including maintaining required transaction records.
• Customer support: This enables Royal47's Bahasa Malaysia-speaking support team to handle your enquiries, complaints, and requests effectively.
• Service improvement: Analysing usage patterns on an aggregated (not individual) basis to improve the platform experience, identify popular games, and enhance the user interface.
• Marketing communications: Sending information about promotions, bonuses, and platform updates – only to users who have opted in to receive such communications. You may unsubscribe at any time.
• Responsible gaming: Monitoring gameplay patterns to identify early signs of problem gambling and offer appropriate support to players who need it.

4Legal Basis for Data Processing

Royal47 only processes your personal data where a valid legal basis exists for doing so. Our data processing is carried out on one or more of the following bases:

• Contract performance: Processing is necessary to fulfil the service agreement between you and Royal47 – for example, processing your deposits and withdrawals, maintaining your account, or resolving complaints.
• Legal obligation: Some data processing is required for Royal47 to comply with applicable laws — including KYC requirements, financial record-keeping, and reporting obligations mandated by the relevant authorities.
• Legitimate interests: We process certain data for legitimate business interests such as fraud prevention, platform security, and service improvement, provided these interests do not override your privacy rights.
• Consent: For certain types of data processing, such as sending marketing communications, we require your explicit consent. You may withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

5Sharing Data with Third Parties

Royal47 does not sell your personal data. However, in operating a secure and efficient platform, we may share data with the following limited categories of third parties, and only to the extent necessary:

• Licensed payment processors: To process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX. These processors are bound by strict data protection agreements and are not permitted to use your data for any other purpose.
• Game software providers: The slots, roulette, and Live Casino game providers we work with may receive minimal session data required to run the games correctly. No full identity data is shared.
• Technical service providers: Companies that provide the server infrastructure, cybersecurity, and technical support services required to operate the Royal47 platform.
• Regulatory bodies and law enforcement: We may be legally required to disclose certain data to the relevant authorities upon lawful request. We will not disclose more than is required.

All third parties who receive data from Royal47 are bound by data protection agreements and are strictly prohibited from using your data for their own purposes. We only work with third parties that meet our data security standards.

6Data Security

Royal47 continually invests in data security infrastructure to protect your personal information. The key security measures we implement include:

• 256-bit SSL encryption: All communications between your device and Royal47's servers are encrypted using the latest SSL/TLS protocols — ensuring no third party can intercept or read your data in transit.
• Data-at-rest encryption: Sensitive data stored on our servers — including identity information and financial records — is encrypted using AES-256 standards at rest.
• Layered access controls: Access to user data is strictly limited to Royal47 staff who require it to perform their legitimate duties. All access is logged and monitored.
• Two-factor authentication (2FA): Royal47's internal systems require multi-level authentication for access to any database containing user information.
• Regular security testing: Royal47 conducts regular penetration testing and security audits to identify and address any potential vulnerabilities.
• Real-time threat monitoring: Our automated monitoring system operates 24/7 to detect and prevent cyberattack attempts, unauthorized access, and other suspicious activity.

While Royal47 takes every reasonable precaution, no digital security system can be guaranteed 100% secure against all threats. You also play an important role in keeping your account safe — use a strong password, never share your login credentials, and report any suspicious activity to us immediately.

7Cookies and Tracking Technologies

Royal47 uses cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use are as follows:

• Required session cookies: Essential cookies required for the platform to function – including maintaining your login session, remembering language preferences, and enabling security features. These cookies cannot be disabled as they are integral to platform operations.
• Performance and analytics cookies: Helps us understand how players interact with the platform — which pages are visited most, which games are most popular, and where players may encounter technical issues. This data is collected in aggregate and does not identify you personally.
• Functional cookies: Allows the platform to remember your preferences — such as favourite games, display settings, and interface language — so you don't need to reconfigure them each time you log in.
• Security cookies: Used to identify unauthorised sessions, detect suspicious login attempts, and protect your account from CSRF attacks and other security threats.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of some areas of the Royal47 platform. For cookies that require consent, a notice will appear when you first access our platform.

8Data Retention & Deletion

Royal47 retains your personal data for as long as your account remains active or as long as necessary to provide services to you. Once an account is closed, the retention period for each type of data depends on its nature and the applicable legal requirements:

• Financial transaction records: Retained for a minimum of 7 years from the transaction date, in compliance with Malaysia's financial and tax legislation.
• Identity & KYC data: Retained for 5 years after account closure for AML legal compliance and regulatory reporting requirements.
• Gaming activity logs: Retained for 2 years from the date of activity for dispute resolution and internal audit purposes.
• Customer support communication data: Retained for 2 years for service quality purposes and reference in the event of recurring disputes.
• Marketing data and preferences: Deleted within 30 days of you withdrawing consent to receive marketing communications.

Once the designated retention period has ended, your data will be securely deleted or anonymised so that it can no longer be linked to you. This deletion process is carried out on a regular schedule determined by our data security team.

9Your Rights as a User

As a Royal47 platform user, you hold important rights regarding your personal data. Royal47 respects and facilitates the exercise of these rights:

To exercise any of the above rights, contact our privacy team by email at support@royal47.xyz, stating the right you wish to exercise and providing sufficient information for us to verify your identity. We will process your request within 14 business days and keep you informed of the actions taken.

10Children's Data

Royal47 services are exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Should we discover that we have inadvertently collected data from someone under the age of 18, we will immediately take steps to delete that data and close the account in question. If you are a parent or guardian who believes your minor child has registered with Royal47, please contact us immediately at support@royal47.xyz.

Royal47 applies an age verification process during registration and reserves the right to request proof of age (such as a copy of your identification card) at any time as part of our KYC procedures.

11Links to Other Sites

The Royal47 platform may from time to time contain links to third-party websites or services, such as payment information pages or responsible gaming sites. This Privacy Policy applies only to the Royal47 platform itself.

We are not responsible for the privacy practices of those third-party websites. We encourage you to read the privacy policy of every website you visit, especially before providing any personal information. The presence of links to other sites within the Royal47 platform does not imply our endorsement or approval of their privacy practices.

12Privacy Policy Amendments

Royal47 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or developments in data protection. When we make significant amendments, we will:

• Updating the "Updated" date at the top of this page.
• Notifying all registered members via email at least 14 days before any amendments take effect, except where urgent legal requirements apply.
• A clear notice will be displayed on the Royal47 platform during the period before any amendment takes effect.

Continued use of the Royal47 platform after the effective date of any Privacy Policy amendment constitutes your acceptance of the updated version. If you do not agree with the changes, you may close your account by contacting our customer support team.

13Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Email: support@royal47.xyz (please state "Privacy Inquiry" in the email subject line)
• Live Chat: Available on the Royal47 platform – 24 hours a day, 7 days a week
• Response Time: Within 14 business days for privacy-related enquiries and data deletion requests
• Language: Bahasa Malaysia and English

When contacting us about privacy matters, please include sufficient information for us to verify your identity before we disclose or amend your data. This is a security measure to ensure that only you can access your own information.

Royal47 takes every privacy-related complaint seriously. Each complaint will be thoroughly investigated, and we will provide a clear response outlining the actions taken. If you are not satisfied with our response, you have the right to escalate the matter to the relevant data protection authority in Malaysia.