Privacy Policy Royale Win — Malaysian Member Personal Data Protection

Welcome to the Privacy Policy Royale Win. This document is published by Royale Win ("we", "us", "the Company"), which operates an online casino and Sports Betting platform at the domain royalewin.best. This policy explains our privacy practices in detail and in plain terms — not just dense legal language, but in a way that allows every Malaysian member to understand their rights and protections.

This Privacy Policy applies to all individuals who:

• Accessing or browsing the royalewin.best website
• Registering an account as a Royale Win member
• Using any games, betting, or services offered on our platform
• Contacting our customer support team through any channel
• Interact with our marketing communications (promotional emails, notifications, and so on)

Royale Win is committed to complying with Personal Data Protection Act 2010 (Malaysia PDPA) in all aspects of collecting, processing, and storing your personal data. We treat your privacy not merely as a compliance obligation, but as part of the trust you place in us when you choose to play on the Royale Win platform.

Royale Win collects personal data across several categories depending on how you interact with our platform. We only collect data that is strictly necessary for specific purposes — this data minimisation principle is central to how we operate.

The personal data we collect is used solely for legitimate and transparent purposes. Royale Win does not process your data for any purpose beyond those stated below without obtaining your additional consent.

3.1 Platform Operations & Account Management

This is the primary and most fundamental purpose — running the Royale Win platform effectively. This includes creating and managing your account, processing MYR deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks), delivering games (slots, baccarat, roulette, Sports Betting on Malaysia Super League, EPL, badminton, e-sports), and ensuring seamless service continuity.

3.2 Security, Verification & Legal Compliance

Royale Win uses your data to verify identity through the KYC process, detect and prevent fraud and money laundering, meet applicable legal reporting requirements, and protect the integrity of the platform from malicious activity that could harm all members.

3.3 User Experience Enhancement

Usage data (not personally identifiable) is analysed in aggregate to understand platform usage patterns, identify the most popular games (including slots, baccarat, and football betting), and make improvement decisions based on real data. This allows Royale Win to remain a platform that truly meets the needs of Malaysian players.

3.4 Service & Marketing Communications

Royale Win will send you important account-related communications (transaction confirmations, security alerts, policy change notices) that are not subject to opt-out. For marketing communications (bonus promotions, exclusive offers, platform news), you may opt out at any time through your account settings or by contacting our support team.

Royale Win does not sell or rent your personal data to any party for marketing purposes. However, in the course of operating a safe and compliant platform, there are limited circumstances in which your data may be shared with trusted parties:

• Payment Service Providers: To process your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX — sharing only the minimum data required to verify and complete transactions.
• KYC Service Providers: Identity verification companies that assist us in authenticating member identification documents, operating under strict confidentiality agreements.
• Game Providers: Game software companies providing slots, live baccarat, roulette, and other games — only the minimum data required to deliver gameplay is shared.
• Legal Authorities: Where required by Malaysian law, court order, or a valid request from a law enforcement agency. Royale Win will not disclose your data without a lawful legal basis.
• Associated Companies: Within the Royale Win group of companies, solely for legitimate internal operational purposes with appropriate safeguards in place.

Royale Win invests heavily in security infrastructure to ensure all members' personal data is consistently protected. The following are the security layers we have in place:

• 256-bit SSL Encryption: All data transmitted between your device and Royale Win's servers is encrypted using the latest TLS/SSL protocols, ensuring your information cannot be intercepted in transit.
• Data Encryption at Rest (AES-256): All data stored in our databases — including identity information, financial records, and KYC data — is encrypted using military-grade AES-256 encryption.
• Two-Factor Authentication (2FA): We recommend and provide OTP verification via SMS for all logins from new devices or unrecognised locations.
• 24/7 Security Monitoring: Our automated threat detection system operates around the clock to identify and block any unauthorised access attempts or suspicious activity.
• Fund Segregation: Member funds are held in an account separate from the company's operational funds, protected by strict access controls.
• Regular Security Audits: Royale Win conducts regular security assessments and penetration testing to identify and address vulnerabilities before they can be exploited.
• Internal Access Controls: Access to member personal data within the Royale Win organisation is restricted to staff who require it to carry out their duties, with comprehensive audit logs maintained at all times.

Royale Win uses cookies and similar tracking technologies to keep the platform running smoothly and deliver a better experience for every member. Here is a summary of the cookies we use:

You can manage cookie settings through your browser. However, disabling essential cookies will significantly impact the functionality of the Royale Win platform, including your ability to log in and play.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Royale Win. We are committed to respecting and facilitating the exercise of these rights:

Royale Win does not retain your personal data longer than necessary for the stated purposes. Our minimum retention principles are:

• Active Account Data: Retained for as long as your Royale Win account remains active, plus any required period following account closure.
• Financial Records & Transactions: Retained for 7 years after the transaction date, in line with Malaysia's financial and tax regulatory requirements.
• KYC Records (Identity Verification): Retained for 5 years after account closure, in accordance with the requirements of the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• Log & Technical Data: Retained for 12 months for security purposes and technical troubleshooting.
• Support Communication Records: Retained for 3 years for quality assurance and dispute resolution reference purposes.

Once the applicable retention period has expired, your data will be securely deleted or anonymised so that it can no longer be associated with you.

The Royale Win platform is strictly for individuals aged 21 and above only. We do not intentionally collect, process, or store any personal data from individuals under the age of 21.

Should Royale Win discover that personal data of an individual under the age of 21 has been collected without appropriate consent, we will take immediate steps to:

• Suspending the account in question immediately
• Delete all personal data of that individual from our systems
• Refund any available balance in accordance with established procedures
• Reviewing the verification process to prevent similar occurrences

If you believe an individual under the age of 21 has registered on Royale Win, please contact us at support@royalewin.best immediately.

Royale Win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operations, new legal requirements, or improvements to our privacy practices.

When there are material changes to this Privacy Policy, we will:

• Updating the "Last Updated" date shown at the top of this policy
• Notifying you via in-platform notifications on Royale Win
• Sending notification emails to your registered email address for significant changes
• In cases where changes require fresh consent, requesting your explicit consent before continuing to process your data

We encourage you to review this Privacy Policy periodically. Your continued use of the Royale Win platform after any amendments take effect constitutes your acceptance of the updated terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or how Royale Win handles your personal data, please reach us through the following channels:

• Privacy Email: support@royalewin.best (subject: "Privacy Policy Enquiry")
• Live Chat: Available 24 hours a day, 7 days a week on the Royale Win platform

Royale Win is committed to responding to all privacy enquiries within 5 working days. For formal data rights requests under the PDPA, the response period is 14 business days.