Royal47 Privacy Policy

1. Introduction and Scope

Royal47 ("we", "our", "the platform") is committed to protecting the personal data of every player who registers and uses its services. This Privacy Policy describes our data processing activities in relation to Malaysian players and any other users who access Royal47. Where we refer to "you" or "your", we mean the individual using the platform.

Royal47 operates under international online gaming arrangements. This Policy reflects our operational data practices. Malaysian users should also be aware that the Personal Data Protection Act 2010 (PDPA) governs the processing of personal data in certain contexts in Malaysia, and we have designed our data practices with reference to generally accepted data protection principles consistent with that legislative framework.

2. Definitions

For clarity throughout this Policy:

• Personal data means any information that identifies or can reasonably identify a natural person, including name, identification number, contact details, device identifiers, and financial information.
• Processing means any operation applied to personal data — including collection, storage, use, disclosure, transfer, and deletion.
• Data subject means the individual whose personal data is processed — most cases, the registered Royal47 account holder.
• Third party means any person or organisation outside Royal47, other than the data subject.
• Service provider means a company engaged by Royal47 to carry out specific functions — for example, payment processors such as DuitNow, FPX operators, Maybank, CIMB, Public Bank, Hong Leong, Touch'n Go eWallet, Boost, and GrabPay; game content providers; fraud detection vendors; and hosting infrastructure providers.
• Cookies means small text files or similar tracking mechanisms placed on a device by a website to support functionality, analytics, and personalisation.

3. Personal Data We Collect

3.1 Information You Provide

When you create and use a Royal47 account, you provide us with:

• Full legal name, date of birth, gender, and nationality.
• Residential address — which may be in Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, or elsewhere in Malaysia.
• Email address, mobile phone number, and preferred language.
• Username and encrypted account credentials.
• Identity documents (MyKad, passport, or equivalent) and proof-address documents submitted during KYC verification.
• Payment details — including the name on a bank account, the last digits of a payment instrument, and records of deposits and withdrawals in MYR or other supported currencies.
• Source-of-funds information provided in response to verification or anti-moneylaundering requests.
• Responsible gambling declarations, deposit limit selections, self-exclusion requests, and related communications.
• Customer support enquiries, live-chat transcripts, and feedback submitted through the platform.

3.2 Information Collected Automatically

When you access Royal47, we automatically collect:

• IP address, approximate geographic location, and connection type.
• Device model, operating system, browser type and version, screen resolution, and installed language settings.
• Session duration, page views, navigation path, game selection, bet placement patterns, and feature usage data.
• Login timestamps, logout events, failed authentication attempts, and session security events.
• Performance metrics, error logs, and latency data used to identify and resolve platform issues.

3.3 Information from Third Parties

Royal47 may receive supplementary information from identity verification bureaux, payment networks, fraud prevention services, and publicly available sources where this is necessary to verify identity, assess financial integrity, or comply with legal obligations.

4. How We Use Your Personal Data

Royal47 processes personal data for the following purposes:

• Account administration: creating and maintaining your Royal47 account, authenticating login sessions, and managing account settings.
• Identity and age verification: confirming that you are at least 21 years old and meet the eligibility criteria set out in our Terms & Conditions, including KYC checks before processing withdrawals.
• Payment processing: facilitating MYR deposits and withdrawals through FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, and supported cryptocurrency networks.
• Responsible gambling: monitoring account activity for signs of problem gambling behaviour, administering deposit limits, cooling-off periods, and self-exclusion requests, and contacting you where our responsible gambling framework requires intervention.
• Fraud detection and security: identifying and preventing unauthorised access, account takeover, fraudulent payment activity, money laundering, collusion, and other conduct prohibited under our Terms & Conditions.
• Legal and regulatory compliance: retaining records required by our licensing obligations, responding to lawful requests from competent authorities, and managing sanctions screening.
• Customer support: managing enquiries, resolving disputes, and improving the quality of our support service.
• Product improvement and analytics: understanding how players use Royal47, identifying usability issues, measuring game performance, and improving the overall player experience.
• Service communications: delivering essential notifications such as login confirmations, transaction receipts, security alerts, policy updates, and responsible gambling messages that are necessary for account operation.
• Promotional communications: sending information about Royal47 bonuses, VIP events, and sports promotions where you have not opted out. Preferences may be managed through your account settings.

5. Legal Basis for Processing

Royal47 relies on the following grounds for processing personal data:

• Contractual necessity: processing required to fulfil our obligations to you under the Terms & Conditions — including account operation, payment handling, and dispute resolution.
• Legitimate interests: processing necessary for fraud prevention, platform security, product improvement, and responsible gambling monitoring, where our interests or those of other players are not outweighed by your rights and interests.
• Legal obligation: processing required to comply with applicable laws, licensing conditions, anti-money-laundering requirements, and lawful authority requests.
• Consent: where we have obtained your consent for a specific purpose — for example, optional promotional communications. Consent may be withdrawn at any time without affecting prior processing.

6. Sharing and Disclosure of Personal Data

Royal47 may share personal data with the following categories of recipients, only to the extent necessary for the stated purpose:

• Payment service providers: banks, e-wallet operators, and payment networks required to process MYR transactions, including DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency settlement services.
• Identity and KYC verification providers: services that cross-reference submitted documents against official databases to confirm identity and age.
• Game content providers: licensed suppliers whose casino, live dealer, and sportsbook software is integrated into Royal47. These providers may collect game-play data under their own data retention arrangements.
• Fraud detection and cybersecurity vendors: platforms used to identify abnormal access patterns, compromised credentials, and suspicious payment activity.
• Cloud infrastructure and hosting providers: companies that host Royal47 servers, databases, and content delivery networks under contractual data-protection obligations.
• Customer support platforms: technology used to manage live-chat, email ticket, and support-queue operations.
• Regulatory and law enforcement bodies: where disclosure is required by a court order, applicable law, our licensing authority, or a lawful request from a competent government body.

Where service providers process data on behalf of Royal47, they do so under contractual terms that prohibit use for any purpose other than the services they supply. Royal47 selects providers that apply data security standards appropriate to the sensitivity of the information handled.

7. Cookies and Tracking Technologies

Royal47 uses cookies and similar technologies to support platform functionality, maintain session security, and understand how players interact with our interface. The main categories used are:

• Strictly necessary cookies: required for user authentication, session management, fraud detection, and security. These cannot be disabled without impairing platform access.
• Functional cookies: used to remember your language preference, display settings, and recently visited sections of Royal47.
• Analytics cookies: used to collect aggregated, anonymised data about page visits, device types, and feature engagement to help Royal47 identify where improvements are needed.
• Responsible gambling cookies: used to enforce session timers, deposit limits, and self-exclusion settings across browser sessions.

You may manage or delete non-essential cookies through your browser settings. Disabling certain cookies may affect the availability or performance of platform features. Royal47 does not use third-party advertising or retargeting cookies.

8. Data Retention

Royal47 retains personal data only for as long as it is needed for the purpose for which it was collected, or as required by applicable law, licensing conditions, fraud prevention standards, and dispute resolution obligations. General retention guidelines are as follows:

• Account and registration data is retained for the duration of the account relationship and for a period afterwards as required by our licensing and anti-money-laundering obligations.
• Transaction records, including MYR deposits, withdrawals, and game-play history, are retained for the period required by applicable financial record-keeping requirements.
• KYC documents and identity verification records are retained for the period required by our licensing authority from the date of submission or the date of account closure.
• Customer support records and dispute correspondence are retained for as long as necessary to manage the relevant matter and for a reasonable period thereafter.
• Responsible gambling records, including self-exclusion requests and deposit limit settings, are retained for the duration of the active restriction and for a further period to prevent circumvention.
• Security and fraud logs are retained for the period required to investigate incidents and fulfil mandatory reporting obligations.

When data is no longer required, Royal47 deletes or anonymises it in accordance with our internal data lifecycle policy. Physical documents are securely destroyed; digital records are permanently deleted or anonymised.

9. Data Security

Royal47 applies technical and organisational security measures appropriate to the risk presented by the personal data we process. These include:

• 256-bit TLS encryption for all data transmitted between your device and Royal47 servers.
• Encryption of sensitive data fields — including identity document scans, payment instrument details, and account credentials — at rest.
• Role-based access controls limiting access to personal data to staff and systems with a legitimate operational need.
• Two-factor authentication available for all player accounts and enforced for internal administrative access.
• Regular security assessments, penetration testing, and vulnerability monitoring.
• Incident response procedures for the detection, containment, and notification of personal data breaches.

No security system is entirely infallible. Royal47 cannot guarantee absolute security, but we are committed to implementing and maintaining measures that reflect current best practices and our assessment of risk. You are responsible for maintaining the security of your own account credentials. Notify Royal47 immediately if you suspect unauthorised access.

10. Your Rights Over Your Personal Data

Subject to applicable law and our legitimate processing purposes, you have the following rights in relation to the personal data Royal47 holds about you:

To exercise any of the above rights, contact Royal47 customer support through the live-chat function on the platform. We may need to verify your identity before actioning a request. We aim to acknowledge requests promptly and resolve them within a reasonable timeframe.

11. Minors and Age Enforcement

Royal47 is intended solely for adults aged 21 and above. We do not knowingly collect personal data from any person under 21. If Royal47 becomes aware that an account has been created or used by a minor, that account will be suspended immediately, all transactions will be reviewed, and collected data will be deleted or handled in accordance with applicable age-protection obligations.

KYC verification is one of our principal tools for age enforcement. Identity documents are required before a withdrawal can be processed, and Royal47 may impose identity verification at any stage of the account lifecycle. If you have reason to believe that a minor has accessed Royal47, notify us through customer support without delay.

12. International Data Transfers

Royal47 operates from servers located outside Malaysia. Processing your personal data on Royal47's platform therefore involves international data transfer. Where personal data is transferred to countries that do not provide a level of data protection equivalent to Malaysia's PDPA or to the standards we apply, Royal47 implements contractual safeguards — such as data processing agreements with service providers — to ensure your data continues to be protected to an appropriate standard.

Service providers such as payment processors, identity verification bureaux, and game content providers may be located in various jurisdictions. Royal47 selects providers that contractually commit to data-protection standards consistent with our obligations.

13. Third-Party Links and Embedded Content

Royal47 does not embed third-party advertising content or social media widgets that collect your personal data on our behalf. Where the Royal47 platform includes links to third-party pages — for example, responsible gambling support resources referenced in our Responsible Gambling materials — those pages operate under their own privacy policies, for which Royal47 accepts no responsibility. We recommend reviewing the privacy notice of any third-party site you visit.

14. Contact, Queries, and Policy Updates

If you have a question about this Privacy Policy, wish to exercise a data right, or want to report a concern about how Royal47 has handled your personal information, contact our support team through the live-chat function available on the platform at any time. Support is available in English, 24 hours a day, aligned to GMT+8 (Malaysia time).

The email address listed in the footer of this page is provided as plain-text service information and is for no-reply reference only. Do not send passwords, one-time codes, or sensitive personal data in any external email communication.

Royal47 reserves the right to amend this Privacy Policy at any time. Revisions will be published on this page with an updated effective date. We will make reasonable efforts to notify registered players of significant changes through on-platform messaging. Continuing to use Royal47 after a revision takes effect constitutes acceptance of the updated Policy.