Royal36 Privacy Policy – How We Protect Your Information

Royal36 (hereinafter referred to as "we", "royal36", or "the Platform") respects the privacy of every user on our online gaming platform. This Privacy Policy explains in detail how we collect, use, store, share, and protect your personal information.

This document applies to all users who interact with royal36 through the official website, Android and iOS mobile apps, and any services provided by royal36. By registering or using our platform, you agree to be bound by the terms set out in this Privacy Policy.

We take our responsibilities as a data controller under Malaysia's Personal Data Protection Act 2010 (PDPA) seriously. Every action we take on your data has a valid legal basis and a clear purpose.

Royal36 collects information under two main categories: information you provide directly, and information collected automatically when you use the platform.

Information you provide directly:

• Full name, date of birth, and identification details provided during registration.
• Email address, phone number, and delivery address (where applicable).
• Identity verification documents for the KYC process, such as a national ID or passport.
• Bank account and e-Wallet details for deposit and withdrawal purposes.
• Any information you share when contacting our customer support team.

Information collected automatically:

• IP address, device type, operating system, and browser version used.
• Gaming activity data including games played, session duration, and betting records.
• Complete financial transaction records for compliance and audit purposes.
• General geolocation data based on IP address for security purposes.
• Access logs and usage data that help us detect and prevent fraud.

Royal36 uses your personal information only for legitimate purposes that are necessary to operate our services properly. The following are the primary purposes for which your data is used:

• Account management: Creating and managing your account, processing logins, and ensuring account security.
• KYC processing: Verifying your identity before authorizing any withdrawal, as required by financial regulations.
• Financial transactions: Processing deposits and withdrawals and reconciling your transaction records.
• Customer service: Providing assistance and resolving any queries or issues you report.
• Legal compliance: Meeting reporting obligations to relevant authorities, including anti-money laundering compliance.
• Platform improvements: Analyzing usage patterns to improve the quality of your gaming experience.
• Security and fraud prevention: Detecting and blocking suspicious activity that could compromise your account.
• Platform communications: Sending important account notifications and promotions (where you have given consent).

Royal36 does not share, sell, or transfer your personal information to third parties except in the circumstances outlined below:

• Payment service providers: Required transaction information is shared with licensed payment providers such as banks and e-Wallet operators to process your transactions.
• Game providers: The minimum technical data required to run games is shared with the relevant game providers, subject to strict confidentiality agreements.
• Legal authorities: royal36 will disclose information when required to do so by law, court order, or direction from a law enforcement agency.
• Audit and compliance: Independent auditors involved in security and fairness assessments of the platform may access limited data strictly for audit purposes only.

Every third party working with Royal36 is bound by strict data protection agreements and is not permitted to use your information for any purpose beyond what has been specified.

Royal36 implements multiple layers of security to protect your personal information from unauthorized access, modification, disclosure, or destruction:

• 256-bit SSL encryption for all data in transit between your device and our servers.
• Data storage in server environments protected by strict access controls.
• 24/7 security monitoring with automated intrusion detection systems.
• Regular security audits conducted by qualified independent third parties.
• Regular staff training on information security and privacy best practices.
• Two-factor authentication (2FA) is available for all player accounts.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. We encourage you to play your part by keeping your account password safe.

Royal36 uses cookies and similar tracking technologies to enhance user experience and platform security. The following are the types of cookies we use:

• Session cookies (required): Required to maintain your login session and ensure core platform functionality works correctly. Cannot be disabled.
• Preference cookies: Storing your personal settings such as preferred language and display configuration.
• Analytics cookies: Helping us understand how players use the platform so we can make relevant improvements.
• Security cookies: Used to detect and prevent fraudulent activity and unauthorised access.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of some parts of the royal36 platform.

Royal36 retains your personal data for as long as necessary to fulfill the purposes stated in this Privacy Policy, or as required by Malaysian law.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered. If you request account closure, the deletion process will begin after the mandatory legal retention period has been fulfilled.

Under the Personal Data Protection Act 2010 and international privacy principles, you have the following rights regarding your personal information held by royal36:

To exercise any of the above rights, contact the Royal36 support team via live chat. We will process your request within 30 days of receipt.

The royal36 platform is intended exclusively for adults aged 18 and above. We do not knowingly collect or process personal information from individuals under the age of 18.

If we discover that information from an underage user has been collected unintentionally, we will immediately take the following steps:

• Suspending the relevant account immediately.
• Deleting all related information from our systems.
• Returning any remaining account balance to the payment method used.

The royal36 platform integrates games and services from licensed third-party providers. Each provider maintains its own Privacy Policy governing how they handle user data within the context of the games they offer.

Royal36 is not responsible for the privacy practices of these third-party providers. However, we ensure that every provider working with us adheres to data protection standards comparable to our own through binding contractual agreements.

We encourage you to read the Privacy Policy of the game providers you use if you have any concerns about how they specifically handle your data.

Royal36 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use. Any significant amendments will be communicated to you via:

• In-app or royal36 web platform notifications.
• Notices displayed prominently on the website's main page.
• Update the "Last updated" date at the top of this document.

Your continued use of the royal36 platform after amendments are published constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page from time to time.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact the Royal36 privacy team through the following channels:

• Live Chat: Available 24/7 within the Royal36 platform – the fastest way to get a response.
• Support email: [email protected] – for written inquiries that require documentation.

We are committed to responding to all privacy-related enquiries within 5 business days. For more complex requests such as data access or deletion requests, the response period may take up to 30 days.