Royal99 Privacy Policy — Protecting Your Personal Data

Royal99 (hereinafter referred to as "we", "the platform", or "royal99") takes seriously our responsibility to protect the personal data of every member using the platform at royal99.onl. This Privacy Policy is drafted in accordance with the provisions of Personal Data Protection Act 2010 (PDPA) Malaysia and describes our practices in collecting, processing, storing, and protecting your personal information.

This policy applies to all Royal99 platform users, including website visitors, prospective members in the registration process, registered active members, and former members who have closed their accounts. Information we collect will only be used for the purposes stated in this policy and will not be exploited for any other purpose without your consent.

We review and update this Privacy Policy from time to time to ensure it remains relevant to changes in legislation, technology, and our platform operations. Whenever significant amendments are made, members will be notified via in-platform notifications or registered email. It is each user's responsibility to read and understand the latest policy.

Royal99 collects your personal data through several channels — directly from you during registration and platform use, automatically through tracking technologies when you browse our site, and in certain cases, from trusted third-party sources for identity verification purposes.

We only collect data that is strictly necessary for the stated purposes. We do not request irrelevant information, and you have the right to decline optional fields that are not required during registration.

Every piece of data collected by royal99 has a clear and lawful purpose. We do not use your data for purposes outside the scope described below:

• Identity verification (KYC): Identity data is used to verify that you are a legitimate user aged 18 and above and that you meet the legal requirements of anti-money laundering (AML) regulations.
• Account Management: Basic information is used to create, manage, and maintain your account at royal99, including account recovery and security verification.
• Transaction processing: Financial data is used solely to process your deposits and withdrawals safely and accurately.
• Customer service: Account information and communication history are used to help resolve any issues or inquiries you may have.
• Platform security: Technical data and usage records are used to detect and prevent fraud, system abuse, and suspicious activity.
• Marketing communications: With your consent, we use your email address and phone number to send you promotional information and exclusive offers that may interest you. You may withdraw this consent at any time.
• Platform improvements: Usage data processed in aggregate (without usernames) helps us understand usage patterns and improve the user experience.
• Legal compliance: In certain situations, we are legally required to retain or disclose specific data to the relevant authorities.

Royal99 does not sell, rent, or trade your personal data to third parties for commercial purposes. However, there are limited situations where we may need to share your information with specific parties, all on a lawful basis:

• Payment service providers: Required financial information is shared with approved payment gateway providers to enable deposit and withdrawal transactions to be processed securely. All such providers are bound by strict confidentiality agreements.
• Game providers: Usernames (not full identification data) may be shared with third-party game platform providers to enable access to games offered on royal99.
• Law enforcement authorities: We will disclose required information to the police, courts, or regulatory bodies when mandated by a valid court order, warrant, or legal obligation.
• Technical and security consultants: Companies that assist us in maintaining and improving platform security may be granted limited access to certain data, subject to robust confidentiality agreements.

The royal99 website uses cookies and similar tracking technologies to enhance your browsing experience and ensure the platform functions properly. Cookies are small text files stored on your device when you browse our website.

We use several types of cookies:

• Essential cookies: Required for core platform functions such as login session management, language preferences, and security. These cookies cannot be disabled.
• Analytics cookies: Helps us understand how users interact with our platform — which pages are visited most frequently, session duration, and navigation paths. This data is processed in aggregate and without individual identification.
• Functional cookies: Stores user preferences such as display settings, selected language, and game configurations so you do not need to reconfigure them each time.
• Performance cookies: Helps us optimize website speed and performance by identifying which components need improvement.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the Royal99 platform and your overall gaming experience.

The security of your personal data is royal99's top priority. We continuously invest in the latest security infrastructure to ensure your information is always protected against unauthorized access, breaches, or data loss.

The technical and operational security measures we implement include:

• 256-bit SSL encryption: All communications between your device and royal99's servers are protected with 256-bit SSL/TLS encryption — the same standard used by leading banking institutions in Malaysia.
• Stored data encryption: Sensitive data such as bank account numbers and KYC information is stored in encrypted format in our database. Our staff cannot read the actual values of this data except through a strict access control process.
• Role-based access control: Only staff with a legitimate business need may access user data, and all access is automatically audited.
• 24/7 threat monitoring: Our cyber threat monitoring system operates around the clock to detect and respond to any suspicious activity.
• Regular security testing: We conduct regular penetration testing and system vulnerability assessments with the assistance of trusted independent security consultants.

As a royal99 user whose personal data is processed by us, you hold certain rights under Malaysia's Personal Data Protection Act 2010. We are committed to respecting and facilitating the exercise of these rights:

To submit any request relating to your rights above, please contact our data protection team at [email protected]. We will process your request within 14 working days from the date of receipt.

Royal99 does not retain your personal data longer than necessary to fulfil the original purpose of collection or any applicable legal requirements.

• Active account data: Retained for the duration of your active account plus any applicable legal retention period.
• KYC and identity data: Retained for a minimum of 7 years after account closure, in line with Malaysia's anti-money laundering legal requirements.
• Financial transaction records: Retained for 7 years after the transaction date, in line with accounting and tax requirements.
• Customer support communication logs: Retained for 3 years to allow for historical reference and dispute resolution if required.
• Analytics and technical log data: Deleted or anonymised within 13 months from the date of collection.
• Marketing data: Deleted within 30 days after you withdraw consent to receive marketing communications.

When data is no longer needed, we ensure it is securely deleted using methods that make recovery impossible. For physical storage, documents containing sensitive data are disposed of using a shredder or equivalent method.

The royal99 platform may contain links or integrations with third-party services such as game providers, payment processors, or social media platforms. It is important to understand that this Privacy Policy applies only to data collected by royal99 directly.

When you leave our platform and visit third-party websites, you are subject to their respective privacy policies. We encourage you to read and understand the privacy policy of any platform you access via links from our site.

Royal99 is not responsible for the privacy practices or content of third-party websites. Any decision to share data with third-party platforms is entirely your own responsibility.

If you have any questions, concerns, or complaints regarding how royal99 handles your personal data, we are here to listen and provide the clarification you need.

The royal99 Data Protection Team can be reached via:

• Email: [email protected] — please state "Privacy Enquiry" in your email subject line.
• Live chat: Click the chat icon in the bottom-right corner of the royal99 platform during operating hours.
• Help centre: Visit page FAQ for answers to frequently asked questions about privacy and data security.

We are committed to responding to all privacy-related inquiries within 3 working days. For official requests relating to data rights under the PDPA, we will process them within 14 working days from the date of receipt of the complete request.

If you are not satisfied with our response to your privacy complaint, you have the right to lodge a complaint with Department of Personal Data Protection (JPDP) Malaysia which is the regulatory body under the Ministry of Communications.