Privacy Policy Royal999 – Personal Data Protection for Malaysian Players

This Privacy Policy explains the personal information collection and handling practices of royal999, which operates in royal999.bar. It applies to all users who register an account, use the services, or visit the royal999 platform in any capacity.

Royal999 is committed to protecting your privacy in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). As a platform serving Malaysian players, we understand the importance of trust — and trust begins with transparency about how we handle your information.

We never sell your personal data to third parties for marketing purposes. Data you provide to royal999 is used solely for the purposes stated in this policy, and we only share information with parties that need it to deliver the services you requested.

Royal999 collects your personal information through three main channels — information you provide directly, information collected automatically as you use the platform, and information we receive from legitimate third-party sources.

For underage players — royal999 does not knowingly collect personal information from individuals under the age of 18. If you believe a child has provided personal information to royal999, please contact us immediately and we will take appropriate action.

Every piece of data we collect has a clear purpose. Royal999 does not collect data for its own sake — we use it to deliver better service to you. The following are the primary purposes for which your personal information is used:

• Account Management: Creating, verifying and maintaining your royal999 account, including the secure login process and password recovery.
• Transaction processing: Processing your deposits and withdrawal requests promptly and accurately to your registered bank account or e-wallet.
• Identity Verification (KYC): Ensuring all members are genuine and eligible individuals, protecting the royal999 community from fraud and unlawful activity.
• Security & fraud prevention: Detecting and preventing suspicious activity, account misuse or any fraudulent attempts that could harm you or the royal999 community.
• Customer Support: Understanding the context of your enquiry so that the royal999 support team can provide accurate and effective assistance.
• Responsible gaming: Monitoring gameplay patterns to identify early signs of problem gambling and offering appropriate support to players who may need it.
• Platform improvements: Analysing how players use royal999 to improve the user experience, fix bugs and develop new features that are more useful.
• Service communications: Sending important account-related information — such as security notifications, policy updates or transaction confirmations.

Royal999 does not sell, rent, or disclose your personal information to third parties for their own marketing or commercial purposes. However, to deliver the services you request, there are situations where we need to share certain information with carefully selected parties:

• Payment providers: Banking institutions and payment service providers such as FPX, Touch 'n Go, GrabPay and DuitNow receive the transaction details required to securely process your deposits and withdrawals.
• KYC service providers: Trusted third-party identity verification companies assist royal999 in verifying the identity of new players as part of our standard industry compliance process.
• Game providers: Game studios and content providers receive only the minimum technical data required to deliver games to you — typically just a non-personally identifiable session identifier.
• Cloud Services & Infrastructure: Technical infrastructure providers that support the operation of the royal999 platform, all subject to strict data protection agreements.
• Legal Authority: Where required by law or a valid court order, royal999 may be obliged to disclose certain information to the relevant authorities.

Every third-party partner working with royal999 is bound by strict confidentiality and data protection agreements. They are only permitted to use shared data for the purposes specified in those agreements and may not disclose or use it for any other purpose.

Protecting your personal data is the top technical and operational priority at royal999. We continually invest in security infrastructure to ensure your information remains under the strongest protection at all times.

The technical security measures we employ include:

• Integrated 256-bit SSL/TLS Encryption: All data transmitted between your device and royal999 servers is encrypted using the same encryption standard employed by leading banking institutions worldwide.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA for an additional layer of protection, ensuring only you can access your account even if your password is compromised.
• 24/7 security monitoring: The royal999 cybersecurity team monitors our systems around the clock to detect and respond swiftly to any potential security threats.
• Internal access controls: Access to players' personal data among royal999's internal staff is restricted on a need-to-know basis — only staff who require it to perform their duties are granted access.
• Regular security audits: Royal999 conducts regular internal and external security audits to identify and address potential vulnerabilities before they can be exploited.

The royal999 platform uses cookies and similar tracking technologies to enhance your user experience, maintain session security, and help us understand how the platform is used so we can continue improving it.

Royal999 uses several types of cookies:

• Essential cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled as they are necessary for the platform to operate correctly.
• Performance cookies: Collecting information on how visitors use the royal999 platform — which pages are visited most often, how long sessions last and so on. All such data is anonymised and used solely for platform improvement.
• Functional cookies: Remembering your preferences such as language, display settings and game preferences so you do not need to reconfigure them each time you log in.
• Security cookies: Helping detect and prevent fraudulent activity, including suspicious login attempts and access from unusual locations.

You can manage cookie settings through your browser preferences. Keep in mind that disabling essential cookies may affect the functionality of the royal999 platform. For non-essential cookies, you have full control to accept or reject them.

Royal999 retains your personal information only for as long as necessary for the purposes stated in this policy, or as required by applicable law. Our general principle is "retain only what is needed, delete when no longer required".

General data retention period guidelines at royal999:

• Active account data: Retained for the duration your account is active on royal999 and for the required period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in line with Malaysia's accounting and banking legal requirements.
• KYC Data: Retained for the period specified by anti-money laundering (AML) compliance requirements.
• Security logs: Retained for 12 months for security investigation and fraud prevention purposes.
• Game history data: Retained for a minimum of 5 years for compliance and dispute resolution purposes.

Once the retention period expires, data will be securely deleted or anonymised in a way that cannot be re-identified. royal999's data deletion process uses methods that ensure data cannot be recovered by any party.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by royal999. We are committed to respecting and facilitating the exercise of these rights:

• Right to access: You may request a copy of the personal information royal999 holds about you at any time. Requests will be processed within 21 business days.
• Right to rectification: If you find that the information we hold is inaccurate or outdated, you have the right to request a correction. You can update most details yourself through your royal999 account settings.
• Right to withdraw consent: Where data processing is based on your consent, you may withdraw that consent at any time. Such withdrawal does not affect the validity of any processing carried out prior to that point.
• Right to object: You may object to the processing of your data for direct marketing purposes at any time, and royal999 will comply with that request immediately.
• Right against automated decision-making: You have the right to request human review of any automated decision that has a significant impact on you.

To exercise any of these rights, contact the royal999 support team via Live Chat, available 24/7. We will respond to your request within a reasonable timeframe and will not charge any fee for legitimate rights requests.

If you have any questions, concerns or complaints regarding how royal999 handles your personal data, we encourage you to contact us directly. Our privacy team is ready to assist and provide the clarification you need.

You can reach the royal999 team via:

• Live Chat: The fastest way — available on the royal999 platform 24 hours a day, 7 days a week. Our team typically responds within minutes.
• Email: Send your privacy enquiries to [email protected]. We will respond within 2 business days.

Royal999 takes every privacy-related complaint seriously. If you are not satisfied with our response, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia.