Privacy Policy Royal77 –
Personal Data Protection for Malaysian Players

Welcome to the Royal77 Privacy Policy. This document is intended to give you a clear and transparent overview of how Royal77 ("we", "our platform") collects, processes, stores and protects your personal data as a registered player or visitor to our website.

Royal77 takes your privacy seriously. We believe trust is the foundation of the relationship between a platform and its players — and that trust can only be built when you know exactly what we do with your information. That is why this document is written in plain, straightforward language, not complex legal jargon.

This Privacy Policy applies to all registered Royal77 players, visitors to our website and anyone who interacts with our platform through any channel, including the website, email and customer support.

Below are the categories of personal data Royal77 collects and retains, along with the purpose of collection:

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive data such as health information, political views, or religious beliefs.

Royal77 collects your personal data through the following channels:

• Account Registration: You provide information directly when completing the registration form — including your name, email address and phone number.
• KYC Verification Process: When you submit identity documents such as your MyKad or bank statement for account verification.
• Financial Transactions: Information related to deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u or CIMB Clicks is collected each time a transaction is processed.
• Platform Usage: Automatically when you browse the website or use the Royal77 platform — including technical data and usage patterns.
• Communications with Us: When you contact customer support via live chat or email.
• Cookies & Tracking Technologies: As described in the Cookies section of this document.

Royal77 uses the personal data collected for the following purposes:

• Account Management: Creating, managing, and maintaining your player account, including login, identity verification, and account recovery.
• Transaction Processing: Processing deposits via Touch 'n Go, DuitNow, GrabPay, and other Malaysian payment methods, and securely managing your withdrawal of winnings.
• KYC and AML Compliance: Fulfilling legal obligations related to identity verification (Know Your Customer) and anti-money laundering (AML) requirements.
• Platform Security: Detecting and preventing fraud, unauthorised access, bonus abuse, and other suspicious activity.
• Customer Support: Efficiently and accurately resolving your enquiries, complaints and support requests.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need support and to manage the limits you have set for yourself.
• Marketing Communications: Sending notifications about the latest promotions, bonuses, and exclusive offers — only where you have given consent to receive such communications.
• Product Improvement: Analysing how players use the platform to improve the overall experience, performance and range of games we offer.

Royal77 does not sell or rent your personal data to any third party. However, in the following limited circumstances, we may share your data:

• Payment Service Providers: Payment partners who process your transactions (e.g. FPX, DuitNow, or Malaysian digital wallet service providers) receive only the data required to complete those transactions.
• Game Providers: Companies such as Pragmatic Play, Evolution Gaming and NetEnt may receive game session data necessary for the proper operation of their games.
• Identity Verification Services: Third-party KYC providers who assist us in verifying player identities to meet legal and regulatory requirements.
• Authorities: Where required by Malaysian law, a court order, or a directive from a competent authority — we will disclose the information necessary to comply.
• Fraud Detection: Security partners who assist us in identifying and preventing fraudulent activity on the platform.

All third parties working with Royal77 are bound by strict confidentiality agreements and are only permitted to use your data for the stated purposes. They are not allowed to share that data with any other party without our consent.

Royal77 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure or destruction:

• Encryption of Data in Transit: All communications between your device and Royal77's servers are protected with 256-bit TLS/SSL protocols.
• Encryption of Stored Data: Sensitive data such as financial information and passwords are stored in encrypted format using robust hashing algorithms.
• Layered Access Control: Only specifically authorised personnel may access player data, and all access is logged for audit purposes.
• 24/7 Monitoring: Automated monitoring systems operate around the clock to detect suspicious or unusual activity.
• Regular Penetration Testing: Royal77 conducts regular security assessments (penetration testing) to identify and address vulnerabilities before they can be exploited.
• Staff Training: All staff who handle player data undergo comprehensive privacy and security training.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Royal77:

Royal77 uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use:

You can manage your cookie preferences through your web browser settings. Please note that disabling essential cookies may affect the functionality of certain parts of the platform. For guidance on managing cookies in your browser, refer to the documentation for your browser of choice (Chrome, Safari, Firefox, etc.).

Royal77 retains your personal data only for as long as necessary for the stated purposes, or as required under Malaysian law. The following are our data retention guidelines:

• Active Account Data: For as long as your account remains active and you continue to use the Royal77 platform.
• After Account Closure: Financial data and KYC records are retained for a minimum of 7 years to comply with Malaysia's tax and AML legal requirements.
• Communication Records: Support chat transcripts and emails are retained for 3 years.
• Technical Data & Logs: Access logs and technical data are retained for 12 months.
• Analytics Cookie Data: Maximum 2 years.

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered.

The Royal77 platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18.

If you discover that a minor has accessed our platform or submitted their personal data, please notify us immediately at support@royal77.xyz. We will take prompt action to delete the relevant data and close the account.

Royal77 reserves the right to amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or operational improvements. When significant changes are made, we will:

• Updating the "Updated" date at the top of this page.
• Sending email notifications to all registered players.
• Displaying a notice on the platform's main page for a minimum of 14 days.

Your continued use of the Royal77 platform following notification of any amendments constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you may close your account before they take effect.

For any enquiries, concerns, or requests relating to your personal data and this Privacy Policy, please contact Royal77's Data Privacy Officer (DPO) through the following channels:

• Privacy Email: privacy@royal77.xyz
• General Support Email: support@royal77.xyz
• Live Chat: Available within the platform after login, 24 hours a day
• Response Time: Within 30 working days for formal data-related requests

When submitting a privacy-related request by email, please include:

1. Your full name and Royal77 username.
2. Type of request (access, correction, deletion, etc.).
3. A brief description of your request.

We may need to verify your identity before processing certain requests — this is a standard security measure to protect your data from unauthorised access.