Royal47 Privacy Policy – Personal Data Protection for Malaysian Members

1 Introduction and Scope of This Policy

Welcome to the royal47 Privacy Policy. We understand that when you register and play on our platform, you are entrusting us with some of your personal information. We take that trust seriously — and this document is our way of being transparent about how we handle that information.

This Privacy Policy describes the personal data collection, use, storage, and protection practices of royal47 in relation to all services we provide through our platform at royal47.biz — including the website, any mobile applications we may release in the future, live casino, slot games, Sports Betting, poker, and all customer support functions.

This policy has been drawn up in accordance with the requirements Personal Data Protection Act 2010 (PDPA) Malaysia and reflects royal47's commitment to handling members' personal data in a manner that is responsible, secure, and respectful of every individual's right to privacy.

2 Types of Personal Data We Collect

Royal47 only collects personal data that is strictly necessary to provide our platform services safely and effectively. We do not collect data that is excessive or unrelated to that purpose.

Registration and Identity Data:

• Full name as per identity card
• Malaysian mobile phone number
• Email address (if provided)
• Date of birth (for age verification)
• Encrypted passwords (we do not store passwords in plain text)

Financial and Payment Data:

• E-wallet account information (Touch 'n Go, GrabPay, Boost, ShopeePay) — associated phone number only
• DuitNow account information for recipient verification purposes
• Deposit and withdrawal transaction records (amount, date, time, status)
• Payment history within the royal47 platform

Platform Usage Data:

• Gaming history — games played, bets placed, winnings, and losses
• Game preferences and usage behaviour
• Login and logout timestamps
• History of interactions with customer support

Technical Data:

• IP address of the device used to log in
• Device type, operating system, and web browser version
• Cookie and session data (explained in Section 10)
• Geolocation data at the country/state level (not precise location)

3 How Your Personal Data Is Collected

Royal47 collects your personal data through several different methods, depending on how you interact with our platform:

4 Purpose of Personal Data Use

Royal47 uses the personal data we collect solely for the purposes set out below. We will not use your data for any other purpose without first obtaining your renewed consent:

• Account Management: Creating, verifying and managing your royal47 member account, including secure login and password reset processes.
• Payment Processing: Processing deposits via Malaysian e-wallets (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and FPX internet banking, as well as managing withdrawals of winnings to your account.
• Gaming Services Provision: Enabling you to access and enjoy all games on royal47 — from live casino baccarat and blackjack to slots, Malaysia Super League and EPL Sports Betting, poker, and roulette.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, money laundering, multiple account ownership, and other violations of our terms that could compromise the integrity of the royal47 platform.
• Legal Compliance: Fulfilling applicable legal and regulatory obligations, including Malaysia's PDPA and anti-money laundering (AML) requirements.
• Customer Support: Providing effective support in Bahasa Melayu when you reach out to us for help with your account, payments, or gameplay.
• Platform Communications: Sending important notifications related to your account, including transaction confirmations, security alerts, and policy updates.
• Platform Improvements: Analysing usage patterns in aggregate (not at an individual level) to improve the performance, interface, and overall user experience of the royal47 platform.
• Responsible Gambling: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate support tools when needed.

5 Legal Basis for Data Processing

Royal47 processes your personal data on valid legal grounds as prescribed by Malaysia's Personal Data Protection Act 2010 (PDPA):

• Consent: For most data processing activities, we rely on the explicit consent you provide when registering your royal47 account. You may withdraw this consent at any time — however, doing so may mean you are no longer able to use our platform.
• Contract Performance: Some data processing is necessary to fulfil the service contract between you and royal47 — for example, processing deposits and withdrawals, or providing access to games.
• Legal Obligations: In certain cases, royal47 is legally required to process specific personal data — such as financial transaction records for AML compliance purposes.
• Legitimate Interest: Royal47 has a legitimate interest in processing certain data for fraud prevention and platform security purposes, provided that interest does not override your privacy rights.

6 Data Sharing and Disclosure to Third Parties

Royal47 does not sell, rent, or trade members' personal data to any third party for their own marketing purposes. This is a commitment we hold firmly.

However, there are limited circumstances in which royal47 may need to share your personal data with carefully selected third parties:

• Payment Service Providers: The payment gateways that process your deposit and withdrawal transactions (such as FPX providers and DuitNow systems) require certain information to complete those transactions. All such providers are licensed entities bound by strict security obligations.
• Game Providers: Live casino providers (such as Evolution Gaming, Pragmatic Play Live) and slot providers that supply games on the royal47 platform may receive game session data as required to deliver their services.
• Technical Infrastructure Providers: Server hosting companies and cloud infrastructure providers that support the operation of the royal47 platform have access to data within the context of technical management. All such providers are bound by strict confidentiality agreements.
• Legal Requirements: Royal47 will disclose personal data to the relevant authorities if required to do so by applicable Malaysian law, court order, or legitimate legal investigation.

7 Data Security — How We Protect Your Information

Royal47 takes data security seriously, as we understand how critical it is to protect our members' financial and personal information. The following are the key security measures we have in place:

• 256-bit SSL Encryption: All communications between your browser and royal47's servers are encrypted using 256-bit SSL — the same standard used by Malaysia's leading banking institutions, including Maybank and CIMB.
• Secure Password Storage: Member passwords are never stored in plain text. We use a strong one-way hashing algorithm with a unique salt for each account — ensuring your password remains unreadable, even to royal47's internal team.
• Multi-Layered Access Control: Access to member data within royal47's internal systems is restricted to staff who have a genuine need to access it, with a full audit log maintained for every access.
• Two-Factor Authentication (2FA): royal47 member accounts are secured with two-factor authentication via phone number to prevent unauthorised access even if your password is compromised.
• 24/7 Monitoring: royal47's security monitoring system operates around the clock to detect suspicious activity, intrusion attempts, and other anomalies in platform traffic.
• Regular Security Audits: Royal47 conducts regular internal security audits to identify and address vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. You also play a role in keeping your account safe — never share your password with anyone, use a strong and unique password, and ensure that any device you use to log in to royal47 is secure.

8 Data Retention Period

Royal47 does not retain your personal data longer than necessary. Retention periods depend on the type of data and the purpose for which it was collected:

• Active Account Data: For as long as your account is active on royal47, your personal data is retained to allow you to access the platform. When an account is closed at your request, personal data will be deleted within 30 days, unless a legal obligation requires it to be retained for longer.
• Financial Transaction Records: In accordance with Malaysian legal requirements relating to financial records and anti-money laundering, transaction records may need to be retained for up to seven (7) years even after account closure.
• Security Logs: Access logs and security activity records are retained for 12 months for the purpose of security incident investigation when required.
• Customer Support Records: Support interaction records are retained for 24 months for quality control and dispute resolution purposes.
• Marketing Data: If you have withdrawn consent for marketing communications, your preferences will be updated within 72 hours and you will not receive any further promotional communications after that point.

9 Your Rights as a Data Subject

As a royal47 member and data subject under Malaysia's PDPA, you have the following rights with respect to your personal data:

To exercise any of the above rights, please contact the royal47 support team via live chat, Telegram, or WhatsApp. We will process your request within 14 business days and notify you of the outcome. In cases that require additional identity verification, the processing period may be slightly longer.

10 Cookies, Sessions & Tracking Technologies

The royal47 platform uses cookies and similar tracking technologies to enhance the user experience and maintain gaming session security. The following are the types of cookies we use:

Cookies marked as "Essential" are required for the platform's core functions and cannot be disabled without affecting your experience. Other cookies can be managed through your web browser settings. Please note that disabling certain cookies may cause some royal47 platform features to not function properly.

11 Children's Data & Protection of Young Members

Royal47 strictly prohibits the use of our platform by individuals under the age of 21. Our platform contains gambling content intended solely for responsible adults.

We do not knowingly collect personal data from children or minors. Should we discover that personal data belonging to an individual under the age of 21 has been collected without valid consent, we will take immediate steps to:

• Immediately closing the account in question
• Delete all associated personal data from our systems
• Process the refund of any deposits made (if applicable), subject to investigation

If you suspect that someone under the age of 21 is using the royal47 platform — whether your child or anyone else — please contact our support team immediately via live chat or WhatsApp. We will take the appropriate action without delay.

12 Amendments to This Privacy Policy

Royal47 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or improvements in how we handle personal data.

When material amendments are made, we will notify members via in-platform notifications or by SMS to their registered phone number. The "Updated" date at the top of this page will always reflect the date of the most recent amendment.

Your continued use of the royal47 platform after any amendments are published will be considered your acceptance of the updated Privacy Policy. If you disagree with the changes made, you have the right to contact us to close your account and request deletion of your data.

For any enquiries, concerns, or requests relating to this Privacy Policy or the handling of your personal data by royal47, please contact our support team:

• Live Chat: Available 24/7 directly within the royal47.biz platform
• WhatsApp: Bahasa Melayu Support, 24 Hours a Day
• Telegram: Technical support and privacy enquiries
• Email: support@royal47.biz for formal written requests