Privacy Policy Royal77 – Our Commitment to Protecting Your Personal Data

Royal77 is an online entertainment platform offering a wide range of games including slots, live casino, table games, poker, virtual sports, cricket, and an exclusive VIP rewards programme to users in Malaysia. Operating this platform requires us to collect and process certain personal data from our members.

This Privacy Policy explains in detail:

• The types of personal data we collect from you through your use of the Royal77 platform.
• The purpose and legal basis for processing that data.
• Parties who may receive or access your data.
• Security measures we take to protect your data.
• Your rights as a data subject and how to exercise them.

This policy applies to all registered Royal77 members, website visitors, and anyone who interacts with our platform in any capacity in Malaysia.

Royal77 only collects data that is strictly necessary to provide our services to you. We do not collect excessive data unrelated to platform operations. The following are the categories of data we collect:

Every piece of data Royal77 collects is used solely for legitimate and relevant purposes. We will not process your data for any purpose you have not been informed of. The following are the primary purposes for which we use your data:

• Account Management – To create, verify, and manage your Royal77 account, including secure login and password recovery.
• KYC Compliance – To verify your identity for the purposes of anti-money laundering (AML) compliance and know your customer (KYC) requirements.
• Transaction Processing – To process your RM deposits via TNG eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX, as well as withdrawals to your Malaysian bank account.
• Gaming Services – To provide access to all Royal77 games including slots, live casino, poker, virtual sports, cricket, and table games.
• Customer Support – To assist you in resolving any issues related to your account, payments, or gameplay as quickly as possible.
• Security & Fraud Prevention – To detect and prevent fraudulent activity, platform abuse, and unauthorised access to your account.
• Marketing (with consent) – To send you Royal77 promotions, bonus offers, and updates, only where you have given your consent to receive them.
• Platform Improvement – To analyse usage patterns in order to improve the gaming experience and develop new features on Royal77.

All data processing by Royal77 is carried out on a valid legal basis – whether contractual compliance (to deliver our services), legitimate interest (for security and fraud prevention), or your consent (for marketing).

Royal77 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. This is our absolute commitment.

However, in the course of operating the platform, there are limited circumstances in which your data may be shared with the following parties:

• Malaysian Payment Providers – Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX partners (Maybank, CIMB, and other banks) to process your financial transactions. Such sharing is strictly limited to the information necessary to complete each transaction.
• Game Providers – Game provider companies that supply slots, live casino, poker, and virtual sports to the Royal77 platform. They receive only anonymised account identifiers, not your full personal information.
• Relevant Authorities – Where required by Malaysian law or court order, Royal77 will disclose the necessary information to the Royal Malaysia Police, Bank Negara Malaysia, or other relevant authorities.
• Auditors and Legal Advisors – Audit firms, lawyers, and professional consultants bound by strict confidentiality obligations when conducting compliance reviews.

Your data security is Royal77's highest priority. We continually invest in state-of-the-art security infrastructure to ensure your personal and financial information remains protected at all times.

Key security measures we employ at Royal77:

• 256-bit SSL Encryption – All communications between your device and Royal77's servers are encrypted using the 256-bit SSL/TLS standard adopted by leading financial institutions and banks.
• Two-Factor Authentication (2FA) – Members can enable 2FA for an additional layer of login protection.
• Financial Data Segregation – Your payment details (eWallet, bank details) are stored separately from your gameplay data and profile, with distinct access control layers.
• Real-Time Threat Detection System – The Royal77 platform is monitored 24/7 by automated security systems that detect and block any suspicious activity in real time.
• Regular Security Audits – Independent third parties conduct regular security audits and penetration testing to identify and address any vulnerabilities.
• Restricted Access – Only Royal77 staff who genuinely require access to your data for their authorised work duties are permitted to do so, and every access is logged and monitored.

While Royal77 takes all reasonable steps to protect your data, no system is 100% immune to every threat. In the event of a data breach that affects you, we will notify you within the timeframe required by applicable Malaysian law.

Royal77 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use on Royal77:

• Essential Cookies (Required) – Required for core platform functions such as maintaining your login session and ensuring transactions are processed securely. These cookies cannot be disabled.
• Performance Cookies – Helps us understand how users interact with Royal77 – which pages are visited most, how long gaming sessions last, and more. This data is used in aggregate form and does not identify individuals.
• Functional Cookies – Remembers your preferences such as language, display settings, and game choices to personalise your Royal77 experience.
• Analytics Cookies – Used to analyse platform usage patterns for the purpose of continuous Royal77 improvement.

You can manage or disable cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality of the Royal77 platform. For instructions on managing cookies in your browser, refer to your browser's documentation.

Royal77 retains your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable Malaysian law.

• Active Account Data – Retained for the duration your account remains active on Royal77 and for 7 years after account closure, in line with Malaysian accounting legal requirements.
• Financial Transaction Records – Retained for a minimum of 7 years in accordance with Malaysia's Anti-Money Laundering Act (AMLA) requirements.
• KYC / Identity Verification Data – Retained for the duration of the active account and for 5 years following account closure.
• Support Communication Records – Retained for 3 years from the date of last interaction.
• Analytics Cookie Data – Retained for a maximum of 13 months.

When data is no longer required, Royal77 will securely delete or anonymise it using procedures that ensure the data cannot be recovered.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and Royal77's internal policies, you have the following rights regarding your personal data:

Royal77 does not permit, under any circumstances, individuals under the age of 18 to register or use our platform. This is a non-negotiable policy that is strictly enforced.

We do not knowingly collect any personal data from individuals under the age of 18. Should Royal77 discover that a minor's data has been collected without our knowledge, we will promptly delete that data and close the account in question.

If you believe a child or underage individual has registered on the Royal77 platform, please contact our support team immediately at support@royal77.run. We will take prompt action to resolve the matter.

The Royal77 platform may contain references or links to third-party websites or services, such as payment provider or game provider websites. This Royal77 Privacy Policy applies solely to the Royal77 platform and does not cover the privacy practices of any third party.

Royal77 is not responsible for the content, privacy policies, or security practices of any third-party websites you may access through our platform. We encourage you to review the privacy policy of every website you visit.

Royal77 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, updates to applicable Malaysian law, or platform enhancements. Each revised version will display a new "Last Updated" date at the top of this document.

How Royal77 notifies you of material changes to the Privacy Policy:

• Email notification to all registered members at least 14 days before the material changes take effect.
• Prominent notice on the Royal77 platform homepage during the notification period.
• A confirmation pop-up will appear at your next login, asking you to acknowledge the changes.

Your continued use of the Royal77 platform after any Privacy Policy changes take effect constitutes your acceptance of the updated policy. If you do not agree with the changes, please discontinue use of the platform and contact us to close your account.

For any questions, complaints, or requests regarding this Privacy Policy or the processing of your personal data by Royal77, please contact our Data Privacy Officer (DPO):

• Email: support@royal77.run (with the subject line "Data Privacy Enquiry")
• Live Chat: Available 24/7 on the Royal77 platform after logging in

We are committed to responding to all privacy-related enquiries within 14 working days. For urgent matters relating to account security or any suspected privacy incident, please use live chat for a faster response.