Privacy Policy

1. Introduction

44royal ("the Platform", "we", "us", or "our") is committed to protecting the privacy and personal data of all users who register, access, or interact with our online casino and sports betting services at https://44royal.cam. This Privacy Policy ("Policy") describes our practices regarding the collection, use, storage, sharing, and protection of personal data in connection with your use of the Platform.

This Policy applies to all registered players, prospective players browsing the Platform, and any other individuals whose personal data we process in the course of operating 44royal. It should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy.

By registering an account on 44royal or continuing to use the Platform after this Policy has been communicated to you, you acknowledge that you have read and understood our data practices as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and close your account by contacting our support team.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably identify a natural person, directly or indirectly, including name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means 44royal as the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of 44royal pursuant to a data processing agreement.
• "Player" or "User" means any natural person who has registered an account on the Platform or who accesses the Platform as a guest.
• "Cookies" means small text files placed on your device by the Platform for the purposes of session management, security, and analytics.
• "KYC Data" means identity verification documents and information collected to satisfy our Know Your Customer obligations, including government-issued identification and proof of address.

3. Personal Data We Collect

44royal collects personal data through multiple touchpoints during your interaction with the Platform. The categories of data we collect are described below:

3.1 Registration Data

When you create an account on 44royal, we collect:

• Full legal name as it appears on government-issued identification
• Date of birth (used to verify the 21+ age requirement)
• Residential address (including city — Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or other Malaysian localities)
• Email address and mobile phone number
• Username and encrypted account credentials
• Preferred currency (Malaysian Ringgit / MYR by default)

3.2 KYC & Verification Data

To comply with anti-money laundering (AML) requirements and verify account eligibility, we collect:

• Copy of government-issued photo identification (MyKad, passport, or driving licence)
• Proof of residential address (utility bill, bank statement dated within three months)
• Proof of payment method ownership (screenshot of Maybank2u, CIMB Clicks, Touch 'n Go eWallet, or other registered method)
• Source of funds documentation where transaction thresholds require it

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts, timestamps, and payment method identifiers
• Partial payment account details (masked card or bank account numbers; we do not store full card numbers)
• Bonus redemption history and wagering activity records

3.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session duration, pages visited, and in-platform navigation patterns
• Game session logs, bet histories, and win/loss records
• Cookie identifiers and similar tracking technologies

3.5 Communications Data

• Content of live chat interactions with our support team
• Email correspondence sent to or received from 44royal
• Survey responses and feedback submissions where voluntarily provided

4. How We Use Your Personal Data

The following table summarises the primary purposes for which 44royal processes your personal data:

5. Legal Basis for Processing

44royal processes personal data on the following legal bases:

• Contract Performance: Processing necessary to fulfil our obligations under the account registration agreement, including operating your account, processing transactions, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC verification requirements, and responsible gambling duties.
• Legitimate Interests: Processing for fraud prevention, platform security, abuse detection, and anonymised analytics, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications, which requires your active opt-in and can be withdrawn at any time without affecting your right to use the Platform.

6. Data Sharing & Disclosure

44royal does not sell, rent, or trade your personal data to third-party marketers or data brokers. We share personal data only in the following circumstances:

6.1 Service Providers

We engage third-party service providers who process personal data on our behalf under binding data processing agreements, strictly limited to the purposes for which they are engaged. These include:

• Payment processors: Malaysian payment gateways including DuitNow, FPX, and e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay) to facilitate deposits and withdrawals
• Identity verification providers: KYC and AML screening services
• IT and hosting providers: Secure cloud infrastructure providers
• Customer support platforms: Live chat technology providers
• Analytics providers: Platform usage analytics (data anonymised or pseudonymised)

6.2 Legal & Regulatory Disclosure

We may disclose personal data to competent authorities, law enforcement agencies, or courts where we are legally required to do so, including in connection with AML investigations, fraud prosecution, or regulatory compliance obligations.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all assets of 44royal, personal data held by 44royal may be transferred to the successor entity. You will be notified of any such transfer and the applicable privacy policy of the successor entity before the transfer takes effect.

7. Data Retention

44royal retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to legal retention obligations. Our general retention periods are as follows:

• Account and registration data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• KYC documentation: Retained for a minimum of five (5) years from the date of the last transaction or account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years in compliance with financial record-keeping obligations.
• Communications and support records: Retained for three (3) years following the date of the communication.
• Technical and log data: Retained for up to twelve (12) months, after which it is deleted or anonymised for analytics purposes.
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year for compliance documentation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any individual.

8. Cookies & Tracking Technologies

44royal uses cookies and similar technologies to operate the Platform, maintain session security, and understand how players interact with our services. We do not use third-party advertising cookies or cross-site tracking technologies.

8.1 Types of Cookies Used

• Essential / Session Cookies: Required for the Platform to function. These maintain your login session, enforce security controls, and store your in-session preferences. Cannot be disabled without preventing use of the Platform.
• Security Cookies: Used to detect fraudulent activity, enforce access controls, and protect against CSRF and session hijacking attacks.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the Platform. This helps us identify usability issues and improve the player experience. No personally identifiable information is transmitted through analytics cookies.
• Preference Cookies: Store your display preferences, such as language setting and notification preferences, across sessions.

8.2 Managing Cookies

You can control or delete cookies through your browser settings. Please note that disabling essential cookies will impair the functionality of the Platform and may prevent you from logging in or completing transactions. Instructions for managing cookies are available in the help documentation of your browser.

9. Your Rights

Subject to applicable law and our legal retention obligations, you hold the following rights in relation to your personal data held by 44royal:

• Right of Access: You may request a copy of all personal data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data in your account.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations (such as AML record-keeping requirements).
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format, or transmit it directly to another controller where technically feasible.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. Where you object to marketing, we will cease processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact our support team via live chat on the Platform or by email at [email protected]. We will acknowledge your request within three (3) business days and provide a substantive response within thirty (30) days. In complex cases, we may extend this period by a further sixty (60) days, with notice.

10. Security Measures

44royal implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, loss, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using 256-bit TLS/SSL protocols.
• Encryption at rest: Sensitive personal data fields — including identity documents, financial account references, and authentication credentials — are encrypted at rest using industry-standard symmetric encryption.
• Access controls: Internal access to player data is governed by role-based access control (RBAC) policies. Access is restricted to personnel with a verified operational need, and all access events are logged.
• Intrusion detection: Continuous monitoring systems detect and alert on anomalous access patterns, potential data exfiltration, and network intrusion attempts.
• Penetration testing: The Platform undergoes periodic security assessments by qualified third-party security researchers to identify and remediate vulnerabilities.
• Incident response: In the event of a personal data breach, 44royal will notify affected users without undue delay and take all necessary remediation steps.

While we apply rigorous security standards, no system is completely impenetrable. You also play a role in account security by maintaining a strong, unique password and enabling two-factor authentication where offered. Contact our support team immediately if you suspect unauthorised access to your account.

11. Minors

44royal does not knowingly collect, process, or store personal data belonging to persons under the age of 21. Registration on the Platform is strictly restricted to natural persons aged 21 years and above. Age verification is performed as part of the registration and KYC process.

If 44royal becomes aware that personal data of a person under 21 has been collected — whether through misrepresentation at registration or any other means — we will immediately suspend the associated account, permanently delete all associated personal data, and void any account balance. Any person who becomes aware that a minor has registered on 44royal is encouraged to report this through our live chat support team.

12. Amendments to This Policy

44royal reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. Where changes are material, we will provide reasonable advance notice through a platform notification or by email to your registered address.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Continued use of the Platform after the effective date of an amended Policy constitutes your acceptance of the updated terms. If you do not accept any amendment, please close your account and contact our support team to request deletion of your personal data subject to legal retention requirements.

13. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or the way in which your personal data is handled by 44royal, please contact us through the following channels:

Please include your registered username and a clear description of your request when contacting us. We aim to acknowledge all privacy-related enquiries within three (3) business days and resolve them within thirty (30) days.