Privacy Policy
This Privacy Policy explains how Royal44 collects, uses, stores, shares, and protects personal data belonging to players and visitors of our online sports betting and live casino platform. We are committed to safeguarding your privacy and handling your personal data with integrity.
How We Protect Your Data
A quick summary of the principles that guide how Royal44 handles your personal information.
End-to-End Encryption
All data transmitted between your browser and the Royal44 platform is protected by 256-bit SSL/TLS encryption. Your login credentials, financial transactions, and personal details are never sent in plain text.
Minimal Data Collection
Royal44 collects only the personal data strictly necessary to operate your account, process payments, comply with KYC obligations, and deliver the services you have requested. We do not collect data for its own sake.
No Data Sales
Royal44 does not sell, rent, or trade your personal data to third-party marketers, advertising networks, or data brokers under any circumstances. Your information is used solely for the purposes described in this Policy.
Your Rights, Honoured
You have the right to access, correct, or request deletion of your personal data held by Royal44. We respond to all verified data subject requests within 30 days in line with applicable privacy obligations.
Transparent Cookie Use
Royal44 uses cookies for session management, fraud prevention, and platform analytics. We explain each cookie category clearly and provide options to manage non-essential cookies through your browser settings.
Secure Data Storage
Personal data is stored on secured servers with access controls, audit logging, and regular security assessments. Only authorised personnel with a legitimate operational need may access player records.
1 Introduction
Royal44 ("we", "us", "our") operates the online sports betting and live casino platform accessible at https://royal44.cam (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who use our Platform, including registered players, prospective players, and general visitors from Malaysia and other jurisdictions.
This Privacy Policy ("Policy") describes the categories of personal data we collect, the purposes for which that data is processed, the parties with whom we may share it, the safeguards we apply to protect it, and the rights available to you as a data subject. This Policy should be read alongside our Terms & Conditions, which govern the contractual relationship between you and Royal44.
By registering an account on the Platform, making a deposit, placing a wager, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein.
2 Definitions
The following terms shall have the meanings set out below when used in this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other data, including name, email address, identification number, IP address, and payment details. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction. |
| "Data Controller" | Royal44 — the entity that determines the purposes and means of processing your personal data. |
| "Data Processor" | A third party that processes personal data on behalf of Royal44 under a contractual arrangement and in accordance with Royal44's instructions. |
| "Cookies" | Small text files placed on your device by the Platform for session management, analytics, fraud prevention, or functionality purposes. |
| "KYC" | Know Your Customer — identity and age verification processes conducted by Royal44 as part of responsible gambling and anti-money laundering compliance. |
| "Platform" | The Royal44 website, mobile-optimised pages, betting products, casino games, and all associated features accessible via https://royal44.cam. |
3 Personal Data We Collect
Royal44 collects personal data in several categories depending on the nature of your interaction with the Platform. The categories of personal data we may hold about you include:
3.1 Identity & Contact Data
- Full legal name as it appears on government-issued identification
- Date of birth (used for age verification — minimum 21 years)
- Nationality and country of residence
- Residential address, including city and postcode (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
- Email address and, where provided, a contact telephone number
3.2 Identity Verification Documents
- Government-issued photo identification (e.g., Malaysian MyKad, passport)
- Proof of address documents (e.g., utility bill, bank statement dated within three months)
- Where applicable, source of funds documentation or enhanced due diligence records
3.3 Financial & Payment Data
- Payment method details, including the name associated with a Touch 'n Go eWallet, Boost, GrabPay, or DuitNow account; or the account name and last four digits associated with a Maybank, CIMB, Public Bank, or Hong Leong Bank account
- Cryptocurrency wallet addresses used for USDT TRC20 or Bitcoin (BTC) transactions
- Transaction history including deposit amounts, withdrawal amounts, dates, and processing status — denominated in Malaysian Ringgit (MYR)
3.4 Account & Activity Data
- Platform username and hashed password
- Betting and wagering history including sports markets, casino games played, wager amounts, and outcomes
- Bonus uptake history and loyalty programme tier status
- Responsible gambling settings, including active deposit limits, cooling-off periods, and self-exclusion status
- Customer support communications and complaint records
3.5 Technical & Device Data
- IP address and approximate geographic location derived from IP
- Browser type, version, and operating system
- Device identifiers and screen resolution where available
- Session logs including pages visited, features used, and time spent on the Platform
- Cookie identifiers and similar tracking technology data (see Section 8)
4 How We Collect Personal Data
Royal44 collects personal data through the following channels and mechanisms:
4.1 Directly from You
The majority of personal data we hold is provided directly by you when you: register an account on the Platform; complete KYC verification by submitting identity documents; make a deposit or request a withdrawal; contact our customer support team via live chat or email; respond to surveys, feedback requests, or promotional communications; or update your account profile settings.
4.2 Automatically through the Platform
When you access and use the Royal44 Platform, we automatically collect certain technical and behavioural data through cookies, session tracking, and server logs. This includes your IP address, browser information, pages navigated, betting activity, login timestamps, and session duration. This data is collected for the purposes of fraud prevention, platform security, and improving the user experience.
4.3 From Third Parties
Royal44 may receive personal data about you from third parties in specific, limited circumstances, including:
- Identity verification and KYC service providers who confirm document authenticity and age
- Payment processors and e-wallet providers (such as Touch 'n Go eWallet, Boost, GrabPay, and bank transfer processors) who confirm transaction status
- Fraud detection and anti-money laundering screening services
- Responsible gambling databases or self-exclusion registers, where we are required to check whether you have self-excluded from online gambling services
5 Data Processing & Purposes of Use
Royal44 processes your personal data only where we have a lawful basis for doing so. The following table summarises the primary purposes for which we process personal data and the lawful basis applicable to each purpose:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration & management | Identity, contact, and account data | Contract performance |
| KYC / age & identity verification | Identity documents, date of birth | Legal obligation; responsible gambling compliance |
| Processing deposits & withdrawals in MYR | Financial & payment data | Contract performance |
| Delivering betting & casino services | Account & activity data | Contract performance |
| Fraud prevention & security monitoring | Technical, financial, and activity data | Legitimate interest; legal obligation |
| Anti-money laundering screening | Identity, financial, and transaction data | Legal obligation |
| Responsible gambling monitoring & tools | Account, activity, and limit data | Legal obligation; legitimate interest |
| Customer support | All categories as relevant to the query | Contract performance; legitimate interest |
| Sending transactional communications | Contact data | Contract performance |
| Promotional communications (opt-in) | Contact data; activity data | Consent |
| Platform analytics & improvement | Technical & behavioural data (aggregated) | Legitimate interest |
Royal44 will not process your personal data for purposes incompatible with those listed above without first providing you with notice and, where required, obtaining your consent.
6 Data Sharing & Disclosure
Royal44 does not sell, rent, or commercially exploit your personal data. We may share your personal data with third parties only in the following limited and controlled circumstances:
6.1 Service Providers & Data Processors
Royal44 engages carefully selected third-party service providers who process personal data on our behalf under contractual data processing agreements. These providers include payment processors (facilitating transactions via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and bank transfer services with Maybank, CIMB, Public Bank, and Hong Leong Bank), KYC and identity verification providers, fraud detection services, and cloud infrastructure providers. All such processors are contractually bound to handle your data only in accordance with Royal44's instructions and this Policy.
6.2 Legal & Regulatory Obligations
Royal44 may be required to disclose personal data to regulatory authorities, law enforcement agencies, courts, or other public bodies where we are legally compelled to do so — for example, in response to a court order, regulatory investigation, or statutory obligation under anti-money laundering or counter-terrorism financing legislation.
6.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of Royal44's business, personal data held by Royal44 may be transferred to a successor entity as part of that transaction. In such circumstances, affected players will be notified by email or Platform notification prior to any transfer, and the successor entity will be bound by obligations equivalent to those in this Policy.
6.4 With Your Consent
Royal44 may share your personal data with additional third parties where you have provided your explicit informed consent to such sharing for a specific purpose.
7 Data Retention
Royal44 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods generally apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & identity data | Duration of account plus 5 years after closure | Regulatory and AML compliance obligations |
| KYC documents | 5 years from date of verification or account closure | Legal obligation under anti-money laundering requirements |
| Financial transaction records | 7 years from the date of each transaction | Financial records retention obligations |
| Betting & wagering history | Duration of account plus 5 years | Dispute resolution and regulatory compliance |
| Customer support records | 3 years from closure of support interaction | Dispute resolution; service improvement |
| Marketing consent records | Until consent is withdrawn, plus 1 year | Demonstrating lawful basis for marketing |
| Technical/session logs | Up to 12 months | Fraud detection; security monitoring |
Following the expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Where anonymised data is retained for analytical purposes, it is no longer treated as personal data under this Policy.
8 Cookies & Tracking Technologies
Royal44 uses cookies and similar tracking technologies to operate the Platform, maintain session security, prevent fraud, and gather anonymised analytics data that helps us improve the user experience. Cookies are small text files placed on your device when you visit the Platform.
8.1 Categories of Cookies We Use
| Cookie Type | Purpose | Essential? |
|---|---|---|
| Strictly Necessary | Session management, authentication, security tokens, and load balancing. Required for the Platform to function correctly. | Yes — cannot be disabled |
| Fraud Prevention | Device fingerprinting, anomaly detection, and bot identification to protect player accounts and Platform integrity. | Yes — essential for security |
| Functional | Remembering user preferences such as language settings and display options between sessions. | No — can be disabled |
| Analytics | Aggregated, anonymised data on how players navigate the Platform — pages visited, features used, and session duration. Data is not linked to individual player identities. | No — can be disabled |
8.2 Managing Cookies
You can manage non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete individual cookies. Please note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from logging in or accessing your account. Instructions for managing cookies are available in your browser's help documentation.
9 Data Security
Royal44 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- 256-bit SSL/TLS encryption for all data in transit between your device and the Platform
- Encryption of sensitive data at rest within our database systems
- Role-based access controls ensuring that only personnel with a legitimate operational need can access personal data
- Regular security assessments, penetration testing, and vulnerability scanning of the Platform infrastructure
- Multi-factor authentication requirements for administrative access to systems holding personal data
- Audit logging of access to personal data records, reviewed regularly for anomalies
- Data processing agreements with all third-party service providers requiring equivalent security standards
While Royal44 takes the security of your personal data seriously and applies industry-standard protective measures, no online system can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, Royal44 will notify affected individuals and relevant authorities in accordance with applicable legal requirements.
You are responsible for maintaining the security of your own account credentials. Royal44 strongly recommends using a strong, unique password for your account and enabling any available account security features. If you suspect your account has been compromised, contact our support team immediately.
10 Your Data Rights
As a data subject, you have a number of rights in relation to the personal data Royal44 holds about you. The availability of specific rights may depend on the legal framework applicable to your jurisdiction, but Royal44 endeavours to honour the following rights for all players:
Your Rights Over Your Personal Data
Royal44 respects and honours your data rights. To exercise any of the rights below, contact our support team at [email protected].
Right of Access
You have the right to request a copy of the personal data Royal44 holds about you, along with information about how it is being processed. We will respond to verified access requests within 30 days.
Right to Rectification
If personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account information directly through your account settings.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, or where you withdraw consent. This right is subject to our legal retention obligations.
Right to Restrict Processing
In certain circumstances, you may request that we restrict the processing of your personal data — for example, while you contest the accuracy of the data or while an objection is being considered.
Right to Data Portability
Where processing is based on your consent or a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service.
Right to Object
You have the right to object to processing carried out on the basis of Royal44's legitimate interests, including profiling for fraud prevention purposes. You may also withdraw marketing consent at any time.
11 International Data Transfers
Royal44 operates an international platform and may transfer personal data to, and process it in, countries outside Malaysia. Where personal data is transferred internationally, Royal44 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that described in this Policy.
Safeguards for international transfers may include standard contractual clauses, data processing agreements incorporating equivalent protections, or transfers to jurisdictions that offer an adequate level of data protection as determined by the applicable legal framework.
By using the Royal44 Platform, you acknowledge that your personal data may be transferred to and processed in countries outside your country of residence. Royal44 takes all reasonable steps to ensure that such transfers are conducted lawfully and securely.
12 Minors & Age Restriction
The Royal44 Platform is strictly for individuals aged 21 years and above. Royal44 does not knowingly collect personal data from individuals under the age of 21. Our registration process includes age verification steps and our KYC process requires date of birth confirmation and, where necessary, submission of identity documentation confirming age.
If Royal44 becomes aware that personal data has been collected from a person under the age of 21 without appropriate verification, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage user will be returned through the original payment method after identity verification of the account holder.
If you are a parent or guardian and believe that a minor has provided personal data to Royal44 or has registered an account, please contact our support team immediately at [email protected].
13 Amendments to This Policy
Royal44 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable laws, or the services we provide. Where changes are material — meaning they could meaningfully affect your privacy rights or how your data is processed — we will provide notice to registered players via email or Platform notification at least 14 days before the changes take effect.
The updated effective date at the top of this Policy will always reflect the date on which the most recent version took effect. We encourage you to review this Policy periodically so that you are kept informed of how we handle your personal data. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.
14 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by Royal44, please contact us through the following channels:
- Live Chat: Available 24 hours a day, 7 days a week directly on the Platform. Response time typically under 2 minutes.
- Email: [email protected] — responses to privacy-related enquiries within 5 business days; data subject requests responded to within 30 days.
When submitting a data subject rights request, please include sufficient information to allow us to verify your identity before processing the request. This is to ensure that personal data is not disclosed to or deleted at the request of an unauthorised party.
Privacy Questions? We're Here 24/7.
Our support team can assist with data access requests, marketing opt-outs, or any privacy concern — in plain English, without the runaround. Malaysian players across Kuala Lumpur, Penang, and beyond are always welcome to reach out.