Royal771 Privacy Policy – Personal Data Protection Our Guarantee to Malaysian Players

Royal771 ("we", "platform", "royal771") is the data controller for all personal information collected through our platform. This Privacy Policy applies to all users who interact with the royal771 platform via the website at royal771.best, the mobile app, or any other channel we operate.

This policy covers:

• Types of personal data we collect from Malaysian players
• The purpose and legal basis for each use of your data
• Parties that may receive your data and under what circumstances
• The security measures we take to protect your data
• Your privacy rights and how to exercise them

Royal771 collects various types of personal data across different contexts. Below is a comprehensive overview of the data we collect:

Account Registration Data:

• Your chosen username
• An active Malaysian phone number
• Password (stored in encrypted form — we cannot view your password)
• Optional profile information such as full name and date of birth (required for age verification)

Financial Transaction Data:

• Deposit and withdrawal records including amount, date, time, and payment method
• Name of payment method used (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX, Maybank2u, CIMB Clicks)
• Transaction reference number generated by the payment system
• We do not store full bank account numbers or credit/debit card details in our systems

Gaming Activity Data:

• Betting and gaming history, including games played, wager amounts, and outcomes
• Time and duration of gaming sessions
• Game preferences, configured betting limits, and other account settings

Technical & Usage Data:

• The IP address of the device used to access royal771
• Device type, operating system, and browser type
• Cookie and server log data for security purposes and platform improvement
• Approximate location information (country/state level) based on IP address

Identity Verification Data (KYC) — where applicable:

• A copy of your identification document (MyKad or passport) when requested for verification
• Supporting documents for payment method verification where required

Royal771 uses the personal data collected for the following purposes:

Under Malaysia's Personal Data Protection Act 2010 (PDPA), royal771 processes personal data on the following legal bases:

• Performance of Contract: Processing necessary to fulfil the agreement between you and royal771 — such as managing your account, processing deposits via Touch 'n Go or DuitNow, and disbursing winnings.
• Legal Obligations: Processing necessary to comply with legal obligations, including anti-money laundering (AML) requirements, customer identity verification (KYC), and compliance with relevant regulatory directives.
• Legitimate Interest: Processing for platform security, fraud prevention, service improvement, and legitimate business operations that do not override your fundamental rights and interests.
• Consent: For activities such as direct marketing communications, royal771 will only process your data with the explicit consent you have provided. You may withdraw this consent at any time.

Royal771 do not sell your personal data to any party. However, we may share your personal data with the following parties under limited and controlled circumstances:

• Payment Service Providers: Payment gateways that process your transactions (such as FPX, Touch 'n Go, and DuitNow providers) receive only the minimum transaction information required to complete the payment. They are bound by strict confidentiality agreements.
• Game Software Providers: Software companies such as Evolution Gaming, Pragmatic Play, and other providers that supply casino gaming platforms receive the game data necessary to deliver their services. This data is processed in accordance with their own high-standard privacy policies.
• Technical Service Provider: Technology infrastructure providers such as cloud computing and cybersecurity services that help us operate the royal771 platform securely and reliably.
• Regulatory Authority: Royal771 may disclose personal data to Malaysian authorities (such as the police, courts, or regulatory bodies) where required by applicable law or a valid court order.
• AML Partner: In the context of anti-money laundering compliance, we may share information with accredited verification bodies to carry out the necessary checks.

All third parties that receive data from royal771 are required to protect that data to a security standard equivalent to or exceeding our own, and may only use it for the stated purposes.

Royal771 implements a range of technical and operational security measures to protect users' personal data against unauthorised access, disclosure, alteration, or loss:

• 256-bit SSL Encryption: All communications between your web browser or mobile app and royal771's servers are encrypted using the latest SSL/TLS protocol with 256-bit keys — the same standard used by Malaysia's leading banking institutions.
• Secure Password Storage: Your account password is never stored in plain text. We use strong one-way cryptographic hashing algorithms, meaning your password cannot be retrieved — even by royal771's internal staff.
• Internal Access Controls: Only staff who require access to personal data in order to carry out their job responsibilities are permitted to do so, and this access is strictly controlled through an identity management system.
• Continuous Monitoring: royal771's security monitoring system operates 24/7 to detect and respond to any suspicious activity or attempted data breaches.
• Regular Security Testing: The royal771 platform undergoes regular penetration testing and security audits conducted by independent cybersecurity experts.
• Disaster Recovery: Data is regularly backed up to secure, separate server locations to ensure service continuity and recovery in the event of a technical disaster.

Royal771 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required under applicable Malaysian law. The general guidelines for retention periods are as follows:

• Active Account Data: Account data is retained for as long as your account is active and for a specified period after account closure (typically 5 years) for legal compliance purposes.
• Financial Transaction Records: All deposit, withdrawal, and financial activity records are retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering (AML) legal compliance requirements.
• KYC Data (Identity Verification): Identity documents and verification records are retained for the period required by applicable KYC regulations, typically no less than 5 years after the business relationship ends.
• Technical Log Data: Server logs and technical data are retained for 90 days for troubleshooting and security analysis purposes, after which they are deleted or anonymised.
• Marketing Data: Data used for marketing communications is retained until you withdraw your consent or request deletion.

Once the required retention period has lapsed, your personal data will be securely deleted or anonymised so that it can no longer be linked to you personally.

Royal771 uses cookies and similar tracking technologies to enhance the user experience and platform security. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: This allows the platform to remember your preferences — such as language, configured betting limits, and game selections — to provide a more convenient experience.
• Analytics Cookies: Helps us understand how players use the platform — such as the most frequently visited pages and navigation flows. This data is used in aggregated form without identifying any individual personally.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and ensure only one active session at a time to protect your account.

You can manage cookie settings through your web browser settings. However, disabling essential cookies may affect royal771's platform functionality and your ability to log in securely. For more information on managing cookies, refer to your web browser's help section.

As a royal771 user in Malaysia, you have the following privacy rights under the Personal Data Protection Act 2010 (PDPA) and royal771's internal policies:

As a digital platform serving Malaysian players, royal771 uses technology infrastructure that may involve processing data on servers located across various geographical locations. When your personal data is transferred outside Malaysia for technical processing purposes, we ensure:

• Transfers are only made to destinations that provide adequate or equivalent data protection.
• An appropriate data transfer agreement is in place between royal771 and the overseas data recipient.
• All data transferred remains protected by encryption both in transit and at rest.
• Overseas data recipients are required to uphold data protection standards no less stringent than those required under Malaysia's PDPA.

Cross-border data transfers occur primarily in the context of international cloud computing services and gaming software providers. In all such cases, the privacy and security of your data remains royal771's top priority.

The royal771 platform is intended exclusively for individuals aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

Royal771 employs multiple mechanisms to verify user age at registration and throughout platform use. Should we discover that personal data belonging to a minor has been inadvertently collected, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian and discover that your minor child has registered for or used the royal771 platform, please contact us immediately at support@royal771.best and we will address the matter promptly and thoroughly.

Royal771 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. The "Updated" date at the top of this page reflects the date of the most recent amendment.

For material amendments — those that significantly change how we collect or use your data — we will provide active users with reasonable notice via in-platform notifications or email before the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about royal771's privacy practices. Continued use of the platform after any amendment's effective date will be considered acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way royal771 handles your personal data, please contact us via:

• Privacy Email: support@royal771.best (please state "Privacy Enquiry" in the email subject line)
• Live Chat: Available on the royal771 platform, 24 hours a day, 7 days a week

We are committed to responding to all privacy-related enquiries within a reasonable timeframe. For requests to exercise your privacy rights (data access, correction, or deletion), please provide your account details so we can process your request promptly and accurately.

For information regarding Terms of Use platform, please refer to the Terms & Conditions. For information on responsible gaming, please refer to the Responsible Gaming.