Privacy Policy
HOW ROYAL188 PROTECTS YOUR DATA
Your personal information is handled with care, transparency, and respect at every step. These are the six commitments that underpin our approach to data privacy.
256-Bit SSL Encryption
All data transmitted between your device and Royal188's servers is encrypted using industry-standard 256-bit SSL technology, ensuring your personal and financial information cannot be intercepted in transit.
No Third-Party Data Sales
Royal188 does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Your information is used solely to operate and improve our Platform and fulfil our legal obligations.
Your Rights, Always Respected
You have the right to access, correct, delete, or restrict the processing of your personal data at any time. Submit a request to our support team and we will respond within a reasonable timeframe.
Defined Retention Periods
We retain your data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal and regulatory requirements, or resolve disputes. Data is securely deleted when no longer needed.
Cookie Controls
Royal188 uses cookies to improve your experience and analyse Platform usage. You can manage your cookie preferences at any time through your browser settings. Essential cookies cannot be disabled as they are required for Platform functionality.
Transparent Communication
We will notify you of any material changes to this Privacy Policy before they take effect. You are always entitled to know what data we hold and how it is being used — no hidden processing, no vague disclosures.
- 1. Introduction
- 2. Definitions
- 3. Data We Collect
- 4. How We Collect Data
- 5. Data Processing & Legal Basis
- 6. How We Use Your Data
- 7. Data Sharing & Disclosure
- 8. International Data Transfers
- 9. Data Retention
- 10. Data Security
- 11. Cookies & Tracking
- 12. Your Rights
- 13. Minors & Age Restrictions
- 14. Third-Party Links
- 15. Changes to This Policy
- 16. Contact & Complaints
Introduction
This Privacy Policy ("Policy") describes how Royal188 ("we", "us", "our", "the Platform", "Royal188") collects, uses, stores, shares, and protects personal information relating to individuals ("you", "User", "Player") who access or use the Royal188 website located at https://royal188.cam and all associated services provided therein.
Royal188 is committed to protecting the privacy and security of all users of our Platform. We operate as an online casino and sports betting service serving the Malaysian market and other permitted jurisdictions, and we process personal data in accordance with applicable data protection laws and international best-practice standards.
By accessing the Royal188 Platform or registering an account, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform.
This Policy applies to all personal data processed by Royal188 in connection with your use of the Platform, including data collected via our website, customer support interactions, payment transactions, and marketing communications. It does not apply to third-party websites linked from our Platform.
Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:
- "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or indirectly, including but not limited to a name, email address, identification number, device identifier, or online activity data.
- "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, deletion, or any combination thereof.
- "Data Controller" means the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, Royal188 acts as the Data Controller in respect of your Personal Data.
- "Data Processor" means any third party that processes Personal Data on behalf of Royal188 and under Royal188's instructions.
- "KYC" means Know Your Customer — the process of verifying the identity of users as required for regulatory compliance and to prevent fraud and financial crime.
- "Cookies" means small text files placed on your device by the Platform to store preference information and facilitate certain functionality.
- "Platform" means the Royal188 website at https://royal188.cam and all associated services, interfaces, and features.
- "MYR" means Malaysian Ringgit, the primary currency used on the Platform.
Personal Data We Collect
Royal188 collects the following categories of Personal Data in connection with your use of the Platform:
Identity & Contact Data
- Full legal name as it appears on official identification documents.
- Date of birth (used for age verification — all users must be 21 or above).
- Residential address, including city (e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam).
- Email address and, where provided, mobile phone number.
- Copy of government-issued identification (MyKad, passport) submitted during KYC.
Financial & Transaction Data
- Payment method details, including bank account identifiers, e-wallet account names associated with Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, or Hong Leong accounts.
- Transaction history: deposits, withdrawals, bets placed, bonuses claimed, and balance movements in MYR.
- Cryptocurrency wallet addresses used for BTC or USDT transactions, where applicable.
Technical & Usage Data
- IP address, browser type and version, operating system, device type, and device identifiers.
- Session data including login timestamps, session duration, and pages visited.
- Game activity data including games played, bets placed, results, and bonus usage history.
- Geolocation data (country/region level, derived from IP address).
Communications Data
- Records of all communications with Royal188's support team via live chat, email, or any other channel.
- Survey responses, feedback, and voluntary information you provide when contacting us.
- Marketing preferences and records of consent to receive promotional communications.
How We Collect Your Data
Royal188 collects your Personal Data through the following means:
- Direct Provision: Data you provide when registering an Account, completing KYC verification, making deposits or withdrawals, placing bets, contacting support, or completing any other interaction with the Platform.
- Automated Collection: Technical and usage data collected automatically when you access the Platform, including via cookies, web beacons, and server logs.
- Third-Party Sources: Identity verification data provided by our KYC and fraud prevention service providers; payment transaction data provided by your bank or e-wallet provider; geolocation data derived from IP address lookup services.
- Publicly Available Sources: Information available from public databases used for fraud screening, compliance checks, or identity verification purposes.
Royal188 collects only the minimum Personal Data necessary for each specific purpose. We do not collect sensitive categories of Personal Data (such as health data, ethnicity, or religious beliefs) unless required by law or with your explicit consent.
Data Processing & Legal Basis
Royal188 processes your Personal Data on one or more of the following legal bases:
| Legal Basis | Application |
|---|---|
| Contractual Necessity | Processing required to create and manage your Account, process deposits and withdrawals in MYR, provide gaming services, and fulfil bonus obligations. |
| Legal Obligation | Processing required to comply with anti-money laundering (AML) regulations, KYC obligations, age verification requirements, and regulatory reporting duties. |
| Legitimate Interest | Processing for fraud prevention, Platform security, responsible gambling monitoring, internal analytics, and improving Platform performance. |
| Consent | Processing for marketing communications, non-essential cookies, and personalised promotional offers, where you have provided explicit consent that may be withdrawn at any time. |
How We Use Your Personal Data
Royal188 uses the Personal Data we collect for the following specific purposes:
- Account Management: To create, operate, and maintain your Royal188 account, including processing deposits and withdrawals via your chosen Malaysian payment methods.
- Identity Verification: To verify your age (21+) and identity as required by our KYC obligations and to prevent access by prohibited users.
- Service Delivery: To provide access to casino games, sports betting markets (including Liga Super Malaysia, EPL, and international competitions), live dealer games, lottery, and all other Platform features.
- Transaction Processing: To process financial transactions in MYR and, where applicable, cryptocurrency, and to maintain accurate financial records.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and other prohibited conduct.
- Responsible Gambling: To monitor gambling behaviour, apply responsible gambling tools (deposit limits, session reminders, self-exclusion), and identify users who may need support.
- Legal & Regulatory Compliance: To comply with applicable laws, regulations, licence conditions, and lawful requests from competent authorities.
- Customer Support: To respond to your enquiries, resolve complaints, and provide assistance via our 24/7 live chat and email support channels.
- Marketing & Promotions: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may unsubscribe at any time.
- Platform Improvement: To analyse usage patterns, conduct performance testing, and improve the Royal188 user experience.
Data Sharing & Disclosure
Royal188 does not sell or rent your Personal Data to third parties. We may share your Personal Data with the following categories of recipients, strictly for the purposes described in this Policy:
Service Providers & Data Processors
We engage third-party service providers who act as Data Processors on our behalf, including: payment processors and e-wallet service providers (for transaction processing); KYC and identity verification providers; cloud hosting and infrastructure providers; fraud detection and AML screening services; and customer support software providers. All processors are contractually bound to process your data only on Royal188's instructions and to implement appropriate security measures.
Regulatory & Law Enforcement Authorities
Royal188 may be required to disclose your Personal Data to competent regulatory bodies, law enforcement agencies, courts, or other governmental authorities where required by applicable law, court order, regulatory investigation, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of Royal188, our users, or the public.
Business Transfers
In the event of a merger, acquisition, restructuring, or sale of Royal188's business or assets, your Personal Data may be transferred to the acquiring entity, subject to the same level of data protection as described in this Policy. You will be notified of any such transfer in advance where practicable.
Royal188 will never share your email address, phone number, or payment information with third-party marketers or data aggregators for their own marketing purposes. Any communications you receive from Royal188 are sent by us directly.
International Data Transfers
As an online platform operating internationally, Royal188 may process or store your Personal Data on servers or through service providers located outside of Malaysia. Where Personal Data is transferred internationally, Royal188 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required under applicable Malaysian data protection law.
Such safeguards may include: standard contractual clauses approved by relevant data protection authorities; processor agreements with binding data protection obligations; or reliance on adequacy decisions where the recipient country is recognised as providing an equivalent level of data protection.
If you would like more information about the specific safeguards applicable to any international transfer of your data, please contact us at [email protected].
Data Retention
Royal188 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The following retention principles apply:
- Account Data: Retained for the lifetime of your Account and for a period of five (5) years following Account closure, to comply with anti-money laundering regulations and to resolve any outstanding disputes.
- KYC Documentation: Retained for a minimum of five (5) years following the end of the customer relationship, in accordance with AML regulatory requirements.
- Transaction Records: Retained for a minimum of seven (7) years to comply with financial record-keeping obligations.
- Marketing Data: Retained until you withdraw consent or unsubscribe from marketing communications, at which point it is deleted or suppressed promptly.
- Support Communications: Retained for up to three (3) years following the resolution of the relevant support interaction.
- Technical & Log Data: Typically retained for up to 12 months unless required for longer for security, fraud investigation, or legal purposes.
When Personal Data is no longer required, Royal188 securely deletes or anonymises it so that it can no longer be linked to an identifiable individual.
Data Security
Royal188 implements a comprehensive suite of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:
- Encryption: 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
- Access Controls: Strict role-based access controls limiting employee access to Personal Data on a need-to-know basis, with multi-factor authentication required for administrative access.
- Secure Infrastructure: Hosting on enterprise-grade, ISO-certified cloud infrastructure with continuous monitoring, intrusion detection, and regular security audits.
- Data Pseudonymisation: Where appropriate, Personal Data is pseudonymised or anonymised to reduce the risk of harm in the event of an unauthorised disclosure.
- Incident Response: A documented data breach response procedure, including notification to affected users and relevant authorities within legally required timeframes.
While Royal188 takes data security seriously and applies best-practice measures, no system can guarantee complete security against all possible threats. You are encouraged to use a strong, unique password for your Royal188 account and to enable any available account security features.
Cookies & Tracking Technologies
Royal188 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognise you, remember your preferences, and analyse how the Platform is used.
Types of Cookies We Use
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential | Required for Platform functionality: session management, login authentication, security tokens. | No — essential for operation |
| Functional | Store your preferences such as language, display settings, and game lobby layout. | Yes — via browser settings |
| Analytics | Collect aggregated usage data to help us understand how users interact with the Platform and identify areas for improvement. | Yes — via browser settings |
| Marketing | Track interactions with promotions and measure the effectiveness of marketing campaigns. Only placed with your consent. | Yes — withdraw consent anytime |
You can manage or delete cookies through your browser settings at any time. Please note that disabling non-essential cookies may affect certain features of the Platform. Detailed instructions for managing cookies in common browsers are available in your browser's help documentation.
Your Rights
Subject to applicable law, you have the following rights in relation to your Personal Data held by Royal188. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request.
Right of Access
Request a copy of all Personal Data Royal188 holds about you, along with information about how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete Personal Data. You may also update certain data directly via your Account dashboard.
Right to Erasure
Request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Right to Restriction
Request that Royal188 restrict the processing of your Personal Data in certain circumstances, for example while the accuracy of data is being contested.
Right to Portability
Request your Personal Data in a structured, machine-readable format for transfer to another service provider where technically feasible.
Right to Object
Object to the processing of your Personal Data for direct marketing purposes or, in certain circumstances, for legitimate interest processing.
Withdraw Consent
Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Right to Complain
Lodge a complaint with the relevant data protection authority if you believe your rights have not been upheld. We encourage you to contact us first to resolve the matter directly.
Please note that certain rights are subject to limitations and exceptions. For example, Royal188 cannot delete Personal Data that is required to be retained for legal or regulatory compliance purposes, including KYC records and financial transaction data.
Minors & Age Restrictions
The Royal188 Platform is strictly intended for use by adults aged 21 and above. Royal188 does not knowingly collect Personal Data from any individual under the age of 21. Age verification is a mandatory step during account registration and KYC completion.
If Royal188 becomes aware that Personal Data has been collected from a person under the age of 21 without appropriate consent, we will promptly delete that data and close the associated account. If you believe that a minor has registered an account on Royal188, please notify us immediately at [email protected].
Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms. Royal188 fully supports efforts to protect minors from gambling-related harm and collaborates with responsible gambling organisations on this issue.
Third-Party Links
The Royal188 Platform may contain references or contextual mentions of third-party services such as payment providers (Maybank, CIMB, Public Bank, Touch 'n Go eWallet, GrabPay, etc.). Royal188 does not control the privacy practices of any third-party services, and this Policy does not apply to data collected by such third parties through their own platforms or interfaces.
When you use a third-party payment method to deposit or withdraw funds, that transaction is also subject to the privacy policy and terms of your payment provider. We encourage you to review the relevant privacy documentation of any third-party service you use in connection with your Royal188 account.
Changes to This Privacy Policy
Royal188 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or Platform functionality. The date of the most recent update is displayed at the top of this page.
Where we make material changes to this Policy — for example, changes that affect how we use your Personal Data or introduce new data sharing arrangements — we will notify you by email (to the address associated with your account) or via a prominent notice on the Platform, at least seven (7) days before the changes take effect.
Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the updated Policy, you should stop using the Platform and may request Account closure in accordance with the Terms and Conditions.
Contact Us & Complaints
If you have any questions, concerns, or complaints about this Privacy Policy or the way Royal188 handles your Personal Data, please contact us using the details below. We take all privacy concerns seriously and will respond to all enquiries promptly.
If you are not satisfied with our response to your privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. For users based in Malaysia, the Personal Data Protection Department (PDPD) under the Ministry of Digital operates as the competent supervisory authority under the Personal Data Protection Act 2010 (PDPA).
YOUR DATA. YOUR CONTROL.
Have questions about how Royal188 handles your personal data? Our support team is available around the clock. You can also read our full Terms & Conditions for the complete picture of your rights and obligations.
🔞 For players aged 21 and above only. Play responsibly. Visit our Responsible Gambling page if you need support.