Privacy Policy
At Royal36, your privacy is not a compliance checkbox — it is a genuine commitment. This Privacy Policy explains, in plain and structured terms, exactly what personal data we collect from Malaysian players, how we use it, who we share it with, and what rights you hold over your own information.
Our Privacy Commitments
Six core data protection principles that guide how Royal36 handles your information
Data Security First
All personal data transmitted to and stored on the Royal36 platform is protected by 256-bit SSL encryption. Access to member records is strictly limited to authorised personnel with a genuine operational need.
No Sale of Personal Data
Royal36 does not sell, rent, or trade your personal information to third-party marketing organisations. Your data is used exclusively to operate your account and deliver the services you have requested.
Your Rights, Respected
You retain the right to access, correct, and request deletion of your personal data at any time. Requests are processed within 30 days of receipt. No fees apply for standard data access requests.
Minimal Data Collection
Royal36 collects only the personal data that is strictly necessary to provide our services, comply with legal obligations, and keep your account secure. We do not collect data for the sake of it.
Transparent Cookie Use
We use cookies and similar tracking technologies only to maintain your session, remember preferences, and analyse aggregate platform usage. You can manage cookie preferences at any time through your browser settings.
Open Communication
Have a privacy concern or a data-related question? Our support team is available 24/7. Privacy-specific requests are handled by a designated team member and acknowledged within 48 hours.
01 Introduction
This Privacy Policy (hereinafter "Policy") describes how Royal36 ("Royal36", "we", "us", or "our"), the operator of the online gaming platform located at https://royal36.cam, collects, processes, stores, and protects the personal data of individuals ("you", "the Player", "the User") who visit, register on, or interact with the Royal36 platform.
Royal36 is committed to safeguarding the privacy and personal information of all users, with particular attention to the expectations and applicable standards relevant to players in Malaysia. We process personal data only for legitimate, clearly defined purposes and in a manner that is proportionate to those purposes.
This Policy applies to all personal data collected through the Royal36 website, any associated mobile interfaces, our customer support channels (including live chat and email correspondence), payment processing interactions, and any other digital touchpoints operated by Royal36.
Acceptance: By registering an account or continuing to use the Royal36 platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree, please discontinue use of the platform and contact us to close your account.
02 Definitions
For clarity and consistency throughout this Policy, the following definitions apply:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that directly or indirectly identifies a living individual — including name, email address, phone number, payment details, IP address, device identifiers, and account activity records. |
| "Processing" | Any operation performed on personal data, including collection, storage, retrieval, use, disclosure, erasure, or any combination thereof, whether automated or manual. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data — in this case, Royal36. |
| "Data Processor" | A third party that processes personal data on behalf of Royal36 in accordance with our instructions and this Policy — for example, payment service providers and KYC verification services. |
| "Sensitive Data" | A special category of personal data requiring heightened protection, such as identity document numbers, financial account details, and information relating to health or gambling behaviour patterns. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of the Player's agreement to the processing of their personal data for a stated purpose. |
| "Cookie" | A small text file placed on a user's device by a website to store preferences, session information, and behavioural data for platform functionality and analytics purposes. |
03 Data Controller
For the purposes of applicable data protection law, Royal36 acts as the Data Controller for all personal data collected and processed through the Royal36 platform. Royal36 determines the purposes for which personal data is collected and the means by which it is processed.
Where Royal36 engages third-party service providers to process personal data on its behalf — such as payment processors, fraud detection services, or KYC verification platforms — those providers act as Data Processors under contractual obligations that require them to process data strictly in accordance with Royal36's instructions and to maintain appropriate security standards.
For all privacy-related enquiries, data subject requests, or complaints, please contact Royal36 at [email protected].
04 Data We Collect
Royal36 collects personal data through several channels. The categories of data we collect and the contexts in which they arise are set out below.
4.1 Registration Data
When you create a Royal36 account, we collect the information you provide, which includes:
- Full legal name
- Date of birth (for age verification — you must be 21 or above)
- Email address
- Mobile phone number
- Preferred currency (Malaysian Ringgit / MYR)
- Username and encrypted password
- Country and city of residence (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
4.2 Identity Verification (KYC) Data
In accordance with our legal obligations and responsible gambling commitments, we collect identity verification documents prior to processing withdrawal requests, including:
- National identity card (MyKad) — front and back images
- Passport (where MyKad is unavailable)
- Proof of address documentation where required
- Selfie or liveness check image for identity matching
4.3 Financial & Transaction Data
To process deposits and withdrawals, Royal36 collects payment-related data, which may include:
- E-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay, DuitNow)
- Bank account numbers and sort codes (Maybank, CIMB, Public Bank, Hong Leong)
- Card numbers (partially masked), expiry date, and billing address for card payments
- Cryptocurrency wallet addresses (BTC, ETH, USDT, BNB)
- Transaction history, amounts deposited and withdrawn, and timestamps
4.4 Usage & Behavioural Data
During your use of the Royal36 platform, we automatically collect technical and behavioural data including:
- IP address and approximate geographic location derived therefrom
- Browser type, version, and operating system
- Device identifiers and screen resolution
- Session duration, pages visited, and clickstream data
- Game history, bet amounts, win/loss records, and session timestamps
- Responsible gambling tool usage (e.g., deposit limit settings, self-exclusion history)
4.5 Communications Data
When you interact with Royal36's customer support team, we retain records of those communications, including live chat transcripts, email correspondence, and support ticket history. This data is used to resolve disputes, improve service quality, and maintain audit trails.
05 Legal Basis for Processing
Royal36 processes your personal data on the basis of one or more of the following legal grounds:
| Legal Basis | Examples of Processing Activities |
|---|---|
| Contractual Necessity | Account registration, processing deposits and withdrawals, delivering game services, managing bonus redemptions, providing customer support. |
| Legal Obligation | KYC identity verification, anti-money laundering (AML) checks, age verification (21+), fraud detection, regulatory reporting where required. |
| Legitimate Interests | Platform security monitoring, fraud prevention, improving user experience, internal analytics to enhance game and product offerings. |
| Consent | Sending promotional emails and marketing communications (where you have opted in), use of non-essential cookies, personalised content recommendations. |
| Vital Interests | Identifying and responding to indicators of problem gambling behaviour for the protection of vulnerable players. |
06 How We Use Your Data
Royal36 uses the personal data we collect for the following specific purposes:
- Account Management: Creating, verifying, and maintaining your Royal36 member account, including password management and security notifications.
- Transaction Processing: Facilitating deposits via Touch 'n Go eWallet, Boost, DuitNow, FPX, bank transfer (Maybank, CIMB, Public Bank), and cryptocurrency channels; processing withdrawal requests to verified accounts.
- Identity Verification: Conducting KYC checks to confirm your identity, verify your age (minimum 21 years), and comply with anti-money laundering obligations.
- Customer Support: Responding to queries, resolving disputes, processing responsible gambling requests, and managing account restrictions or self-exclusion.
- Platform Security: Detecting, investigating, and preventing fraudulent activity, account takeover attempts, and breaches of our Terms and Conditions.
- Responsible Gambling: Monitoring usage patterns for indicators of problem gambling, enforcing deposit and session limits, and acting on self-exclusion requests.
- Service Improvement: Analysing aggregated usage data to improve platform performance, game selection, payment processes, and user interface design.
- Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time.
- Legal Compliance: Meeting any legal, regulatory, or judicial obligations to which Royal36 is subject in the jurisdictions where it operates.
Marketing Opt-Out: If you no longer wish to receive promotional communications from Royal36, you may unsubscribe at any time by contacting our support team at [email protected]. Opting out of marketing will not affect the delivery of transactional or account-related messages.
07 Sharing Your Data
Royal36 does not sell, lease, or trade your personal data to any third party for commercial purposes. We share your data with external parties only where necessary to deliver our services, comply with legal obligations, or protect the safety and integrity of the platform.
Categories of third parties with whom your data may be shared include:
- Payment Service Providers: FPX operators, Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency processing services — to facilitate deposits and withdrawals.
- KYC and Identity Verification Services: Third-party identity verification platforms engaged to perform automated document checks and liveness detection as part of the KYC process.
- Fraud Prevention and Security Services: Specialised providers engaged to monitor for fraudulent transactions, suspicious account behaviour, and potential money laundering activity.
- Game Content Providers: Certified gaming software providers may receive limited technical identifiers (not personal profile data) necessary to authenticate session access to their games.
- Legal and Regulatory Authorities: Royal36 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law or by a valid legal order.
- Professional Advisers: Lawyers, auditors, and compliance consultants engaged by Royal36, who are bound by professional confidentiality obligations.
All third-party Data Processors engaged by Royal36 are required to enter into data processing agreements that contractually bind them to process personal data only in accordance with Royal36's instructions and to maintain security standards no less rigorous than our own.
08 Data Retention
Royal36 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, and to resolve any disputes or enforce our agreements.
| Data Category | Retention Period |
|---|---|
| Account registration data | For the duration of account activity, plus 5 years following account closure. |
| KYC / identity documents | Minimum 5 years from the date of verification, in accordance with AML obligations. |
| Financial transaction records | 7 years from the date of the transaction, consistent with financial record-keeping requirements. |
| Customer support communications | 3 years from the date of the final interaction. |
| Game and betting history | 5 years from the date of the relevant session or wager. |
| Marketing consent records | Until consent is withdrawn, plus 1 year thereafter as a record of withdrawal. |
| Self-exclusion records | Permanently retained to prevent re-registration during any exclusion period, including indefinite exclusions. |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.
09 Cookies & Tracking Technologies
Royal36 uses cookies and similar technologies on its platform to ensure proper functionality, maintain your login session, remember your preferences, and gather anonymised analytics data. The following categories of cookies are used:
- Strictly Necessary Cookies: Essential to the operation of the platform. These cookies maintain your login session, store security tokens, and enable core functionality. They cannot be disabled without rendering the platform unusable.
- Functional Cookies: Used to remember your preferences such as language selection, preferred currency display, and notification settings. Disabling these cookies will not prevent platform access but may reduce the quality of your experience.
- Analytics Cookies: Used to collect anonymised data about how users interact with the platform — such as which pages are visited most frequently and where users encounter errors. This data is used solely for internal platform improvement purposes.
- Security Cookies: Used to detect and prevent fraudulent login attempts, account takeovers, and other security threats by identifying unusual access patterns.
You may manage cookie preferences through your web browser settings. Most browsers allow you to block, delete, or restrict cookies. Please note that disabling certain cookies may affect the functionality of the Royal36 platform.
10 Data Security
Royal36 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include but are not limited to:
- 256-bit SSL/TLS Encryption: All data transmitted between your browser and the Royal36 platform is encrypted in transit.
- Encrypted Data Storage: Sensitive personal data including identity documents and payment details are stored in encrypted form at rest.
- Access Controls: Personal data is accessible only to Royal36 staff members and authorised processors who have a legitimate operational need for access. All access is logged and audited.
- Two-Factor Authentication: Available to all Players and required for all administrative access by Royal36 staff.
- Security Monitoring: Our infrastructure is subject to continuous monitoring for intrusion attempts, anomalous activity, and vulnerability exposures.
- Regular Security Assessments: Periodic security reviews and penetration testing are conducted to identify and remediate potential weaknesses before they can be exploited.
Security Incident Notification: In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, Royal36 will notify affected Players without undue delay, providing details of what occurred and the steps being taken to mitigate impact.
11 Your Rights
As a Royal36 member, you are entitled to exercise the following rights in relation to your personal data. Requests may be submitted to [email protected] at any time. Royal36 will respond within 30 days of receipt.
Right of Access
Request a copy of the personal data Royal36 holds about you and information on how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your account.
Right to Erasure
Request deletion of your personal data where processing is no longer necessary and no legal retention obligation applies.
Right to Restriction
Request that we restrict the processing of your data in certain circumstances, such as while the accuracy of data is disputed.
Right to Portability
Receive a copy of personal data you provided to us in a structured, machine-readable format for transfer to another service.
Right to Object
Object to the processing of your personal data for marketing purposes or where processing is based on Royal36's legitimate interests.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time without affecting prior lawful processing.
Right to Complain
Lodge a complaint with the relevant data protection authority if you believe your data rights have not been respected by Royal36.
12 Minors & Age Policy
The Royal36 platform is strictly intended for adults aged 21 years and above. Royal36 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process.
Where Royal36 discovers that personal data has been collected from an individual who is under 21, the relevant account will be immediately suspended, any deposited funds will be returned via the original payment method, and the personal data of the underage individual will be deleted from our systems within 30 days, subject only to any legal retention obligations that may apply.
If you are under 21 years of age, you must not register for or use the Royal36 platform. If you believe a minor has accessed or registered on Royal36, please contact us immediately at [email protected] so that we can take prompt action.
13 International Data Transfers
In the course of operating the Royal36 platform and engaging third-party service providers, your personal data may be transferred to and stored on servers or systems located outside Malaysia. Where such transfers occur, Royal36 ensures that appropriate safeguards are in place to protect your data to a standard no less protective than that described in this Policy.
Safeguards for international transfers may include contractual clauses requiring third parties to comply with applicable data protection standards, or the engagement of processors located in jurisdictions that provide an adequate level of data protection as recognised under applicable law.
For further information about the specific safeguards applied to international data transfers affecting your personal data, please contact us at [email protected].
14 Third-Party Links
The Royal36 platform may from time to time contain references to or integrations with third-party services — including payment processors and game content providers. Royal36 does not operate or control those third-party services and is not responsible for their privacy practices or the content of their privacy policies.
We recommend that you review the privacy documentation of any third-party service you access in connection with your use of Royal36, particularly payment service providers such as Touch 'n Go eWallet, Boost, and GrabPay, as their handling of your data is subject to their own terms independently of this Policy.
15 Changes to This Policy
Royal36 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. The date of the most recent revision is displayed at the top of this page.
Where amendments are material — meaning they significantly affect how we process your personal data or reduce your rights — we will notify registered Players via the email address associated with their account and/or via a prominently displayed notice on the Royal36 platform prior to the changes taking effect.
Your continued use of the Royal36 platform following the effective date of any update constitutes acceptance of the revised Policy. If you do not agree with the updated terms, please cease using the platform and contact us to close your account.
16 Contact & Complaints
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Royal36, please contact our support team using the details below. Privacy-related requests are handled by a designated team member and will be acknowledged within 48 hours of receipt.
- Email: [email protected]
- Live Chat: Available 24/7 directly on the Royal36 platform — average response time under 60 seconds.
- Operating Hours: 00:00 – 23:59 daily, every day of the year.
If you are dissatisfied with Royal36's response to a privacy concern, you have the right to escalate your complaint to the relevant data protection or supervisory authority in your jurisdiction. Royal36 will cooperate fully with any such investigation.
Related Policies: This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, all of which govern your use of the Royal36 platform.
Your Data Is Safe at Royal36
We take your privacy seriously so you can focus on what matters — great games, competitive odds, and fast payouts. Any privacy question or data request is handled promptly by our dedicated team.
For players aged 21 and above only. Gambling can be addictive — please play responsibly and within your means. Full Terms & Conditions apply.