Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") is issued by iroyal88 ("iroyal88", "we", "us", or "our") and governs the collection, processing, storage, and disclosure of personal data obtained through your use of the iroyal88.win platform, including all gaming, betting, account management, and support services accessible thereon.

By registering for an iroyal88 account, logging in, or otherwise using the platform, you acknowledge that you have read and understood this Policy. We encourage you to review this document periodically as it may be updated from time to time. The version published on this page is always the current applicable version.

2. Data Controller

iroyal88 acts as the data controller in respect of the personal data you provide to us through the iroyal88.win platform. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that it is handled in accordance with applicable data protection law.

For all data protection enquiries, you may contact us at: [email protected]

3. Personal Data We Collect

The categories of personal data iroyal88 collects from members and platform users include, but are not limited to:

• Identity Data: Full legal name, date of birth, nationality, and copies of government-issued identity documents (MyKad, passport) submitted during KYC verification;
• Contact Data: Email address, Malaysian mobile phone number, and any correspondence you submit to our support team;
• Account Data: Username, encrypted password, account registration date, account status, and preference settings;
• Financial Data: Bank account details, eWallet identifiers (Touch n Go eWallet, Boost), transaction amounts, deposit and withdrawal history, and payment method verification records;
• Gaming Activity Data: Game sessions played, bet amounts placed, wins and losses, bonus usage, and responsible gaming limit settings;
• Technical Data: IP address, device type and operating system, browser type and version, session duration, and login timestamps;
• Communications Data: Records of live chat interactions, email correspondence, and support ticket history.

4. How We Collect Your Data

iroyal88 collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or updating account settings;
• Automated collection: Technical data collected automatically as you interact with the platform, including via cookies, server logs, and session tracking tools;
• Third-party sources: Identity verification services, fraud prevention databases, and payment processors may provide supplementary data to verify your identity or assess transaction risk.

5. Purposes and Legal Bases for Processing

iroyal88 processes your personal data for the following purposes and on the following legal bases:

• Account management and service delivery — necessary for the performance of our contract with you as a registered member;
• Payment processing and withdrawal management — necessary for the performance of our contract and to comply with financial services obligations;
• Identity and age verification (KYC) — necessary to comply with legal obligations, including anti-money laundering (AML) regulations and age restriction requirements;
• Fraud prevention and security monitoring — legitimate interest of iroyal88 to prevent fraud, account compromise, and platform abuse;
• Customer support — necessary for the performance of our contract and legitimate interest in providing service quality;
• Responsible gaming compliance — legal obligation and legitimate interest in protecting vulnerable players, including enforcement of self-exclusion requests;
• Promotional communications — based on your opt-in consent, which may be withdrawn at any time from account settings.

6. Sharing Your Data with Third Parties

iroyal88 does not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your data with the following categories of recipients strictly to the extent necessary for the stated purpose:

• Payment service providers (Touch n Go eWallet, Boost, FPX, banks) for the processing of deposits and withdrawals;
• KYC and identity verification providers to confirm your identity and age in compliance with our legal obligations;
• Fraud detection and AML screening services to protect the platform and comply with anti-money laundering requirements;
• Game content providers (licensed studios) to the extent their game systems process gameplay data in real time;
• Cloud infrastructure and IT service providers hosting the iroyal88 platform under data processing agreements with appropriate security obligations;
• Regulators and law enforcement where required by applicable law, court order, or regulatory demand.

All third-party data processors engaged by iroyal88 are bound by contractual data processing obligations consistent with applicable data protection law.

7. International Data Transfers

Some of our service providers and game content partners operate from outside Malaysia. Where personal data is transferred to processors located in other jurisdictions, iroyal88 ensures that appropriate safeguards are in place — including contractual clauses, processor certification, or adequacy assessments — to maintain a standard of data protection consistent with this Policy and applicable law.

8. Data Retention

iroyal88 retains personal data for as long as your account remains active and for a period thereafter as required by applicable legal and regulatory obligations. Specifically:

• Account and transaction records are retained for a minimum of five (5) years from the date of the last transaction, in compliance with AML and financial recordkeeping obligations;
• KYC documentation is retained for the duration of the account relationship and for five (5) years following account closure;
• Support communications are retained for two (2) years from the date of the interaction;
• Technical and session logs are retained for up to twelve (12) months for security and fraud investigation purposes.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction procedures.

9. Cookies and Tracking Technologies

The iroyal88 platform uses the following categories of cookies and similar technologies:

• Strictly necessary cookies: Session authentication cookies that keep you logged in to your iroyal88 account during a browsing session. These cannot be disabled without impairing platform functionality;
• Functional cookies: Cookies that remember your language preference, display settings, and other account preferences between sessions;
• Analytics cookies: Aggregated, anonymised data used to understand platform usage patterns and improve user experience. No individual user profiling is performed.

iroyal88 does not use third-party advertising cookies or permit external advertising networks to place tracking technologies on the platform. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from maintaining a logged-in session.

10. Security of Your Personal Data

iroyal88 implements technical and organisational security measures appropriate to the risk level associated with the data we process. These include:

• TLS encryption for all data in transit between your device and the iroyal88 platform;
• Encryption of sensitive data at rest, including payment credentials and identity documents;
• Role-based access controls limiting internal access to personal data to authorised personnel with a documented business need;
• OTP verification for account logins from unrecognised devices;
• Regular internal security reviews and vulnerability assessments of platform infrastructure.

No system is entirely immune to security risks. In the event of a data breach that is likely to result in a high risk to your rights, iroyal88 will notify affected members in accordance with applicable legal requirements.

11. Your Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data held by iroyal88:

• Right of access: You may request a copy of the personal data iroyal88 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer required for the purpose it was collected and where no overriding legal retention obligation applies;
• Right to restriction: You may request that we restrict processing of your data in certain circumstances, such as while a dispute is pending;
• Right to withdraw consent: Where processing is based on consent (e.g., promotional communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact us at [email protected] with your account username and the specific request. We will respond within a reasonable timeframe and in accordance with applicable law. Some requests may require identity verification before we can action them.

12. Children and Minors

The iroyal88 platform is strictly restricted to persons aged 21 years and above. We do not knowingly collect personal data from individuals below this age. If we become aware that personal data has been collected from a minor, we will take immediate steps to close the account and delete the associated data. If you believe a minor has registered on iroyal88, please notify us immediately at [email protected].

13. Changes to This Privacy Policy

iroyal88 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. Material changes will be communicated to registered members via email or in-platform notification. The "Last updated" date at the top of this page indicates when the current version came into effect. Your continued use of the platform after the effective date of any update constitutes acceptance of the revised Policy.

14. How to Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by iroyal88, please contact our support team:

• Email: [email protected]
• Live chat: available 24/7 from the iroyal88.win platform

We aim to acknowledge all data-related enquiries within 3 business days and to resolve substantive requests within 30 days, or within any shorter period required by applicable law.