Privacy Policy Royal24 – Personal Data Protection for Malaysian Members

Royal24 takes your privacy seriously. This page clearly explains how we collect, store, use, and protect your personal data — written in plain language, not convoluted legal jargon.

Last updated: 1 January 2026
256
SSL Bit Encryption
PDPA
Full Compliance 2010
0
Sale of Data to Third Parties
24/7
Security Monitoring

Royal24's Six Commitments to Protecting Your Personal Data

These are not just words — they are the real practices royal24 puts in place every day to keep your personal data safe and protected.

BANK-GRADE ENCRYPTION

256-bit SSL – Bank-Grade Security Standard

All data transmitted between your device and royal24's servers is encrypted using 256-bit SSL technology — the same security standard used by Malaysia's leading banks such as Maybank and CIMB. This means your personal and financial information cannot be intercepted or read by any third party during transmission.

PDPA 2010

Full Compliance with Malaysia's PDPA 2010

Royal24 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) in all aspects of collecting, processing, and storing members' personal data. Compliance is not optional for us — it is a legal and ethical responsibility that we take seriously in every decision involving member data.

NO DATA SELLING

Your Data Will Never Be Sold to Anyone

Royal24 has never sold, rented, or traded member personal data to any third party for marketing or commercial purposes, and never will. The data you provide to royal24 exists to enable us to serve you – not to be turned into a product for trade.

RESTRICTED ACCESS

Data Access Restricted to Authorised Staff Only

Access to royal24 members' personal data is restricted to staff who require it to carry out their specific duties — such as the customer support team or financial verification team. All royal24 staff are bound by strict confidentiality agreements and undergo regular data protection training.

YOUR RIGHTS

You Have the Right to Control Your Personal Data

As a royal24 member, you have the full right to access the personal data we hold about you, request corrections to inaccurate information, apply for deletion of your data (subject to legal requirements), and withdraw consent for certain types of processing. All such requests can be submitted to us at support@royal24.best.

24/7 MONITORING

Security Systems Monitored Around the Clock

Royal24's IT security team monitors our platform infrastructure 24 hours a day, 7 days a week to detect and respond to any security threats promptly. Regular security audits are conducted by independent experts to ensure our data protection systems remain current and effective.

Important Note: This Privacy Policy explains how Royal24 handles your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010). By using the royal24 platform, you agree to the terms of this privacy policy. Any enquiries may be directed to support@royal24.best.

Section 1

Introduction & Scope of This Privacy Policy

This Privacy Policy ("Policy") is published by Royal24 ("we", "royal24", "Platform") and applies to all users and members who access or use the website, mobile application, and services provided by royal24 at https://royal24.best.

Royal24 is a personal data controller within the meaning of the Malaysian Personal Data Protection Act 2010 (PDPA 2010). This means we are responsible for ensuring that all personal data we collect and process is handled in accordance with the data protection principles established under Malaysian law.

We wrote this policy with the aim of giving you full clarity on our privacy practices — in plain language that anyone can understand, not just legal experts. If you still have questions after reading it, our royal24 support team is available anytime via live chat or email.

Royal24 is committed to protecting the privacy of all our Malaysian members. This policy forms part of our ongoing commitment to transparency and accountability in the handling of personal data.

Section 2

Information We Collect from You

Royal24 collects only the personal data that is strictly necessary to provide our services. Below are the categories of data we collect and the purpose for each:

Data Category Type of Information Purpose of Collection
Identity Data Full name, date of birth, identity card / passport number Identity verification, KYC compliance, legal requirements
Contact Data Mobile phone number, email address Account communications, security notifications, customer support
Financial Data Payment method details (Touch 'n Go, GrabPay, DuitNow, FPX, etc.), deposit & withdrawal records Transaction processing, payment verification, fraud prevention
Game Data Betting history, wins, losses, game preferences Account management, responsible gambling programmes, experience analysis
Technical Data IP address, device type, operating system, browser data Security, fraud prevention, and platform optimisation
Usage Data How you navigate the platform, pages visited, session duration User experience improvement, product analytics

Data You Provide Directly: This includes information you provide during account registration, the identity verification (KYC) process, when contacting the royal24 support team, and when completing feedback forms or surveys.

Automatically Collected Data: When you use the royal24 platform, our systems automatically collect certain technical information such as your IP address, device type, operating system, and browser data. This information is used for security purposes and to ensure the platform functions correctly across all your devices.

Section 3

How Royal24 Uses Your Personal Data

Royal24 uses collected personal data solely for legitimate purposes that have been disclosed to you. The following are the primary purposes for which your personal data is used on our platform:

  • Account Management: Creating and managing your royal24 account, processing deposits and withdrawals, and sending transaction receipts and statements.
  • Identity Verification (KYC): Verifying your identity to meet anti-money laundering (AML) requirements and confirming age eligibility (18 and above).
  • Customer Support: Answering your questions and complaints, resolving technical issues, and providing account-related support more effectively.
  • Security & Fraud Prevention: Detecting and preventing unauthorised access, fraudulent activity, money laundering, and misuse of the royal24 platform.
  • Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate self-management tools.
  • Service Communications: Sending important account-related notifications, including transaction confirmations, security alerts, and policy update information.
  • Marketing (with Consent): Sending promotional information, exclusive offers, and the latest royal24 news — only where you have given consent to receive such marketing communications.
  • Platform Improvement: Analysing how members use the royal24 platform to improve the user experience, resolve technical issues, and develop new features.

Purpose Limitation Principle: Royal24 will not use your personal data for any purpose not stated in this Privacy Policy without first obtaining your renewed consent.

Section 4

Sharing Data with Third Parties

Royal24 does not sell your personal data to any third party. We only share your personal data in the following limited situations, and only to the extent necessary for those purposes:

Payment Service Providers: When you make a deposit or withdrawal via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, or FPX, the required transaction details will be shared with the relevant payment provider to process your transaction. These providers maintain their own privacy and security policies and are bound by strict data protection agreements with royal24.

Game Provider: To provide Live Casino games and table games, royal24 works with third-party game providers. Only the information necessary to enable gameplay (such as account ID and betting balance) is shared – personal details such as your full name or phone number are not shared with game providers.

Legal Authorities: royal24 may be required to disclose your personal data to law enforcement authorities, regulators, or Malaysian government agencies if mandated by law or a valid court order. In such situations, we will endeavour to notify you in advance where permitted by law.

Professional Advice: From time to time, royal24 may share data with lawyers, accountants, or other professional consultants for legal compliance or business management purposes. All such parties are bound by strict professional confidentiality obligations.

In all of the data-sharing situations described above, royal24 ensures that the receiving party has adequate data protection controls in place and uses the data only for the specified purpose.

Section 5

Data Storage & Security

The security of your personal data is royal24's top priority. We implement a range of technical and organisational security measures to protect your data from unauthorised access, disclosure, alteration, or destruction.

Technical Security Measures:

  • 256-bit SSL encryption for all data in transit between your device and royal24 servers.
  • Data-at-rest encryption for all sensitive data stored in our databases.
  • Two-factor authentication (2FA) is available on all royal24 member accounts for an added layer of protection.
  • Firewalls and intrusion detection systems (IDS) that are regularly updated.
  • 24/7 security monitoring by royal24's dedicated IT security team.
  • Regular penetration testing by independent security experts to identify and address vulnerabilities.

Your Responsibilities: While royal24 takes all reasonable steps to protect your data, the security of your account also depends on your own actions. You are responsible for keeping your account password confidential and not sharing it with anyone. Contact royal24 support immediately if you suspect your account has been accessed without authorisation.

Security Reminder: royal24 will never ask for your password or sensitive account information via email, SMS, phone call, or any communication channel outside the platform. If you receive such a request, it is a fraudulent attempt – please report it to us immediately at support@royal24.best.

Section 6

Cookies & Tracking Technologies

Royal24 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser or device when you visit our website.

Types of Cookies We Use:

  • Essential Cookies: Required for the core functionality of the royal24 platform — including login authentication, session security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
  • Functional Cookies: Saving your preferences such as display settings, favourite games, and payment preferences to make your experience more seamless on future visits.
  • Analytics Cookies: Helping us understand how members use the royal24 platform — which pages are visited most, where users encounter issues, and how we can improve the overall experience.
  • Security Cookies: Used to identify suspicious activity, prevent unauthorised access, and protect your account from security threats.

You can manage or disable cookies through your browser settings. Please note, however, that disabling essential cookies may affect the functionality of the royal24 platform and your overall experience. For most users, the default cookie settings we apply strike the best balance between functionality and privacy.

Section 7

Financial Data & Payment Security

The security of your financial data is a top priority at royal24. All deposit and withdrawal transactions involving Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks) are processed through a secure payment infrastructure with multi-layered protection.

Royal24 does not store credit or debit card details directly on our servers. For card-based payment methods, all processing is handled by third-party payment gateways that hold internationally recognised security certifications. Royal24 retains only the transaction tokens required for records and account reconciliation.

All financial transaction records in your royal24 account – including your deposit history, withdrawals, and betting history – are encrypted and stored securely. You can access these records at any time through the "Transaction History" section of your royal24 account.

All financial transactions at royal24 are processed in MYR only. We do not process or store any transaction information in foreign currencies.

Section 8

Your Rights Under PDPA 2010

As a data subject under the Personal Data Protection Act 2010 (PDPA 2010) of Malaysia, you have the following rights in relation to your personal data held by royal24:

Right to Access

You have the right to request a copy of all personal data we hold about you. royal24 will process this request within 21 business days.

Right to Rectification

If the personal data we hold about you is inaccurate or outdated, you have the right to request an immediate correction. Basic updates can be made directly through your account.

Right to Erasure

You may request the deletion of your personal data, subject to the legal retention requirements and legitimate operational needs of royal24.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time. Your request will be processed within 5 business days.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time without affecting the validity of any processing carried out prior to withdrawal.

Right to Data Portability

You have the right to receive a copy of your personal data in a machine-readable format for transfer to another data controller if required.

To exercise any of the rights above, please contact us by email at support@royal24.best, clearly stating your request. Royal24 will respond to all data rights requests within the timeframe stipulated by PDPA 2010, and we will not charge a fee for reasonable requests.

Section 9

Children's Data

The royal24 platform is intended solely for individuals aged 18 and above. Royal24 does not knowingly collect or process the personal data of anyone under the age of 18.

All new registrants are required to confirm that they are at least 18 years of age at the time of registration. The identity verification (KYC) process we conduct also helps ensure that only eligible individuals access the royal24 platform.

If we discover that personal data belonging to someone under 18 years of age has been collected without proper consent, we will take immediate steps to delete that data and close the relevant account. If you believe a minor has registered an account on royal24, please notify us at support@royal24.best so we can take the appropriate action.

Section 10

Cross-Border Data Transfers

As an online platform, some of royal24's service providers and technical partners operate outside Malaysia. This means your personal data may be transferred to and stored on servers located beyond Malaysian borders.

In all such cases of international data transfers, royal24 ensures that:

  • The destination country provides an adequate level of data protection, or
  • Appropriate data transfer agreements have been established with the data recipients, or
  • Other approved safeguards have been implemented to protect your data.

The same data protection measures described in this Privacy Policy apply to your data regardless of where it is physically stored. You may request further information about international data transfers relating to your data by contacting us at support@royal24.best.

Section 11

Data Retention Period

Royal24 only retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal requirements. Our core principle is: keep only what is needed, for only as long as it is needed.

  • Active Account Data: Retained for as long as your royal24 account remains active, and for the period required after account closure for legal compliance purposes.
  • Financial Transaction Records: Retained for a minimum of 7 years from the transaction date to comply with Malaysian accounting and anti-money laundering legal requirements.
  • Identity Verification (KYC) Data: Retained for a minimum of 5 years after account closure or termination of the business relationship, in accordance with Malaysian legal requirements.
  • Customer Support Communication Records: Retained for 3 years for service improvement purposes and resolution of any disputes that may arise.
  • Anonymised Analytics Data: May be retained longer in anonymised form for trend analysis and royal24 product improvement purposes.

Once the relevant retention period has expired, royal24 will securely delete or destroy your personal data in accordance with industry-standard procedures, or convert it into anonymised form that cannot be linked back to you.

Section 12

Changes to This Privacy Policy

Royal24 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or relevant technological developments. Every new version will display an updated "Last Updated" date at the top of this page.

For material amendments — that is, changes that significantly affect how we process your personal data — royal24 will notify you via your registered email and/or display a prominent notice on the platform at least 14 days before the changes take effect. This gives you sufficient time to review the updates and make an informed decision.

We encourage you to review this Privacy Policy page periodically. Your continued use of the royal24 platform after any amendments take effect will be considered acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your royal24 account before those changes come into effect.

Current Version: This Privacy Policy is the version updated on 1 January 2026 and supersedes all previous versions. Any privacy-related disputes will be referred to the version of the Privacy Policy in force on the date the dispute arose.

Section 13

Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how royal24 handles your personal data, please do not hesitate to reach out to us. Our Bahasa Malaysia-speaking team is ready to assist you.

Live Chat

Fast response in under 3 minutes – available 24/7 directly from the royal24 platform.

Email

Support@royal24.best – for privacy enquiries and data rights requests.

WhatsApp

Royal24 WhatsApp support channel — available 24/7 for urgent enquiries.

Royal24 will respond to all privacy-related enquiries within 5 business days. For formal data rights requests (access, correction, deletion, etc.), we will inform you of the expected processing time upon receipt of your request. We are committed to resolving all privacy concerns fairly, transparently, and in a timely manner.

Why Data Privacy Matters to Royal24 & Malaysian Members

When you create an account with royal24, you are entrusting us with your personal information. That trust is not something we take lightly. Behind every Touch 'n Go transaction you make, every baccarat session you play, and every question you ask our support team – personal data is involved. And our responsibility to protect that data is one we take with the utmost seriousness.

The Malaysian context matters here. Malaysian players use e-wallets and online banking for virtually every aspect of their daily financial lives – from paying tolls with Touch 'n Go, buying lunch with GrabPay, sending money to family via DuitNow, to shopping online with ShopeePay. When the same methods are used to deposit at royal24, you deserve to know that your financial information is handled to the highest security standards. That is why we invest in the same 256-bit SSL encryption infrastructure used by Malaysia's leading banks.

PDPA 2010 is Malaysia's data protection law governing how companies may collect, store, and use individuals' personal data. royal24 complies with this law not merely because it is legally required, but because it reflects our core values on how our members deserve to be treated. PDPA compliance means you have legal rights you can exercise if you are dissatisfied with how we handle your data – and royal24 respects those rights in full.

One of the questions royal24 members ask most often is whether their data is shared with other parties. The short answer is: no — except in very limited situations that are clearly set out in this Privacy Policy. We do not sell data to advertisers. We do not share member lists with competitors. We do not use your data to build profiles that are sold to third parties. The information you provide to royal24 exists for one purpose, and one purpose only: to allow us to deliver a better online betting and casino experience to you — and that will never change.

Responsible gaming as it relates to data use is something unique to betting platforms like royal24. Your gameplay history is not only used for standard account purposes — it also helps our systems identify whether your gaming patterns show any signs of concern. If our system detects a sudden shift in betting behaviour that may indicate a problem, our support team may reach out to offer assistance. This is a use of data we genuinely believe benefits our members — not simply to maximise platform returns.

Cookies and tracking technologies are a topic that many users in Malaysia are becoming increasingly aware of. At royal24, we use cookies only for legitimate purposes — keeping you securely logged in, saving your preferences so you do not have to reset them each visit, and helping us understand which parts of the platform are most useful to members. We do not use cross-site tracking cookies to build an advertising profile of you outside the royal24 platform.

For members who access royal24 via mobile — which, based on our usage data, is the majority — mobile privacy is an additional consideration. When you access royal24 through an Android or iOS mobile browser, the same SSL security standards apply. We do not collect GPS location data, access your phone's contact list, or monitor any other activity on your device outside of your royal24 platform session.

Finally, it is important for you to know that you have meaningful control over your personal data at royal24. You may request a copy of the data we hold about you, request corrections to any inaccurate information, and in certain circumstances apply for the deletion of your data. These requests can be submitted by email to support@royal24.best, and we are committed to handling each request fairly, transparently, and within the timeframes set out by PDPA 2010. Your privacy is not merely a legal obligation for royal24 — it is a fundamental part of the trust we seek to build with every one of our Malaysian members.

FAQ – Royal24 Privacy Policy

No. royal24 does not sell, rent, or share your personal data with any third party for marketing purposes. The data you provide to royal24 is used solely to deliver platform services to you – including account management, transaction processing, customer support, and security. The only circumstance in which data may be shared is with technical service providers (such as payment processors) required to operate the platform, and this is done under strict confidentiality agreements.

To request a copy of the personal data we hold about you (right to access) or to apply for deletion of your data (right to erasure), please send an email to support@royal24.best clearly stating the type of request. Include your full name and registered phone number for identity verification. Royal24 will respond to access requests within 21 business days in accordance with PDPA 2010. Please note that data deletion requests are subject to legal retention requirements — for example, financial transaction records must be kept for a minimum of 7 years under Malaysian law.

Royal24 does not store full credit or debit card details on our servers. All card-based payment processing is handled by certified third-party payment gateways. For e-wallet methods such as Touch 'n Go, GrabPay, DuitNow, Boost, and ShopeePay — royal24 stores only the transaction token or reference required for your account records, not your full e-wallet credentials. This means that even in the unlikely event of a security breach, your complete payment information is not exposed to risk.

Yes, you can opt out of marketing emails from royal24 at any time. There are two easy ways to do this: first, click the "Unsubscribe" link found at the bottom of any marketing email we send you; second, log in to your royal24 account, go to Account Settings, and disable the marketing communications option. Please note that you cannot opt out of essential service emails such as transaction confirmations, security alerts, or account-related notifications, as these are necessary communications for the security of your account.

If you suspect your royal24 account has been accessed without authorisation, please take the following immediate steps: first, change your account password right away via the "Forgot Password" option or the Account Security section; second, contact the royal24 support team via live chat or email at support@royal24.best to report the incident – provide the time and any suspicious activity you noticed; third, review your account login history and transaction records to identify any unrecognised activity. The royal24 security team will promptly investigate your report and take appropriate action to protect your account.

Your Data Is Safe at Royal24 – Register & Start Playing Today

With 256-bit SSL protection, PDPA 2010 compliance, and a firm commitment to never selling your data – you can play at royal24 with full confidence that your privacy is always protected. Register for free in under 2 minutes and claim a welcome bonus of up to RM888.

Touch 'n Go GrabPay DuitNow Boost ShopeePay FPX

Minimum age 18. Bet responsibly. Terms & Conditions applies.

Bahasa Melayu