01 Introduction
Royale36 operates an online sportsbook and live casino platform designed for Malaysian players. In providing these services, Royale36 necessarily processes personal information about individuals who register, deposit, wager, withdraw or contact our support team.
This Privacy Policy governs the collection, use, storage, sharing and deletion of personal data in connection with the Royale36 platform. It should be read alongside the Royale36 Terms & Conditions and Responsible Gambling information. By creating a Royale36 account or using our services, you acknowledge that you have read and understood this policy.
We review this policy periodically and will display the updated effective date at the top of this page when material changes are made.
02 Definitions
"Personal data" means any information relating to an identified or identifiable natural person. "Processing" means any operation performed on personal data, including collection, storage, use, disclosure and deletion. "Player", "you" and "your" refer to any natural person whose personal data Royale36 processes.
"Controller" means Royale36 as the entity that determines the purposes and means of processing your personal data. "Processor" means a third party that processes personal data on behalf of Royale36. "Consent" means a freely given, specific, informed and unambiguous indication of agreement to processing.
03 Data We Collect
Royale36 collects personal data through the registration process, ongoing platform use, payment transactions, customer support communications and automated technical means. The categories of data we may collect include:
| Category |
Examples |
Collection Point |
| Identity Data |
Full name, date of birth, identification document number |
Registration, KYC verification |
| Contact Data |
Email address, mobile number, city of residence (e.g. Kuala Lumpur, Penang) |
Registration, support |
| Financial Data |
Bank account details, DuitNow alias, e-wallet identifiers, transaction amounts in RM |
Deposits, withdrawals, verification |
| Transactional Data |
Bet history, game records, deposit and withdrawal history, bonus usage |
Platform activity |
| Technical Data |
IP address, device type, operating system, browser version, session timestamps |
Automatic collection on access |
| Support Data |
Live chat transcripts, email correspondence, complaint records |
Customer support interactions |
| Responsible Gambling Data |
Deposit limits, self-exclusion status, cooling-off requests |
Player protection settings |
We do not intentionally collect sensitive personal data beyond what is necessary for identity verification and player protection purposes. Where we require a copy of an identification document, that document is processed securely and retained only for the period required by applicable rules.
04 How We Use Your Data
Personal data collected by Royale36 is used for the following purposes:
- Account Management: Creating, operating and maintaining your Royale36 account, including authentication and security controls.
- Service Delivery: Enabling sports betting, live casino access, slot games and related platform features.
- Payment Processing: Facilitating MYR deposits and withdrawals through DuitNow, FPX, local bank transfers and supported e-wallets such as Touch 'n Go eWallet, GrabPay and Boost.
- Identity and Age Verification: Confirming that players meet the minimum age requirement of 21 years and that payment methods are held by the account holder.
- Responsible Gambling: Administering deposit limits, self-exclusion requests, cooling-off periods and related player protection tools.
- Fraud Prevention and Security: Detecting, investigating and preventing unauthorised access, money laundering, duplicate accounts and other prohibited activities.
- Legal and Regulatory Compliance: Meeting record-keeping, reporting and other obligations imposed by applicable law.
- Customer Support: Responding to queries, resolving complaints and providing account assistance.
- Platform Improvement: Analysing aggregated, anonymised usage data to improve functionality, performance and user experience.
- Communications: Sending service-related updates, security alerts and, where you have opted in, promotional communications.
05 Legal Basis for Processing
Where a legal basis for data processing is required, Royale36 processes personal data under one or more of the following grounds:
- Contractual Necessity: Processing required to provide the services described in the Royale36 Terms & Conditions, including account operation, payment processing and bet settlement.
- Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering rules and age verification requirements.
- Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring and service improvement, where those interests are not overridden by your rights.
- Consent: Where you have given specific, informed consent — for example, to receive promotional communications. You may withdraw consent at any time by contacting Royale36 support.
06 Data Sharing and Disclosure
Royale36 does not sell or rent personal data to third parties. We may share your information with:
- Payment Service Providers: Banks, DuitNow operators, FPX participants, and e-wallet providers (including Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, GrabPay and Boost) to process transactions.
- Identity Verification Services: Third-party providers used to conduct KYC checks and age verification.
- Technology and Infrastructure Providers: Hosting, security, analytics and platform service providers acting as data processors under contractual agreements with Royale36.
- Fraud Prevention and Security Agencies: Organisations that assist in detecting and preventing financial crime and technical abuse.
- Legal and Regulatory Authorities: Courts, regulators or law enforcement where disclosure is required or permitted by applicable law.
- Professional Advisers: Lawyers, auditors and other professionals where necessary for legal or compliance purposes, subject to professional confidentiality obligations.
Where Royale36 engages a data processor, we require contractual assurances that the processor will handle personal data only as instructed and with appropriate security measures in place.
07 Payment Data Security
Financial information processed through the Royale36 platform is treated as sensitive and is subject to additional security controls. All payment data is transmitted using SSL/TLS encryption. Royale36 does not store full card numbers, full bank account numbers or authentication credentials for third-party payment services in its primary databases.
Where Royale36 processes Malaysian Ringgit transactions through local payment infrastructure — including DuitNow, FPX, and online banking with Maybank, CIMB, Public Bank or Hong Leong Bank — we follow the security requirements applicable to those channels.
Important: Royale36 will never ask for your online banking password, full NRIC number or full payment credentials via email, live chat or phone. If you receive a request of this nature, do not comply and contact Royale36 support immediately.
08 Cookies and Tracking Technologies
Royale36 uses cookies and similar tracking technologies to operate the platform, maintain session state, prevent fraud, measure performance and improve user experience. The main types of cookies used are:
- Strictly Necessary Cookies: Required for the platform to function, including login sessions and security tokens. These cannot be disabled while using Royale36.
- Functional Cookies: Remember your preferences, language settings and display options.
- Analytical Cookies: Collect anonymised or aggregated data about platform usage to help us understand performance and identify improvements.
- Security Cookies: Used to detect and prevent suspicious activity, duplicate accounts and technical abuse.
Royale36 does not currently deploy advertising or cross-site tracking cookies. You may adjust browser settings to limit or block cookies, though this may affect platform functionality. Continued use of Royale36 following the display of a cookie notice constitutes acceptance of the use of necessary cookies.
09 Data Retention
Royale36 retains personal data for as long as is necessary for the purposes described in this policy and to meet applicable legal, regulatory and financial record-keeping requirements. The following indicative retention periods apply:
- Account and transactional records: Retained for a minimum of five years from the date of the last transaction or account closure, in line with standard financial record-keeping obligations.
- Identity verification documents: Retained for the period required by applicable anti-money laundering rules, generally a minimum of five years after the end of the customer relationship.
- Support correspondence: Retained for three years from the date of the last communication, unless a complaint or legal matter requires longer retention.
- Technical and log data: Retained for up to twelve months for security and audit purposes, after which data is deleted or anonymised.
- Responsible gambling records: Self-exclusion and deposit limit records are retained for a minimum of five years to prevent circumvention.
Where personal data is no longer required, Royale36 will delete or anonymise it securely. Deletion requests are subject to the retention obligations above.
10 Your Rights
Subject to applicable law and the limitations described below, you may exercise the following rights in relation to your personal data held by Royale36:
Right of Access
Request a copy of the personal data Royale36 holds about you, including the categories, purposes and any recipients.
Right to Rectification
Ask us to correct inaccurate or incomplete personal data. Some corrections may require documentary evidence.
Right to Erasure
Request deletion of your personal data where it is no longer necessary, subject to legal retention obligations.
Right to Portability
Receive a copy of data you provided to Royale36 in a structured, machine-readable format where technically feasible.
Right to Restriction
Request that Royale36 temporarily restrict processing of your personal data while an objection or accuracy dispute is reviewed.
Right to Object
Object to processing based on legitimate interests. Royale36 will consider whether overriding legitimate grounds exist.
To exercise any of these rights, contact Royale36 support at the email address shown below. Requests will be handled within a reasonable period, generally within 30 days, subject to identity verification. Royale36 may decline requests where legal obligations, fraud prevention requirements or the rights of third parties require retention.
11 International Data Transfers
Royale36 operates primarily in connection with the Malaysian market. Some of our technology infrastructure, third-party processors or service providers may be located outside Malaysia. Where personal data is transferred outside Malaysia, Royale36 takes reasonable steps to ensure that appropriate safeguards are in place, such as contractual data protection clauses or the equivalent.
Royale36 does not transfer personal data to recipients that do not provide an adequate level of data protection unless required by applicable law or with your prior consent.
12 Children and Minors
Royale36 is strictly for adults aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21. Where Royale36 reasonably believes that an account has been created by or for a minor, the account will be suspended, any deposits returned after review, and the personal data of the minor deleted as soon as reasonably practicable.
Parents and guardians who believe a minor has accessed Royale36 or provided personal data to us are encouraged to contact support immediately. Please refer to our Responsible Gambling page for further information on age-related safeguards.
13 Policy Updates
Royale36 may update this Privacy Policy from time to time to reflect changes in our services, data practices, technology or applicable law. The updated effective date will be displayed at the top of this page. Where changes are material, we may notify account holders by email or through a notice on the platform.
Continued use of Royale36 following the display of an updated policy constitutes acceptance of the revised terms. If you do not accept a material change, you should cease using Royale36 and close your account.
14 Contact Us
If you have a question about this Privacy Policy, wish to exercise a data right or want to raise a data protection concern, please contact Royale36 support. The support email is shown below as plain text — it is not a clickable link.
Support email: [email protected]
Live Chat is available 24 hours a day, 7 days a week via the Royale36 platform. Email responses are typically provided within 2 hours during normal operating periods. For data subject rights requests, please include your registered account username, a description of your request and, where required, a copy of an acceptable identity document.
This Privacy Policy should be read together with the Royale36 Terms & Conditions and Responsible Gambling information. If any provision of this policy is held unenforceable, the remaining provisions shall continue in full force.
21+
Responsible Gambling & Player Safety
Royale36 is for players aged 21 and above only. We process responsible gambling data — including self-exclusion status, deposit limits and cooling-off periods — exclusively to protect your welfare. Visit the Responsible Gambling page to manage these settings. Gambling can be addictive. Please play within your means.