royal771 Privacy Policy

1. Introduction

Royal771 ("we", "us", "our") operates the online gaming and sports betting platform available at royal771.org (the "Platform"). This Privacy Policy ("Policy") describes the personal data we collect from players and visitors, how that data is used, the conditions under which it may be shared with third parties, and the rights available to you regarding your personal data.

By registering an account on the royal771 Platform or by continuing to use the Platform after this Policy has been brought to your attention, you acknowledge that you have read and understood its contents. This Policy is to be read in conjunction with our Terms & Conditions and our Responsible Gaming policy.

We are committed to handling personal data in a manner consistent with applicable data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

2. Data We Collect

Royal771 collects the following categories of personal data from players and Platform visitors:

Category	Examples	When Collected
Identity Data	Full name, date of birth, MyKad / passport number, nationality	Account registration & KYC verification
Contact Data	Email address, Malaysian mobile number, residential address	Account registration
Financial Data	Bank account details, e-wallet identifiers (Touch 'n Go, Boost, DuitNow), transaction history	Deposits & withdrawals
Technical Data	IP address, browser type, device identifiers, operating system, session logs	Platform access (automatic)
Usage Data	Games played, bet amounts, login timestamps, page views, feature interactions	Platform use (automatic)
Communications Data	Live chat transcripts, support ticket content, email correspondence	Customer support interactions
Verification Documents	MyKad scans, passport copies, utility bill images	KYC verification

We do not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless required by applicable law or explicitly provided by you in a support context.

3. How We Collect Data

Personal data is collected through the following means:

• Direct interactions: Data you voluntarily provide during account registration, KYC submission, deposit and withdrawal requests, or when contacting support via live chat or email;
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, server logs, and session tracking mechanisms;
• Third-party sources: Identity verification and fraud detection data from licensed KYC service providers; payment confirmation data from payment processors (Touch 'n Go, Boost, Maybank, CIMB, Public Bank); and fraud risk scores from anti-money laundering screening services.

4. How We Use Your Data

Royal771 uses personal data for the following purposes:

• Account administration: Creating and maintaining your account, verifying your identity, processing deposits and withdrawals, and managing your VIP tier status;
• Service delivery: Providing access to games, the sportsbook, and all other Platform features you use;
• Regulatory compliance: Meeting anti-money laundering (AML), counter-terrorism financing (CTF), and age verification obligations under our gaming licence requirements;
• Responsible gaming: Monitoring play patterns to identify potential problem gambling indicators; administering self-exclusion, deposit limit, and cooling-off period requests;
• Security and fraud prevention: Detecting and preventing unauthorised account access, bonus abuse, match-fixing activity, and other prohibited conduct;
• Customer support: Responding to your queries, resolving disputes, and improving service quality;
• Marketing communications: Sending promotional offers and VIP programme updates to your registered email or via Platform notifications, where you have consented or where permitted under applicable law. You may opt out at any time;
• Platform improvement: Analysing aggregated usage data to improve the Platform's performance, game selection, and user experience.

5. Legal Basis for Processing

Where data protection law requires a legal basis for processing personal data, royal771 relies on the following bases:

• Contract performance: Processing necessary to register your account, process transactions, and deliver Platform services pursuant to our Terms & Conditions;
• Legal obligation: Processing required to comply with AML, CTF, age verification, and other regulatory requirements under our gaming licence;
• Legitimate interests: Processing for fraud prevention, security monitoring, and Platform improvement, where these interests are not overridden by your data protection rights;
• Consent: Where you have explicitly consented, including for certain direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Data Sharing

Royal771 does not sell your personal data to third parties. We share data only in the following circumstances:

• Payment processors: Financial data is shared with payment service providers (including e-wallet operators and FPX banks) to process your deposits and withdrawals. These providers operate under their own privacy terms;
• KYC and AML service providers: Identity documents and verification data are processed by our contracted identity verification partners to comply with regulatory obligations;
• Game software providers: Minimal technical data (session tokens, bet outcomes) is shared with game providers (e.g., Evolution Gaming, Pragmatic Play) for game functionality and fair play auditing;
• Regulatory authorities: We may be required to disclose personal data to our licensing authority or law enforcement agencies pursuant to a legal obligation or court order;
• Corporate transactions: In the event of a merger, acquisition, or sale of all or substantially all of the Platform's assets, personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

All third-party data processors engaged by royal771 are contractually obligated to process personal data only for the specified purpose and in accordance with our data protection instructions.

7. Cookies & Tracking Technologies

The royal771 Platform uses cookies and similar tracking technologies to provide and improve the service. The categories of cookies used are:

• Strictly necessary cookies: Required for Platform functionality, including maintaining your login session and remembering your language preference. These cannot be disabled;
• Performance cookies: Collect anonymised data about how visitors use the Platform (e.g., which pages are visited most, error logs) to improve performance;
• Functional cookies: Remember your preferences, such as game lobby settings or notification preferences;
• Analytics cookies: Used to understand aggregate usage patterns across the Platform. Data collected is pseudonymised and used for internal reporting only.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using core Platform features, though certain personalisation functions may be affected.

8. Data Retention

Royal771 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to applicable regulatory retention requirements:

• Account data and transaction records: Retained for a minimum of five years from account closure or last transaction, as required under AML regulations applicable to our gaming licence;
• KYC verification documents: Retained for the duration of the account and five years post-closure;
• Communications data: Live chat transcripts and support correspondence retained for two years;
• Technical and usage logs: Retained for up to 12 months for security and performance monitoring purposes.

Where retention is no longer legally required, personal data is securely deleted or anonymised.

9. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by royal771:

• Right of access: Request a copy of the personal data we hold about you;
• Right to rectification: Request correction of inaccurate or incomplete data;
• Right to erasure: Request deletion of personal data where there is no legitimate or legal basis for continued processing. Note that regulatory retention obligations may limit this right in respect of certain data categories;
• Right to restrict processing: Request that we limit the way we use your data in certain circumstances;
• Right to data portability: Request your personal data in a structured, machine-readable format for transfer to another service where technically feasible;
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes;
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior lawful processing.

To exercise any of the above rights, please contact our Data Protection team via the 24/7 Live Chat on the Platform. We will respond to verified requests within 30 days. Identity verification will be required before any data access or deletion request is actioned.

10. Data Security

Royal771 implements technical and organisational security measures proportionate to the risk associated with processing your personal data. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers;
• Encryption of sensitive data fields (including financial data and identity document images) at rest;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular penetration testing and vulnerability assessments of the Platform infrastructure;
• Automated anomaly detection for suspicious login activity and payment patterns.

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, royal771 will notify affected players without undue delay and take immediate remedial action in accordance with applicable breach notification obligations.

11. Minors

The royal771 Platform is strictly intended for users aged 21 and above. We do not knowingly collect or process personal data from persons under 21 years of age. If we become aware that an account has been registered by a minor, that account will be immediately suspended, all data will be handled in accordance with applicable law, and the matter will be escalated to our compliance team. If you believe a minor has registered an account, please contact support immediately via Live Chat.

12. Changes to This Policy

Royal771 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or Platform features. Material changes will be communicated via a notice displayed on the Platform or by email to your registered address at least seven days prior to the updated Policy taking effect. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of a revised Policy constitutes acceptance of the changes.

13. Contact Us

For privacy-related enquiries, data subject access requests, or to report a privacy concern, please contact the royal771 Data Protection team via the 24/7 Live Chat on the Platform. You may also write to us at [email protected] — please note that email correspondence is handled on a best-efforts basis and Live Chat will always result in a faster response.