Privacy Policy

1. Introduction and Scope

royal47 ("we", "us", "our") is committed to protecting the privacy and security of the personal data of all Members and visitors. This Privacy Policy sets out in detail how royal47 collects, processes, stores, discloses, and safeguards your personal information when you access and use the royal47 platform at https://royal47.one and any associated mobile applications (collectively, the "Platform").

This Policy applies to all personal data processed by royal47 in connection with the registration of accounts, use of gaming and sportsbook services, financial transactions, customer support interactions, and your general browsing of the Platform. By registering for a royal47 account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy.

Important: This Privacy Policy should be read together with the royal47 Terms & Conditions. Capitalised terms not defined in this Policy carry the meaning given to them in the Terms & Conditions.

2. Data Controller

For the purposes of applicable data protection legislation, royal47 is the data controller responsible for the personal data you provide to us through the Platform. Our designated data protection contact can be reached at [email protected]. Where royal47 engages third-party service providers to process data on its behalf, those providers act as data processors and are bound by contractual obligations no less stringent than those set out in this Policy.

3. Personal Data We Collect

royal47 collects the following categories of personal data in connection with your use of the Platform:

3.1 Identity Data: Full legal name, date of birth, gender, nationality, and identity document numbers (e.g., Malaysian NRIC, passport number) provided during registration or KYC verification.

3.2 Contact Data: Malaysian mobile phone number, email address, and, where provided, residential address.

3.3 Financial Data: Bank account details, eWallet identifiers (e.g., Touch n Go eWallet ID, Boost account), transaction history, deposit amounts, withdrawal requests, and wallet balances denominated in MYR.

3.4 Gaming Activity Data: Bet history, game session logs, win/loss records, bonus usage, promotional participation, and responsible gaming tool settings (deposit limits, self-exclusion status).

3.5 Technical Data: IP address, device identifiers, browser type and version, operating system, referring URLs, session timestamps, and approximate geographic location derived from IP address.

3.6 Communications Data: Records of your interactions with royal47 customer support, including chat transcripts, email correspondence, and support ticket content.

3.7 Verification Documents: Copies of identity documents (NRIC front and back, passport), proof of address (utility bill, bank statement), and payment method verification materials submitted during the KYC process.

4. How We Collect Your Data

royal47 collects personal data through the following means:

Direct Provision: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions;
Automated Technologies: Data collected automatically as you navigate the Platform, including via cookies, session tokens, server logs, and device fingerprinting;
Third-Party Verification Services: Identity verification and fraud detection providers engaged by royal47 to assist in KYC compliance may supply supplementary identity data;
Payment Processors: Transaction confirmation data received from payment service providers including local Malaysian banks and eWallet operators.

5. Purposes and Legal Bases for Processing

royal47 processes your personal data for the following purposes and on the following legal bases:

Account Management and Service Delivery — to create, maintain, and operate your royal47 account, process deposits and withdrawals, and provide access to gaming services. Legal basis: performance of contract.
Identity Verification (KYC/AML) — to verify your identity, confirm your age (21+ requirement), and comply with anti-money laundering obligations. Legal basis: legal obligation.
Fraud Prevention and Security — to detect, investigate, and prevent fraudulent transactions, account takeovers, and platform abuse. Legal basis: legitimate interests.
Responsible Gaming Compliance — to monitor gaming activity for indicators of problem gambling and enforce self-exclusion or limit settings. Legal basis: legal obligation and legitimate interests.
Customer Support — to respond to your enquiries, resolve disputes, and manage feedback. Legal basis: performance of contract.
Platform Improvement — to analyse usage patterns and improve the functionality, design, and game offering of the Platform. Legal basis: legitimate interests.
Marketing Communications — to send you promotional offers, bonus notifications, and event updates, where you have consented or where we have a legitimate interest in communicating with existing Members. You may opt out at any time by contacting support.

6. Disclosure of Personal Data

royal47 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may disclose your personal data to the following categories of recipients where strictly necessary:

Payment Service Providers: Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong Bank, RHB Bank) and eWallet operators (Touch n Go, Boost) for the processing of deposits and withdrawals;
Identity Verification Partners: Third-party KYC and AML compliance service providers engaged to perform identity checks;
IT and Hosting Providers: Cloud infrastructure and cybersecurity vendors who process data solely as data processors under binding agreements;
Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory direction, including reporting obligations under anti-money laundering legislation;
Game Software Providers: Licensed game studios may receive anonymised session data for game integrity and RNG certification purposes. No identifiable personal data is shared with game studios.

Commitment: All third parties engaged by royal47 are contractually required to maintain data confidentiality, implement appropriate security measures, and process data solely for the purposes specified by royal47.

7. International Data Transfers

The royal47 Platform is operated under international gaming authority licensing and certain data processing activities may involve the transfer of personal data to service providers located outside Malaysia. Where such transfers occur, royal47 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that provided under applicable Malaysian data protection legislation, including through the use of contractual clauses, data processing agreements, and transfer impact assessments where required.

8. Data Retention

royal47 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and licensing obligations. As a general guide:

Account data and KYC documents are retained for a minimum of five (5) years following account closure, as required under anti-money laundering regulations;
Transaction records are retained for a minimum of seven (7) years for financial compliance purposes;
Gaming activity logs are retained for five (5) years from the date of each session;
Customer support correspondence is retained for three (3) years from the date of last interaction.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with royal47's data disposal procedures.

9. Cookies and Tracking Technologies

royal47 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are as follows:

Strictly Necessary Cookies: Required for the Platform to function — including session authentication, login state management, and security tokens. These cannot be disabled.
Functional Cookies: Remember your preferences such as language settings, last visited game category, and responsible gaming tool configurations.
Analytical Cookies: Used to understand how Members interact with the Platform, identify performance issues, and improve user experience. Data is aggregated and anonymised where possible.

royal47 does not deploy third-party advertising cookies or permit external ad networks to track your activity on the Platform. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies may impair Platform functionality.

10. Security of Your Data

royal47 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

256-bit TLS/SSL encryption for all data in transit between your device and royal47 servers;
Encrypted storage for sensitive data at rest, including identity documents and financial information;
Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
Regular penetration testing and security audits conducted by independent cybersecurity firms;
Multi-factor authentication required for all internal administrative access to data systems.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is entirely risk-free. royal47 cannot guarantee absolute security and encourages Members to take personal precautions including enabling 2FA on their royal47 account and using strong, unique passwords.

11. Your Rights

Subject to applicable data protection law, you have the following rights in relation to your personal data held by royal47:

Right of Access: You may request a copy of the personal data royal47 holds about you;
Right of Rectification: You may request correction of any inaccurate or incomplete personal data;
Right to Erasure: You may request deletion of your personal data, subject to our legal retention obligations;
Right to Restrict Processing: You may request that we limit the way we process your data in certain circumstances;
Right to Data Portability: Where technically feasible, you may request your data in a structured, machine-readable format;
Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing.

To exercise any of these rights, please contact royal47 at [email protected]. We will respond to all verified requests within 30 days. We may require identity verification before processing any data subject request.

12. Children and Minors

The royal47 Platform is strictly restricted to persons aged 21 years or older. royal47 does not knowingly collect personal data from individuals under the age of 21. If we become aware that a person under the age of 21 has registered an account or provided personal data to us, we will immediately close the account, void any associated balances, and delete the personal data in question. If you believe a minor has registered on the Platform, please contact us at [email protected] immediately.

13. Changes to This Policy

royal47 reserves the right to amend this Privacy Policy at any time. Material changes will be notified to active Members via registered email or an in-platform notification prior to the change taking effect. The "Last Updated" date at the top of this Policy will be revised on each update. Continued use of the Platform following notification of any amendment constitutes acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically.

14. Contact and Complaints

For any privacy-related enquiries, requests to exercise your data rights, or complaints regarding royal47's handling of your personal data, please contact our data protection contact directly:

Email: [email protected]

We aim to respond to all privacy enquiries within five (5) business days. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. royal47 takes all privacy complaints seriously and will conduct a fair and thorough investigation of any concern raised.

Table of Contents

Data Security

No Data Selling

Your Rights

Cookie Control

KYC Compliance

Direct Contact

Your Privacy Is Our Priority