Royal24 is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have over your data.
Royal24 ("Company", "We", "Us", "Our") operates the online gaming and sports betting platform accessible at royal24.cam (the "Platform"). We are the data controller for all personal data collected through the Platform.
This Privacy Policy describes how Royal24 collects, processes, stores, shares, and protects the personal data of individuals ("Players", "Users", "You") who register an account, make deposits, place bets, or otherwise interact with our Platform or support services. It also explains the rights you have with respect to your personal data and how to exercise them.
This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which form part of the overall framework governing your relationship with Royal24.
By registering on the Platform or continuing to use it, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact us to request closure of your Account.
This Privacy Policy is effective from 1 January 2026. We may update this Policy periodically. The most current version will always be available on this page with the revised effective date clearly displayed.
The following terms carry the meanings set out below throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could identify a living individual, including name, email address, identification document number, IP address, and payment method details. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, retrieval, use, transmission, or deletion. |
| "Data Controller" | The entity that determines the purposes and means of processing Personal Data. Royal24 is the Data Controller for all data collected via the Platform. |
| "Data Processor" | A third party that processes Personal Data on behalf of the Data Controller under documented instructions (e.g., payment processors, KYC verification providers). |
| "Consent" | Freely given, specific, informed, and unambiguous agreement to the processing of Personal Data for a defined purpose. |
| "KYC" | Know Your Customer — the identity verification process required for account withdrawal eligibility and regulatory compliance. |
| "Cookie" | A small text file placed on your device by the Platform to store session, preference, and analytical data. |
3.1 Registration Data
When you create an Account on the Platform, we collect: full legal name, date of birth, gender, nationality, residential address (including city and postcode), email address, and mobile phone number. This data is required to establish your Account identity and verify age eligibility (21+).
3.2 Identity Verification (KYC) Data
To comply with anti-money laundering (AML) obligations and our licensing requirements, we collect copies of government-issued identification documents (Malaysian MyKad, passport, or other accepted national ID), proof of address, and payment method verification documents (e.g., e-wallet screenshots, bank statement headers). KYC data is processed by Royal24 and our authorised KYC verification partners.
3.3 Financial Data
We collect transaction data including deposit and withdrawal amounts, dates and timestamps, payment method types (e.g., Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, FPX, USDT TRC20), and transaction reference numbers. We do not store full card numbers or banking login credentials — these are handled directly by your bank or payment provider.
3.4 Gaming & Betting Activity Data
We collect records of your gaming sessions, bet histories, wagering amounts, game preferences, sport and market selections (including Liga Super Malaysia, EPL, UFC bets), bonus claims, and win/loss histories. This data is required to operate your Account, resolve disputes, and comply with regulatory obligations.
3.5 Technical & Usage Data
We automatically collect certain technical information when you access the Platform, including: IP address, device type and operating system, browser type and version, language settings, session duration, pages visited, click patterns, and referring URLs. This data is collected via server logs and tracking technologies including cookies.
3.6 Communications Data
If you contact our support team via live chat, email, or WhatsApp, we retain records of those communications including your queries, our responses, and any attachments you provide. This is used to maintain service quality, train support staff, and resolve recurring issues.
Note: You are not required to provide all categories of data. However, failure to provide data required for KYC verification will prevent the processing of withdrawal requests, and failure to provide registration data will prevent Account creation.
Royal24 processes your personal data for the following specific purposes:
Royal24 processes your personal data on the following legal bases, depending on the specific processing activity:
| Processing Purpose | Legal Basis |
|---|---|
| Account creation & management | Contractual necessity — required to enter into and perform the Terms of Service with you. |
| Payment processing & KYC | Legal obligation — required to comply with AML regulations and licensing requirements. |
| Fraud prevention & security | Legitimate interest — protecting the Company and its Players from fraudulent activity. |
| Responsible gambling monitoring | Legal obligation and legitimate interest — protecting player welfare in accordance with licensing obligations. |
| Marketing communications | Consent — where you have opted in, or legitimate interest for existing players receiving directly relevant offers. |
| Analytics & improvement | Legitimate interest — improving our services where such processing does not override your rights and interests. |
Royal24 does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly as necessary and under appropriate data processing agreements:
6.1 Payment Service Providers
To facilitate your deposits and withdrawals, we share necessary transaction data with our payment processing partners including providers for Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, FPX, and cryptocurrency gateway operators. These providers process data only as instructed and are bound by confidentiality obligations.
6.2 KYC & Identity Verification Partners
Your identity documents and verification data are processed by authorised KYC service providers for the purpose of identity verification and sanctions screening. These providers operate under strict data processing agreements and comply with applicable data protection standards.
6.3 Game Technology Providers
Certain game providers may receive pseudonymised gaming session data necessary to operate their games on our Platform (e.g., player ID, session token, bet and win amounts). No directly identifying personal data such as name or address is shared with game providers without your consent.
6.4 Regulatory & Law Enforcement Authorities
We may disclose personal data to relevant authorities, licensing regulators, or law enforcement agencies where required by law, court order, or regulatory obligation. We will notify you of any such disclosure where legally permissible.
6.5 Professional Advisers
Lawyers, auditors, accountants, and other professional advisers engaged by Royal24 may access personal data on a need-to-know basis and are bound by professional confidentiality obligations.
Our commitment: Royal24 will never sell, rent, or otherwise commercially exploit your personal data to third-party advertisers, data brokers, or marketing companies. Your data is used solely for the purposes described in this Policy.
Royal24 retains your personal data for as long as your Account remains active and for a period thereafter as required by applicable legal, regulatory, and contractual obligations. Specific retention periods by data category are as follows:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of Account + 5 years after closure |
| KYC / identity documents | Duration of Account + 5 years after closure |
| Financial transaction records | Duration of Account + 7 years (AML compliance) |
| Gaming & betting history | Duration of Account + 5 years |
| Support communications | 3 years from date of communication |
| Technical / usage logs | 13 months (rolling) |
| Marketing consent records | Until consent is withdrawn + 3 years |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be attributed to any individual. Where data cannot be fully deleted due to technical constraints (e.g., backup systems), it will be isolated and protected until such deletion is possible.
Royal24 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security measures include:
While we take our security obligations seriously, no online system can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify affected individuals without undue delay in accordance with applicable requirements.
Your responsibility: You are responsible for maintaining the confidentiality of your Account login credentials. Do not share your password with anyone. If you suspect your Account has been compromised, contact us immediately at [email protected].
Depending on the data protection framework applicable to your location, you may hold some or all of the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and we will respond within 30 days.
Request a copy of all personal data we hold about you, including the purposes for which it is processed and the categories of recipients with whom it is shared.
Request correction of inaccurate or incomplete personal data. For Account data (name, address, date of birth), contact support with supporting documentation.
Request deletion of your personal data where processing is no longer necessary. Note: regulatory retention obligations (e.g., 7-year AML records) may prevent full erasure in some cases.
Request that we limit how we use your data while an accuracy dispute is resolved or a legitimate interest objection is assessed.
Receive a structured, machine-readable copy of data you provided to us under consent or contract, suitable for transfer to another service provider.
Object to processing based on legitimate interests, including direct marketing. Marketing objections are honoured immediately upon receipt of your request.
Please note: Some rights are subject to limitations where legal obligations require us to retain or continue processing your data. We will always explain our reasoning in writing when we are unable to fully honour a data rights request.
Royal24 operates internationally and may transfer your personal data to processors and service providers located outside Malaysia or the country from which you access the Platform. Such transfers are made in the following circumstances:
Where data is transferred internationally, Royal24 ensures that appropriate safeguards are in place, including: standard contractual clauses or equivalent mechanisms with the receiving entity; data processing agreements requiring the recipient to maintain at least equivalent data protection standards; and, where applicable, adequacy decisions or equivalent protections.
Royal24 does not knowingly collect personal data from individuals under the age of 21. Our Platform is strictly for adults aged 21 and above. Age verification is a mandatory step in our KYC process, and we will not process a withdrawal for any Account that has not submitted valid proof of age.
If we become aware that we have inadvertently collected personal data from an individual under the age of 21, we will immediately suspend the associated Account, forgo any balances in accordance with our Terms & Conditions, and delete the relevant personal data without undue delay.
If you are a parent or guardian and believe your child has registered on the Platform, please contact us immediately at [email protected] so we can take appropriate action.
Royal24 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or operational requirements. When we make material changes to this Policy, we will:
Your continued use of the Platform following notification of any such change constitutes your acceptance of the revised Privacy Policy. We recommend reviewing this page periodically, particularly before making significant account transactions.
For any queries, concerns, or formal requests relating to your personal data or this Privacy Policy, please contact our Data Support team through the following channels. All data-related requests are handled separately from general customer support to ensure appropriate handling:
[email protected]
Subject: "Data Rights Request" or "Privacy Enquiry"
Response within 30 days
Available 24/7 via the Platform
Support in English, Bahasa Melayu & Chinese
Average response: under 5 minutes
When submitting a data rights request, please include your full name, registered email address, and a clear description of your request. We may ask for identity verification before processing certain requests in order to protect your data from unauthorised access.
A quick reference to the six most important ways Royal24 handles your data responsibly.
Every connection between your device and Royal24's servers is encrypted with bank-grade SSL/TLS. Your personal and financial data is protected in transit at all times.
Royal24 does not sell, rent, or trade your personal information to any third party for commercial gain. Data sharing is limited strictly to operational service providers under binding agreements.
Our identity verification process protects you from identity theft and ensures no one else can access your Account or withdraw your funds without proper verification.
We don't hold onto your data indefinitely. Clear retention periods apply to every data category, and data is securely deleted or anonymised when it is no longer required.
Access, rectify, erase, or export your data. Object to marketing. Restrict processing. These are genuine rights that Royal24 will honour upon verified request.
All Malaysian payment methods — Touch 'n Go eWallet, Boost, Maybank, DuitNow, FPX — are processed through compliant providers under strict data processing agreements.
You've read our Privacy Policy. Explore more of the Platform or reach out to our support team with any questions.
Explore Royal24's full game library, sports betting markets, and current promotions for Malaysian players.
Visit HomepageReview the full Terms and Conditions governing your Account, deposits, withdrawals, bonuses, and use of the Platform.
Read T&CGot questions about deposits via Touch 'n Go, withdrawal times, KYC, or bonus terms? Our FAQ covers it all.
Read FAQ