Privacy Policy —
How Regal88 Protects Your Data

Introduction

This Privacy Policy ("Policy") is published by the operators of regal88 (accessible at regal88.cam) and applies to all individuals who access, browse, register on, or interact with the regal88 online gaming platform ("Platform"). It describes in plain, professional language how regal88 collects, processes, stores, shares, and protects personal data in connection with the operation of its services.

Regal88 operates primarily for the benefit of Malaysian players, with all transactions conducted in Malaysian Ringgit (MYR) and all customer service delivered in English. Our data practices are designed to be transparent, proportionate, and compliant with applicable data protection legislation governing our operating jurisdiction.

If you have questions about this Policy or wish to exercise any of your data rights, please contact our Data Protection team via the channels described in Section 14 of this document.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or is capable of identifying a natural person, directly or indirectly, including name, identification number, contact details, financial data, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, or deletion.
• "Data Controller" means regal88 (the entity that determines the purposes and means by which personal data is processed).
• "Data Processor" means a third party that processes personal data on behalf of regal88 under contractual instruction.
• "Member" / "User" means any registered individual with an active regal88 account.
• "KYC" means Know Your Customer — the identity verification process applied to Members for compliance with AML regulations.
• "Cookies" means small text files stored on a user's device by the Platform's web technology to facilitate functionality, analytics, and personalisation.
• "Sensitive Data" means a sub-category of personal data requiring heightened protection, such as identity document numbers, financial account details, and any data relating to health or legal status.

Personal Data We Collect

Regal88 collects personal data through several channels: directly from Members during registration and account use; automatically through platform interaction; and from third-party verification and payment service providers. The categories of data we collect are as follows:

3.1 Registration & Identity Data

When you register a regal88 account, we collect your full name, date of birth, email address, mobile number, and the username and password you create. This data is necessary to establish and maintain your account.

3.2 KYC & Verification Data

To comply with Anti-Money Laundering (AML) obligations and verify your identity, we may collect copies of government-issued photo identification (such as a Malaysian MyKad or passport), proof of residential address (such as a utility bill or bank statement issued within the past three months), and evidence of payment method ownership.

3.3 Financial & Transaction Data

We record all deposit and withdrawal transactions processed through your account, including the payment channel used (e.g., Maybank, CIMB, Touch 'n Go eWallet, DuitNow, FPX), transaction amounts in MYR, transaction reference numbers, and timestamps. We do not store full bank account numbers or card numbers — these are handled directly by our payment processor partners under their own security protocols.

3.4 Usage & Behavioural Data

We collect data about how you interact with the Platform, including pages visited, games played, betting history, session durations, device type, browser type, operating system, and IP address. This data is used to improve the Platform and to detect potentially problematic gaming behaviour in support of our responsible gambling obligations.

3.5 Communication Data

If you contact our support team — via live chat or email — we retain records of those communications for quality assurance, dispute resolution, and compliance purposes.

Legal Basis for Data Processing

Regal88 processes your personal data on one or more of the following lawful bases, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and regal88 — specifically, to operate your account, process deposits and withdrawals in MYR, and provide gaming services.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including AML obligations, KYC verification requirements, and regulatory reporting duties imposed by our licensing authority.
• Legitimate Interests: Processing is necessary for regal88's legitimate business interests, including fraud prevention, security monitoring, platform improvement, and responsible gambling monitoring, provided those interests are not overridden by your rights and freedoms.
• Consent: Where none of the above bases apply, regal88 will seek your explicit, informed consent before processing your data. You may withdraw consent at any time by contacting our support team, without this affecting the lawfulness of processing that occurred prior to withdrawal.

How We Use Your Personal Data

Regal88 uses the personal data we collect exclusively for the following purposes:

• To create, manage, and maintain your regal88 account;
• To process and record all MYR deposits and withdrawals via supported Malaysian payment channels including Maybank, CIMB, Touch 'n Go eWallet, GrabPay, Boost, DuitNow, and FPX;
• To verify your identity and comply with our KYC and AML compliance obligations;
• To detect, investigate, and prevent fraudulent activity, money laundering, and unauthorised account access;
• To provide customer support via live chat and email, and to resolve disputes where they arise;
• To monitor gaming behaviour and apply responsible gambling tools, including deposit limits, cooling-off periods, and self-exclusion measures;
• To send you transactional communications, including deposit confirmations, withdrawal notifications, and account security alerts;
• To send you promotional communications about regal88 bonuses and offers where you have opted in to receive such communications, or where we have a legitimate basis to contact you;
• To conduct internal analytics aimed at improving the Platform's performance, user experience, and games catalogue;
• To comply with applicable regulatory requirements, respond to lawful requests from regulatory authorities, and exercise or defend legal claims.

Data Sharing & Disclosure

Regal88 does not sell, rent, or trade your personal data to third parties. We may, however, share your data with carefully selected third parties in the following limited circumstances:

6.1 Payment Processors

To facilitate deposits and withdrawals, regal88 shares relevant transactional data with our authorised payment processing partners, including banking infrastructure providers supporting Maybank, CIMB, DuitNow, FPX, and e-wallet processors for Touch 'n Go eWallet, Boost, and GrabPay. These partners are contractually bound to process your data solely for payment purposes and in compliance with applicable data protection standards.

6.2 Identity Verification Providers

Regal88 may use third-party KYC service providers to assist in verifying the authenticity of identity documents submitted by Members. These providers act as data processors under our instruction and are prohibited from using your data for any purpose other than identity verification.

6.3 Game Technology Providers

Our platform integrates games from third-party technology providers. Aggregated, non-personally identifiable gameplay data may be shared with these providers for platform stability and performance purposes. We do not share personally identifiable data with game providers without your knowledge.

6.4 Regulatory & Law Enforcement Authorities

Regal88 may be required to disclose personal data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required by applicable law, regulation, or valid legal process. We will notify affected Members of such disclosures where legally permissible to do so.

6.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of substantially all assets of regal88's operating entity, personal data held by regal88 may be transferred to the successor entity, provided the receiving entity agrees to honour the terms of this Privacy Policy with respect to your data.

Data Retention

Regal88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of active account membership, plus a minimum of 5 years following account closure to meet AML record-keeping obligations.
• KYC Documents: Retained for a minimum of 5 years following submission, in line with AML regulatory requirements applicable to gaming operators.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, as required for financial compliance and audit purposes.
• Support Communication Records: Retained for 3 years from the date of the most recent communication in each thread, for dispute resolution and quality assurance purposes.
• Usage and Behavioural Data: Retained in aggregated, anonymised form for analytical purposes; raw individual-level data is retained for no more than 12 months.

Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents reconstruction of individual identities.

Cookies & Tracking Technologies

Regal88 uses cookies and similar tracking technologies to operate and improve the Platform. By using the Platform, you consent to our use of cookies as described in this section.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly — including session management, login authentication, and security verification. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Enable the Platform to remember your preferences such as language settings, display preferences, and recent game history for a more personalised experience.
• Analytics Cookies: Allow regal88 to collect aggregated data about how Members use the Platform — including pages visited and session duration — to identify areas for improvement. This data is processed in a form that does not identify individual users.
• Security Cookies: Used to detect and prevent fraudulent account activity, including session hijacking and bot-driven interactions.

8.2 Managing Cookies

You may configure your browser settings to restrict or block cookies at any time. Please note that disabling strictly necessary cookies will impair Platform functionality, including the ability to log in and maintain your session. Instructions for managing cookies are available in your browser's help documentation.

Data Security Measures

Regal88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• TLS 1.2+ Encryption in Transit: All data exchanged between your browser and regal88's servers is encrypted using Transport Layer Security protocols, preventing interception during transmission.
• AES-256 Encryption at Rest: Sensitive personal data stored on regal88's servers — including identity documents and KYC records — is encrypted with AES-256 symmetric encryption.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with access to sensitive data undergo background checks and operate under binding confidentiality obligations.
• Intrusion Detection Systems: Our infrastructure is monitored 24/7 by automated intrusion detection and prevention systems that identify and respond to suspicious access patterns in real time.
• Regular Security Audits: Regal88 undergoes periodic third-party security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.

Whilst regal88 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. You are responsible for keeping your account credentials confidential and for immediately reporting any suspected unauthorised access to our support team.

International Data Transfers

Regal88 is primarily designed to serve Malaysian players, and the majority of data processing activities occur within the jurisdiction in which we are licensed and operated. However, certain third-party service providers — including KYC verification platforms and analytics providers — may process data in jurisdictions outside Malaysia.

Where personal data is transferred to third-party processors operating internationally, regal88 ensures that appropriate safeguards are in place, including contractual data processing agreements that impose data protection standards equivalent to those described in this Policy. We do not transfer personal data to jurisdictions that do not maintain adequate data protection frameworks without first implementing appropriate transfer mechanisms.

Your Data Rights

As a Member of regal88, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our Data Protection team via the details provided in Section 14. We will respond to all valid requests within 30 calendar days of receipt.

• Right of Access: You have the right to request a copy of the personal data regal88 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request the correction of inaccurate or incomplete personal data held in your regal88 account.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations (such as AML record-keeping requirements).
• Right to Restriction of Processing: You have the right to request that regal88 restricts the processing of your data in certain circumstances — for example, where you contest the accuracy of data held, pending verification.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you have the right to receive a copy of your personal data in a structured, machine-readable format and to request its transfer to another data controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including direct marketing. We will cease such processing upon receipt of a valid objection unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time, without this affecting the lawfulness of processing that took place prior to withdrawal.

Minors & Age Policy

Regal88 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes an age declaration requirement, and we conduct age verification checks on accounts as part of our KYC process.

If regal88 becomes aware that an account has been registered by a person under the age of 21, or that personal data has been inadvertently collected from an underage individual, we will immediately suspend the account, delete the associated personal data, and return any funds deposited to the originating payment source (less any bonus funds credited).

If you believe that a minor may have registered on the regal88 Platform, please contact our support team immediately so that the matter can be investigated and resolved without delay.

Amendments to This Policy

Regal88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes — those that substantially affect your rights or how your data is processed — will be communicated to Members via email or prominent Platform notification at least 14 days prior to taking effect.

Minor amendments, such as clarifications or corrections, may be made with immediate effect. The "Last Updated" date displayed at the top of this page will reflect the most recent revision in all cases.

Your continued use of the regal88 Platform following the effective date of any amendment to this Policy constitutes your acceptance of the revised terms. If you disagree with a material change to this Policy, you may request account closure prior to the effective date of the change.

Contact Us

For all privacy-related enquiries, data rights requests, or concerns about how regal88 processes your personal data, please contact our Data Protection team through the following channels:

• Email: [email protected] — subject line: "Privacy Enquiry" (plain text address — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, directly on the regal88 Platform
• Response Commitment: All data rights requests and privacy enquiries will receive a substantive response within 30 calendar days of receipt

We are committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with our response, you may have the right to lodge a complaint with the data protection supervisory authority in the jurisdiction applicable to your circumstances.