At Royal138, your privacy is more than a legal obligation — it is a genuine commitment we make to every player. This document clearly and transparently explains how we collect, use, store, and protect your personal information, as well as the rights you hold as a user of our platform.
Six core principles that shape how we handle your personal data
All your personal and financial data is protected with SSL 256-bit encryption – the same technology used by Malaysia's leading financial institutions and banks such as Maybank and CIMB. Every exchange of data between your device and Royal138's servers is fully encrypted.
Royal138 has never and will never sell your personal information to any third party for marketing or commercial purposes. Your data is used solely for platform operations, legal compliance, and improving your own experience at Royal138.
The Royal138 Privacy Policy is designed to be fully compliant with Malaysia's Personal Data Protection Act (PDPA) 2010. We uphold your rights as a data subject — including the right to access, correct, and request deletion of your personal data at any time.
We only collect data that strictly necessary to deliver Royal138's secure, high-quality services. No unnecessary data is collected — every piece of information we request has a clear and legitimate purpose, which we explain in full.
Your personal data is retained only for as long as necessary for its stated purpose or as required by law. Once an account is closed and the retention period has lapsed, your data will be securely deleted or anonymised in accordance with strict security procedures.
You have full control over your personal data at Royal138. Through your account settings or by contacting our team, you can access, correct, download, or request deletion of your data at any time — no unnecessary questions asked.
Royal138 collects several categories of information depending on how you interact with our platform. Below is a full breakdown of what we collect and why:
| Data Category | Sample Information | Collection Methods | Primary Purpose |
|---|---|---|---|
| Identity Data | Full name, date of birth, identification card number | Registration form, KYC | Age VerificationAnti-Fraud |
| Contact Data | Email, phone number, address | Registration, profile updates | CommunicationsSupport |
| Financial Data | Payment method, transaction history | Deposits, withdrawals | Payment ProcessingAML |
| Technical Data | IP address, device type, browser | Automated system logs | SecurityPerformance |
| Gaming Data | Betting history, game results | Gaming activity | Game ControlsAudit |
| Cookie Data | Site preferences, login sessions | Browser cookies | User Experience |
We does not collect sensitive information such as biometric data, health information, or full credit card details (card numbers are stored in tokenised form encrypted by licensed payment processors, not directly by Royal138).
You may withdraw your consent to receive marketing communications at any time via the "unsubscribe" link in any promotional email, or by contacting us at support@royal138.online. Withdrawing consent will not affect data processing carried out for account operations and security purposes.
Royal138 processes your personal data only on valid legal grounds under the Personal Data Protection Act (PDPA) Malaysia 2010 and related legislation:
Royal138 does not sell your personal data to any third party. However, in the course of operating the platform, we may share certain information with the following categories of third parties, subject to strict confidentiality and data protection agreements:
All third parties who receive your data are required to maintain the confidentiality and security of that information under legally binding data protection agreements. They may only use your data for the specific purposes stated and are not permitted to process it for any other purpose.
Royal138 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:
In the event of a data security breach that may compromise your personal data, Royal138 is committed to notifying affected players within 72 hours of becoming aware of the breach, in line with MGA reporting requirements and international best practices.
Under Malaysia's PDPA 2010 and applicable data protection regulations, you have the following rights regarding your personal data held by Royal138:
Request a copy of all personal data we hold about you in a readable format
Request correction of inaccurate or incomplete data at no charge
Request deletion of your data when it is no longer needed for the purpose it was collected
Request that we restrict the processing of your data under certain circumstances pending investigation
Request your data in a structured, portable format that can be transferred to another provider
Object to data processing for direct marketing or on the basis of legitimate interests
To exercise any of the rights above, submit a written request to Royal138's Data Protection Officer (DPO) via email at privacy@royal138.online. We will respond within 30 calendar days from the date the request is received. In complex cases, this period may be extended by up to 60 days with prior notification.
Royal138 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
| Cookie Types | Functionality | Duration | Status |
|---|---|---|---|
| Essential Cookies | Maintaining login sessions, security, and language preferences | Session / 30 days | |
| Performance Cookies | Analysing website performance for improvement | 13 months | |
| Functional Cookies | Remembering your preferences and personal settings | 12 months | |
| Security Cookies | Detecting suspicious activity and protecting your account | Session |
You can manage or disable optional cookies through your browser settings (Chrome, Safari, Firefox, etc.) or via the cookie settings panel on our website. Please note that disabling certain cookies may affect the functionality of the Royal138 platform.
As a platform operating under a Malta Gaming Authority licence, some of your data may be transferred to and processed in Malta or other countries outside Malaysia. Such transfers are carried out only when necessary for platform operations and are subject to adequate safeguards, including:
The Royal138 platform is strictly for individuals aged 18 years and above. We do not knowingly collect personal data from children under the age of 18. If you believe a child has registered an account with Royal138 or has provided us with personal information, please contact us immediately at privacy@royal138.online and we will take immediate action to delete the information and close the account in question.
Royal138 conducts strict age verification during registration and the KYC process to ensure our platform is not accessed by underage individuals.
Royal138 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and ensuring your rights are fully respected. If you have any questions, concerns, or complaints regarding the privacy of your data at Royal138, please contact:
If you are not satisfied with our response to your privacy request or complaint, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia or the Malta Gaming Authority, depending on the nature of your complaint.
This Privacy Policy should be read together with the other documents governing the use of the Royal138 platform. For a full understanding of your rights and responsibilities, please also review:
Register today and enjoy an online casino experience that is safe, transparent, and fully respectful of your privacy. Deposit using trusted local Malaysian payment methods.