Data Protection • Member Privacy • Information Security
Royale36 values the privacy of every member. This document clearly sets out what data we collect, how it is used, who can access it, and your rights as the owner of that data.
Your personal data is protected by 256-bit SSL encryption — the same standard used by leading banking institutions.
Guaranteed not to be shared without your consentSix core principles that guide how we handle every member's personal data
All data transmitted between your device and Royale36's servers is encrypted using 256-bit SSL technology — the same high-level security standard used by Malaysia's leading banks. This means no third party can intercept or read your information in transit, whether you're logging in, making a deposit, or processing a withdrawal.
Royale36 has never and will never sell, rent, or give away your personal data to marketing companies, data brokers, or any third party for commercial purposes. Your data belongs to you. We use it solely to operate the platform, process transactions, and provide the services you request.
Within Royale36, access to members' personal data is strictly limited and granted on a need-to-know basis. Only staff who require access to perform their duties — such as the customer support and finance teams — are permitted to view sensitive information. All access is logged and reviewed on a regular basis.
You have the right to request that Royale36 delete your personal data from our systems. Requests will be processed within 30 business days, subject to mandatory record-keeping requirements under applicable anti-money laundering laws. Royale36 will inform you which data can be deleted and which must be retained for legal reasons.
In the event of any data security breach affecting your personal information, Royale36 is committed to notifying you within 72 hours of the incident being detected. We will explain what occurred, what data was involved, the steps taken to contain the damage, and what you can do to protect yourself.
Royale36 operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection regulations. This means the collection, processing and storage of your personal data is carried out within a clear legal framework that is accountable to the relevant regulatory authorities.
This Privacy Policy is published by Royale36 Entertainment Ltd ("Royale36", "we", "the platform") and applies to all users and members who register for or use the Royale36 online casino platform, accessible at royale36.best.
We understand that your personal data is important and sensitive. Royale36 is committed to protecting your privacy and ensuring that every piece of data we collect is used only for legitimate, necessary and transparent purposes. This policy explains in detail:
By registering an account or using the Royale36 platform, you consent to the collection and use of your personal data as described in this policy. If you do not agree, please discontinue use of the platform and contact us to have your account deleted.
Note: This policy was last updated on 1 January 2026. Any material changes to how we handle your data will be communicated via email or in-platform notification before the changes take effect.
Royale36 collects various types of personal data depending on how you interact with our platform. Below is a summary of the data categories we collect:
| Data Category | Specific Examples | Collected When |
|---|---|---|
| Identification Data | Full name, date of birth, MyKad/passport number | Registration & KYC verification |
| Contact Data | Email address, Malaysian phone number | Account registration |
| Financial Data | E-wallet accounts (TNG, GrabPay), FPX details | Deposits & withdrawals |
| Game Data | Betting history, wins, losses, and time played | While playing |
| Technical Data | IP address, device type, web browser, and approximate location | Every visit to the platform |
| Communication Data | Support chat transcripts, emails, and complaints | Customer support interactions |
We does not collect credit or debit card numbers directly — all payments are processed through third-party payment providers that comply with PCI DSS security standards, including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX. Royale36 receives only a transaction verification token, never your full card number.
Royale36 uses your personal data for the following purposes:
Regarding Marketing Communications: Royale36 will send you promotional and bonus information via email or in-platform notifications. You may opt out of marketing communications at any time by clicking the unsubscribe link in any email or adjusting your notification settings within your account. Opting out of marketing communications does not affect essential service communications.
Royale36 processes your personal data on valid legal bases in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA):
Royale36 does not sell your personal data. However, in the course of operating the platform, we may need to share certain data with selected third parties in the following circumstances:
In all data-sharing arrangements, Royale36 ensures that only the minimum necessary data is shared, and that recipients are bound by confidentiality and security obligations equivalent to our own standards.
Royale36 invests seriously in security infrastructure to protect your personal data. The technical and organisational security measures we have in place include:
Please note: While we take all reasonable steps to protect your data, no digital security system is 100% impenetrable. You also play an important role in keeping your account secure — use a strong password, never share your login credentials, and contact us immediately if you suspect your account has been compromised.
Royale36 retains your personal data only for as long as necessary to fulfil the purposes outlined in this policy or to comply with applicable legal requirements.
The Royale36 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform operates smoothly. The types of cookies we use:
You can manage your cookie preferences through your web browser settings. Please note that disabling essential cookies will affect your ability to use the Royale36 platform fully.
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices, you have the following rights regarding your personal data held by Royale36:
You have the right to request a copy of the personal data we hold about you and to know how it is being used.
You have the right to request correction of any inaccurate or incomplete personal data we hold about you in our system.
You have the right to request the deletion of your personal data, subject to mandatory retention requirements prescribed by law.
You have the right to object to your data being processed for direct marketing purposes at any time, with no penalty.
You have the right to receive your personal data in a machine-readable format for transfer to another platform if needed.
You have the right to request that Royale36 temporarily restrict the processing of your data while a dispute or review is in progress.
To exercise any of the rights above, please contact the Royale36 privacy team by email at support@royale36.best with the subject line "Privacy Rights Request". We will respond within 30 business days. We may need to verify your identity before processing your request.
Royale36 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements or platform operations. When a material change occurs:
Continued use of the Royale36 platform after any changes take effect will be considered acceptance of the updated policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your data in accordance with Section 9 above.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way Royale36 handles your personal data, please contact us via:
We are committed to responding to all privacy enquiries within 3 business days. For formal requests relating to data subject rights (access, correction, deletion), please allow up to 30 business days for a response, given the identity verification process required.
Our Commitment: Royale36 regards privacy as a fundamental right, not merely a legal obligation. If you feel that the way we handle your data falls short of the standards set out in this policy, we ask that you reach out to us first so we have the opportunity to make things right before any further action is taken.
Whenever you register on any online platform — whether it's a casino, banking, or e-commerce site — you are entrusting them with a portion of your personal information. That trust should never be taken lightly. Royale36 understands that choosing an online casino platform isn't just about finding the best slots or the biggest bonuses. It's also about trusting that the platform will handle your information responsibly and with integrity.
Under Malaysian law, the Personal Data Protection Act 2010 (PDPA) sets clear guidelines on how users' personal data must be collected, processed and protected. Royale36 does not merely comply with the letter of this law — we uphold its spirit. This means we do not collect unnecessary data, we do not use data for purposes you have not consented to, and we do not retain data longer than required.
For online casino players, the security of financial information is one of the most critical privacy concerns. When you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX, you need to be confident that your payment details will not fall into the wrong hands. Royale36 addresses this concern by never storing your full payment account details directly in our systems. Instead, we rely on verification tokens issued by payment providers — meaning that even in a hypothetical scenario where our servers were compromised, an attacker would not gain access to your actual bank account or e-wallet number.
How gaming data is used is another aspect that Royale36 takes seriously from a privacy standpoint. Your betting history, the games you play, the time you spend on the platform — all of this is sensitive data that reveals a great deal about your habits and financial circumstances. Royale36 uses this data primarily for two purposes: first, to ensure bonus and cashback calculations are accurate; second, to detect signs of compulsive gambling that could harm your wellbeing. Gaming data is not shared with third parties for marketing or commercial profiling purposes.
KYC identity verification requirements sometimes raise privacy concerns among casino players. Why does a casino platform need your full name and identification number? The answer lies in anti-money laundering legislation imposed on all legally operating financial and gaming platform operators. KYC requirements are not Royale36's choice — they are a legal obligation. What sets Royale36 apart is how we handle this KYC information: it is stored in an isolated system with strict access controls, encrypted, and never used for any purpose other than identity verification and legal compliance.
The right to erasure — or the right to be "forgotten" — is something many users don't realise they have. At Royale36, we take this right seriously. If you decide to close your account and request data deletion, we will honour that request in full, subject to mandatory retention requirements prescribed by law. We will not attempt to obstruct you or make the process unnecessarily difficult — legitimate requests will be handled promptly, and you will receive confirmation that your data has been deleted or anonymised.
Transparency is a core value in Royale36's approach to privacy. This policy is written in clear, straightforward language — not the dense legal jargon that most users find impossible to parse. We believe our members deserve to know exactly what happens to their data, and that understanding shouldn't require a law degree. If any part of this policy is still unclear or you have specific questions, Royale36's Bahasa Malaysia support team is ready to help you get the answers you need.
Ultimately, privacy at Royale36 is not merely a policy document displayed to satisfy a legal requirement. It is a value that shapes our technical and operational decisions every day — from how we design our databases, to how we train our customer support staff, to how we evaluate any third-party service providers that may need access to our members' data. Your trust is the foundation of Royale36's operations, and we do not take that responsibility lightly.
The questions members ask most often about privacy and data protection at Royale36