Privacy Policy iRoyal — Data Protection & Your Information Security

IRoyal ("we", "our platform" or "iRoyal.app") cares about the privacy of every individual who uses our services. This Privacy Policy transparently explains how we collect, use, store, and protect your personal information when you register and use the iRoyal online entertainment platform.

This document forms part of the agreement between you and iRoyal and should be read together with Terms and Conditions us. By registering an iRoyal account or using any of our services, you confirm that you have read, understood, and fully accepted this Privacy Policy.

IRoyal operates in accordance with international data protection principles and is committed to ensuring your personal data is processed lawfully, fairly, and transparently. We continuously update our data protection practices in line with the latest technological developments and regulations.

IRoyal collects various types of information from our users to enable us to provide a secure, efficient, and personalised service. The following are the categories of information we collect:

Information You Provide Directly

• Full name as shown on your official identity document.
• Active email address and mobile phone number.
• Date of birth for age verification (18 years and above).
• Current residential address including city, state, and postcode.
• Copies of identity documents (MyKad, passport) for the KYC process.
• Bank account or e-wallet details for deposit and withdrawal purposes.
• Passwords are stored in hashed format — unreadable by anyone.

Automatically Collected Information

• IP address and geographic location information at the country or city level.
• Device type, operating system, and browser version used.
• Game session data including start time, end time, and game type.
• Deposit and withdrawal transaction history within the platform.
• Click, navigation, and in-platform interaction data for the purpose of improving user experience.
• Technical error logs that help us identify and resolve system issues.

IRoyal uses collected personal data solely for legitimate and necessary purposes to ensure our platform operates effectively and delivers the best experience to every member. We never use your data for purposes beyond the scope stated below:

• Account Management: Creating, verifying and managing your iRoyal account including the KYC process and age verification.
• Transaction Processing: Processing all deposits and withdrawals securely and accurately in accordance with your chosen payment method.
• Customer Service: Responding to enquiries, resolving complaints and providing technical support to you.
• Platform Security: Identifying and preventing fraud, money laundering, account breaches and other illegal activities.
• Product Improvement: Analysing usage patterns to improve the platform's interface, performance and features.
• Account-Related Communications: Sending important notifications related to your account, transactions, security and policy updates.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of addiction and offer appropriate support.
• Legal Compliance: Fulfilling legal obligations and reporting requirements to relevant authorities when required.

IRoyal understands the importance of your data confidentiality. We do not share your personal information with external parties except in the following limited situations and with appropriate safeguards in place:

Trusted Service Providers

IRoyal works with selected third-party service providers to support our platform operations. These include payment processors, licensed gaming software providers, cloud service providers, and identity verification companies. All third parties are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.

Legal Requirements

IRoyal may disclose your information to government authorities, law enforcement bodies, or regulatory authorities when required to do so by law, court order, or valid legal proceedings.

Fraud Prevention

To prevent fraud and money laundering, iRoyal may share necessary information with trusted security agencies or other licensed gaming platforms as part of an industry-wide mutual protection programme.

IRoyal continually invests in the latest security infrastructure to protect your personal data from cyber threats, unauthorised access, and data breaches. Our key security measures include:

• Data Encryption in Transit: All communications between your device and iRoyal's servers are secured by TLS 1.3 protocol with AES-256 encryption.
• Data Encryption at Rest: Sensitive information such as financial details and identity documents are stored in encrypted format in our database.
• Two-Factor Authentication (2FA): iRoyal supports and encourages the use of 2FA on all accounts to provide an additional layer of protection.
• 24/7 Monitoring: Our cybersecurity team continuously monitors platform activity to detect and respond to any threats swiftly.
• Regular Security Audits: iRoyal undergoes regular penetration testing and independent security audits by certified security firms.
• Internal Access Controls: The principle of least privilege access is applied — only staff who genuinely require access to specific data are permitted to do so.

IRoyal uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and ensure the security of your login sessions. The following are the types of cookies we use:

Essential Cookies

These cookies are required for core platform functions including login session verification, game basket and security settings. The platform cannot function properly without these cookies and they cannot be disabled.

Performance Cookies

These cookies collect information about how you use our platform — pages visited, time spent and any error messages encountered. All information collected is anonymous and used solely to improve platform performance.

Functional Cookies

These cookies allow the platform to remember your preferences such as language, time zone and display settings so you don't need to reconfigure them every time you log in.

Analytics Cookies

IRoyal uses internal analytics services to understand usage patterns on an aggregate basis. Data collected cannot identify you individually and is used for data-driven decisions to improve our products.

As an iRoyal member, you have certain rights regarding your personal data. iRoyal fully respects and facilitates the exercise of these rights:

To exercise any of the rights above, please contact the iRoyal privacy team via Live Chat or email at [email protected]. We will process your request within 30 business days.

IRoyal retains your personal data only for as long as necessary to fulfil the purpose of collection and applicable legal obligations. Our data retention policy is as follows:

• Active Account Data: Retained for the duration that your account remains active on the iRoyal platform.
• Transaction Records: Retained for a minimum of 7 years in accordance with applicable financial legislation and tax reporting requirements.
• KYC Documents: Retained for 5 years after account closure as required by anti-money laundering regulations.
• Communication Logs: Customer support conversation records are retained for 2 years for quality assurance and reference purposes.
• Technical Data: Technical logs and analytics data are retained for 12 months before being securely deleted or anonymised.
• After Account Closure: Data that does not need to be retained for legal obligations will be securely deleted within 90 days of account closure.

The iRoyal platform may contain links or integrations to third-party services such as licensed game providers, payment processors, and support service providers. It is important that you understand the following:

• IRoyal's Privacy Policy applies only to data collected directly by the iRoyal platform.
• When you interact with third-party services integrated within our platform, their privacy practices may differ from ours.
• IRoyal selects third-party partners that maintain privacy and security standards equivalent to our own.
• We are not responsible for the privacy practices of external websites or services that you may access via links on our platform.

We encourage you to read the privacy policy of any third party whose services you access through the iRoyal platform to fully understand how your data is handled.

IRoyal reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform enhancements. We are committed to ensuring you are always informed about how we manage your data.

When significant changes are made to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying in-platform notifications to logged-in iRoyal members.
• Sending notification emails to the address registered in your account for material changes.

Continued use of the iRoyal platform after any changes are published means you accept the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account before the new version takes effect.

If you have any questions, concerns, or requests regarding this Privacy Policy or iRoyal's handling of your personal data, our team is available to assist you at any time.

For complaints that cannot be resolved through the channels above, you have the right to refer to the relevant data protection authority in your country. iRoyal cooperates fully with legitimate authorities in any investigation related to the handling of personal data.

For more information on how we operate the platform responsibly, please visit the Responsible Gaming us.