Privacy Policy —
Your Data at 444royal

1.Introduction

This Privacy Policy (hereinafter "Policy") is issued by 444royal (hereinafter "444royal", "the Platform", "the Operator", "We", "Us", or "Our") and applies to all personal data collected, processed, and stored in connection with your use of the 444royal online gaming platform, accessible at 444royal.cam (the "Website"), including any mobile interfaces or associated services made available by 444royal.

444royal recognises that the protection of personal data is a matter of fundamental importance to our members. We are committed to processing personal data fairly, lawfully, and transparently — collecting only what is necessary, retaining it only for as long as required, and safeguarding it with industry-standard technical and organisational security measures.

This Policy is intended to inform you clearly about your privacy rights and our obligations. It should be read in conjunction with our Terms & Conditions, which govern the broader contractual relationship between you and 444royal. By registering an account, making a deposit, or otherwise using the 444royal platform, you acknowledge that you have read and understood this Policy.

2.Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" — Any information relating to an identified or identifiable natural person. This includes, but is not limited to, name, date of birth, residential address, email address, phone number, device identifiers, and financial information.
• "Processing" — Any operation performed on Personal Data, including collection, storage, use, disclosure, alteration, retrieval, and deletion.
• "Data Controller" — The entity that determines the purposes and means of processing Personal Data. For data collected via the 444royal platform, the Data Controller is 444royal.
• "Data Processor" — A third party that processes Personal Data on behalf of the Data Controller, under binding contractual obligations and under the instructions of 444royal.
• "Data Subject" — The identified or identifiable natural person to whom Personal Data relates — in most cases, a registered Player on the 444royal platform.
• "Consent" — A freely given, specific, informed, and unambiguous indication by which a Data Subject signifies agreement to the processing of their Personal Data for a stated purpose.
• "KYC Data" — Identity and address verification documents provided by a Player for the purpose of Know Your Customer compliance, including government-issued identification and proof of address documents.

3.Data Controller

444royal acts as the Data Controller for all Personal Data collected through the 444royal platform. As Data Controller, 444royal determines the purposes for which Personal Data is processed and the means by which such processing occurs.

Where 444royal engages third-party service providers — such as payment processors, identity verification services, fraud prevention systems, or game content providers — to process Personal Data on its behalf, those providers act as Data Processors. 444royal enters into appropriate data processing agreements with all Data Processors to ensure that Personal Data is handled securely and in accordance with applicable data protection standards.

For all data protection enquiries, requests to exercise your rights, or complaints relating to the processing of your Personal Data, please contact the 444royal data team at: [email protected]

4.Data We Collect

444royal collects the following categories of Personal Data, depending on your interaction with the platform:

• Full legal name, date of birth, and nationality
• Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
• Email address and mobile phone number
• Username and encrypted password
• Government-issued identification documents (MyKad, passport, or driving licence) provided during KYC verification

• Deposit and withdrawal transaction records, including amounts in Malaysian Ringgit (MYR / RM)
• Payment method identifiers — e.g., e-wallet account references for Touch 'n Go eWallet, Boost, GrabPay; bank account details for DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong
• Transaction timestamps and status records
• Source of funds declarations where required for AML compliance

• Game session records — titles played, wagers placed, outcomes, session duration
• Sports betting history — markets selected, stakes, odds, settlement outcomes
• Bonus usage records, including wagering progress and completion status
• Responsible gambling tool settings — deposit limits, loss limits, self-exclusion status

• IP address and approximate geolocation data derived therefrom
• Device type, operating system, and browser information
• Cookie identifiers and session tokens (see Section 11)
• Platform access logs, including login timestamps and page navigation data

• Records of live chat, email, and support ticket interactions with the 444royal customer service team
• Feedback, complaints, and dispute records
• Marketing preference settings and communication consent records

5.How We Collect Data

444royal collects Personal Data through the following means:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact support, or update your account settings.
• Automatically through platform use — via server logs, cookies, session tracking technologies, and analytics tools that record how you interact with the platform.
• From third-party service providers — including identity verification services that cross-reference your submitted documents against official databases, and payment processors that confirm transaction status.
• From fraud prevention and AML systems — which may flag or enrich account data based on risk indicators identified during transaction monitoring.

6.Data Processing & Purposes

444royal processes your Personal Data for the following specific purposes:

7.Legal Basis for Processing

444royal processes Personal Data on one or more of the following legal bases, as applicable to each processing activity:

Processing is necessary for the performance of the contract between you and 444royal — including account creation, delivering gaming services, processing financial transactions, and fulfilling bonus obligations. Without this processing, 444royal would be unable to provide the services described in the Terms & Conditions.

Certain processing activities are required to comply with legal and regulatory obligations applicable to 444royal's operations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, age verification under responsible gambling regulations, and record-keeping obligations under applicable licensing conditions.

444royal processes certain Personal Data where necessary for legitimate business interests — including fraud detection and prevention, platform security, responsible gambling monitoring, and improving the quality of the gaming experience. In each case, 444royal has assessed that these interests do not override the fundamental rights and freedoms of Data Subjects.

Where 444royal relies on your consent for processing — principally for the delivery of marketing communications — such consent is obtained separately, clearly, and may be withdrawn at any time by contacting the support team or adjusting your account notification settings.

8.Data Sharing & Disclosure

444royal does not sell, rent, or otherwise commercially disclose your Personal Data to third parties for their own marketing purposes. Personal Data may be shared with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment Service Providers — Including Touch 'n Go eWallet, Boost, GrabPay, DuitNow processors, FPX gateway operators, and banking partners (Maybank, CIMB, Public Bank, Hong Leong), solely to facilitate deposit and withdrawal transactions.
• Identity Verification Services — Third-party KYC providers engaged to verify identity documents and confirm the eligibility of Players prior to account activation or withdrawal processing.
• Fraud Prevention & AML Systems — Specialist service providers engaged to monitor transaction patterns, detect suspicious activity, and assist with Anti-Money Laundering compliance obligations.
• Game Content Providers & Platform Technology Partners — Third-party game studios and technology vendors who may receive limited session and account data necessary to deliver game content and ensure fair play.
• Customer Support Infrastructure Providers — Systems used to manage live chat, email ticketing, and support workflows. These providers process data under strict confidentiality and data processing agreements.
• Regulatory & Law Enforcement Authorities — Where required by applicable law, court order, regulatory direction, or in connection with investigations into suspected criminal activity including fraud, money laundering, or underage gambling.

All third-party recipients of Personal Data are bound by contractual data processing obligations and are prohibited from using the data for any purpose beyond what has been specified by 444royal.

9.International Data Transfers

Given the global nature of online gaming operations, Personal Data collected by 444royal may be transferred to, stored in, and processed in jurisdictions outside of Malaysia. Where such international transfers occur, 444royal ensures that appropriate safeguards are in place to protect your Personal Data, including contractual protections equivalent to applicable international data protection standards.

Where Personal Data is transferred to countries that do not provide a level of data protection equivalent to that applicable in your jurisdiction, 444royal will implement supplementary measures — such as standard contractual clauses or equivalent binding arrangements — to maintain an adequate level of protection.

10.Data Retention

444royal retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required to comply with applicable legal and regulatory obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your registered account relationship with 444royal, and updated as required to remain accurate.
• Transaction & Financial Records: Retained for a minimum of five (5) years following the date of the transaction, in accordance with AML record-keeping obligations and applicable licensing requirements.
• KYC & Identity Documents: Retained for a minimum of five (5) years following Account closure or last transaction, whichever is later, in accordance with regulatory obligations.
• Communications Records: Support interactions and correspondence retained for a minimum of three (3) years for dispute resolution and audit purposes.
• Marketing Consent Records: Retained for the duration of the consent, plus three (3) years following withdrawal of consent, as evidence of compliance.

Upon the expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that prevents re-identification.

11.Cookies & Tracking Technologies

The 444royal platform uses cookies and similar tracking technologies to deliver and improve the gaming experience, authenticate users, prevent fraud, and analyse platform performance. A cookie is a small data file stored on your device by your web browser at the direction of the platform.

• Strictly Necessary Cookies: Required for the platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your preferences — such as language settings, layout configurations, and responsible gambling tool parameters — to personalise your experience.
• Analytics Cookies: Collect aggregated information about how players navigate the platform, enabling 444royal to identify performance issues and improve service quality. Data collected is anonymised where possible.
• Security & Fraud Prevention Cookies: Assist in identifying suspicious session behaviour, bot activity, and anomalous access patterns to protect the integrity of the platform and player accounts.

You may configure your browser to refuse non-essential cookies at any time. Please note that disabling certain cookie categories may affect the functionality or security of your gaming session. 444royal does not use third-party advertising cookies or retargeting technologies.

12.Your Rights as a Data Subject

Subject to applicable data protection law, registered Players of the 444royal platform hold the following rights with respect to their Personal Data. To exercise any of these rights, please contact our support team at [email protected]

13.Data Security

444royal implements comprehensive technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption applied to all data transmitted between your device and the 444royal platform, ensuring that communications cannot be intercepted in transit.
• Encrypted Password Storage — passwords are hashed using industry-standard one-way cryptographic algorithms. 444royal staff cannot access your plaintext password.
• Access Controls — Personal Data is accessible only to authorised personnel on a strict need-to-know basis. Access logs are maintained and regularly audited.
• Segregated Data Architecture — Player financial data is stored in segregated systems separate from operational platform infrastructure.
• Regular Security Assessments — The platform undergoes periodic penetration testing and vulnerability assessments conducted by qualified security professionals.
• Incident Response Procedures — In the event of a data breach that poses a risk to your rights, 444royal will notify affected Data Subjects and relevant authorities within applicable regulatory timeframes.

While 444royal takes all reasonable steps to protect your Personal Data, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your 444royal account and to report any suspected unauthorised access immediately via the support team.

14.Minors & Age Restriction

The 444royal platform is strictly intended for persons aged 21 years and above. 444royal does not knowingly collect, process, or retain Personal Data from individuals under the age of 21.

As part of our commitment to responsible gambling and child protection, 444royal conducts age verification checks during the account registration process and again prior to first withdrawal. Where it is determined that an account has been registered by a person under the age of 21, the account will be immediately closed, all associated data will be deleted to the extent permitted by law, and any deposited funds will be returned to the verified legal guardian or depositing payment method where possible.

15.Policy Amendments

444royal reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing activities, applicable law, or platform operations. The effective date of the current version is displayed at the top of this page.

Where amendments are material — for example, where new categories of data are collected or new purposes for processing are introduced — 444royal will notify registered Players by email or via a platform notification prior to the changes taking effect. Continued use of the 444royal platform following publication of an updated Policy constitutes your acceptance of the revised terms.

You are encouraged to review this Policy periodically. Archived versions of this Policy are available upon request by contacting the support team.

16.Contact & Complaints

For all data protection enquiries, requests to exercise your rights under this Policy, or complaints regarding how 444royal handles your Personal Data, please contact us using the details below:

If you are dissatisfied with 444royal's handling of a data protection complaint, you may have the right to escalate the matter to the relevant data protection authority in your jurisdiction. 444royal will cooperate fully with any such regulatory inquiry.