Privacy Policy Royal999 —
Personal Data Protection for Malaysia Members

1 Introduction & Scope of Privacy Policy

Royal999 ("we", "Platform") takes member privacy very seriously. This Privacy Policy explains in detail how we collect, process, store and protect the personal information you provide when registering for and using the royal999 platform.

This policy applies to all users of the Royal999 platform, including the website at royal999.run, the mobile app for Android and iOS, and all related services we offer. By registering as a member or using any of our services, you acknowledge that you have read and understood this Privacy Policy.

Royal999 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international privacy legislation. Our goal is to ensure that your data is always handled transparently, responsibly, and in accordance with applicable law.

2 Personal Data We Collect

Royal999 only collects information necessary to operate our services properly and securely. The following are the categories of data we collect:

We do not collect sensitive data such as religious, ethnic, health, or political information unless required by applicable law.

3 Purpose of Personal Data Use

Every piece of data collected by royal999 has a clear and legitimate purpose. We use your information for the following purposes:

• Account Management: Create and maintain your member account, including identity verification and login security.
• Transaction Processing: Process deposits, withdrawals and all financial transactions on the platform accurately and securely.
• Customer Support: Respond to enquiries, resolve technical issues and provide assistance with platform usage.
• Platform Security: Detect and prevent fraud, money laundering, unauthorised access and other illegal activities.
• KYC/AML Compliance: Fulfil legal requirements related to identity verification and anti-money laundering.
• Service Improvement: Analyse usage patterns to improve platform functionality, speed and user experience.
• Service Communications: Send important notifications regarding your account, transactions and policy changes.
• Promotions (with consent): Send relevant bonus offers and promotions if you have consented to receive them.

4 Data Sharing & Disclosure

Royal999 does not sell, rent, or disclose members' personal data to third parties for marketing purposes. However, in the following limited situations, data may be shared with certain parties:

• Payment Service Providers: Required transaction information is shared with payment processors such as FPX, Touch 'n Go and GrabPay solely to complete your transactions.
• KYC Service Providers: Identity verification documents are shared with appointed KYC service providers for verification purposes only.
• Regulatory Authority: royal999 will disclose required data when mandated by law or upon a valid request from Malaysian authorities.
• Fraud Prevention Services: Data required to detect fraudulent activity may be shared with approved third-party security monitoring systems.

All third parties who receive your data are bound by strict confidentiality and data protection agreements. They are only permitted to use that data for the specified purposes.

5 Data Security & Encryption

Royal999 invests seriously in security infrastructure to protect members' personal data. The following are the security measures we implement:

• 256-bit SSL Encryption: All communications between your device and our servers are protected by 256-bit SSL encryption, making data unreadable to unauthorized parties even if intercepted.
• Encrypted Database: Sensitive data such as KYC information and bank account numbers are stored in encrypted format in our database.
• Multi-Layered Access Control: Only authorized staff with specific permission levels may access member data, and every access is logged for audit purposes.
• 24/7 Security Monitoring: Our security team continuously monitors the system to detect any unauthorised access attempts or suspicious activity.
• Regular Security Audits: The royal999 platform undergoes regular security audits by independent experts to identify and address any system vulnerabilities.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA to add an extra layer of security to their account.

While we take all reasonable steps to protect your data, no system can guarantee absolute 100% security. You also play an important role in keeping your login credentials safe.

6 Cookies & Tracking Technologies

Royal999 uses cookies and similar tracking technologies to enhance the user experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collect anonymised information on how users interact with the platform to help us identify areas for improvement.
• Preference Cookies: Save your preferences such as language, display settings and game choices so you do not need to reconfigure them each time you log in.

You can manage cookie settings through your internet browser settings. However, disabling certain cookies may affect the functionality and user experience of the Royal999 platform.

7 Your Rights as a Royal999 Member

As a royal999 member and an individual in Malaysia, you have the following rights regarding your personal data:

• Right to Access Supported
  You may request a copy of the personal data we hold about you at any time.
• Right to Rectification Supported
  You have the right to correct any inaccurate or incomplete information in our records.
• Right to Deletion Supported
  You may request the deletion of your personal data, subject to our legal obligations to retain certain records.
• Right to Object to Processing Supported
  You may object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability Supported
  You may request your data in a machine-readable format for transfer to another platform.

To exercise any of the above rights, contact the royal999 customer support team via live chat within the platform. We will process your request within 30 business days.

8 Data Storage & Retention Period

Royal999 retains members' personal data for as long as your account is active or as long as necessary to provide our services. For closed accounts, we retain certain records for the period required by law.

• Financial transaction records retained for a minimum of 7 years in accordance with Malaysia's financial regulatory requirements.
• KYC documents and identity verification retained for 5 years after account closure or the end of the business relationship.
• Customer support communication logs retained for 2 years for reference and dispute resolution purposes.
• Technical data and security logs retained for 1 year for security monitoring and incident investigation purposes.

Once the required retention period has ended, your data will be securely deleted or anonymized in accordance with established data handling procedures.

9 Children's Data Protection

Royal999 is a platform designed exclusively for adults aged 18 and above. We do not knowingly collect or process personal data of children under the age of 18.

If we find that information has been collected from a minor without proper age verification, we will take immediate steps to delete that information and close the account in question. If you believe your child has registered on our platform, please contact our support team immediately.

10 Privacy Policy Amendments

Royal999 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our data processing practices, current legal requirements, or improvements to our platform services.

Any significant changes will be communicated to members via their registered email or in-platform notification at least 14 days before the changes take effect. The "Last Updated" date at the top of this document reflects the date the latest amendment was made.

Continued use of the royal999 platform after any Privacy Policy changes are published constitutes your acceptance of the updated Policy. If you disagree with the changes, you have the right to close your account before they take effect.

11 Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our privacy team through the following channels:

• Live Chat: Available 24/7 within the royal999 platform — the fastest way to get a response.
• Email: [email protected] — for written inquiries requiring documentation.

We are committed to addressing all privacy-related inquiries seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to refer your complaint to the Department of Personal Data Protection Malaysia (JPDP) or the relevant regulatory body.