IRoyal Privacy Policy – Member Personal Data Protection

1 Information We Collect

IRoyal collects your personal information through various methods — either directly when you register or use the platform, or automatically through technologies such as cookies. The following are the categories of information we collect:

A) Registration and Account Information

• Full name as per identity card
• Date of birth (for age verification)
• Email address and mobile phone number
• Username and password (stored in encrypted form)
• Country and residential address

B) Identity Verification Information (KYC)

• Copy of identity card, passport, or valid identification document
• Proof of address (utility bill, bank statement, or similar)
• Selfie photo for facial verification if required
• Information on payment methods used

C) Platform Activity Information

• Deposit, withdrawal, and transaction history records
• Gaming history and wagering activity
• Communication logs with the customer support team
• Your account preferences and settings

D) Technical Information (Collected Automatically)

• IP address and general location based on IP
• Web browser type and device operating system
• Website usage data via cookies and analytics tools
• Access time and pages visited

2 How We Use Your Information

Collected information is used solely for legitimate purposes related to the operation of the iRoyal platform. Below is a summary of how we use your data:

IRoyal also uses your information to send important account notifications, security updates, and — with your consent — relevant promotional offers. You may withdraw consent for marketing communications at any time through your account settings.

3 Sharing Information with Third Parties

IRoyal does not sell or disclose your personal information to third parties for marketing purposes. However, there are specific situations where data sharing is necessary and lawful:

• Payment service provider: To securely process your deposits and withdrawals, the required financial information is shared with approved payment providers and is subject to their own privacy policies.
• Game software provider: Minimum technical data is shared with third-party game providers partnering with iRoyal, solely to ensure a smooth gaming experience.
• Legal authorities: iRoyal will disclose required information when mandated by court order, requests from legitimate authorities, or to comply with legal obligations under PDPA 2010 and related legislation.
• Companies within the same group: In certain circumstances, information may be shared with iRoyal affiliated entities, subject to the same protections outlined in this Policy.

4 Cookies and Tracking Technologies

IRoyal uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Essential Cookies: Required for the platform to function properly — including login session verification and security. These cookies cannot be disabled.
• Preference Cookies: Saves your preferences such as language, currency, and display settings for a seamless experience on return visits.
• Analytics Cookies: Helps us understand how members use the platform so we can continuously improve our services. This data is collected in aggregate and does not directly identify individuals.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect member accounts from unauthorised access.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect platform functionality. For more information, refer to your web browser's documentation.

5 Data Security and Protection

Protecting your personal data is a responsibility we take very seriously. iRoyal implements a range of technical and organisational security measures to ensure your data remains safe at all times:

• 256-bit SSL Encryption for all data transmitted between your device and iRoyal's servers.
• Data encryption at rest — sensitive information such as passwords and financial details is stored in encrypted form and cannot be read even by our staff.
• Strict access controls — only authorised staff may access members' personal data, and every access is logged for audit purposes.
• 24/7 security monitoring through an automated threat detection system that identifies and blocks suspicious activity in real time.
• Regular penetration testing by independent security experts to identify and address system vulnerabilities before they can be exploited.
• Two-factor authentication (2FA) available for all member accounts as an additional layer of protection.

While we take all reasonable measures, no digital system can be guaranteed 100% secure. We therefore also encourage you to take your own precautions, such as using a strong password and not sharing your login credentials.

6 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and iRoyal's internal policies, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our customer support team via live chat on the platform. We will process your request within 30 business days. In certain cases requiring additional verification, this period may be extended with prior notification to you.

7 Data Storage and Retention Period

IRoyal retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy, or as required by law. The following are our data retention guidelines:

• Active account data: Retained for the duration your account remains active and in use.
• KYC and identity verification data: Retained for a minimum of 5 years after account closure, in compliance with anti-money laundering legal requirements.
• Financial transaction records: Retained for 7 years for audit and tax compliance purposes.
• Customer support communication log: Retained for 2 years after the last interaction.
• Analytics and technical data: Stored in aggregate form for no more than 24 months.

Once the retention period expires, your data will be securely deleted or anonymised in accordance with iRoyal's internal procedures. You may request account closure and data deletion at any time by contacting our support team.

8 Changes to This Privacy Policy

IRoyal reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Any material changes will be communicated to you via:

• In-platform notifications on iRoyal
• Email sent to the address registered in your account
• Updates to this page with a new effective date

Your continued use of the iRoyal platform after any changes are published indicates your acceptance of the updated Privacy Policy. We recommend reviewing this page periodically. If you disagree with any changes, you have the right to close your account by contacting our support team.