Regal88 Privacy Policy – Serious and Transparent Personal Data Protection for Malaysian Players

1Introduction – Why Privacy Matters to regal88

When you register an account with regal88, play on our platform or carry out any financial transaction, you are entrusting us with your personal information. regal88 does not take this trust lightly — we understand that privacy is not merely a legal requirement but a fundamental right of every user, one we respect fully.

This Privacy Policy document sets out in a transparent and detailed manner how regal88 collects, stores, uses and protects the personal data of all members and visitors to our platform. We have made every effort to use plain, accessible language because we believe you have the right to know exactly what happens with your information — not have it buried under impenetrable legal jargon.

This Privacy Policy applies to all users of the regal88 platform, including those who browse the website without registering an account, registered members who are actively playing, and those who have closed their accounts but whose data is still retained for legal compliance purposes.

2Personal Data regal88 Collects from You

Regal88 collects data in two main ways — information you provide directly when registering or using the platform, and data collected automatically through your use of the platform itself.

Information you provide directly to regal88:

Data collected automatically while you use regal88:

• Technical data: IP address, device type, operating system, browser type and language settings
• Usage data: Pages visited, time spent in each section of the platform, navigation patterns, and features used
• Betting data: Records of all bets placed, markets selected, bet timing, stake amounts and outcomes — retained for legal compliance and dispute resolution purposes
• Session data: Information required to maintain a secure login session while you are using the regal88 platform

Regal88 does not collect sensitive data such as medical information, religious beliefs, political views, or biometric data. All data collected is strictly for the purposes of platform operations, security, and legal compliance.

3How regal88 Uses Your Personal Data

Regal88 uses collected data for limited, clearly stated purposes only. We will not use your data for anything beyond what is listed below without first obtaining your explicit consent:

• Service provision: Running account operations, processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, and settling bets and winnings in MYR
• Identity verification: Ensuring every regal88 member meets the minimum age requirement of 18 years and conducting checks required under Malaysia's anti-money laundering laws
• Platform security: Detecting and preventing fraud, account abuse, multi-account usage, and any activity that violates regal88's terms of use
• Service improvement: Analysing aggregated usage patterns to understand which features are most valuable to Malaysian players and making improvements accordingly
• Service communications: Sending important notifications about your account, such as transaction confirmations, security alerts and policy updates that affect you
• Customer support: Resolving enquiries, complaints and requests submitted through Live Chat or email to the regal88 support team
• Legal compliance: Fulfilling reporting obligations to the relevant authorities when required under applicable Malaysian law

Regal88 may send you marketing communications about the latest promotions and offers via email or platform notifications. You may withdraw your consent to receive such marketing communications at any time through your account settings or by contacting the regal88 support team — opting out will not affect essential service communications.

4Data Sharing with Third Parties

Regal88 does not sell members' personal data to any third party. Data sharing occurs only in the following limited situations, and all third parties involved are bound by strict data protection agreements:

• Payment providers: Information required to process transactions is shared with the e-wallet and banking service providers you choose, including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and banks that support FPX. This data is limited strictly to what is needed to complete the transaction.
• Platform service providers: regal88 works with third-party providers that assist in operating the platform, including licensed game providers, identity verification services and technology infrastructure partners. All such providers are bound by data processing agreements that prohibit them from using your data for their own purposes.
• Legal authorities: regal88 will disclose data to Malaysian authorities such as Bank Negara Malaysia or the police when required by a court order, warrant or applicable law. We will inform you of such disclosures where we are not legally prohibited from doing so.
• Fraud investigation: In cases where there is evidence of serious fraud, money laundering or other financial crime, regal88 may share relevant information with authorised investigators as part of its civic responsibility.

5regal88 Data Security & Protection Measures

Regal88 invests heavily in cybersecurity infrastructure to ensure the personal data of all members remains protected against both internal and external threats. The security measures we have in place include:

• Data encryption in transit: All communications between your device and regal88's servers are encrypted using TLS 1.3 protocol with 256-bit SSL certificates. This means that even if someone were to intercept your network traffic, the data would be completely unreadable without the decryption key.
• Data encryption at rest: Sensitive data such as financial details and identification information is encrypted within the database using industry-recognised encryption algorithms before being stored.
• Role-based access control: Only regal88 staff who require access to specific data in order to perform their duties are permitted to do so — and every access is recorded in an immutable audit log.
• Two-factor authentication: All regal88 internal admin accounts are protected by two-factor authentication. Members are also encouraged to enable 2FA via SMS OTP for their own accounts.
• Regular penetration testing: regal88 conducts regular security testing, including penetration testing by independent security experts, to identify and address vulnerabilities before they can be exploited.
• Real-time threat monitoring: regal88's monitoring system operates 24 hours a day to detect suspicious activity, intrusion attempts and anomalies that may indicate a security breach.

While regal88 takes all reasonable steps to protect your data, no security system can offer a 100% guarantee against every threat. We recommend that you also take personal security measures, such as using a strong, unique password and enabling two-factor authentication on your regal88 account.

6Data Retention Period and Deletion Policy

Regal88 retains your personal data for as long as it is needed for the purposes for which it was collected, taking into account applicable legal requirements. Below are the general data retention guidelines at regal88:

• Active account data: As long as your regal88 account remains active, data related to your account operations is retained to ensure you receive the full range of services available to you.
• Financial record data: Records of all financial transactions are retained for a minimum of 7 years after the transaction occurs, in line with Malaysian tax and anti-money laundering legal requirements
• Betting records data: A complete record of all bets is retained for 5 years for dispute resolution, audit and legal compliance purposes
• Support communication data: Live Chat transcripts and support emails are retained for 2 years from the date the communication took place
• Closed account data: After an account is voluntarily closed, your personal data will be retained for the period required by law (typically 7 years for financial records) before being securely deleted

Once the retention period has lapsed or the data is no longer needed for its original purpose, regal88 will securely delete or anonymise your personal data using methods that ensure it cannot be recovered.

If you wish to request early deletion of your personal data before the standard retention period expires, you may submit a request to the regal88 team. We will process the request and inform you of which data can be deleted and which must be retained to fulfil our legal obligations.

7Cookies, Tracking Technologies, and How to Manage Them

Regal88 uses cookies and similar tracking technologies to enhance the user experience, maintain secure login sessions and understand how players use our platform. Below are the types of cookies we use:

You can manage your cookie settings through your internet browser at any time. Please note that disabling essential cookies will affect regal88's security features and may prevent you from logging in or completing transactions safely. Analytics and preference cookies are optional and can be turned off without affecting the platform's core functionality.

8Child Protection and Minimum Age Policy

Regal88 is a platform designed exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18. If you discover that someone under your care has registered an account with regal88 without authorisation, please contact our support team immediately.

In such situations, regal88 will:

• Immediately suspending the account in question upon receiving a report
• Conducting identity checks to verify the account holder's age
• Deleting all personal data associated with the account if the user is confirmed to be underage
• Returning any remaining funds once the investigation has been completed
• Reporting the incident to the relevant authorities where required by law

Regal88 uses a multi-layered age verification system during registration, including date of birth checks, OTP verification via registered phone number and identity document checks for certain transactions. This forms part of our commitment to responsible gaming — starting from the very first step: account registration.

9Cross-Border Data Transfers

In the course of operating the regal88 platform, some of your personal data may be processed or stored on servers located outside Malaysia. This occurs when regal88 engages third-party service providers such as cloud computing infrastructure or game provider systems based overseas.

Regal88 ensures that all cross-border data transfers are protected by adequate mechanisms, including:

• Data processing agreements with all third-party providers containing strict data protection clauses
• The requirement that third-party providers meet data security standards equal to or exceeding those that regal88 applies itself
• Use of recognised data transfer mechanisms such as standard contractual clauses when data is transferred to jurisdictions without data protection laws equivalent to Malaysia's

You may request further information about the data transfer mechanisms we use for specific situations by contacting the regal88 team through the channels listed in the contact section of this document.

10Your Privacy Rights and How to Exercise Them

Regal88 respects every member's right to privacy and is committed to making it easy for you to exercise those rights without unnecessary obstacles. Below is a detailed explanation of each right you hold:

• Right of Access: You have the right to request and receive a copy of all personal data that regal88 holds in relation to your account. Such requests will be processed within 14 business days from the date of receipt.
• Right to Rectification: If any personal data we hold is inaccurate or out of date, you have the right to request immediate correction. For basic account information, you can make corrections directly through your regal88 account profile settings.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data. Please note that some data may not be eligible for deletion if it is required to fulfil legal obligations such as financial records — we will inform you of which data is subject to such restrictions.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain situations — for example, while a dispute regarding the accuracy of your data is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format such as CSV or JSON for transfer to another service.
• Right to Object to Marketing: You may object to the use of your data for marketing communications at any time — such requests will be honoured immediately without affecting essential service communications.

To exercise any of the rights listed above, please contact the regal88 team by email at support@regal88.run with the subject line "Privacy Rights Request", or via the 24-hour Live Chat on the platform. Please specify the right you wish to exercise, your account number, and any additional relevant information to help us process your request promptly and accurately.

11Amendments to this Privacy Policy

Regal88 reserves the right to update this Privacy Policy from time to time to reflect changes in our platform's operations, applicable law, or in response to user feedback requiring greater clarity on our privacy practices.

When material changes are made to how we collect, use, or protect your personal data, regal88 will provide clear notice to all members through:

• An in-platform regal88 notification displayed upon your next login, requiring acknowledgement that you have been made aware of the amendment
• An email to the registered email address on your account at least 14 days before any material amendment takes effect
• Update the "Last Updated" date shown at the top of this document

For minor amendments such as language corrections, clearer explanations or changes that do not materially affect your rights, regal88 may update the document without a specific notice — even so, the last updated date will always be revised to reflect any changes made.

We encourage you to review this page periodically. Continued use of the regal88 platform after any amendments take effect constitutes your acceptance of the updated privacy policy.

12Contact the regal88 Privacy Team

If you have any questions, concerns or requests regarding your privacy and data protection at regal88, you are welcome to reach us through the following channels:

• Email: support@regal88.run — for written requests relating to privacy rights, reports of suspected data breaches or detailed enquiries requiring a documented response. Use the subject line "Privacy Enquiry" to ensure your request is routed to the right team.
• Live Chat: Available 24 hours a day, 7 days a week, directly within the regal88 platform. Ideal for general enquiries about the privacy policy or for initial guidance before submitting a formal request via email.

The regal88 team handling privacy enquiries is proficient in Bahasa Melayu and is committed to providing clear, helpful responses — not templated replies that fail to address your question. Our response time for privacy-related enquiries is within 24 hours for general queries and within 14 business days for formal privacy rights requests.

If you are not satisfied with how regal88 has handled your personal data after contacting us, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.

Effective Date: 1 January 2026 · Version: 2.4 · © 2026 regal88. All rights reserved.