Privacy Policy Royal Flush –
Malaysia Player Data Protection

Royal Flush is an online entertainment platform operating for the Malaysian market. We are fully committed to protecting the privacy and data security of all our users, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

This Privacy Policy applies to all individuals who interact with the platform Royal Flush, including:

• Registered players using casino services, Sports Betting, blackjack, live casino, table games, or cricket and badminton betting.
• Website visitors who browse our site without registering.
• Individuals who contact our customer support team.
• Any party involved in a financial transaction with Royal Flush.

Royal Flush only collecting personal data that is necessary to provide a secure, fair, and quality service. The following are the categories of data we collect:

Royal Flush collects your personal data through several different channels:

• Account Registration: When you complete the registration form with your name, email address, phone number, and other required information.
• Identity Verification (KYC): When you upload an identity document such as a Malaysian IC or passport to fulfil verification requirements.
• Financial Transactions: When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u / CIMB Clicks), or submit a withdrawal request.
• Gaming Activity: Automatically collected when you place a football bet, play blackjack, live casino, slots, or any other game on our platform.
• Direct Communications: When you contact our customer support via live chat or email.
• Cookies & Tracking Technologies: Automatically collected when you browse the Royal Flush website – see Section 7 for more details.

Royal Flush uses your personal data solely for legitimate and necessary purposes. The following outlines how we use your data:

• Account Management: Securely create, verify, and manage your player account.
• Transaction Processing: Processing deposits and fund withdrawals in Malaysian Ringgit (RM) via local payment methods.
• Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, and platform abuse.
• Legal Compliance: Meeting regulatory requirements, including reporting obligations to Malaysian statutory bodies.
• Customer Support: Responding to enquiries, resolving issues, and providing assistance to players.
• Responsible Gambling: Monitoring gaming patterns to identify players who may need support and to enforce player-set limits.
• Service Improvements: Analysing usage data to improve platform performance and user experience.
• Service Communications: Sending important notifications relating to your account, security, and promotions (subject to your consent).

Royal Flush does not sell, rent, or trade players' personal data to any third party for marketing purposes. However, we may share personal data in the following limited circumstances:

• Payment Service Providers: Transaction details required are shared with payment providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX banks to process deposits and withdrawals in RM.
• Game Providers: Required technical data is shared with casino and sports gaming software providers solely to ensure the games function properly.
• Regulatory Authorities: When required by Malaysian law or a valid court order.
• Fraud Investigators: In cases of suspected fraud, data may be shared with the relevant law enforcement authorities.
• Technical Service Providers: Third-party providers of infrastructure, data analytics, and cybersecurity services, all bound by strict confidentiality agreements.

All third parties we engage with are required to uphold privacy and data security standards equal to or higher than those of Royal Flush.

Royal Flush implements multiple layers of technical and organisational security controls to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS Encryption: All data communications between your device and our servers are fully protected.
• Two-Factor Authentication (2FA): Available and strongly recommended for all Royal Flush accounts as an added layer of security.
• PCI DSS Standard: Payment information processing and storage complies with international payment card industry standards.
• 24/7 Monitoring: Real-time monitoring systems to detect suspicious activity or intrusion attempts.
• Internal Access Controls: Only authorised personnel may access sensitive data, and all access is logged.
• Regular Security Testing: Penetration testing and security audits are conducted regularly by independent third parties.

Royal Flush uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use:

You can manage or block cookies through your browser settings. However, disabling essential cookies may affect the functionality of the Royal Flush platform.

Royal Flush retaining your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by Malaysian law.

• Active Account Data: Retained for the duration your account is active and for 5 years after account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering legal requirements.
• Communication Logs: Customer support records are retained for 3 years.
• Session Data: Technical activity logs are retained for 90 days.
• KYC Data: Identity verification documents are retained for the duration of the active account and 5 years after closure.

Once the relevant retention period has ended, data will be securely deleted or anonymised using procedures that ensure it cannot be re-identified.

As a player Royal Flush and as a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights, which you may exercise at any time:

To exercise any of the rights above, please contact us at support@royalflush.ws with the subject line "Privacy Rights Request". We will respond within 14 business days.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Royal Flush manage your personal data, please do not hesitate to reach out to us:

We are committed to responding to all privacy enquiries within 14 business days. For more complex complaints or those involving a data breach, we may require up to 30 days and will keep you informed of the progress.