iRoyal is committed to protecting the personal data of every member. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and the rights available to you under internationally recognised data protection standards.
All personal data transmitted between your device and iRoyal's servers is protected by 256-bit SSL/TLS encryption — the same standard used by major Malaysian banks.
iRoyal does not sell, rent, or trade your personal information to third parties for marketing purposes. Your data belongs to you.
You have the right to access, correct, or request deletion of your personal data at any time by contacting our support team.
We use cookies to improve your experience. We explain exactly what cookies we use, why we use them, and how you can manage your cookie preferences.
We collect only the data that is necessary to operate the platform, verify your identity, process payments, and comply with our legal obligations.
In the unlikely event of a data security breach affecting your personal information, iRoyal commits to notifying affected members promptly and transparently.
This Privacy Policy ("Policy") describes how iRoyal ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects personal data belonging to individuals ("you", "User", "Member") who register for or interact with the iRoyal online gaming platform available at https://iroyal.cam.
iRoyal operates as an international online gaming platform serving members across multiple markets, including Malaysia. We are committed to handling personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. While iRoyal is not subject to the Malaysian Personal Data Protection Act 2010 (PDPA) by virtue of operating under an international gaming licence, we voluntarily align our data practices with the core principles of the PDPA and comparable international frameworks, including the General Data Protection Regulation (GDPR) principles of transparency, purpose limitation, and data minimisation.
By registering an account, depositing funds, or otherwise using the iRoyal platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree, you should not use the platform.
This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together form the full framework governing your use of iRoyal.
For the purposes of this Privacy Policy, the following terms shall carry the meanings set out below:
iRoyal collects the following categories of personal data in connection with the operation of the platform and the provision of gaming services to Malaysian and international members:
iRoyal applies the principle of data minimisation. We collect only what is necessary. We do not collect sensitive categories of personal data (such as health information or religious beliefs) unless directly relevant to a responsible gambling intervention.
iRoyal collects personal data through the following channels and methods:
The majority of personal data we hold is provided directly by you during account registration, KYC verification, deposit and withdrawal processes, promotional claim submissions, and communications with our customer support team.
Technical and behavioural data is collected automatically as you interact with the iRoyal website and gaming platform. This includes data collected via cookies, web beacons, server logs, and similar tracking technologies. See Section 10 for full details on our cookie practices.
We may receive supplementary identity and fraud-check data from third-party KYC verification providers and payment processors. We may also receive information from responsible gambling databases and self-exclusion registries where we are legally or contractually required to cross-reference registrations.
When you make a deposit or withdrawal via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, or a cryptocurrency network, the relevant payment service provider may share transaction confirmation data with iRoyal to facilitate accurate crediting and reconciliation of your account balance.
iRoyal processes personal data for the following specific purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account Registration | Identity, contact, date of birth | Contract performance |
| Age & Identity Verification (KYC) | ID documents, date of birth | Legal obligation; contract |
| Payment Processing | Financial, payment method data | Contract performance |
| Fraud & AML Monitoring | All categories | Legal obligation; legitimate interest |
| Customer Support | Contact, account, communication data | Contract performance; legitimate interest |
| Responsible Gambling Monitoring | Gaming, behavioural, self-exclusion data | Legal obligation; legitimate interest |
| Promotional Communications | Email, phone number, gaming history | Consent |
| Platform Improvement & Analytics | Technical, behavioural, gaming data | Legitimate interest |
| Legal Compliance & Reporting | Identity, financial data | Legal obligation |
iRoyal does not use personal data for automated decision-making that produces significant legal effects on members, except where required for fraud prevention or regulatory compliance, in which case you retain the right to request human review.
iRoyal relies on one or more of the following legal bases to process your personal data:
iRoyal does not sell or rent your personal data to third parties. We may share your personal data with the following categories of recipients only where necessary and under appropriate contractual safeguards:
We share financial transaction data with Malaysian and international payment processors — including FPX gateway operators, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency network infrastructure providers — for the sole purpose of processing your deposits and withdrawals.
We may share identity documents and personal details with third-party KYC verification services to fulfil our age verification and AML obligations. All KYC partners are bound by confidentiality and data protection agreements.
Third-party game providers who supply live casino, slot, and sports betting content to iRoyal may receive minimal technical session data (e.g., session tokens) necessary for game delivery. These providers are prohibited from using such data for any purpose other than game delivery.
iRoyal may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required by applicable law, a valid legal order, or to protect the rights and safety of iRoyal and its members.
We may share information with lawyers, accountants, auditors, and insurers in the course of obtaining professional advice, subject to professional confidentiality obligations.
iRoyal will never share your personal data with third-party advertising networks, data brokers, or any entity for commercial marketing purposes without your explicit prior consent.
iRoyal retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal, regulatory, or contractual requirements. The following general retention periods apply:
Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with iRoyal's data deletion procedures. Anonymised and aggregated data that cannot be used to identify any individual may be retained indefinitely for statistical and analytical purposes.
iRoyal implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
You play an important role in protecting your own data. Always use a strong, unique password for your iRoyal account and enable two-factor authentication (2FA) where available. Never share your login credentials with anyone.
iRoyal uses cookies and similar tracking technologies to operate the platform effectively, improve user experience, and gather anonymous analytics data. The following categories of cookies are used:
These cookies are essential for the platform to function correctly. They manage user sessions, maintain your login state, and facilitate the secure processing of deposits and withdrawals. These cookies cannot be disabled without impairing core platform functionality.
Functional cookies remember your preferences — such as preferred language, display settings, and previously entered information — to provide a more personalised experience across sessions.
We use analytics cookies to understand how members interact with the platform, which features are most used, and where technical improvements are needed. Analytics data is aggregated and does not identify individual users. These cookies may be provided by internal analytics tools.
You can manage cookie preferences through your browser settings. Most browsers allow you to view, delete, and block cookies. Please note that disabling certain cookies may affect the functionality of the iRoyal platform. Guidance on managing cookies is available in your browser's help documentation.
By continuing to use the iRoyal platform after being presented with our cookie notice, you consent to the use of non-essential cookies as described in this section.
iRoyal respects your rights over your personal data. In alignment with internationally recognised data protection principles, you have the following rights in relation to the personal data iRoyal holds about you:
You may request a copy of the personal data iRoyal holds about you. We will provide this within 30 days of a verified request.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Minor corrections can be made directly within your account settings.
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
You may request that we restrict the processing of your data in certain circumstances, such as while dispute regarding its accuracy is being resolved.
Where processing is based on your consent or contract performance, you may request your personal data in a structured, machine-readable format.
You may object to processing based on legitimate interests, including profiling for marketing purposes. You may withdraw marketing consent at any time.
To exercise any of the above rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 48 hours and fulfil it within 30 calendar days, subject to verification of your identity.
As an international gaming platform, iRoyal may transfer personal data to servers and service providers located outside of Malaysia. Such transfers are conducted only where appropriate safeguards are in place, including contractual data processing agreements that impose equivalent data protection obligations on recipient entities.
iRoyal ensures that all international data transfers are conducted in a manner that maintains the level of data protection described in this Policy, regardless of the jurisdiction in which data is stored or processed. Where transfers occur to jurisdictions without comprehensive data protection legislation, we implement additional contractual or technical safeguards to ensure your data remains protected.
iRoyal's platform is strictly intended for individuals aged21 years and above. We do not knowingly collect personal data from persons under this age. Age verification is enforced at the point of account registration through mandatory date of birth declaration and, where required, submission of government-issued photo identification.
If iRoyal becomes aware that personal data has been collected from a person under the age of 21, the account will be immediately suspended, all data relating to the minor will be deleted, and any deposited funds will be returned through the original payment method subject to verification procedures.
If you are a parent or guardian and believe your child may have accessed or registered with iRoyal, please contact us immediately at [email protected]. We take underage access extremely seriously and will act promptly on any such report.
The iRoyal platform may integrate or reference third-party services, including payment processors (such as those providing FPX, DuitNow, Touch 'n Go eWallet, and Boost integration), game content providers, and analytics platforms. Each third-party service operates under its own privacy policy, which iRoyal does not control.
iRoyal is not responsible for the data practices of third-party service providers operating independently of the iRoyal platform. We encourage you to review the privacy policies of any third-party services you interact with in connection with your iRoyal account.
All third-party service providers engaged by iRoyal are contractually required to process personal data only in accordance with iRoyal's documented instructions and to implement appropriate technical and organisational security measures.
iRoyal reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform services. Material changes — those that significantly affect your rights or how your data is used — will be communicated to registered members via the platform notification system or by email to the registered account address prior to taking effect.
Non-material amendments, such as clarifications of existing provisions or corrections of typographical errors, may be published without specific member notification. The "Last Reviewed" date at the top of this page will always reflect the date of the most recent revision.
We encourage you to review this Policy periodically. Continued use of the iRoyal platform following publication of an amended Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you should contact us to close your account and request deletion of your data.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by iRoyal, please contact using one of the following channels. All data-related inquiries are handled by our dedicated Privacy and Compliance team.
Acknowledgement: within 48 hours
Full response: within 30 calendar days
Available 24/7 via account dashboard
Malaysian support hours: 9:00am – Midnight, daily
Your privacy and security are non-negotiable at iRoyal. Join a platform that handles your personal data with the same seriousness as the Malaysian banking institutions you trust every day. For players aged 21 and above only.
Questions about your data? Contact us at [email protected]. By using iRoyal you also agree to our Terms & Conditions. Gambling can be addictive — please play responsibly.21+ only.