OFFICIAL DOCUMENT · ROYAL FLUSH PRIVACY POLICY

Privacy Policy Royal Flush – Protecting Malaysian Players' Personal Data

Your privacy is not merely a priority for us — it is a responsibility we take seriously. This document transparently explains how Royal Flush collects, uses, stores, and protects the personal data of every Malaysian player.

Last Updated: 1 January 2026 Jurisdiction: Malaysia Compliance: Malaysia PDPA 2010 Language: Bahasa Melayu (ms-MY)

Royal Flush Data Protection Principles

Six core principles that shape how we handle your privacy and personal data

Minimal Data Collection

Royal Flush only collects data that is genuinely necessary to provide you with our services. We do not request or retain information that is irrelevant to the platform's operations or your identity verification.

256-bit SSL Encryption

All data transmitted between your device and Royal Flush servers is protected by 256-bit SSL encryption — the same security standard used by Malaysian banking institutions such as Maybank and CIMB.

No Data Sales

Royal Flush has never sold, and will never sell, any player's personal data to third parties for marketing or commercial purposes. Your data belongs to you — we are simply its responsible custodian.

Full Control in Your Hands

You have the right to access, amend, transfer, or request the deletion of your personal data at any time. Royal Flush provides a straightforward process for exercising these rights without any obstacles.

PDPA 2010 Compliance

All of Royal Flush's data handling practices are in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010). We conduct regular compliance reviews to ensure these standards are consistently upheld.

Prompt Breach Notification

In the event of a security breach involving your data, Royal Flush is committed to notifying you and the relevant authorities within the timeframe required by applicable law.

Important Note: By registering or using the Royal Flush platform, you agree to the collection and use of your personal data as described in this Privacy Policy. Please read this document carefully and contact us at support@royalflush.click if you have any questions.

1Introduction & Scope of Privacy Policy

Royal Flush (hereinafter "we", "the platform", or "Royal Flush") values the privacy of every individual who uses our platform. This Privacy Policy explains in detail how we collect, process, store, protect, and in certain circumstances, share your personal data as a player or visitor to royalflush.click.

This policy applies to all services provided by Royal Flush, including the online casino gaming platform, Sports Betting covering Malaysia Super League and EPL football, slots, live casino, progressive jackpots, the VIP Rewards programme, and all your interactions with our customer support team. It also covers the use of the Royal Flush mobile app where available.

We are in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) as the primary data protection framework in Malaysia. In handling your personal data, Royal Flush acts as the "data controller" responsible for determining the purpose and manner in which that data is processed.

2Types of Personal Data We Collect

Royal Flush collects various categories of personal data based on operational requirements and legal compliance. Below is a summary of the data categories we collect:

Data Category Example Information Collection Method
Identity Data Full name, date of birth, IC/passport number Registration forms, KYC process
Contact Data Email address, phone number, mailing address Account registration, profile updates
Financial Data Deposit/withdrawal records, transaction history (MYR) Payment activity via TnG, GrabPay, DuitNow, FPX
Gaming Data Betting history, winnings, game preferences Collected automatically during gameplay
Technical Data IP address, browser type, device type, general location Server logs, cookies, mobile SDK
Communication Data Support chat records, player feedback Live chat, email, WhatsApp support

Reminder: Royal Flush does not collect sensitive categories of data such as health information, religious beliefs, or sexual orientation. Biometric data is also not collected except in exceptional circumstances requiring additional identity verification and only with your explicit consent.

3Purposes for Using Personal Data

All personal data we collect is used solely for the following legitimate and stated purposes:

  • Service provision — processing account registration, deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX, withdrawals, and access to games on the Royal Flush platform
  • Identity verification (KYC) — verifying that you meet the age eligibility requirement (18+) and comply with applicable laws
  • Fraud prevention — identifying and preventing fraudulent activity, money laundering, and platform abuse
  • Customer Support — resolving enquiries, complaints, and technical issues you have reported to the Royal Flush team
  • Marketing communications — sending promotional information, bonuses, and special offers — only if you have consented to receive them
  • Platform improvements — analysing usage patterns to improve the overall user experience
  • Legal compliance — fulfilling reporting obligations to the relevant authorities as required by law

4Legal Basis for Data Processing

Royal Flush processes your personal data on valid legal grounds under Malaysia's PDPA 2010, including:

  • Your consent — for direct marketing and promotional communications, we only process your data after obtaining your explicit consent during registration
  • Contract performance — processing required to deliver the services you have requested, including payment processing and account management
  • Legitimate interests — fraud prevention, platform security, and service improvements that do not compromise your fundamental rights
  • Legal obligation — compliance with Malaysian legal requirements and relevant regulatory directives

You have the right to withdraw your consent at any time for processing based on consent, without affecting the validity of any processing carried out prior to the withdrawal.

5Data Sharing with Third Parties

Royal Flush does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, in the course of operating the platform, we may share data with the following categories of parties:

  • Payment service providers — Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and banks offering FPX services such as Maybank and CIMB, for the purpose of processing your financial transactions
  • Licensed game providers — companies such as Pragmatic Play and Evolution that provide gaming platforms, for the technical purposes required to operate the games
  • Cloud service providers — hosting platforms and infrastructure that store and process platform data under strict confidentiality agreements
  • Regulatory authority — law enforcement agencies, courts, or regulatory bodies when we are legally required to do so under Malaysian law

All third-party service providers we engage are bound by data processing agreements that prohibit them from using your data for any purpose other than those specified by Royal Flush. We only work with providers that comply with international data security standards.

6Data Storage, Retention & Security

Royal Flush implements a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

  • 256-bit SSL encryption for all data in transit
  • At-rest encryption for data stored in databases
  • Role-based access control — only staff with a legitimate business need may access player data
  • Regular independent security audits and penetration testing conducted by third parties
  • 24/7 monitoring system to detect unusual activity or unauthorised access attempts
  • A security incident response plan that is regularly tested and updated

Data Retention Period: Royal Flush retains your personal data for as long as your account remains active and for any additional period required by Malaysian law or other legitimate purposes. As a general rule, financial transaction data is kept for a minimum of 7 years in accordance with financial reporting requirements, while player profile data will be deleted within 90 days of account closure upon your request, subject to legal compliance requirements.

7Cookie & Tracking Technology Policy

The Royal Flush website uses cookies and similar tracking technologies to enhance your experience and gather analytical data that helps us improve the platform. The following are the types of cookies we use:

Cookie Type Purpose Required?
Important Maintaining login sessions, account security, and language preferences Yes
Functional Remembering game settings, display preferences, and currency selection (RM) No
Analytics Understanding usage patterns, popular pages, and time spent on the platform No
Performance Monitoring page load speeds and platform reliability No

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect certain functions of the Royal Flush platform, including the ability to stay logged in or process payments smoothly.

8Your Rights as a Data Subject

Under Malaysia's PDPA 2010 and global data protection best practices, you as a Royal Flush player have the following rights regarding your personal data:

Right of Access

You have the right to obtain a copy of the personal data we hold about you, including details of how that data is used.

Right to Rectification

If your data is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.

Right to Erasure

You may request the deletion of your personal data when it is no longer needed, subject to any applicable legal retention obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time, without providing any reason.

Right to Data Portability

You have the right to receive the personal data you have provided to us in a structured, machine-readable format.

Right to Restrict Processing

Under certain circumstances, you may request that we restrict the processing of your data while an issue is being resolved.

How to Exercise Your Rights: To submit any request relating to your data rights, please email support@royalflush.click with the subject line "Personal Data Rights Request" along with your full name and account number. Royal Flush will respond within 14 working days.

9Protection of Children's Data

The Royal Flush platform is strictly for individuals aged 18 and above. We do not knowingly collect, store, or process any personal data from children under the age of 18.

If you are a parent or guardian and become aware that your minor child has registered an account with Royal Flush or provided us with their personal data, please contact us immediately at support@royalflush.click. We will take prompt steps to delete the relevant information and close the account.

10Amendments to This Privacy Policy

Royal Flush reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. You will be notified of any material changes through:

  • A notice displayed on the royalflush.click homepage
  • Email sent to the address registered to your account
  • A pop-up notice when you log in to your Royal Flush account after an amendment takes effect

The "Last Updated" date at the top of this document will be revised whenever amendments are made. You are encouraged to review this Privacy Policy periodically. Your continued use of the Royal Flush platform after any amendments take effect constitutes your acceptance of those changes.

11Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding how Royal Flush handles your personal data, you may reach us through the following channels:

Emailsupport@royalflush.click
Response within 14 working days

Live ChatAvailable 24/7
Prompt response during peak hours

WhatsApp SupportAvailable 24/7
Bahasa Melayu & English

If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia or the relevant regulatory body in your jurisdiction.

Trust Built on Transparency

Standards and commitments that demonstrate Royal Flush's dedication to protecting your privacy

PDPA 2010
256-bit SSL
No Data Selling
Full Control
Immediate Notice
Independent Audit
YOUR DATA IS SAFE WITH US

Play with Peace of Mind at Royal Flush Malaysia

Your privacy is protected. Your transactions are secure. Your experience is respected. Register now and join over 250,000 Malaysian players who already trust Royal Flush.

Questions about data privacy? Contact us at support@royalflush.click

Bahasa Melayu