Regal33 Privacy Policy
Updated: January 2026
At Regal33, we understand that entrusting your personal information to any online platform requires a great deal of trust. You deserve to know exactly what happens to your data — from the moment you fill in the registration form to every time you make a deposit via Touch 'n Go eWallet, DuitNow, or GrabPay.
This Privacy Policy is intentionally written in Bahasa Melayu so that every member Regal33 across Malaysia — whether in Kuala Lumpur, Johor Bahru, Penang, Kota Kinabalu, or anywhere else in the country — can read and understand their rights clearly. No confusing technical language, no hidden clauses buried in fine print.
By using the platform Regal33, you agree to the data collection and usage practices described in this document. If you disagree with any part of this policy, we encourage you to contact our support team before continuing to use the platform so we can clarify further or help you understand the options available to you.
Quick Summary: Regal33 collects data necessary to manage your account, process transactions, and comply with legal requirements. We does not sell your data with advertisers. We does not share your information with third parties except in situations clearly stated in this policy. Your data is protected by 256-bit SSL encryption at all times.
Regal33's Six Privacy Commitments
The core principles that shape how we handle your personal data every day.
Bank-Grade Encryption
All data transmitted between your device and our servers Regal33 is protected by 256-bit SSL encryption — the same standard used by Maybank and CIMB. No third party can intercept or read your information during data transmission.
No Sale of Personal Data
Regal33 has never and will never sell your personal information to advertisers, data brokers, or any commercial third party. Your data is not our product. Your loyalty to our platform is worth far more than any data sale.
Your Data, Your Control
You have the right to access, correct, or request the deletion of your personal data at any time. The process is straightforward and handled through customer support Regal33. We will not make it difficult for you to exercise your own rights.
Minimum Data Collection
We only collect data that is genuinely necessary to operate the platform and comply with the law. Regal33 does not collect information about you that is irrelevant or excessive.
Secure & Redundant Servers
Your data is stored in high-grade data centres with multi-layered backup systems. This ensures your data is protected not only from external threats but also from unexpected hardware failures or technical disasters.
Malaysian Legal Compliance
Regal33 handles your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant industry compliance requirements. Your rights as a data subject are fully protected.
Regal33 collects several categories of information when you register and use our platform. Below is a full breakdown of the types of data we collect and why.
Personal Identity Information
Full name
National identity card number (MyKad)
Date of birth
Residential address
Gender
Contact Information
Email address
Mobile phone number
Platform user ID
Financial & Transaction Information
Deposit records (RM)
Withdrawal records (MYR)
Bank account number (partially masked)
Digital wallet ID (TnG, GrabPay, DuitNow, etc.)
Transaction history
Game Activity Data
Game logs (baccarat, blackjack, slots)
Sports betting history
Win and loss records
Gaming session duration
Technical & Usage Data
IP address
Device type and browser
Cookie and session data
Access logs and login timestamps
General location (state/city)
Every piece of data collected by Regal33 serves a clear and legitimate purpose. We do not collect data for the sake of collecting it — every piece of information is used to deliver a better, safer, and more personalised experience.
- Account management and identity verification: To create, manage, and secure your account. This includes the KYC (Know Your Customer) process, which ensures that only the rightful account owner can access the account and make withdrawals.
- Financial transaction processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, CIMB Clicks, and to accurately and securely process withdrawals to your account.
- Gaming service operations: To provide access to all games Regal33 — including baccarat, blackjack, slots, badminton betting, Malaysia Super League football, EPL, and e-sports — with a seamless and personalised experience.
- Customer support: To identify you quickly when you contact support, and to provide relevant assistance based on your account records and transaction history.
- Legal compliance and fraud prevention: To comply with Malaysia's Personal Data Protection Act 2010 (PDPA), anti-money laundering (AML) requirements, and directives from competent authorities. This includes monitoring for suspicious transactions.
- Responsible gambling: Your gaming activity data is analysed to identify patterns that may indicate problem gambling, enabling Regal33 take appropriate and proactive protective measures.
- Service-related communications: To keep you informed about account updates, transaction confirmations, changes to terms, and important security notices via email or SMS.
Regarding Marketing Communications: Regal33 will only send you promotions and offers if you have given your consent during registration or through your account settings. You may withdraw this consent at any time by updating your communication preferences in your account settings.
Regal33 does not share your personal data with external parties except in the situations set out below. This is the complete list — there are no hidden exceptions.
- Payment service providers: To process transactions, necessary information is shared with approved payment gateways such as FPX, DuitNow, and Malaysian digital wallet service providers. These providers are bound by strict confidentiality agreements with Regal33.
- Platform technology provider: Game software providers and technical infrastructure partners may require limited access to certain data to operate platform functions. All such parties are bound by comprehensive data protection agreements.
- Malaysian legal authorities: Where required by law or a valid court order, Regal33 will comply with information requests from the Royal Malaysia Police, Bank Negara Malaysia, or any relevant enforcement authority.
- Business transfer: In the event of a merger, acquisition, or asset transfer involving Regal33, user data may be transferred to a successor entity. You will be notified in advance and your rights will not be affected.
What We Do NOT Do: Regal33 does not sell, rent, or trade your personal data with advertisers, marketing agencies, data brokers, or any commercial third party. Your data is not used for third-party advertising in any form.
Regal33 uses cookies and similar technologies to enhance your experience on our platform. Below is an explanation of the types of cookies we use and their purposes.
| Cookie Type |
Purpose |
Duration |
| Mandatory Session Cookies |
Enables core platform functions — login, page navigation, and session security. Cannot be disabled. |
Until log out |
| Preference Cookies |
Saves your preferences such as language, theme, and game table settings so you do not have to reconfigure them each time you log in. |
30 days |
| Analytics Cookies |
Helps us understand how users interact with the platform so we can improve the experience. Data is aggregated and cannot be used to identify any individual. |
90 days |
| Security Cookies |
Detects suspicious activity and unauthorised access attempts, and supports the proper functioning of two-factor authentication. |
7 days |
You can manage cookies through your browser settings. However, disabling essential cookies may affect certain features of the platform Regal33. Analytics cookies can be disabled without any impact on your gaming experience.
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and core privacy principles Regal33, you have the following rights regarding your personal data.
You have the right to request a copy of all personal data we hold about you. Requests will be processed within 14 business days.
If any of your information is inaccurate or out of date, you have the right to request an immediate correction through customer support.
You may request the deletion of your data, subject to legal retention requirements (a minimum of 5 years for financial records).
You may object to the processing of your data for marketing purposes at any time through your account settings or by contacting support.
Right to Data Portability
You may request your data in a machine-readable format (JSON/CSV) for transfer to another platform if needed.
Right to Restrict Processing
Under certain circumstances, you may request a temporary restriction on the processing of your data while an investigation or verification is pending.
How to Exercise Your Rights: To exercise any of the rights above, contact Regal33's customer support team via 24/7 live chat or email at support@regal33.best. Please include your account number and the details of your request. We will verify your identity before processing any data request.
Data security goes beyond encryption alone. Regal33 implements multiple layers of security to ensure your data is protected from every possible angle.
- 256-bit SSL Encryption for all data communications between your device and Regal33's servers — this is the first and most fundamental layer of protection, ensuring no third party can intercept your data.
- Hashed password storage uses the bcrypt algorithm — your password is never stored in plain text. Even in the event of a system breach, your password cannot be read by an attacker.
- Two-factor authentication (2FA) available to all regal33 accounts and strongly recommended. It adds an extra layer of security even if your password falls into the wrong hands.
- 24/7 Security Monitoring by Regal33's cybersecurity team, which monitors suspicious activity and potential threats in real time.
- Data retention period: Transaction records and account activity are retained for a minimum of five years following account closure, in line with Malaysian legal requirements. Data that is no longer needed is securely destroyed.
- Regular security audits — infrastructure Regal33 undergo regular penetration testing and security audits conducted by independent third parties to identify and address any vulnerabilities.
Regal33 is an exclusive platform for individuals aged 18 and above. We take a zero-tolerance approach to minors accessing our platform.
- We do not knowingly collect, store, or process personal data from individuals under the age of 18. Should we become aware that a minor's data has been inadvertently collected, it will be deleted immediately.
- The regal33 registration process requires age verification. Any account found to have been registered by an individual under 18 years of age will be terminated, and all funds will be returned to the rightful party following an investigation.
- If you become aware that a minor has registered an account on Regal33, please contact us immediately at support@regal33.best with the relevant details so we can take prompt action.
Regal33 Privacy FAQ
The most frequently asked questions from members regarding data protection at regal33.
Absolutely not. Regal33 does not sell, rent, or share your personal data with advertisers, marketing agencies, or any third-party commercial entities for advertising purposes. This is our absolute commitment. Your data is used solely to operate the platform, process transactions, and comply with legal requirements. If you have received marketing communications from Regal33, it is because you personally gave your consent during registration or through your account settings.
Sensitive financial information such as bank account numbers and credit card numbers is never stored in full within Regal33's systems. We retain only the last few digits and the metadata required for verification purposes. All payment processing via Touch 'n Go, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, and other methods is handled through certified payment gateways that comply with PCI-DSS security standards. We act as a coordinating intermediary — we do not directly store your card information.
Yes, you may request the deletion of your personal data by contacting regal33 customer support. However, certain data is exempt from deletion due to legal obligations — specifically, financial transaction records that must be retained for a minimum of five years in compliance with anti-money laundering (AML) laws and the requirements of the Malaysian Financial Services Act. Once the mandatory retention period has lapsed, all relevant records will be permanently and securely deleted from our systems.
In the event of a security breach involving your personal data, Regal33 is committed to notifying you within 72 hours of becoming aware of the incident — or sooner if possible. Notifications will be sent via your registered email and in-account alerts. We will clearly state which data may have been affected, the steps we are taking, and the actions you can take to protect yourself. We will also report the incident to the relevant authorities in accordance with legal requirements.
Yes, Regal33 keeps logs of your gaming activity, including game type, wager amounts, and session duration. This is done for three main purposes: first, to resolve any disputes related to game outcomes or transactions; second, to identify patterns that may indicate problem gambling and take appropriate protective action; third, to meet compliance and audit requirements within the industry. Gaming activity data is not shared with third parties unless required by a legitimate legal authority.
There are two easy ways to stop receiving promotional emails from Regal33: first, click the "Unsubscribe" link found at the bottom of any promotional email we send you; second, log in to your Regal33 account, go to Account Settings, and disable the "Receive Marketing Communications" option. Changes will take effect within 48 hours. Please note that this only applies to marketing communications — you will still receive essential service-related emails such as transaction confirmations and account security notifications.
Privacy Policy Update
Regal33 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform services. Any significant changes will be communicated to members via their registered email and in-account notifications at least 14 days before the changes take effect. Continued use of the platform after the update date constitutes acceptance of the revised policy. This version is effective from January 2026.
Your Data, Your Security, Your Responsible Gaming
A robust privacy policy is part of the commitment Regal33 towards responsible gambling. We use your gaming activity data not to exploit your playing habits, but to detect signs of excessive gambling and offer appropriate assistance. Deposit limit, loss limit, and self-exclusion features all rely on data that we handle responsibly. For more information about these protective features, visit the Responsible Gaming us.