Royalgame Privacy Policy

Royalgame’s Privacy Policy describes the collection, processing, protection, disclosure, and destruction of personal information for its online services. The document explains what data users provide or Royalgame may collect and how it is used in line with rules. Use of personal data is based on the user’s consent where required by law. The policy also outlines safeguards, retention, and user rights throughout the data lifecycle.

Privacy and Data Protection

  • Personal data Royalgame may collect:
    • Identification and contact details: name, date of birth, address, email, phone.
    • Verification/KYC records: identity documents, proof of address, age checks.
    • Account and usage details: username, preferences, responsible gambling settings, in-account communications.
    • Transaction information: deposits, withdrawals, payout history; payment details processed via authorised providers.
    • Technical data: IP address, device identifiers, browser type, cookies, geolocation where required for compliance.
    • Integrity and safety data: fraud signals, sanctions screening results, betting and gaming activity needed for risk controls.
  • Why this information is collected:
    • To provide online services, manage accounts, and deliver support.
    • To verify age and identity, meet anti-money laundering and counter-terrorist financing requirements, and protect users.
    • To process payments, enable withdrawals, and prevent fraud or misuse.
    • To operate responsible gambling tools and comply with licensing and sports integrity obligations.
    • To improve websites, RoyalGames apps, and user experience through analytics and diagnostics.
  • Protection measures:
    • Transport Layer Security (TLS) in transit and encryption at rest for sensitive records.
    • Role-based access controls, multi-factor authentication, and least-privilege principles.
    • Pseudonymisation of datasets used for analytics where feasible.
    • Logging, monitoring, intrusion detection, and regular security testing by qualified assessors.
    • Staff training, data minimisation, vendor due diligence, and privacy impact assessments for high-risk processing.
  • User rights under GDPR (subject to conditions):
    • Access, rectification, erasure, restriction, portability, and objection.
    • Withdrawal of consent at any time without affecting prior processing.
    • Right to lodge a complaint with the Data Protection Commission (www.dataprotection.ie).
  • Compliance statement:
    • Royalgame processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and Data Protection Act 2018, under the supervision of the Data Protection Commission. Customer due diligence records may be retained to meet the Criminal Justice (Money Laundering and Terrorist Financing) Acts.

Use of Collected Information

  • Purposes of use:
    • Account setup, authentication, and service delivery.
    • Deposits, withdrawals, chargebacks, and transaction reconciliation.
    • Customer support and incident handling.
    • Responsible gambling monitoring, interventions, and user-configured limits.
    • Security, fraud prevention, AML/CTF screening, and sanctions checks.
    • Personalisation, product improvement, and service analytics.
    • Marketing communications, subject to user consent and preferences.
    • Dispute resolution, audits, tax, accounting, regulatory reporting, and legal claims.
    • Aggregated statistics that do not identify an individual user.
  • Lawful and transparent processing:
    • Legal bases used include consent (e.g., marketing cookies or emails), contract (service delivery and transactions), legal obligation (AML/CTF, tax, regulatory duties), and legitimate interests (security, analytics, product improvement). Processing is limited to the purposes described and proportional to the risks involved.

Access to Information

  • How users can exercise rights:
    • Access: users may request a copy of their personal data. Royalgame will respond without undue delay and in any case within one month, extendable where permitted.
    • Update/correction: users may update account details or request rectification where data is inaccurate or incomplete.
    • Deletion: users may request erasure where GDPR conditions apply. Where law requires retention (for example, AML records for five years after account closure), Royalgame will restrict use to compliance purposes only.
    • Portability and restriction: users may request a structured, commonly used format or ask that processing be restricted in specific scenarios.
  • Process:
    • A request can be submitted through the contact methods provided on the website. Royalgame may ask for evidence of identity and may clarify scope to protect user information and meet security obligations.
  • Security checks and payments:
    • By using Royalgame, users consent to necessary security checks, identity verification steps, and the processing of payment information by authorised payment service providers to enable deposits, withdrawals, and fraud prevention.

Protection of Children’s Privacy

  • Royalgame provides services to persons aged 18 and over only.
  • Continuous monitoring occurs, but age cannot be verified without suitable documents. Verification may be requested at registration, on withdrawal, or during risk reviews.
  • If a minor’s account or information is identified, the account will be closed and personal data deleted or restricted as required by law.
  • Parents or guardians may request deletion of a minor’s data through the contact methods provided on the website. Royalgame may request documents to verify the requester’s authority.

International Data Transfers

  • Personal data may be processed in other countries where Royalgame or its partners, service providers, payment processors, or cloud providers operate, including within and outside the EEA and the UK.
  • Using the site constitutes consent to these transfers. Royalgame also relies on adequacy decisions, European Commission Standard Contractual Clauses, and additional safeguards to protect information during transfer.
  • All partners handling personal data are bound by contractual confidentiality and data protection obligations. Security reviews and audits are performed proportionate to risk.

Use of Cookies

  • Cookies are small text files stored on a device by websites. Royalgame uses cookies and similar technologies for:
    • Statistics and performance measurement.
    • Behaviour analysis to detect faults and improve services.
    • Personalisation of content and preferences.
    • Site improvement, debugging, and security controls.
  • Retention: standard cookies are retained for up to 1 year unless a shorter period is stated in the cookie banner.
  • Management: users can manage consent in the cookie banner and adjust browser settings. Some strictly necessary cookies are required to provide core functionality.

Acceptance of Privacy Policy

  • Using Royalgame indicates full acceptance of this Privacy Policy and the processing described.
  • The current version of the document on the website prevails over any prior versions.
  • Continued use after an update indicates acceptance of the updated terms, subject to applicable law and user rights.

Third-Party Privacy Practices

  • Royalgame may share personal data where needed to provide services or as required by law, including with:
    • Payment service providers, banks, and card schemes.
    • Identity verification, AML/CTF, and fraud prevention agencies.
    • Sports integrity bodies and relevant governing organisations.
    • Analytics and product improvement partners (only aggregated or consent-based personal data, as applicable).
    • Customer support tools, IT maintenance, and cloud hosting providers.
    • Legal advisors, auditors, dispute resolution bodies, regulators, and law enforcement.
  • Sharing occurs under contracts that include confidentiality and data processing terms. A list of processor categories and key partners is available on the website or on request. If a third party is not listed, Royalgame will inform users of the purpose and scope where required before collection or disclosure.
  • Providing data for a stated purpose constitutes consent to disclose that information to the third parties necessary to fulfil that purpose, subject to applicable legal bases.

Updated: