Privacy Policy

This Privacy Policy describes how RoyalX Entertainment Ltd. ("Royal Casino," "we," "our") handles personal data collected through the Royal Casino mobile application and the website at royalcasinoapk.org. By using Royal Casino, you acknowledge that you have read and understood the practices outlined below.

Article I — Data We Collect

A. Information You Submit Directly

When you register, deposit, or interact with customer support, we receive the following data points:

• Full legal name and date of birth
• Email address and mobile phone number
• CNIC (Computerized National Identity Card) or passport number for identity verification
• Banking details: JazzCash account, Easypaisa number, bank account (HBL, UBL, Meezan, Allied Bank), or USDT wallet address
• Residential address and city of residence
• Photographs submitted for Know Your Customer (KYC) verification, including selfies and document scans

B. Information Gathered Automatically

Each time you open the Royal Casino APK or visit our website, our systems record:

• IP address and approximate geographic location derived from it
• Device manufacturer, model, screen resolution, and operating system version
• Browser type and version (for web access)
• Session duration, pages visited, and in-app navigation patterns
• Game history: bets placed, outcomes, timestamps, and session lengths
• Crash reports and performance diagnostics
• Advertising identifiers (Android Ad ID) if marketing permissions are granted

Article II — How We Process Your Data

We use the information described in Article I for the following specific purposes:

1. Creating, authenticating, and maintaining your Royal Casino player account
2. Processing deposits and withdrawals in PKR and cryptocurrency
3. Verifying your identity and age (18+ requirement) under applicable regulations
4. Detecting and preventing fraud, money laundering, and multi-accounting
5. Delivering personalized game recommendations based on your play history
6. Calculating and applying bonuses, wagering progress, and loyalty rewards
7. Responding to your customer support inquiries via live chat, email, or WhatsApp
8. Sending transactional notifications: deposit confirmations, withdrawal status, and account alerts
9. Improving application performance through aggregate analytics (crash rates, load times, feature usage)
10. Complying with legal obligations, including tax reporting and regulatory audits

Article III — Cookies and Tracking Technologies

When you access Royal Casino through a web browser, the following cookie categories may be placed on your device:

• Essential Cookies: Required for basic functionality — login sessions, language preferences, and security tokens. Cannot be disabled without breaking core features.
• Functional Cookies: Remember your display settings (dark/light mode), bet slip preferences, and recently played games. Active for 90 days.
• Analytics Cookies: Help us understand traffic patterns, popular games, and navigation flows. Data is aggregated and does not identify individual users. Provided by self-hosted Matomo analytics.
• Marketing Cookies: Used to deliver relevant promotional offers across partner advertising networks. Only activated if you explicitly opt in during registration or in your account settings.

You can manage cookie preferences through your browser settings at any time. Blocking essential cookies will prevent you from logging in.

Article IV — Sharing Data with Third Parties

We do not sell your personal data. However, we share specific information with the following categories of partners when necessary:

• Payment Processors: JazzCash, Easypaisa, and banking partners receive transaction details (amount, account number, reference ID) to process your deposits and withdrawals.
• Game Providers: Studios like Pragmatic Play, PG Soft, and Jili receive anonymized session data to deliver game content and verify round outcomes.
• Regulatory & Legal Authorities: When required by law, court order, or government inquiry, we disclose relevant account data to comply.
• Business Transactions: In the event of a merger, acquisition, or asset sale, player data may be transferred to the successor entity under equivalent privacy protections.
• Security Vendors: Fraud detection and cybersecurity firms receive limited access to login patterns and device fingerprints to identify suspicious activity.

Article V — Data Security Measures

Protecting your data is a core operational priority, not just a policy statement. The specific measures in place include:

• All data in transit is encrypted using TLS 1.3 with 256-bit AES encryption
• Player database records are encrypted at rest using AES-256-GCM
• Firewalls with intrusion detection and prevention systems (IDS/IPS) monitor network traffic 24/7
• Two-factor authentication (2FA) via SMS or authenticator app is available for all accounts
• Administrative access requires hardware security keys and is restricted to senior engineers
• Independent penetration testing conducted twice annually by a third-party firm
• Internal security audits run quarterly with results reported to the compliance team

Article VI — How Long We Keep Your Data

Different data categories have different retention schedules:

• Account Information: Retained for the lifetime of your account plus 3 years after closure
• Transaction Records: Kept for 7 years from the transaction date to satisfy financial regulatory requirements
• Game History: Stored for 5 years from the date of play
• KYC Documents: Retained for 6 years after account closure
• Customer Support Logs: Deleted 2 years after the conversation date
• Analytics Data: Aggregated and anonymized after 18 months; raw logs deleted

Once a retention period expires, data is permanently deleted or irreversibly anonymized within 90 days.

Article VII — Your Data Rights

Regardless of your location, Royal Casino extends the following rights to all users:

• Right of Access: Request a copy of all personal data we hold about you. Delivered in machine-readable format within 30 calendar days.
• Right to Correction: Ask us to update inaccurate or incomplete personal records.
• Right to Deletion: Request that your account and personal data be permanently erased. Subject to legal retention obligations described in Article VI.
• Right to Data Portability: Receive your data in structured JSON or CSV format for transfer to another service.
• Right to Object: Opt out of data processing for marketing purposes at any time without affecting your account standing.
• Right to Withdraw Consent: Revoke previously granted consent (e.g., marketing cookies) through your account settings or by contacting support.

To exercise any of these rights, email [email protected] or use the "Data Requests" section in the Royal Casino APK settings menu.

Article VIII — Protection of Minors

Royal Casino is strictly for individuals aged 18 and older. We do not knowingly collect personal data from anyone under 18. Age verification is performed during registration, and additional checks may be triggered during withdrawal requests. If we discover that a minor has created an account, the account is suspended immediately, deposited funds are returned to the original payment method, and all associated data is deleted within 48 hours.

Article IX — International Data Transfers

Royal Casino servers are located in Singapore and the Netherlands. If you access the application from Pakistan or any other jurisdiction, your data may cross international borders during transmission. All transfers are protected by the encryption standards outlined in Article V, and our data processing agreements with hosting providers include standard contractual clauses equivalent to GDPR requirements.

Article X — Changes to This Policy

We may revise this Privacy Policy to reflect changes in our data practices, legal requirements, or operational procedures. When a material change occurs, we will notify you through:

• A push notification within the Royal Casino APK
• An email to the address registered on your account
• A prominent banner displayed upon your next login

Continued use of Royal Casino after the revised policy takes effect constitutes acceptance. Previous versions of this policy are available upon request.

Article XI — Contact Information

For privacy-related questions, data requests, or complaints:

• Email: [email protected]
• Live Chat: Available 24/7 within the Royal Casino APK
• Mailing Address: RoyalX Entertainment Ltd., Data Protection Office, registered business address on file

We aim to respond to all privacy inquiries within 5 business days.