RoyalX Privacy Policy — How We Protect Your Data

1. Introduction

This Privacy Policy explains how RoyalX ("we", "us", "the Platform") collects, uses, stores and protects personal data relating to users ("you") of the RoyalX online gaming and sports betting platform, accessible at royalx.vin and through the RoyalX mobile application.

We take the privacy of our users seriously. This policy is written to be clear and straightforward — not buried in legal language that is difficult to follow. If you have questions about anything here, our support team is available at [email protected].

By registering an account or using the RoyalX platform in any capacity, you confirm that you have read and understood this Privacy Policy. This policy should be read alongside the Terms and Conditions and Responsible Gaming policy.

2. Data We Collect

RoyalX collects personal data that falls into the following categories. We only collect what is necessary for the specific purpose stated:

We do not collect sensitive personal data such as biometric data, health records, or political or religious beliefs. Full payment card numbers are never stored on RoyalX systems — card transactions are handled entirely by our PCI-compliant payment partners.

3. How We Collect Your Data

Personal data is collected through the following means:

• Direct registration: Information you provide when creating your RoyalX account, including your name, date of birth, contact details, and any documents submitted for identity verification.
• Platform activity: Data generated automatically when you use the platform — bets placed, games launched, deposits made, and sessions started.
• Payment processing: Transaction references and confirmation data passed from payment providers such as JazzCash, Easypaisa, Raast, or your bank when you make a deposit or request a withdrawal in PKR.
• Device and technical data: Information collected automatically by our servers when your device connects to the platform, including your IP address, device identifiers, and browser type.
• Cookies and similar technologies: Session cookies and analytics tools used to maintain your login session, remember preferences, and understand how the platform is used. See Section 9 for full cookie details.
• Support interactions: Records of communication with the RoyalX support team, including chat transcripts and emails, which are retained to resolve disputes and improve service.

4. How We Use Your Data

RoyalX uses your personal data for the following purposes, each of which is necessary to operate the platform or fulfil our obligations to you:

• Account management: Creating, maintaining, and securing your RoyalX account, including verifying your identity and age before your account is activated.
• Service delivery: Enabling you to place bets on cricket, PSL, T20 internationals, football and esports markets; access the live casino and game lobby; and use all other platform features.
• Payment processing: Facilitating PKR deposits and withdrawals through your chosen payment method and maintaining accurate transaction records on your account.
• Security and fraud prevention: Monitoring account activity for signs of fraud, money laundering, bonus abuse, or unauthorised access. Technical and device data is used for this purpose.
• Responsible gaming: Using gaming history and account activity data to support the responsible gaming tools available in your account — including deposit limits, session reminders, and cooling-off periods.
• Customer support: Resolving queries, complaints, and disputes using your account data and any communication records held.
• Platform improvement: Using aggregated, anonymised usage data to understand how users interact with the platform and to improve features, performance, and the overall experience.
• Communications: Sending transactional messages such as deposit confirmations, withdrawal notifications, and security alerts to your registered mobile number or email address. Marketing communications are only sent where you have opted in.

5. Payment Data and PKR Transactions

RoyalX accounts operate entirely in Pakistani Rupees (PKR). When you make a deposit or withdrawal via JazzCash, Easypaisa, Raast, bank transfer, or card, the transaction is processed by our payment partners. The data handled during this process is managed as follows:

• Full payment card numbers are never stored on RoyalX servers. Card-based transactions are tokenised and handled by our PCI DSS-compliant payment processor.
• Mobile wallet identifiers (JazzCash/Easypaisa account numbers) are stored in masked format — only the last few digits are retained for display purposes in your transaction history.
• Raast and IBFT bank transfer references are stored as transaction records in PKR, linked to your account for reconciliation and dispute resolution purposes.
• Transaction history — including deposit amounts in PKR, timestamps, and payment method type — is retained for a minimum of five years for financial record-keeping purposes.
• Payment data is never shared with third parties for marketing or profiling purposes. It is shared only with the payment provider involved in the specific transaction and, where required, with fraud prevention services.

If you believe there is an error in your transaction history, contact support immediately at [email protected] with the transaction reference and the amount in PKR. Our team will investigate and respond within 48 hours on business days.

6. Data Sharing with Third Parties

RoyalX does not sell or rent personal data to any third party. Data is shared only in the limited circumstances described below, and only to the extent necessary for the specific purpose:

• Payment processors: JazzCash, Easypaisa, Raast, banks, and card networks receive the transaction data necessary to process your PKR deposits and withdrawals.
• Identity verification providers: Where required to verify your age or identity, data may be shared with a third-party KYC (Know Your Customer) verification service. These providers are contractually bound to use your data only for the purpose of verification.
• Fraud prevention services: Technical and account data may be shared with fraud detection tools that help protect the platform and its users from unauthorised activity.
• Game software providers: The third-party providers who supply casino games, live dealer tables, and bingo rooms may receive session and game-play data necessary to operate the game you are playing. These providers operate under data processing agreements with RoyalX.
• IT and hosting infrastructure: Cloud hosting and infrastructure providers who store and process data on our behalf under strict contractual data protection terms.
• Legal and regulatory requirements: Where required by a valid legal obligation or lawful authority request, RoyalX may be required to disclose account or transaction data. We will only do so to the extent required and will notify you where permitted by law.

All third-party data processors used by RoyalX are selected with care and are required to maintain data security standards consistent with this Privacy Policy.

7. Data Retention

RoyalX retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable record-keeping obligations. The general retention periods are as follows:

• Account data: Retained for the lifetime of your account and for a period of five years following account closure, to allow for dispute resolution and audit purposes.
• Transaction and financial data: PKR transaction records are retained for a minimum of five years from the date of the transaction.
• Identity verification documents: Retained for the period required to satisfy verification obligations and for five years thereafter.
• Support communication records: Chat transcripts and email records are retained for three years following the resolution of the relevant query or dispute.
• Technical and device data: Log data, IP records, and session data are typically retained for 12 months for security and fraud prevention purposes, after which they are deleted or anonymised.
• Marketing preferences and opt-out records: Retained indefinitely to ensure we respect your communication preferences even after account closure.

When data is no longer required, it is securely deleted or irreversibly anonymised so that it can no longer be associated with an individual user.

8. Security Measures

Protecting your personal data is a core responsibility that RoyalX takes seriously. The following technical and organisational measures are in place to protect data held on our systems:

• TLS encryption: All data transmitted between your device and RoyalX servers is encrypted in transit using TLS (Transport Layer Security).
• Data at rest encryption: Sensitive data stored on RoyalX systems, including identity records and masked payment references, is encrypted at rest.
• Access controls: Access to personal data within RoyalX is restricted on a need-to-know basis. Staff who do not require access to your data in the course of their duties do not have it.
• Two-factor authentication (2FA): Available to all registered users on their account and strongly recommended. RoyalX internal systems also use multi-factor authentication for staff access.
• Fraud and anomaly detection: Automated systems monitor account and transaction activity in real time for signs of unauthorised access or suspicious behaviour.
• Regular security reviews: RoyalX conducts periodic reviews of our data security practices and infrastructure to identify and address potential vulnerabilities.

No system can guarantee absolute security. If you believe your RoyalX account has been compromised, change your password immediately and contact our support team at [email protected].

9. Cookies and Tracking Technologies

RoyalX uses cookies and similar technologies on the website and in the mobile application. These are small data files placed on your device that help us operate the platform, remember your preferences, and understand how users navigate the site.

The types of cookies used by RoyalX are as follows:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit. Without these, the platform cannot operate correctly.
• Security cookies: Used to detect fraud, protect against cross-site request forgery (CSRF), and support our authentication systems.
• Preference cookies: Remember your settings such as language preference and notification choices so you do not need to reset them each visit.
• Analytics cookies: Help us understand how users interact with the platform — which pages are visited most, where users encounter issues, and how navigation flows. Data collected for analytics is aggregated and anonymised.

You can manage cookie preferences through your browser settings. Disabling essential cookies will affect platform functionality. Non-essential cookies can be disabled without impacting your ability to use the core features of the platform.

10. Your Data Rights

As a RoyalX user, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with your account details and the specific request:

We aim to respond to all data rights requests within 30 days. Where a request is complex, we may extend this period by a further 30 days and will notify you if this is the case. Requests will be fulfilled free of charge unless they are manifestly unfounded, excessive, or repetitive.

11. Children's Privacy

RoyalX is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Registration requires confirmation that the user is 18 or older, and identity verification is used to enforce this requirement.

If we become aware that personal data has been collected from a person under 18, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has registered on the platform, please contact [email protected] immediately so we can investigate and act accordingly.

Parents and guardians are encouraged to use device-level parental controls and to have open conversations with young people about online gaming and the importance of age restrictions on adult platforms.

12. Changes to This Privacy Policy

RoyalX may update this Privacy Policy from time to time to reflect changes to our data practices, the services we offer, or applicable requirements. The "Last updated" date at the top of this page will be revised whenever changes are made.

Where changes are material — meaning they meaningfully affect how your data is collected, used, or shared — we will notify registered users via email to their registered address or via an in-platform notification. Minor clarifications or formatting updates may be made without direct notification.

Continued use of the RoyalX platform after an updated Privacy Policy has been published constitutes your acceptance of the revised terms. If you do not agree with the updated policy, please stop using the platform and contact support to request account closure.

13. Contact and Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data RoyalX holds about you, please get in touch with our support team:

• Email: [email protected]
• Live Chat: Available within the RoyalX platform and the RoyalX mobile app, 24 hours a day

For account-related matters including deposit questions and responsible gaming tools, please visit the Deposit and Responsible Gaming pages respectively. For the full platform rules, refer to the Terms and Conditions.

This Privacy Policy was last reviewed and updated in January 2026.