At royal138, the privacy and security of your personal data is treated with the same seriousness as the security of your account balance. This Privacy Policy explains in plain, clear language exactly what data royal138 collects from Pakistani players, why we collect it, how it is used, how long it is kept, and what rights you hold over it.
Before you read the full legal text, here is a plain-English summary of the six principles that govern how royal138 handles the personal data of Pakistani players.
royal138 does not collect personal data for the sake of it. Every piece of information we request from Pakistani players — name, mobile number, payment details — has a specific, documented purpose directly related to providing the Services safely and legally.
royal138 does not sell, rent, or lease your personal data to third-party marketing companies, data brokers, or advertisers. Your information is shared only with the limited service providers necessary to operate the platform — payment processors, KYC providers, and the like — under strict contractual data protection obligations.
Every piece of personal data transmitted between your device and royal138's servers — whether during login, deposit, or KYC document upload — is protected by 256-bit SSL encryption. Data stored on royal138 infrastructure is encrypted at rest using industry-standard algorithms.
You have the right to access, correct, export, and — in most cases — request deletion of the personal data royal138 holds about you. These rights are enforceable and can be exercised at any time by contacting our support team. We respond to all data requests within 30 calendar days.
royal138 applies defined retention periods to all categories of personal data. Account data is retained for the duration of the account relationship plus a period required by our licensing and anti-money laundering obligations. Data is securely deleted or anonymised when no longer required.
royal138 will only send you promotional or marketing communications if you have opted in to receive them at the point of account registration or subsequently in your Account Settings. You may withdraw your consent and unsubscribe from marketing at any time without affecting your access to the Services.
This Privacy Policy applies to all users of the royal138 platform, including registered account holders and visitors who access royal138 without completing registration. By using royal138 in any capacity, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any provision, please discontinue use of the platform immediately.
royal138 ("we," "us," "our," or "the Platform") operates an online sports betting and casino gaming service accessible at royal138.im, serving an English-speaking Pakistani player base including users in Karachi, Lahore, Islamabad, Faisalabad, and across Pakistan. This Privacy Policy governs the collection, use, storage, disclosure, and protection of personal data obtained through the royal138 platform and all related services, promotions, and communications.
This document has been written in plain English to ensure that Pakistani players can read and understand how their information is handled — not just satisfy a legal requirement. We believe you have the right to know, in clear and honest terms, what data royal138 holds about you and why. The legal-style language used in certain provisions is necessary for precision and enforceability, but the substance of each clause is explained as clearly as possible.
This Privacy Policy should be read alongside the royal138 Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference into the complete agreement between you and royal138.
For the purposes of applicable data protection law, royal138 acts as the Data Controller in respect of personal data collected from users of the platform. As Data Controller, royal138 determines the purposes for which personal data is processed and the means by which that processing is carried out.
royal138 operates under a valid international gaming licence issued by a recognised regulatory authority. Compliance with data protection requirements forms part of royal138's licensing obligations and is subject to periodic regulatory review. All data processing activities carried out by royal138 are documented in an internal Record of Processing Activities maintained for regulatory inspection purposes.
royal138 collects the following categories of personal data from users:
| Data Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number (for KYC verification) | Account registration; KYC verification |
| Contact Data | Pakistani mobile number, email address | Account registration |
| Financial Data | JazzCash / EasyPaisa wallet identifiers, bank account details (partial), transaction history | Deposit and withdrawal processing |
| KYC Documents | Government-issued ID images, proof of address documents | Identity verification for large withdrawals |
| Gaming Data | Bet history, game history, wagering totals, session duration, win/loss records | Throughout platform use |
| Technical Data | IP address, device type, browser type, operating system, screen resolution | All platform access events |
| Usage Data | Pages visited, features used, login timestamps, session durations | Throughout platform use |
| Communication Data | Live chat transcripts, support ticket content, email correspondence | When you contact royal138 support |
| Marketing Preferences | Communication opt-in/opt-out status, preferred contact method | Registration; Account Settings changes |
We do not collect: Full payment card numbers (we use tokenised payment references only), biometric data, or sensitive personal data such as health information, religious beliefs, or political opinions. royal138 does not require — and asks players not to provide — any personal data beyond what is listed in the table above.
royal138 collects personal data through the following means:
The majority of personal data royal138 holds is provided directly by you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings. We rely on you to ensure that the information you provide is accurate and current.
Technical and usage data is collected automatically when you access royal138 — through server logs, cookies, and similar tracking technologies. This automated collection is necessary for the Platform to function correctly, to detect fraudulent access, and to improve the user experience for Pakistani players. See Section 9 for full details on cookies and tracking.
royal138 may receive personal data from third parties in limited circumstances: from payment processors (JazzCash, EasyPaisa, HBL, Meezan Bank, UBL) to confirm transaction details; from KYC verification service providers to validate identity documents; and from fraud prevention agencies to screen against known bad actor databases. All third-party data sources used by royal138 are subject to their own privacy policies and data sharing agreements that comply with applicable law.
royal138 processes personal data for the following specific purposes:
Every instance of personal data processing at royal138 is carried out on the basis of at least one of the following lawful grounds:
Where consent is the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal or processing carried out on a different legal basis.
royal138 does not sell, rent, trade, or lease personal data to third parties. We share personal data with third parties only where necessary, as described below, and only under contractual data processing agreements that require those parties to handle your data with the same level of care as royal138 itself.
Transaction data is shared with JazzCash, EasyPaisa, HBL, Meezan Bank, UBL, and cryptocurrency processing partners solely to process your deposit and withdrawal transactions. These providers receive only the minimum data required to execute and confirm transactions.
Royal138 uses accredited third-party KYC providers to verify identity documents submitted by players during the account verification process. Document data is transmitted securely and is not retained by the KYC provider beyond the period required for the verification check.
royal138 may share account and transaction data with fraud prevention agencies, gaming regulatory authorities, and law enforcement agencies where we are legally required or permitted to do so — for example, in the context of anti-money laundering investigations or in response to a court order.
Hosting, database, security monitoring, and customer support software providers may process personal data as part of delivering their services to royal138. All such providers operate under formal data processing agreements and are prohibited from using your data for their own purposes.
We will never share your data with advertising networks, social media companies, data aggregators, or any third party for commercial marketing purposes without your explicit consent. Your JazzCash number, CNIC details, and betting history remain confidential to royal138 and the limited processors described above.
As an internationally operated online gaming platform, royal138 may transfer personal data to servers and service providers located outside of Pakistan. Where such transfers occur, royal138 takes the following steps to ensure your data remains protected:
royal138 uses cookies and similar tracking technologies (local storage, session identifiers) to operate the platform, maintain your logged-in session, remember your preferences, and analyse how Pakistani players use the platform. The following cookie categories are used:
These cookies are essential for the royal138 platform to function. They maintain your login session, store your language and currency preferences, and ensure security features (including CSRF protection) operate correctly. You cannot opt out of strictly necessary cookies — without them, the platform cannot function.
Functional cookies remember your preferences across visits — such as your preferred sports bet view layout or your most recently visited game category. These enhance your experience on royal138 but are not essential for core functionality. You may disable functional cookies in your browser settings, though this may affect platform comfort features.
With your consent, royal138 uses analytics cookies to collect aggregated, anonymised data about how players interact with the platform — which pages are visited most, where users experience friction, and how the mobile experience compares to desktop. This data informs platform improvements and is never used to identify individual users.
You may manage your cookie preferences at any time through your browser's cookie settings or, where a cookie preference centre is provided on royal138, through that interface. Disabling analytics cookies does not affect your access to any royal138 Service or bonus offer.
royal138 retains personal data for the minimum period necessary for the purpose for which it was collected, subject to any longer retention period required by our licensing obligations or applicable anti-money laundering law.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Licensing obligation; AML compliance |
| KYC documents | 5 years from account closure or date of collection | Anti-money laundering regulatory requirement |
| Transaction records | 5 years from transaction date | Financial record-keeping obligation |
| Betting and gaming history | Duration of account + 2 years after closure | Responsible gaming monitoring; dispute resolution |
| Support communications | 3 years from last communication | Legitimate interests; dispute resolution |
| Technical and usage logs | 13 months from collection | Security monitoring; fraud prevention |
| Marketing preference records | Duration of account (consent records kept longer) | Consent management obligations |
At the end of each applicable retention period, personal data is either permanently and securely deleted or rendered irreversibly anonymous. Anonymised data (from which no individual can be identified) may be retained for longer periods for statistical and platform improvement purposes.
royal138 implements a comprehensive programme of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
While royal138 takes all reasonable steps to protect your data, no system connected to the internet is entirely immune from risk. We encourage all Pakistani players to use strong, unique passwords and to enable two-factor authentication on their royal138 accounts.
As a royal138 user, you hold a number of rights with respect to the personal data we process about you. These rights are described in detail in Section 12 below and in the dedicated section of this page. To exercise any of these rights, contact royal138's support team via live chat or email.
royal138 will respond to all data subject rights requests within 30 calendar days of receipt. In complex cases where additional time is required, we will notify you within the 30-day window and provide an updated timeline. We will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee.
To verify your identity before processing a rights request, royal138 may ask you to confirm certain account details. This is a security measure to ensure we do not disclose your personal data to an unauthorised third party.
royal138 is exclusively intended for adults aged 21 years and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 21. Our registration process requires users to confirm their age, and our KYC verification process includes age confirmation.
Strict 21+ Policy: If royal138 discovers that personal data belonging to a person under 21 years of age has been collected through our platform, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe a minor has accessed royal138, please contact us immediately via live chat.
Parents and guardians are encouraged to install parental control and internet filtering software on devices accessible to minors to prevent access to online gambling platforms. royal138 supports responsible access and will cooperate with guardians who report suspected underage account use.
royal138 will send promotional communications — including information about new games, PSL betting offers, bonus promotions, and seasonal events — only to players who have explicitly opted in to receive such communications at account registration or subsequently via Account Settings.
You may withdraw your consent to receive marketing communications at any time, at no cost, and without affecting your access to royal138's Services. To unsubscribe, update your preferences in Account Settings, or contact live support directly. Processing of opt-out requests occurs within 10 business days.
Separate from marketing, royal138 may send you service-related communications regardless of your marketing opt-in status. These include: account verification messages, OTP codes, withdrawal confirmation notifications, security alerts, and important policy change notices. These communications are necessary for the operation of your account and cannot be unsubscribed from independently.
royal138 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, platform features, regulatory requirements, or applicable law. Material changes — those that significantly affect how your data is used or your privacy rights — will be communicated to registered users via the email address on their account or via a prominent platform notice, with a minimum of 14 days' advance notice before the change takes effect.
The effective date and version number displayed at the top of this page and in the table of contents sidebar reflect the most recently published version of the Policy. Your continued use of royal138 following the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not accept the revised Policy, please close your royal138 account before the effective date.
We recommend that you review this Privacy Policy periodically. The current version is always accessible at this URL and is linked from the royal138 website footer.
For any queries regarding this Privacy Policy, to exercise your data subject rights, or to report a privacy concern, please contact the royal138 Data Protection team through the following channels:
The fastest way to reach royal138 support for privacy-related queries. Available 24 hours a day, 7 days a week via the on-site chat widget on the royal138 platform. Identify your query as a "Privacy / Data Request" at the start of your chat session.
Written privacy requests and formal data subject rights exercises should be submitted to the royal138 support address displayed in the website footer: [email protected] (plain text — not a clickable link; please copy manually to your email client). Include "Privacy Request" in the subject line. Royal138 acknowledges all privacy email requests within 48 hours and provides a full response within 30 calendar days.
When submitting a rights request, please include your registered Pakistani mobile number and the specific right you wish to exercise (e.g. access, correction, deletion) to help us process your request as efficiently as possible.
These rights can be exercised at any time by contacting royal138 support. We respond within 30 calendar days.
Request a copy of all personal data royal138 holds about you — your account data, betting history, KYC records, and communication logs.
Request correction of any inaccurate or incomplete personal data royal138 holds about you. We will verify and update records promptly.
Request deletion of your personal data where it is no longer necessary for the purposes collected, subject to legal retention requirements that may apply.
Object to processing of your data for direct marketing at any time, or object to processing based on legitimate interests where you have grounds specific to your situation.
Request that royal138 restricts processing of your data — for example, while the accuracy of the data is being contested or while an objection to processing is evaluated.
Receive a structured, commonly used, machine-readable copy of the personal data you provided to royal138, suitable for transferring to another service provider.
Withdraw consent for any processing based on consent (such as marketing communications) at any time, without affecting the lawfulness of prior processing.
Lodge a complaint with royal138 directly via live support, or with the relevant data protection supervisory authority under our licensing jurisdiction, if you are unsatisfied with how we handle your data.
Join Pakistani players who trust royal138 for fair, secure, and transparent online betting and casino gaming in PKR. JazzCash, EasyPaisa accepted. Strictly 21+ only.
Create Your Account Responsible Gaming