Privacy Policy

1. Introduction

Regency Ran Online ("Regency," "we," "us," or "our") is a community-operated private online game server.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal data when you visit our website, register an account, use our launcher, play on our game servers, purchase virtual currency, or contact our support team.

We aim to handle personal data responsibly and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), as amended, where applicable, and other applicable privacy laws.

2. Personal Data We Collect

The information we collect depends on how you use the Services.

2.1 Account and Registration Information

We may collect:

• Username and account identifier.
• Email address.
• Password credentials stored in an appropriately protected form, such as a password hash.
• Account creation date and account status.
• Account recovery and security records.

We do not need to store your password in readable plaintext to authenticate your account.

2.2 Gameplay and Server Information

When you play on our servers, we may collect or generate:

• Character names, levels, progression, and game statistics.
• Inventory, virtual currency balances, and item transaction records.
• Login and logout timestamps.
• Gameplay events, rankings, and relevant server activity.
• Records of reports, complaints, account restrictions, and appeals.

We use this information to operate the game, maintain accurate game state, investigate disputes, and protect the integrity of the Services.

2.3 IP Addresses and Technical Logs

Our website and game servers may record:

• IP addresses and connection timestamps.
• Login attempts and session information.
• Relevant connection and server error logs.
• Website requests and security events.
• Launcher and patch versions where recorded.

IP addresses may be used to investigate unauthorized access, protect against abuse, diagnose connection problems, and enforce game rules.

An IP address may reveal approximate network location but does not necessarily identify your precise physical location.

2.4 Anti-Cheat Telemetry

We may process anti-cheat telemetry to detect cheating, unauthorized modifications, exploits, account abuse, and threats to the Services.

Depending on the actual anti-cheat implementation, this may include:

• Game-client integrity and file verification results.
• Technical signals associated with suspicious gameplay or unauthorized modification.
• Security alerts and detection results.
• Relevant server-side behavior and event records.
• Information associated with an investigation into a suspected violation.

Anti-cheat telemetry will be limited to the information actually collected by our systems and reasonably required for security, fair play, and service integrity.

This policy does not authorize collection of arbitrary personal files, unrelated browsing activity, or continuous surveillance of your device. Any additional collection, such as hardware identifiers, process inventories, or other device-level signals, must be accurately disclosed before it is implemented where required by law.

2.5 Purchase and Transaction Information

When you purchase top-ups or virtual currency, we may collect:

• Transaction reference and purchase date.
• Amount, currency, and selected package.
• Payment status and virtual currency credited.
• Relevant payment dispute and refund records.
• Information provided to support when investigating a transaction.

Payments may be handled by third-party payment providers. We do not intend to store complete payment card details or security codes on our own systems unless this is specifically implemented and appropriately disclosed.

2.6 Support and Communication Records

If you contact support, submit an appeal, or report an issue, we may process your email address, account identifier, messages, relevant attachments, and associated case records.

Please do not send passwords, complete payment card details, or unrelated sensitive information through support channels.

2.7 Cookies and Website Usage

Our website may use cookies and similar technologies for authentication, session management, security, preferences, and other implemented website functions.

If analytics or other optional technologies are used, the relevant information and choices will be disclosed as required by applicable law.

3. Purposes of Processing

We may process personal data for the following purposes:

1. Registering, authenticating, and managing player accounts.
2. Providing game access and maintaining characters, progression, rankings, and virtual currency.
3. Processing top-ups, crediting purchases, and investigating payment disputes.
4. Delivering patches, updates, and relevant service communications.
5. Detecting cheating, fraud, exploits, unauthorized access, and security threats.
6. Investigating violations, enforcing game rules, and reviewing appeals.
7. Diagnosing errors and improving the reliability and performance of the Services.
8. Responding to support requests and resolving complaints.
9. Meeting applicable legal and regulatory obligations.
10. Establishing, exercising, or defending legal claims where necessary.

We will not use personal data for materially unrelated purposes in a manner inconsistent with applicable law.

4. Legal Grounds and Consent

Where applicable, our processing may be based on consent, the provision of requested services, legitimate operational or security interests where permitted by law, legal obligations, or other lawful grounds.

Where consent is required, we will seek it in an appropriate manner. You may withdraw consent where legally available, although doing so may affect features that depend on the relevant information.

Where we request personal data necessary to provide a particular service, we will explain the relevant requirement and the consequences of not providing it where required by law.

5. Disclosure to Third Parties

We do not sell personal data as a business practice.

We may disclose relevant personal data to:

Hosting and Infrastructure Providers: Providers operating the servers, databases, website, backups, and related infrastructure.

Payment Providers: Providers processing top-ups, payments, refunds, and transaction disputes.

Security and Technical Providers: Providers assisting with security monitoring, abuse prevention, system reliability, or anti-cheat functions.

Communications Providers: Providers delivering transactional email, account notifications, or support services.

Legal and Regulatory Authorities: Authorities or other recipients where disclosure is required by law or is otherwise lawfully necessary to protect rights, safety, or security.

Business or Operational Transfers: Relevant parties in a transfer or restructuring of the Services, subject to applicable law and appropriate safeguards.

We aim to limit disclosures to information reasonably necessary for the relevant purpose and to use appropriate safeguards when engaging providers that process personal data on our behalf.

6. International Data Transfers

Our infrastructure and service providers may store or process personal data outside Malaysia, depending on the locations of our hosting, security, and payment providers.

Where personal data is transferred internationally, we will assess and comply with applicable legal requirements, including the conditions and safeguards governing cross-border transfers under the PDPA where applicable.

The actual locations of processing depend on the providers and hosting regions we use. We will provide more specific information about relevant destinations or safeguards where required by law.

7. Data Retention

We retain personal data for no longer than reasonably necessary for the purposes for which it was collected, subject to applicable law and legitimate recordkeeping requirements.

Retention depends on the category and purpose of the information:

• Account information: While an account is active and for a reasonable period afterward when needed for security, disputes, or legal obligations.
• Gameplay records: As required for game operations, progression, dispute resolution, and service integrity.
• IP addresses and server logs: For security monitoring, troubleshooting, abuse prevention, and investigations.
• Anti-cheat records: For investigating suspected violations, evaluating appeals, and protecting the game environment.
• Transaction records: For accounting, reconciliation, fraud prevention, and payment disputes.
• Support records: For resolving cases and maintaining relevant records.

These categories do not imply a fixed retention period. We will establish and apply appropriate retention periods based on actual operational requirements and applicable legal obligations.

When personal data is no longer required, we will take reasonable steps to delete it, anonymize it, or otherwise dispose of it securely, unless retention is legally required or otherwise permitted.

8. Security Measures

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction.

Measures may include access controls, secure credential storage, restricted administrative privileges, network protection, backups, and security logging.

Access to personal data should be limited to authorized personnel or service providers who need it for legitimate operational purposes.

No system can be guaranteed completely secure. We cannot promise that every incident or unauthorized access attempt will be prevented.

If a personal data breach occurs, we will investigate, take appropriate mitigation measures, and provide notifications to the Personal Data Protection Commissioner and affected individuals where required by applicable law.

9. Your Privacy Rights

Subject to applicable law, you may have the right to:

• Request access to personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Withdraw consent where the relevant processing is based on consent.
• Request cessation of certain processing or deletion where legally available.
• Make a complaint about the handling of your personal data.
• Exercise any additional rights provided by applicable law.

Requests may be subject to identity verification, applicable exceptions, technical feasibility, and legal retention requirements.

We may retain certain records when necessary to comply with law, prevent fraud, protect the Services, or resolve disputes.

To make a request, contact support@regency-ran.com with the subject line Privacy Request. Do not send your password or full payment card details.

10. Children's Privacy

The Services are not intended to knowingly collect personal data from children in violation of applicable law.

Where parental or guardian consent is required, we will handle the relevant data in accordance with applicable requirements.

If you believe that a child has provided personal data without the required authorization, please contact us. We will review the request and take appropriate action where legally required and permitted.

11. Third-Party Websites and Services

Our website may link to third-party platforms, including payment services, community channels, and external support tools.

These third parties operate under their own privacy policies. We are not responsible for independent third-party data practices beyond responsibilities imposed on us by applicable law.

Please review their privacy policies before submitting information through their services.

12. Data Breaches and Privacy Complaints

We maintain procedures intended to identify, investigate, and respond to personal data incidents.

Where applicable law requires notification of a personal data breach, we will follow the applicable reporting requirements and timelines.

If you have a privacy concern, please first contact support@regency-ran.com. You may also contact Malaysia's Personal Data Protection Department or other competent authority where appropriate.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, security measures, data collection, service providers, or legal requirements.

The latest version will be published on our official website with an updated revision date.

Where legally required, we will provide additional notice or obtain consent before implementing relevant changes.

14. Contact Information

For privacy questions, personal data requests, or concerns about the handling of your information, contact:

Regency Ran Online Support

Email: support@regency-ran.com

Website: https://regency-ran.com

Operator status: Community-operated private server.

The identity and legal status of the person or entity responsible for operating the Services should be provided where required by applicable law.

This Privacy Policy describes our intended personal data practices. It must be kept accurate as our actual systems, anti-cheat implementation, hosting arrangements, and payment providers change.