RCCG Privacy & Cookies Policy

1. Introduction

This Privacy & Cookies Policy (“Policy”) applies to all websites, platforms, and digital applications operated under RCC Group Holdings (“RCCG”, “we”, “us”, or “our”), including, but not limited to the Royal Fund Platform, the Royal Bank Platform, the Royal Digital Platform, the Royal Market Platform, the Royal Trust Platform, The Orb Platform, and the Royal Capital Club, as well as their affiliated projects. 

RCCG respects your privacy and is committed to protecting personal data in accordance with applicable international privacy and data protection laws, including the EU General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, the California Consumer Privacy Act (CCPA), the Personal Data Protection Act (PDPA), and other similar frameworks worldwide. 

This Policy explains how RCCG collects, uses, discloses, and protects personal data in connection with its operations and digital platforms.  

2. Scope and Applicability  

This Policy applies to: 
·    All users visiting RCCG websites and digital platforms; 
·    Partners, investors, clients, and their representatives;
·    Individuals contacting RCCG through forms, email, or other communication channels; 
·   Data processing carried out by RCCG and its affiliated entities globally. 

This Policy doesnot apply to third-party websites or applications linked from RCCG websites (e.g., LinkedIn, Instagram, or external media).  

3. Data Controller 

The data controller responsible for processing under this Policy is:

RCC Group Holdings (“RCCG”)
Email: privacy@royal.holdings


Jurisdiction: International umbrellastructure with regulated entities operating under the laws of their respective jurisdictions. 

Each subsidiary or platform under RCCG acts as a data processor or joint controller, depending on its operations and applicable law in the relevant jurisdiction.

4. Types of Data Collected  

RCCG may collect and process the following categories of personal data:

·   Identification information (name, title, organization, country); 
·   Contact details (email, phone, correspondence address); 
·   Professional details (position, company, sector); 
·   Financial or investment-related data (only from verified institutional or private clients); 
·   Technical data (IP address, browser type, device information); 
·   Usage data (pages visited, interactions, analytics metrics, cookies).  

RCCG does notcollect sensitive personal data (e.g., biometric, medical, religious, or political information) unless required by law.

5. ​Purpose of Data Processing   

RCCG processes personal data solely for legitimate business purposes, including:

·   Communication with partners, clients, and investors; 
·   Performing due diligence and compliance verification; 
·   Managing contractual relationships and investor reporting; 
·   Meeting legal and regulatory requirements; 
·   Improving website functionality and analytics; 
·   Responding to inquiries and providing relevant information.  

Personal data is never sold and is shared only with authorized parties in compliance with applicable data protection laws.

6. ​​Legal Basis for Processing    

Depending on the jurisdiction, RCCG processes personal data under one or more of the following legal grounds:

·   Consent of the data subject; 
·   Fulfilment of contractual obligations; 
·   Compliance with legal or regulatory requirements; 
·   Legitimate business interests of RCCG; 
·   Protection of vital interests of individuals.  

7. ​​​Data Retention      

RCCG retains personal data only as long as necessary for the purposes for which it was collected or as required by law. 
In general, contact and communication data are retained for up to 12 months, unless longer retention is required by compliance or audit obligations. 

In the case of regulated financial entities operating under RCCG (including banking, trust, or investment institutions), data retention and processing follow specific statutory requirements. This may include the retention of client and transaction records for a minimum of five to ten years in accordance with applicable Anti-Money Laundering (AML) and Know-Your-Customer (KYC)regulations.

8. ​​​Data Security     

RCCG implements appropriate technical and organizational measures to protect personal data, including:

·   Encrypted communication channels (SSL/TLS); 
·   Restricted access for authorized personnel only; 
·   Regular IT security audits and risk assessments; 
·   Secure backups and controlled storage systems.  

9. Data Sharing and Transfers    

Personal data may be shared within the RCCG group and with affiliated entities where required for legitimate operations, subject to confidentiality and data protection standards. 

For international data transfers (for example, between the EU, GCC, Asia, and the Americas), RCCG ensures adequate safeguards through:

·    Standard Contractual Clauses (SCCs); 
·   Inter-company data protection agreements; or 
·   Equivalent mechanisms recognized under applicable law. 
·   Secure backups and controlled storage systems.  

10. ​Data Subject Rights     

Depending on your jurisdiction, you may have the following rights:

·   Right of access and data portability; 
·   Right to rectification and erasure (“right to be forgotten”); 
·   Right to restrict or object to processing; 
·   Right to withdraw consent at any time; 
·   Right to lodge a complaint with a supervisory authority.   

Requests should be sent to privacy@royal.holdings. 
RCCG will respond in accordance with applicable data protection laws.

11.  Cookies Policy   

RCCG websites use cookies to enhance functionality and improve user experience. Cookies are small text files placed on your device that store information about your browsing preferences.

Types of Cookies Used:
·   Essential Cookies: required for core site functionality (cannot be disabled). 
· Analytical Cookies: help measure website traffic and performance (Google Analytics or equivalent, anonymized). 
·   Preference Cookies: store user display or language preferences. 

Duration of Cookies: 
·   Session cookiesexpire when you close your browser. 
·   Persistent cookiesremain on your device for up to 12 monthsunless deleted earlier. 

By default, only essential cookies are activated on RCCG websites.
Analytical and preference cookies are used only after the user grants consent via the cookie banner or browser settings. 

Cookie Management:
You can control or delete cookies through your browser settings at any time.
If you choose to disable cookies, certain website functions may be limited.
By continuing to browse RCCG websites, you consent to the use of cookies as described in this Policy.

12. ​​Third-Party Services    

RCCG websites may contain links or embedded content from third-party services (e.g., LinkedIn, YouTube, Instagram). 

RCCG does not control these services and is not responsible for their privacy practices.
Users should review the privacy policies of third-party providers.  

13. Updates to This Policy  

RCCG reserves the right to update or amend this Policy to reflect legal, operational, or technological changes.

The latest version will always be available on this page. Users are encouraged to review this Policy periodically to remain informed.  

14. ​Contact Information  

For any questions, concerns, or data requests, please contact: 

RCC Group Holdings – Data Protection Department
Email: privacy@royal.holdings
Jurisdiction: International Umbrella Structure (RCCG Royal Ecosystem)