Legal, privacy and customer-protection information

Operator and regulatory status

The public Royal Investment Bank website identifies Royal Investment Bank as an international private investment bank, states Investment Banking Licence No. 220147BI granted in 2022 by the Labuan Financial Services Authority (Malaysia), and gives the registered office as Unit 2-2, Level 2, Labuan IBFC, Jalan Merdeka, 87000 Labuan, Malaysia. The website describes Royal Investment Bank as part of the Royal Ecosystem and the Royal Bank Platform and a member of the RCC Group.

Regulatory and licensing details beyond those published on royalbank.my are available from Royal Investment Bank on request via compliance@royalbank.my.

This online platform does not state that the operator has UK permission to provide payment accounts or payment services. Services are offered only where the responsible legal entity is lawfully permitted to provide them. Territory-, customer- and product-specific contractual information will be supplied before any account is activated.

Application terms

An application is a request for assessment, not an offer by the bank and not acceptance of a customer relationship. We may request further information, verify evidence, screen relevant persons, decline or close an application, or restrict products according to law, risk and policy.

Do not send money using details obtained from an application page. No customer balance is created by an uploaded document, funding notice or internal reference. A binding relationship begins only when the responsible entity issues the applicable agreement and the customer accepts it.

Fees and exchange rates

No online-platform fee is charged merely for submitting an application. Any account, payment, investment, foreign-exchange or other fee must be stated in the applicable agreement or fee schedule before the service is provided. Individually negotiated terms may apply to eligible professional, corporate or investment clients.

Customer funds and the ten-digit reference

The planned GBP model uses a real pooled receiving account and a permanent ten-digit internal customer reference. The reference is used to allocate funds in the internal ledger; it is not, by itself, a separate bank account or bank-issued IBAN.

Before live service, the final agreement will identify the account-holding entity, safeguarding or client-money treatment, insolvency treatment and whether any compensation scheme applies. We do not claim that balances on this platform are protected by the UK Financial Services Compensation Scheme unless a specific written disclosure confirms that protection.

Privacy and data use

Application and customer data may include identity, contact, address, corporate, ownership, tax, financial, source-of-funds, source-of-wealth, transaction, device, authentication, screening, fraud, complaint and support information.

Data is used to assess eligibility, verify identity and ownership, prevent financial crime and fraud, administer security, provide contracted services, maintain records, meet legal obligations, handle complaints and protect legal rights. Data may be shared with group entities, banks, verification/screening providers, professional advisers, technology processors, authorities and counterparties where lawful and necessary.

Retention is limited to the period required for the purpose, legal obligations, fraud prevention and legal claims. Rights and transfer arrangements depend on the responsible controller and applicable law. Privacy enquiries may be sent to compliance@royalbank.my.

Cookies and online-portal data

This portal uses only strictly necessary storage: a session credential kept in your browser while you are signed in, and short-lived technical values needed to complete registration and identity-verification journeys. No advertising, analytics or marketing cookies are set, and no cross-site tracking takes place. Because this storage is essential to provide the service you request, it does not require consent; clearing it simply signs you out.

For security, the platform also keeps server-side security logs (such as sign-in attempts, device and session records shown in your security settings). Logs are retained only as long as required for security, legal and regulatory purposes.

Subject to applicable law, you may request access to, correction or deletion of your personal data, object to or ask us to restrict processing, and request a copy of data you provided. Send requests to compliance@royalbank.my; we will verify your identity before acting and respond within the timescale required by the applicable law.

Fraud and payment safety

We will never ask for your password, complete security code or one-time authentication code. Do not transfer money because someone claims it must be moved to a safe account. Independently verify payment instructions and changes using a trusted contact route.

How we will contact you: messages from this platform are delivered inside the portal's secure-message centre or from the published addresses on this page. We will never ask you, by phone, email or text, to reveal or "confirm" credentials, to install remote-access software, or to move money urgently. If a contact pressures you to act immediately, stop and verify through info@ribk.com.my before doing anything.

Keep your credentials private: never share your password or one-time codes with anyone, including staff; use a unique password for this portal; sign out on shared devices; and review the active sessions and devices listed in your security settings regularly.

Report suspected fraud or unauthorised access immediately to compliance@royalbank.my. Live payment products will include additional warnings, beneficiary controls, limits, recovery and reimbursement information applicable to the relevant payment rail and jurisdiction.

Complaints

Complaints may be sent without charge to compliance@royalbank.my. Include your name, application or customer reference, contact details, what happened, relevant dates and the outcome requested. Do not email passwords or one-time codes.

We will log and acknowledge your complaint promptly, investigate it fairly and keep you informed of progress. When the investigation is complete you will receive a written final response explaining the outcome and the reasons for it. If we cannot resolve a complaint quickly, we will tell you the expected timescale and who is handling it. If you remain dissatisfied, you may ask for the complaint to be escalated to senior management for review.

External ombudsman or regulator rights vary by entity, service and jurisdiction and will not be represented as available unless they genuinely apply; where they do apply, the final response will explain how to use them.

Support and vulnerable customers

General enquiries may be sent to info@ribk.com.my. Tell us about communication or accessibility adjustments that would help. We may support authorised representatives after appropriate verification.

Information about health, life events or other vulnerability is used only where relevant to provide support, prevent harm or meet legal duties, and access is restricted accordingly.

Accessibility

We want this portal to be usable by everyone. The pages are built to work with keyboard navigation, screen readers and browser zoom, and we continue to improve against recognised web-accessibility guidance. If any part of the portal is difficult to use, or you need this information in another format, contact info@ribk.com.my and we will help.

Copyright and trademarks

© 2026 Royal Investment Bank. All rights reserved. The Royal Investment Bank name, crown device and logos displayed on this portal are trademarks or trade names of Royal Investment Bank and its group. Content on this portal may not be reproduced or redistributed without permission, except for personal, non-commercial use.