Why two-factor authentication matters on royalsk
Your royalsk account holds your funds and your betting history. If someone gains access to your password—through phishing, password reuse, or a data breach on another website—they could log in and withdraw your balance. Two-factor authentication prevents this. Even if an attacker knows your password, they cannot log in without your second verification code, which only you have on your phone.
On royalsk, we require 2FA for high-risk actions like withdrawals, password changes, and payment method updates. This means that if you enable 2FA and someone tries to cash out your account, they hit a barrier and cannot proceed without your code. This extra layer of protection is especially important if you deposit via DANA, e-wallet, mobile banking, local payment, online payment, or e-wallet, because your account balance is directly connected to your payment method.
Two verification methods on royalsk
We offer SMS codes and authenticator apps. SMS sends a six-digit code to your phone after each login. Authenticator apps (Google Authenticator, Microsoft Authenticator, Authy) generate codes on your phone that refresh every 30 seconds.
Both methods work equally well. SMS is simpler if you do not want to download an app. Authenticator apps are slightly more secure because the codes are generated locally on your phone, not transmitted via SMS. Choose whichever fits your routine.
Enabling two-factor authentication on royalsk
Log in to your royalsk account and open Account Settings. Find the "Security" or "Two-Factor Authentication" section. Select your preferred method: SMS or authenticator app. If you choose SMS, royalsk sends a verification code to the phone number on your account. Enter the code to confirm. If you choose an authenticator app, royalsk displays a QR code. Open your authenticator app, scan the QR code, and enter the six-digit code shown in the app.
After you confirm, royalsk enables 2FA on your account. From that moment on, every time you log in, you enter your password, then you are prompted for your verification code. If you set up SMS, the code arrives via text message within seconds. If you set up an authenticator app, you open the app and read the current six-digit code.
Using two-factor authentication during login
When you log in to royalsk with 2FA enabled, the login flow changes slightly. Enter your email and password as usual. After authentication, royalsk prompts you: "Enter your 6-digit verification code." If you chose SMS, a text arrives on your phone. If you chose an authenticator app, open the app and read the current code. Enter the code into the royalsk login screen and tap "Verify."
The entire process takes less than a minute. Your session then continues normally. From that point, you can access your account balance, join live-dealer tables at our studios, view your Liga 1 football bets, or manage your withdrawal requests. Your 2FA code is valid for 30 seconds. If you miss the window, request a new code and try again.
Authenticator apps compatible with royalsk
Any standard authenticator app works with royalsk because we use the industry-standard Time-based One-Time Password (TOTP) protocol. Popular options include Google Authenticator (free, Android and iOS), Microsoft Authenticator (free, Android and iOS), Authy (free, Android and iOS), and 1Password (paid, but includes password management). Download any of these apps from your phone's app store, set them up, and scan the QR code that royalsk displays during 2FA setup.
We recommend choosing an app you already use for other accounts, so you have one central place to manage all your two-factor codes. If you do not use an authenticator app elsewhere, Google Authenticator is simple and widely trusted. Once you scan the royalsk QR code into your chosen app, the app begins displaying refreshing codes automatically. You no longer need to do anything—just open the app, read the code, and enter it into royalsk.
Recovering your account if you lose your phone
If you lose your phone, you cannot receive SMS codes or access your authenticator app. This is why royalsk provides a backup code during 2FA setup. If you saved it, use that code to log in. Open royalsk, enter your email and password, and when prompted for your 2FA code, enter your backup code instead. Backup codes usually work only once, so after you use it, log in fully and disable 2FA or set it up on a new phone.
If you did not save your backup code, contact our English-speaking support team through the help menu on royalsk. Provide your account email, identity verification details, and a mobile bankingef explanation of the situation. Our team will verify your identity and help you regain access to your account. This process takes a few hours to a full business day because we carefully confirm your identity before removing 2FA.
Two-factor authentication for withdrawals and sensitive changes
On royalsk, 2FA is required not just for login but also for withdrawals and account changes. If you try to withdraw funds to your local payment, online payment, e-wallet, mobile banking, local payment, or bank account (online payment, e-wallet, mobile banking, local payment), royalsk prompts you for your 2FA code even though you are already logged in. This extra check confirms that you—and not an attacker—initiated the withdrawal. The same applies if you change your password, update your payment method, or modify your email address.
This multi-layer approach means that even if an attacker logs into your account using a stolen password, they cannot complete a withdrawal without your 2FA code. Your balance stays protected during holidays like Idul Fitri, Idul Adha, Imlek, or Nyepi, and during busy periods when you are following Liga 1, Piala Indonesia, or Piala AFF matches on royalsk.
Disabling two-factor authentication on royalsk
If you decide to disable 2FA—perhaps you are switching to a new phone and want to set it up fresh—log in to your royalsk account, open Account Settings, and find the Security section. Tap "Disable Two-Factor Authentication." Royalsk will ask you to confirm using your current 2FA code, confirming that you have access to your verification method. Once confirmed, 2FA is disabled. You can re-enable it anytime using the same process.
We recommend keeping 2FA enabled at all times. The slight inconvenience of entering a code during login is far outweighed by the security benefit. However, if you need to disable it temporarily, you can always turn it back on once you have switched phones or resolved whatever issue required the change.