Privacy Policy Panas88 – Malaysian Player Data Protection

1 Introduction & Scope of This Policy

This Privacy Policy describes how panas88 (the platform operated at panas88.xyz) collects, uses, discloses, stores, and protects your personal data. This document applies to all users and members of the panas88 platform who access our services through any device or channel.

At panas88, we take our responsibility as custodians of your personal data seriously. Privacy is not merely a legal requirement for us — it is a core value that reflects our respect for every individual who entrusts their information to this platform. Over 500,000 active Malaysian members have chosen panas88 in part because of their confidence that their data is in responsible hands.

This Privacy Policy should be read together with Terms & Conditions panas88 which forms the entire agreement between you and the platform. By using panas88's services, you agree to the collection and use of your information as described in this policy.

2 Personal Data We Collect

Panas88 collects your personal data through two main channels — data you provide directly when registering or using the platform, and data collected automatically as you browse and interact with our platform.

Panas88 no collect credit or debit card numbers directly — all financial transactions are processed through authorised third-party payment providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and the FPX network, which includes Maybank2u and CIMB Clicks. Panas88 receives only transaction status confirmation — not your full financial details.

3 How Panas88 Uses Your Data

Every piece of data collected by panas88 has a clear and lawful purpose. Here is how we use your personal data:

• Account management: Creating, verifying, and maintaining your account on the panas88 platform so you can log in and use all features securely.
• Transaction processing: Verifying and completing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, and other methods, as well as processing winnings withdrawals to verified accounts.
• Identity verification (KYC): Verifying that you meet the minimum age requirement of 18 years and confirming that the account is used by its rightful owner to prevent fraud.
• Legal compliance: Fulfilling anti-money laundering (AML) obligations, financial reporting requirements, and directives from relevant regulatory authorities.
• Customer support: Resolving enquiries, complaints, and technical issues you raise via panas88 live chat or email.
• Platform security: Detecting and preventing fraud, bot usage, collusion, and other security threats to the integrity of the panas88 platform.
• Service improvement: Analysing aggregate usage patterns (not individual behaviour) to improve the user experience, platform performance, and content relevance.
• Promotional communications: Sending information about panas88 bonuses, promotions, and new offers — only if you opted in to receive marketing communications at registration.
• Responsible gambling: Monitoring usage patterns to identify potential gambling problems and provide appropriate assistance to members who need support.

4 Legal Basis for Data Processing

Panas88 processes your personal data on one or more lawful legal bases. Being transparent about these bases is part of our commitment to responsible data practices:

• Contract: Processing necessary to fulfil the agreement between you and panas88 — including account management, transaction processing, and delivery of the services you have registered for.
• Legitimate Interests: Processing required for panas88's legitimate interests, including fraud prevention, platform security, and service improvement — provided these interests do not override your rights and interests as an individual.
• Legal Compliance: Processing required to fulfil legal obligations applicable to panas88, including AML requirements, financial reporting, and directives from regulatory authorities.
• Consent: For direct marketing activities and non-essential cookie usage, panas88 relies on your explicit consent as the legal basis for processing. You may withdraw this consent at any time.

5 Data Sharing with Third Parties

Panas88 does not sell, rent, or trade members' personal data to any third party. However, there are limited situations where we may share your data with specific parties for legitimate operational purposes:

• Payment providers: Payment service providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and banks supporting FPX (Maybank, CIMB, and others) receive only the minimum information necessary to process your transactions.
• Game providers: Live casino game studios and RNG providers such as Pragmatic Play, Microgaming, and NetEnt receive only the session identifiers required to run the games — they do not receive your personal identity information.
• Technology service providers: Companies providing technical infrastructure services to panas88 (such as cloud, email, and analytics services) may process your data as data processors on panas88's behalf, under strict data processing agreements.
• Regulatory and enforcement authorities: panas88 will disclose data to the relevant authorities when required by law, court order, or applicable regulatory compliance obligations.
• Professional advisors: Lawyers, accountants, or auditors bound by professional confidentiality obligations in the context of work they perform for panas88.

6 Data Retention Period

Panas88 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following are general guidelines for data retention periods:

• Active account data: Retained for as long as your account is active on panas88. Once the account is closed, core account data is kept for a minimum of 5 years for AML compliance and legal requirements.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date in accordance with applicable financial reporting requirements.
• Support communication logs: Retained for 2 years from the date of last interaction to ensure continuity of support and complaint resolution.
• Security and access logs: Retained for 12 months for security incident detection and fraud investigation purposes.
• Responsible gambling self-exclusion data: Retained for the duration of the active exclusion period and a minimum of 5 years thereafter to prevent inappropriate re-registration.

Once the retention period expires, your data will be securely deleted or irreversibly anonymised. You may request information on the specific retention periods for particular data categories by contacting the panas88 privacy team at support@panas88.xyz.

7 Data Security Measures

Panas88 implementing comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or disclosure without consent:

• Data encryption in transit using TLS 1.3 with AES 256-bit across all communications between your device and panas88 servers.
• Encryption of stored data (data at rest) for all sensitive information within the panas88 database.
• Role-based access control (RBAC) ensuring panas88 staff can only access data relevant to their assigned responsibilities.
• Two-factor authentication (2FA) is mandatory for all internal administrative access to the panas88 system.
• Round-the-clock security monitoring with a real-time threat detection system managed by the panas88 cybersecurity team.
• Regular penetration testing conducted by independent cybersecurity firms to identify and address vulnerabilities.
• Documented incident response procedures that are regularly tested to ensure a swift response in the event of a data breach.

8 Your Rights as a Data Subject

As a platform member panas88, you have certain rights regarding your personal data. The following rights can be exercised at any time by contacting the panas88 support team:

9 Cookies & Tracking Technologies

Platform panas88 uses cookies and similar tracking technologies to enhance your experience, maintain session security, and understand how members use our platform. The following are the types of cookies we use:

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the panas88 platform. For non-essential cookies, you may opt out via the cookie settings panel displayed on your first visit to the platform.

10 Children's Data Protection

Platform panas88 is intended strictly for individuals aged 18 and above. We do not knowingly collect or process the personal data of anyone under the age of 18. Should we discover that data has been collected from an underage individual, we will take immediate steps to delete that data and close the associated account.

Parents and guardians who suspect that their underage child has registered a panas88 account should contact us immediately at support@panas88.xyz so we can take appropriate action without delay. Such reports will be prioritised and handled with full sensitivity.

11 Amendments to the Privacy Policy

Panas88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, newly offered services, or evolving legal compliance requirements. Whenever a significant amendment is made, panas88 is committed to:

• Publishing the latest version on this page with an updated "Latest Version" date at the top of the page.
• Notifying all active members via their registered email and in-platform notifications at least 7 days before any amendment takes effect.
• Highlighting key changes in the notice sent so you can easily assess the impact on your privacy.
• Archiving older versions of this Privacy Policy for members who wish to review changes made over time.

Continued use of the platform panas88 after the amendment's effective date will be considered acceptance of the amended policy. If you do not agree with the amendments, you may close your account and request data deletion in accordance with the procedure described in Section 8 above.

12 Contact the Panas88 Privacy Team

If you have any questions, concerns, or requests regarding this Privacy Policy or how panas88 handles your personal data, please reach out to us through the following channels:

• Privacy Email: support@panas88.xyz (subject: "PRIVACY ENQUIRY") — responses within 2–4 business days.
• Live Chat: Available on the platform 24 hours a day, 7 days a week — for urgent privacy enquiries.
• Formal Data Request: Send an email to support@panas88.xyz (subject: "PRIVACY RIGHTS REQUEST") with a copy of your identity document for verification.

Panas88 is committed to responding to all privacy-related enquiries within 30 business days as required. For complaints that cannot be resolved through panas88's internal privacy team, you have the right to refer your concern to the relevant data protection authority.