Panas77 Privacy Policy – Malaysia Personal Data Protection

Panas77 is an online betting and gaming platform operating in compliance with applicable regulations, serving users in Malaysia. We understand that privacy is more than a technical requirement — it is a fundamental right of every user that must be respected and protected.

This Privacy Policy transparently explains how Panas77 collects, stores, uses, and protects your personal data when you register an account, make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX, play slots, Live Casino, roulette, Sports Betting, or e-sports, or engage in any other interaction with our platform.

Panas77 operates as a responsible data controller. All data processing we carry out has a valid legal basis and a clearly defined purpose. We do not collect data that is unnecessary, and we do not retain data longer than required for the stated purposes.

This policy applies to all registered Panas77 members in Malaysia and all users who visit or interact with our platform, including via web browser, mobile app, and any customer support channels we provide.

Panas77 collects two main categories of data: information you provide to us directly, and data collected automatically as you use the platform.

We never request or store your full password in readable form. Passwords are stored as irreversible hashes. Credit card details are also never stored directly on Panas77's servers — all transactions are processed through PCI-DSS certified payment gateways.

Your personal data is collected by Panas77 through several different methods, depending on the type of interaction you have with our platform:

• Account Registration: When you first register a Panas77 account, you provide basic information such as your full name, Malaysian phone number, email address, and date of birth. This information is required to create and manage your account.
• KYC Process (Identity Verification): Where required for compliance, we may request documents such as a copy of your identity card or proof of address. These documents are used solely for identity verification purposes and are stored with the highest level of protection.
• Financial Transactions: Every deposit made via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX (Maybank2u or CIMB Clicks), and every withdrawal request generates a transaction record, which we retain for financial compliance and anti-money laundering purposes.
• Platform Activity: Data is collected automatically while you use the platform — including games played, bets placed, session duration, and interactions with the user interface.
• Cookies and Tracking Technologies: The Panas77 platform uses session cookies and preference cookies to enhance the user experience. Further details are explained in Section 7.
• Support Communications: Every interaction with our support team via live chat, email, or Telegram is recorded for quality assurance and dispute resolution purposes.

Panas77 uses collected data for specific, lawful, and proportionate purposes. We do not process data for purposes unrelated to our services without your explicit consent:

• Account Management: Creating, verifying, and maintaining your account, including password recovery and login security.
• Transaction Processing: Processing deposits in MYR via local eWallet and FPX methods, and managing your winnings withdrawal requests.
• KYC/AML Compliance: Complying with Know Your Customer (KYC) and anti-money laundering (AML) requirements as mandated by applicable regulations.
• Platform Security: Detecting and preventing fraud, unauthorised access, multi-account use, and any activity that violates Panas77's Terms & Conditions.
• Service Improvement: Analysing usage patterns to improve the interface, platform speed, and overall gaming experience.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support to members who need it.
• Service Communications: Sending important account-related notifications, including transaction confirmations, security alerts, and material service updates.
• Marketing Communications: With your consent, sending information about relevant Panas77 promotions, bonuses, and latest offers based on your interests. You may withdraw this consent at any time via your account settings.

Panas77 does not sell your personal data to any third party for marketing or commercial purposes. This is an unwavering commitment. That said, in the course of legitimate business operations, we may share data with the following categories of third parties under strictly limited and controlled circumstances:

• Payment Service Providers: Payment gateways that process your deposit and withdrawal transactions (such as TNG eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX) only receive the data necessary to process the relevant transaction.
• Game Software Providers: Companies such as Evolution Gaming, Pragmatic Play, and other providers that supply Live Casino games, slots, and table games may receive game session data required for the technical operation of those games.
• IT Service Providers: Companies providing server infrastructure, cloud services, and technical support to Panas77 have limited access to data strictly necessary for their technical functions, under strict confidentiality agreements.
• Legal Authorities: Panas77 will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required by law or a valid court order. We will notify you if we do so, unless prohibited by law.
• Fraud Review: Dedicated third-party services for fraud detection and AML that help Panas77 identify suspicious activity — only the minimum necessary data is shared.

All third parties receiving data from Panas77 are bound by data processing agreements that require them to protect your data and use it only for specified purposes. Panas77 ensures that every third-party partner upholds equivalent data protection standards.

Panas77 takes a serious approach to security infrastructure in order to protect the personal data of all members. The following technical and organisational measures are continuously active to safeguard your data:

• 256-bit SSL Encryption: All data transmitted between your browser or app and Panas77's servers is encrypted using TLS protocol with 256-bit key strength — the same standard used by banking institutions.
• Data-at-Rest Encryption: Sensitive data stored in Panas77's databases is encrypted at rest using industry-standard encryption algorithms.
• Strict Access Controls: Only Panas77 staff who require access to data for their specific role are granted permission to do so. All access is logged and continuously monitored.
• 24/7 Security Monitoring: An automated monitoring system operates around the clock to detect any unauthorised access attempts or suspicious activity.
• Regular Security Testing: Panas77 conducts regular penetration testing and security audits by independent third parties to identify and address any vulnerabilities.
• Secure Data Backup: Data is regularly backed up to secure, encrypted locations to ensure service continuity in any emergency situation.

While Panas77 takes all reasonable steps to protect your data, no digital system can be guaranteed 100% secure against all cyber threats. You also play an important role in your account's security by using a strong password, not sharing your login credentials, and promptly reporting any suspicious activity to us.

Panas77 uses cookies and similar tracking technologies to enhance platform functionality and the user experience. Below are the types of cookies we use and their respective purposes:

You can manage cookie settings through your web browser preferences. Disabling certain cookies may affect the functionality of the Panas77 platform. Panas77 session cookies expire automatically when you log out or close your browser.

Panas77 retains your personal data for as long as your account is active and for such period as required after account closure to meet applicable legal and regulatory obligations. Our specific retention policy is as follows:

• Active Account Data: Retained for as long as your account remains active on the Panas77 platform.
• Financial Transaction Records: Retained for 7 years after the transaction date to meet financial compliance requirements, including anti-money laundering (AML) obligations.
• KYC Records: Identity verification documents are retained for 5 years after account closure for regulatory compliance purposes.
• Gaming Data: Game history and betting records are retained for 3 years for customer support, dispute resolution, and responsible gambling monitoring purposes.
• Communication Logs: Customer support conversation records are retained for 2 years for quality assurance purposes and resolution of any disputes that may arise at a later stage.
• Technical Data & Logs: Access logs and technical data are retained for 12 months for security and fraud detection purposes.

Once the relevant retention period has expired, data will be securely deleted or anonymised so it can no longer be linked to your personal identity. Panas77's data deletion procedures ensure that deleted data cannot be recovered by any party.

As a Panas77 member, you have the following rights regarding your personal data. We fully respect these rights and will process your requests within a reasonable timeframe:

To exercise any of the rights above, please contact us at support@panas77.click with the email subject line "Privacy Rights Request", along with your full name and account number. We will verify your identity before processing the request to safeguard your data security.

The Panas77 platform is exclusively for adults aged 18 years and above only. We do not knowingly collect or process personal data from individuals under the age of 18.

Should we determine that a minor has registered an account — whether through the KYC process, a third-party report, or any other means — the account will be closed immediately and all collected data will be deleted from our records as promptly as possible.

If you are a parent or guardian who believes that a minor in your care has registered a Panas77 account, please contact us immediately at support@panas77.click so that we can take the appropriate action. Panas77 places child protection at the forefront of all our operations.

Panas77 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform service expansions. Each version of the Privacy Policy will display the most recent update date at the top of the document.

For material changes that significantly affect your privacy rights, Panas77 will notify you via:

• By email to your registered email address, at least 14 days before the changes take effect.
• In-platform notifications displayed when you log in to your Panas77 account.
• Updates to this Privacy Policy page with a revised update date.

Continued use of the Panas77 platform after any Privacy Policy update comes into effect constitutes your acceptance of the updated version. If you do not agree with the changes made, you have the right to close your account before the effective date of those changes.

If you have any questions, concerns, or complaints regarding how Panas77 handles your personal data, or if you wish to exercise any of the rights outlined in Section 9, please contact us through the following channels:

• Privacy Email: support@panas77.click (use the subject line "Privacy Policy Enquiry" or "Privacy Rights Request")
• Live Chat: Available 24/7 in Bahasa Melayu via the Panas77 platform — the fastest way to get an immediate response for privacy-related questions.
• Telegram: Via Panas77's official Telegram support channel for mobile communication.

We aim to respond to all privacy-related enquiries within 3 business days. For formal data rights requests (such as access or deletion requests), processing time is up to 30 days from the date the request is verified.

Panas77 takes every privacy complaint seriously. If you feel your complaint has not been resolved to your satisfaction, you have the right to escalate the matter to the relevant data protection regulatory authority in Malaysia.