Pantas33 Privacy Policy – Member Personal Data Protection

1Introduction and Scope of This Policy

Pantas33 ("we", "our platform") takes seriously its responsibility to protect the privacy of every individual who uses our services. This Privacy Policy explains our practices regarding the collection, processing, storage, disclosure, and protection of your personal data.

This policy applies to all users who access the pantas33 website at pantas33.onl, the pantas33 mobile app for Android and iOS, and all services provided through our platform, whether via web browser or app.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable related regulations. If you disagree with any part of this policy, you are advised not to continue using our platform.

2Types of Personal Data We Collect

Pantas33 collects personal information through several means — directly from you during registration and use, automatically via tracking technologies, and from trusted third-party sources for identity verification purposes.

We do not collect sensitive data such as health information, biometric data, or political affiliations unless specifically required by applicable law or licensing obligations.

3How We Use Your Data

Every piece of information we collect is used for a clear and legitimate purpose. We will not use your data for any purpose not stated in this policy without first obtaining your consent.

• Account Management: Create and manage your account, process registrations, and verify your identity through required KYC procedures.
• Transaction Processing: Handle deposits, withdrawals, and all financial transactions related to your account securely and efficiently.
• Service Communications: Send important account-related notifications, terms updates, security alerts, and withdrawal information.
• Promotions and Offers: With your consent, we may send you relevant promotional information. You may withdraw this consent at any time through your account settings.
• Security and Fraud Prevention: Detect and investigate suspicious activity, protecting the platform and all members from security threats.
• Legal Compliance: Meet reporting obligations to relevant authorities under anti-money laundering (AML) regulations and gambling compliance requirements.
• Platform Improvements: Analyse aggregated and anonymised usage patterns to improve platform performance, interface, and overall experience.

4Data Sharing with Third Parties

Pantas33 does not sell your personal data to any third party. However, in the course of operating the platform, we share certain information with the following parties within defined limits:

• Payment Providers: Required financial data is shared with approved payment processors such as FPX, DuitNow, and e-wallet providers to facilitate transaction processing.
• Game Providers: Limited session data is shared with integrated game software providers to ensure smooth and fair gameplay.
• Statutory Authorities: Information may be disclosed to law enforcement agencies or regulatory bodies when required by court order or applicable law.
• KYC Verification Services: Identity data is shared with trusted third-party KYC service providers for document verification and fraud prevention purposes.

All third parties that receive data from us are bound by strict data protection agreements and are only permitted to use that information for the specified purposes.

5Cookies and Tracking Technologies

Pantas33 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small files stored on your device when you visit our website.

We use several categories of cookies:

• Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled.
• Performance Cookies: Gather information on how you use our platform to help us identify areas for improvement.
• Functional Cookies: Save your preferences and settings — such as language and display preferences — so you don't have to reconfigure them on every visit.
• Analytics Cookies: Help us understand overall traffic patterns and platform usage for continuous improvement.

You can manage cookie settings through your browser preferences. However, disabling essential cookies may affect the functionality of certain parts of our platform.

6Data Retention Period

Pantas33 retains your personal data for as long as your account is active or as long as necessary to provide our services. However, certain data must be retained for a longer period to meet legal obligations.

• Active account data is retained for the duration the account remains active and for up to 7 years after account closure for financial record-keeping and compliance purposes.
• Financial transaction records are retained for a minimum of 6 years as required by Malaysia's anti-money laundering laws.
• Security and access logs are retained for 12 months for investigation purposes in the event of a security incident.
• Data collected for marketing communications will be deleted when you withdraw your consent or request its removal.

Upon expiry of the designated retention period, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

7Your Rights as a Data Subject

Under Malaysia's PDPA and pantas33's internal policies, you have several rights you may exercise regarding your personal data:

To exercise any of the above rights, please contact our support team via live chat or email at [email protected]. We will process your request within 30 business days.

8Data Security and Protection Measures

Pantas33 continuously invests in security infrastructure to ensure your data is always protected against unauthorised access, loss, or misuse.

• Data in Transit Encryption: All communications between your browser or app and our servers are secured using TLS 1.3 protocol with 256-bit encryption.
• Stored Data Encryption: Sensitive data such as banking information and identity documents is stored in encrypted form using the latest industry standards.
• Strict Access Controls: Only staff with a legitimate operational need are permitted to access member personal data, and all access is logged and monitored.
• Two-Factor Authentication: Our internal systems use multi-layer authentication to prevent unauthorised access by external parties.
• Regular Security Audits: We conduct regular security assessments and penetration testing to identify and address any system vulnerabilities.
• Incident Response Plan: We have structured incident response procedures in place to address any data breaches swiftly and effectively.

In the event of a data breach affecting your rights and freedoms, we are committed to notifying you within the timeframe stipulated by applicable law.

9Children's Privacy

Pantas33 services are exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from minors.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate action to delete the data and terminate the associated account. Parents or guardians who become aware that their child has provided personal data to us are advised to contact us immediately.

10Amendments to This Privacy Policy

Pantas33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. Whenever an amendment is made, the "Updated" date at the top of this document will be revised.

For material changes that significantly affect how we process your data, we will notify you by email or through a prominent notice on the platform before the changes take effect. Continued use of the platform after such notice constitutes your acceptance of the amended policy.