Privacy Policy

Introduction

This Privacy Policy ("Policy") is published by Panas77 ("we", "us", "our"), the operator of the online gaming platform accessible at https://panas77.cam. This Policy describes how Panas77 collects, uses, stores, shares, and protects the personal data of individuals who visit, register on, or use the Panas77 platform ("you", "your", "the Player").

Panas77 recognises that privacy is a fundamental right. We are committed to handling all personal data with care, transparency, and in accordance with applicable data protection principles. This Policy has been written in plain, accessible English so that our players — primarily based in Kuala Lumpur, Penang, Johor Bahru, and across Malaysia — can clearly understand how their information is treated.

By registering a Panas77 account or using the platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. This Policy should be read alongside our Terms & Conditions.

Definitions

The following definitions apply throughout this Privacy Policy:

Personal Data We Collect

Panas77 collects only the personal data that is necessary for the operation of the platform, fulfilment of legal obligations, and delivery of a secure player experience. The categories of personal data we collect include:

Identity & Contact Data

• Full legal name as it appears on your identity document
• Date of birth (required for age verification — all players must be 21 or above)
• Residential address, including city, state, and postcode
• Email address and contact phone number
• Account username

Identity Verification (KYC) Documents

• Copy of Malaysian national identity card (MyKad), Passport, or Driver's License
• Proof of residential address (utility bill, bank statement, or government correspondence dated within 3 months)
• Selfie photograph holding the identity document, where requested

Financial & Transaction Data

• Payment method details (e-wallet account identifiers, bank account references) — we do not store full card numbers or banking PINs
• Deposit and withdrawal transaction records, including amounts in MYR and timestamps
• Bet history, game activity logs, and account balance records

Technical & Usage Data

• IP address and approximate geolocation at time of login
• Device type, operating system, and browser version
• Session duration, pages visited, and interaction logs within the platform
• Cookie identifiers and session tokens

How We Collect Personal Data

Panas77 collects personal data through the following channels:

• Directly from you — when you complete the registration form, submit KYC documents, contact customer support, or update your account profile.
• Automatically through the platform — when you log in and use the platform, technical and usage data is collected automatically through cookies, server logs, and tracking technologies described in Section 10.
• From payment service providers — when you make a deposit or withdrawal via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, or cryptocurrency networks, those providers may share transaction confirmation data with us.
• From KYC verification partners — where we use third-party identity verification services to validate the documents you submit, those services may return verification results and associated metadata.

We do not purchase personal data lists from data brokers or acquire personal data about you from social media platforms or other unrelated third-party sources.

Purposes of Data Processing

Panas77 processes personal data for the following purposes:

Legal Basis for Processing

Panas77 relies on the following legal bases to process your personal data, depending on the specific purpose of processing:

• Contractual necessity: Processing required to operate your account, execute transactions, and fulfil our obligations under the Terms & Conditions you agreed to at registration — including KYC verification, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) regulations, age verification requirements, tax reporting obligations, and other regulatory mandates applicable to online gaming operators.
• Legitimate interests: Processing for fraud detection, security monitoring, platform integrity, and responsible gambling safeguards — where our legitimate interest in protecting the platform and our players does not override your fundamental rights.
• Consent: Processing for optional purposes such as promotional email communications, where we rely on your explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Third Parties

Panas77 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We share personal data with third parties only in the following limited circumstances:

• Payment service providers: We share the minimum necessary transaction data with Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency network processors to facilitate deposits and withdrawals.
• KYC and identity verification partners: We may share identity documents with licensed third-party verification service providers for the sole purpose of confirming your identity and age. These providers are bound by strict confidentiality obligations.
• Technology infrastructure providers: Our hosting, cloud storage, and platform technology partners may have access to data stored on their infrastructure. All such providers are contractually obligated to handle data in accordance with our security requirements.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory directive, we may disclose personal data to relevant governmental or law enforcement bodies.
• Fraud prevention services: We may share relevant account and transaction data with fraud detection platforms to identify and prevent financial crime, including money laundering and identity theft.

Data Retention

Panas77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory retention obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Where deletion is not technically feasible within normal system architecture, data will be isolated from active processing until deletion can be completed.

Security Measures

Panas77 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and Panas77 servers
• Encryption at rest for all stored personal and financial data
• Two-factor authentication (2FA) available to all registered players
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular independent security audits and penetration testing of platform infrastructure
• Automated fraud detection and anomaly monitoring systems operating continuously
• Secure, access-controlled data centres with physical security controls

While Panas77 implements industry-standard security practices, no data transmission over the internet or electronic storage system is entirely risk-free. You are responsible for maintaining the security of your own account credentials and should never share your password with any third party.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, Panas77 will take prompt action to contain the breach and will notify affected individuals in accordance with applicable data protection obligations.

Cookies & Tracking Technologies

Panas77 uses cookies and similar technologies to operate and improve the platform. A cookie is a small text file stored on your device when you visit a website. We use the following categories of cookies:

Panas77 does not use third-party advertising cookies, social media tracking pixels, or cross-site user profiling technologies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will affect your ability to use the platform.

Your Data Rights

Subject to applicable data protection law and certain legal exceptions, you hold the following rights in respect of your personal data held by Panas77:

To exercise any of the above rights, please contact our Customer Support team via live chat or using the email address in Section 15. We will respond to all valid data subject requests within 30 calendar days of receipt. We may require identity verification before processing certain requests to protect against fraudulent data access attempts.

Children's Privacy & Age Restriction

The Panas77 platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. Age verification is a mandatory component of our KYC process, and any account identified as belonging to a person under the age of 21 will be immediately closed.

If you believe that Panas77 has inadvertently collected personal data from a person under 21, please contact us immediately using the details in Section 15. Upon confirmation, we will promptly delete all associated data and close the account.

Parents and guardians who are concerned about underage access to online gaming platforms are encouraged to use parental control software and to report any suspected underage accounts to our support team.

International Data Transfers

Panas77's primary platform infrastructure is hosted in secure data centres serving the Asia-Pacific region. Where the use of certain technology service providers necessitates the transfer of personal data to servers located outside Malaysia, Panas77 will ensure that appropriate safeguards are in place to protect that data during transfer and storage.

Such safeguards may include contractual data processing agreements incorporating standard protective clauses, or reliance on recognised frameworks for international data transfers. Panas77 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate compensating safeguards.

Policy Amendments

Panas77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform functionality, or applicable data protection law. Where material changes are made, we will notify registered players via an in-platform notice or by email to the registered account address, providing a reasonable period before the changes take effect.

The "Last Updated" date at the top of this page indicates when this Policy was most recently revised. We recommend reviewing this page periodically. Continued use of the Panas77 platform following the effective date of an amended Policy constitutes your acknowledgement of the updated terms.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which Panas77 processes your personal data, please contact our Customer Support and Data Protection team through the live chat function available in your account dashboard, or by email.

Support is available daily from 9 AM to 2 AM MYT. For written privacy enquiries, our team aims to acknowledge all requests within two (2) business days and to provide a full response within 30 calendar days.

When submitting a data subject request by email, please include your registered account username, the specific right you wish to exercise, and sufficient detail to allow us to locate your records. We will verify your identity before processing sensitive data requests.