Pantas88 Privacy Policy – Our Commitment to Protecting the Personal Data of Every Malaysian Member

1Introduction – Who We Are and Why This Policy Matters

Pantas88 is an online betting platform operating to serve users in Malaysia. We take our responsibilities as a data controller seriously — meaning we determine how and why your personal data is collected and processed.

This Privacy Policy has been prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing the processing of personal data in the context of commercial transactions in Malaysia. We are committed to ensuring that all personal data processing carried out by Pantas88 fully complies with the principles of the PDPA.

We understand that your trust in Pantas88 depends largely on how we handle your personal information. Whether you've registered to bet on Malaysia Super League football, wager on BWF badminton matches or play live casino on our platform – every member deserves a clear picture of how their data is managed. This policy is our answer to that need.

2Types of Personal Data We Collect

Pantas88 only collects data that is necessary to deliver our services safely and effectively. We do not collect excessive or irrelevant data beyond what is needed to operate the platform. Below are the categories of data we collect:

Pantas88 does not collect sensitive data categories such as medical information, political views, religious beliefs or biometric data, unless specifically required for identity verification purposes and with your explicit consent.

3How Your Data Is Collected

Your personal data is collected through several channels as you interact with the Pantas88 platform:

• Account Registration: You provide your identity and contact information directly when completing the registration form. This includes your name, Malaysian phone number and email address.
• Financial Transactions: Details relating to your chosen payment method – whether Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX via Maybank2u or CIMB Clicks – are recorded at the time of each deposit or withdrawal transaction.
• Platform Usage: Our systems automatically record technical and usage data when you access the platform – including IP address, device type, match records you view, and bets you place.
• Identity Verification (KYC): To process withdrawals or meet compliance requirements, we may request verification documents such as a copy of your MyKad or a utility bill.
• Support Interactions: When you contact the Pantas88 support team via live chat or email, the content of that communication is recorded for service quality and dispute resolution purposes.
• Cookies and Tracking Technologies: The Pantas88 platform uses cookies and similar technologies to enhance the user experience and analyse usage patterns. Full details are provided in Section 7.

4How We Use Your Personal Data

Pantas88 uses your personal data only for legitimate purposes directly related to the delivery of our services. The key purposes are as follows:

• Account Management: Creating and maintaining your account, processing logins, managing passwords, and keeping your account secure.
• Transaction Processing: Processing deposits and withdrawals, verifying transactions and maintaining accurate financial records.
• Service Provision: Gives you full access to all platform features – Sports Betting on Malaysian Super League and international competitions, Live Casino, jackpot slots, e-sports, and every other available game category.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, unauthorised use, and behaviour that violates our terms of service.
• Legal Compliance: Meeting applicable legal obligations, including anti-money laundering (AML) requirements and reporting obligations set by Malaysian authorities.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate interventions to protect member wellbeing.
• Service Improvement: Analysing usage data in aggregate (without identifying individuals) to understand user needs and improve the platform.
• Contact: Sending important notifications about your account, transactions and policy updates. With your consent, we also send information about promotions and new offers.

5Sharing Data With Third Parties

Pantas88 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. This is an unwavering commitment. That said, in the course of operating the platform, we may share certain data with the following parties under limited and controlled circumstances:

• Payment Service Providers: Required transaction information is shared with payment providers such as Touch 'n Go, GrabPay, DuitNow, and banks involved in FPX processing to enable deposits and withdrawals to be handled securely.
• Game Providers: Unique account identifiers (not full names or personal details) are shared with licensed live casino and slots providers solely to ensure games function correctly.
• Technical Service Providers: Companies providing hosting, cybersecurity, and the technical infrastructure required to operate the platform may process data in the capacity of a data processor, acting under our instruction.
• Regulatory Authority: In situations required by Malaysian law – including requests from the police, courts or regulatory bodies – Pantas88 will disclose the necessary data through the proper legal procedures.
• Fraud Investigators: In cases of serious fraud or cybercrime, data may be shared with the relevant authorities for investigation and legal prosecution purposes.

All data sharing with third parties is carried out under strict data protection agreements that require them to uphold security standards equivalent to or higher than those of Pantas88. They are permitted to use the data only for the stated purpose and may not use it for their own benefit.

6Data Security Measures

Pantas88 takes data security seriously. We implement a comprehensive range of technical and organisational measures to protect your personal data from unauthorised access, loss, destruction or accidental disclosure.

• Bank-Level Encryption: All data transmitted between your device and Pantas88 servers is encrypted using TLS 1.3 (Transport Layer Security). Data stored in our databases is encrypted using AES-256 — the same standard used by major banking institutions such as Maybank and CIMB.
• Strict Access Controls: Only staff who genuinely require access to specific data in order to perform their duties are permitted to do so. Access to sensitive data is logged and reviewed on a regular basis.
• Secure Server Infrastructure: Member data is stored on servers protected by multi-layered firewalls, intrusion detection systems, and continuous automated security scanning.
• Regular Security Audits: Pantas88 conducts regular penetration testing and security audits through independent cybersecurity firms to identify and address vulnerabilities before they can be exploited.
• Two-Factor Authentication: Members are strongly encouraged to enable two-factor authentication (2FA) on their accounts as an important additional layer of security.
• Incident Response Procedure: Pantas88 has a documented security incident response procedure in place. In the event of a material data breach, we will notify affected members and the relevant authorities in accordance with PDPA requirements within the stipulated timeframe.

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% foolproof. We encourage you to play your part too – use a strong password, never share your login credentials, and contact us immediately if you suspect your account has been compromised.

7Cookies and Tracking Technologies

The Pantas88 platform uses cookies and similar tracking technologies to improve the user experience, ensure the platform functions correctly and understand how it is being used. The types of cookies we use are outlined below:

• Essential Cookies: Required for core platform functionality — including maintaining your login session, remembering account preferences and keeping your session secure. These cookies cannot be disabled without affecting platform performance.
• Performance Cookies: Collecting information about how you use the platform — which pages you visit most, how long you spend in each section and which links you click. This information is collected in aggregate and used to improve the platform.
• Functional Cookies: Allows the platform to remember the preferences you have set — such as your chosen language, preferred odds format, and personal display settings.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the Pantas88 platform. For smartphone users accessing the platform via a mobile browser, cookie settings can be managed through your browser's settings menu.

8Data Retention Period

Pantas88 retains your personal data only for as long as necessary for the purpose it was collected, or as required by law. The following are general data retention guidelines:

• Active Account Data: For as long as your account remains active and for a reasonable period following account closure for audit and dispute resolution purposes.
• Financial Transaction Records: Minimum 7 years, in accordance with Malaysia's accounting and anti-money laundering legal requirements.
• Identity Verification Documents: For the duration of the active account plus 5 years after account closure, in accordance with KYC requirements.
• Support Communication Records: 3 years from the date of communication, for complaint resolution and service improvement purposes.
• Technical Log Data: 90 days for standard access logs; longer for logs related to active security incident investigations.

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered. Data retained for legal compliance purposes will be kept in a locked state with strictly limited access until it can be lawfully deleted.

9Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 and the privacy principles we uphold, you hold important rights regarding the personal data Pantas88 holds about you. These rights are as follows:

To exercise any of the rights above, please contact Pantas88's Privacy Officer by email at support@pantas88.asia stating the right you wish to exercise and sufficient information for us to verify your identity. We will not charge a fee for reasonable requests and will respond within 21 business days.

10Child Protection

The Pantas88 platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we discover that personal data belonging to someone under 18 has been collected without proper verification, we will take immediate steps to delete that data and close the associated account.

Parents and guardians who suspect their child has accessed or registered on the Pantas88 platform are encouraged to contact us immediately at support@pantas88.asia. We will investigate and respond within 24 hours. We also recommend using parental control software on shared household devices to prevent unwanted access to betting websites.

11Amendments to This Privacy Policy

Pantas88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements or improvements to how we operate. The date of the most recent update is always displayed at the top of this page.

For material changes — those that significantly affect how we use your data or impact your rights — we will provide clearer notice through:

• Notification emails sent to the email address registered to your account.
• A prominent notice on the platform's main page for at least 14 days before the changes take effect.
• In certain cases, asking you to confirm acceptance of the updated terms before continuing to use the platform.

Continued use of the Pantas88 platform after any changes to this Privacy Policy take effect will be considered your acceptance of those changes. If you disagree with any update, you have the right to close your account and request data deletion in accordance with the procedure set out in Section 9.

12How to Contact Us – Pantas88 Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Pantas88 handles your personal data, please do not hesitate to get in touch. We have a dedicated and responsive team ready to address all privacy-related matters.

Pantas88 has appointed a Privacy Officer who can be reached through the following channels:

• Privacy Email: support@pantas88.asia – include "Privacy Inquiry" in the subject line of your email.
• Live Chat: Available on the Pantas88 platform 24 hours a day, 7 days a week. Let us know you'd like to speak about a privacy matter and you'll be connected to the relevant team.
• Response Time: We are committed to providing an initial response within 3 working days and full resolution within 21 working days for the majority of privacy-related requests.

If you believe Pantas88 has not handled your personal data properly in accordance with Malaysia's PDPA 2010 and the matter cannot be resolved through our internal channels, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia, under the Ministry of Communications and Digital.

We value every piece of privacy-related feedback, as it helps us continually improve our data protection practices for the benefit of all Pantas88 members across Malaysia.