Privacy Policy — How Panen123 Collects, Uses, and Protects Your Personal Data

This Privacy Policy ("Policy") is published by Panen123 ("we", "us", "our", "the Platform") and governs the collection, storage, use, sharing, and protection of personal data submitted by or collected from individuals ("you", "Player", "User") who access or use the Panen123 online gaming platform at panen123.cam.

Panen123 is committed to protecting the privacy and personal data of all players across Malaysia, including those based in Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and all other regions. We process personal data in accordance with applicable data protection principles, including the purpose of collection, data minimisation, accuracy, storage limitation, and confidentiality.

By registering an account, making a deposit, or otherwise using the Panen123 platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. Where we rely on consent as the legal basis for processing, you may withdraw that consent at any time, subject to the conditions outlined in Section 11.

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, either on its own or in combination with other information. This includes names, email addresses, phone numbers, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction — whether carried out manually or by automated means.
• "Data Controller" refers to Panen123, which determines the purposes and means of processing your Personal Data.
• "Data Processor" refers to any third party that processes Personal Data on behalf of Panen123 in accordance with our instructions and this Policy, such as payment gateway operators and cloud hosting providers.
• "Sensitive Personal Data" includes, but is not limited to, identity document numbers (MyKad, passport), financial account credentials, and health or behavioural information relating to problem gambling.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a defined purpose.
• "KYC" (Know Your Customer) refers to the identity verification process we may conduct to comply with anti-money laundering obligations and to confirm player eligibility.
• "Cookies" refers to small text files stored on your device by your browser at the instruction of the Platform, used to maintain session state, preferences, and analytics data.

Panen123 collects Personal Data across several categories, depending on how you interact with the Platform. The following table summarises the categories of data we collect and their primary purpose:

We do not collect unnecessary or excessive data beyond what is reasonably required for the purposes listed above. Sensitive Personal Data — such as identity document scans submitted during KYC — is stored with heightened security controls and accessed only by authorised compliance personnel.

Panen123 collects Personal Data through the following channels and interactions:

• Direct submission: Data you actively provide during account registration, the KYC process, deposit or withdrawal requests, contact form submissions, and live chat or email communications with our support team.
• Automated technical collection: Data collected automatically when you access the Platform, including IP address, browser type, device fingerprint, and session behaviour data via server logs, cookies, and similar technologies.
• Payment processing partners: Transaction confirmation data returned by Malaysian payment providers including Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX following the completion of a deposit or withdrawal request you initiated.
• Identity verification services: Where KYC is required, we may receive verification confirmation from authorised third-party identity verification providers. We do not store raw identity document images beyond the period required for compliance purposes.
• Fraud and security systems: Our fraud detection infrastructure may collect and analyse behavioural signals to identify potentially fraudulent activity, account takeover attempts, or unusual betting patterns.

Panen123 uses the Personal Data we collect for the following specific purposes. We do not use your data for purposes that are incompatible with those for which it was originally collected:

• Account management and operation: To register, maintain, and manage your player account; to authenticate your identity on login; and to process account settings changes including responsible gambling tool activations such as deposit limits and self-exclusion requests.
• Payment processing: To execute deposit and withdrawal transactions through your chosen Malaysian payment method — whether that is DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, or direct bank transfer through Maybank, CIMB, Public Bank, or Hong Leong.
• Customer support: To respond to your enquiries, resolve complaints, and maintain records of our interactions for quality assurance and dispute resolution purposes.
• Compliance and regulatory obligations: To conduct KYC identity verification, satisfy anti-money laundering (AML) screening requirements, and comply with applicable reporting obligations under the operating licence framework governing the Panen123 platform.
• Responsible gambling monitoring: To identify usage patterns that may indicate problem gambling behaviour and to proactively offer intervention tools including session limits, cooling-off periods, and self-exclusion — in accordance with our Responsible Gambling Policy.
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, money laundering attempts, and other Prohibited Activities as defined in our Terms & Conditions.
• Platform analytics and improvement: To analyse aggregate, anonymised usage patterns to improve game selection, platform performance, payment flow, and user experience across devices.
• Marketing communications: Where you have explicitly opted in to receive promotional communications, to send you relevant offers, seasonal promotions, and platform updates. You may opt out of marketing communications at any time without affecting your account status.

Panen123 processes your Personal Data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the Terms & Conditions — including account creation, payment processing, and game access — is necessary for the performance of the contract between us.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC identity verification, anti-money laundering screening, and transaction record-keeping mandated under our operating licence.
• Legitimate interests: Processing conducted for the purposes of fraud prevention, platform security, responsible gambling monitoring, and aggregate platform analytics, where such processing is proportionate and does not override your fundamental privacy rights.
• Consent: Processing for optional purposes — such as sending promotional and marketing communications — that are not essential to delivering the platform's core services. Where we rely on consent, you may withdraw it at any time by updating your communication preferences or by contacting our support team.

Panen123 does not sell your Personal Data. We share data only in the following limited and controlled circumstances:

• Payment service providers: Transaction-specific data is shared with Malaysian payment partners — including Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX — strictly for the purpose of processing your requested deposit or withdrawal. These providers are bound by their own regulatory obligations as licensed Malaysian financial institutions or licensed payment operators.
• Identity verification providers: Where KYC verification is required, document confirmation data may be processed by an authorised third-party verification service. Such providers operate under strict data processing agreements and are not permitted to use your data for any purpose other than the verification task instructed.
• Cloud and infrastructure providers: The Panen123 Platform operates on secure cloud infrastructure. Our hosting and storage partners process data on our behalf as Data Processors under binding contractual obligations that require them to maintain equivalent data protection standards.
• Regulatory and law enforcement authorities: Panen123 will disclose Personal Data to government agencies, regulators, or law enforcement bodies where we are legally required or compelled to do so by court order, regulatory instruction, or applicable law.
• Fraud and AML screening services: We may share transaction or identity data with authorised anti-fraud and anti-money laundering screening providers for the purpose of detecting illicit financial activity. Such sharing is strictly limited to what is necessary for the specific screening purpose.

Panen123 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Essential cookies: These are strictly necessary for the Platform to function correctly. They maintain your logged-in session state, enable secure payment flows, and support core navigation. These cookies cannot be disabled without materially impairing your ability to use the Platform.
• Functional cookies: These cookies remember your Platform preferences — such as language settings, preferred game categories, and notification configurations — to provide a more personalised experience on return visits.
• Analytics cookies: We use anonymised analytics data collected via session tracking tools to understand how players navigate the Platform, which features are most used, and where user experience can be improved. This data is aggregated and does not identify individual players.
• Security cookies: These cookies support our fraud detection and account protection systems by identifying unusual login patterns, device changes, or suspicious navigation behaviour that may indicate an account takeover attempt.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent the Platform from functioning correctly. Panen123 does not use third-party advertising cookies or allow external ad networks to track your activity on this site.

Panen123 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status on the Platform, plus a minimum of five (5) years following permanent account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction records: Financial transaction records — including deposit and withdrawal history in MYR — are retained for a minimum of seven (7) years in accordance with applicable financial record-keeping obligations.
• KYC and identity documents: Copies of identity verification documents are retained for the minimum period required under the applicable licensing and AML framework, typically five (5) years from the date of submission or account closure, whichever is later.
• Support communications: Live chat transcripts, email correspondence, and complaint records are retained for three (3) years from the date of last interaction, for the purposes of dispute resolution and quality assurance.
• Marketing consent records: Records of your opt-in and opt-out consents for marketing communications are retained for the full period during which you hold an account with us, plus one (1) year following closure.

Upon the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymisation is not technically feasible, data is securely destroyed.

Panen123 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Panen123 Platform — the same standard applied by major Malaysian banks including Maybank, CIMB, and Public Bank for their online banking channels.
• Encrypted storage of sensitive data fields — including passwords (stored only as salted cryptographic hashes), financial account references, and identity document data — in our secure database infrastructure.
• Access controls and role-based permissions ensuring that Personal Data is accessible only to Panen123 personnel who require it to perform their specific role, and only to the extent necessary for that purpose.
• Two-factor authentication (2FA) available to all registered players to protect against unauthorised account access, and mandatory for all internal administrative access to systems holding Personal Data.
• Regular security assessments including penetration testing and vulnerability scanning conducted by qualified security professionals to identify and remediate potential weaknesses before they can be exploited.
• Real-time fraud monitoring that analyses transaction patterns, login behaviour, and betting activity to detect and respond to potential security incidents promptly.

In the event of a data security breach that is likely to result in a risk to your rights and freedoms, Panen123 will notify affected players within a reasonable timeframe and will take all necessary steps to contain the breach, assess its impact, and prevent recurrence.

Subject to applicable law and the specific circumstances of each request, you hold the following rights with respect to your Personal Data held by Panen123. To exercise any of these rights, please contact our support team via live chat or at [email protected].

The Panen123 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, store, or process Personal Data from any person under the age of 21.

If we become aware that Personal Data has been collected from a person under 21 — whether through a fraudulent registration or an error in the account creation process — we will take immediate steps to delete all associated data and close the relevant account. Any funds deposited by or on behalf of an underage individual will be handled in accordance with applicable legal requirements.

Where the Panen123 platform facilitates payment transactions, you will interact with third-party services operated by Malaysian payment providers such as Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX. These services operate independently under their own privacy policies and data protection frameworks.

Panen123 is not responsible for the privacy practices of these third-party providers. We encourage you to review the privacy policies of any external service with which you interact during the payment process. Our responsibility is limited to the data processing we carry out within the Panen123 Platform itself.

Panen123 does not include outbound links to external websites on the panen123.cam domain. Any third-party domains you may access during payment redirects are governed by those providers' own terms and privacy notices.

Panen123 reserves the right to update, revise, or replace any part of this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or platform functionality.

Where revisions are material — such as changes to the categories of data we collect, new sharing arrangements with third parties, or alterations to your data rights — we will provide advance notice to registered players via the Platform notification system or by email to the address registered on your account, not less than fourteen (14) days before the changes take effect.

Minor, non-material updates — such as corrections of typographical errors or clarifications that do not alter the substance of the Policy — may be made without prior notice. The effective date of the current version is always displayed at the top of this document under "Last Updated".

Your continued use of the Panen123 Platform following the effective date of a revised Privacy Policy constitutes your acknowledgement and acceptance of the updated terms. We recommend that you review this Policy periodically.

If you wish to exercise any of your data rights, have a question about how your Personal Data is being handled, or wish to raise a data protection concern, please contact the Panen123 data team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the platform at panen123.cam
• Email: [email protected] — please use the subject line "Privacy / Data Request" to ensure your message is routed to the appropriate team

Our team supports players across all major Malaysian regions including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve substantive requests within 30 calendar days.