Pantas99 Privacy Policy

This Privacy Policy ("Policy") describes how Pantas99 ("the Platform", "we", "us", "our") — the operator of the online gaming and sports betting platform accessible at https://pantas99.cam — collects, uses, stores, discloses, and protects personal data belonging to registered users ("you", "the User") and visitors to the Platform.

Pantas99 is committed to handling your personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. We serve players across Malaysia, including those based in Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and other cities, and we take our data protection obligations toward those users seriously.

By registering an account on Pantas99, making a deposit, placing a wager, or otherwise using our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to the terms of this Policy, you should not use the Platform and should contact us to close your account.

The following terms carry the meanings set out below throughout this Privacy Policy:

Pantas99 collects personal data through several channels and at various points in your relationship with the Platform. The categories of data we collect are set out below, along with the context in which they are collected.

3.1 Registration Data

When you create a Pantas99 account, we collect the information you provide during the registration process, which includes:

• Full legal name
• Date of birth (used for age verification — 21+ requirement)
• Email address
• Mobile phone number
• Country and city of residence (e.g., Kuala Lumpur, Penang, Johor Bahru)
• Chosen username and encrypted password

3.2 Identity Verification (KYC) Data

To comply with our licensing obligations and to enforce our strict 21+ age requirement, we collect the following KYC documentation:

• Copy of government-issued photo ID (MyKad, passport, or equivalent)
• Proof of residential address (utility bill, bank statement, or official government document dated within 3 months)
• Payment method verification (e.g., screenshot of Touch 'n Go eWallet account, partial bank statement)
• Source of funds documentation where required by our compliance review process

3.3 Transaction Data

We automatically record data relating to all financial transactions conducted through your account, including:

• Deposit and withdrawal amounts, dates, and payment methods used (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, USDT TRC20)
• Transaction reference numbers and processing status
• Account balance history and bonus credit records

3.4 Technical & Usage Data

When you access and use the Platform, we automatically collect technical data through cookies, log files, and similar tracking technologies, including:

• IP address and approximate geolocation data
• Browser type, version, and operating system
• Device type (desktop, mobile, tablet) and device identifiers
• Pages visited, features used, session duration, and navigation paths
• Date and time stamps of Platform access

3.5 Communications Data

When you contact our customer support team via live chat, email ([email protected]), or any other channel, we retain a record of the communication, including the content of messages and any documents or attachments shared.

Pantas99 processes your personal data for the following specific purposes. We do not process personal data for any purpose incompatible with the purposes listed below without first obtaining your explicit consent.

Pantas99 processes your personal data on the following legal grounds, as applicable under internationally recognised data protection frameworks:

• Contractual Necessity: Processing required to deliver the services you have contracted for by registering an account — including payment processing, account management, and game access.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC/AML obligations imposed by our licensing conditions.
• Legitimate Interests: Processing that serves our legitimate business interests and does not override your fundamental rights, including fraud prevention, platform security, and service improvement analytics.
• Consent: Processing based on your freely given, informed, and specific consent — primarily for marketing communications and non-essential cookie usage. You may withdraw consent at any time without affecting the lawfulness of processing conducted before withdrawal.

Pantas99 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share your data only with trusted third-party service providers and only to the extent necessary to fulfil the purposes described in this Policy.

• Payment Processors: We share transaction data with payment providers to process deposits and withdrawals. These include e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), the DuitNow/FPX infrastructure, and affiliated banking partners (Maybank, CIMB, Public Bank, Hong Leong Bank). These providers are contractually bound to use your data solely for payment processing and are prohibited from secondary use.
• KYC / Identity Verification Providers: We engage third-party KYC platforms to assist with identity and age verification. These providers process identity documents on our behalf and are bound by strict data handling agreements.
• Game Content Providers: We integrate games from third-party game studios and live casino content providers. These providers may receive anonymised session data necessary to operate their games correctly. They do not receive personally identifiable information beyond what is technically necessary.
• Analytics Providers: We use analytics services to understand Platform usage patterns. Where possible, data shared with analytics providers is anonymised or pseudonymised before transmission.
• Regulatory and Law Enforcement Authorities: We may disclose personal data to competent regulatory bodies, law enforcement agencies, or judicial authorities where required by law or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other criminal activity.

Pantas99 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any disputes or enforce our agreements.

• Active Accounts: Personal data associated with an active account is retained for the duration of your account relationship with Pantas99, plus a minimum of five (5) years following account closure, to satisfy our AML record-keeping obligations under our licensing conditions.
• KYC Documentation: Identity verification documents are retained for a minimum of five (5) years following the date of account closure, as required by our licensing and AML compliance framework.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years following the date of the transaction.
• Customer Support Records: Communications with our support team are retained for up to three (3) years for quality assurance, dispute resolution, and compliance purposes.
• Marketing Data: If you withdraw consent to receive marketing communications, your data will be removed from our marketing lists within 30 days of receiving your withdrawal request, subject to any overriding retention obligations.
• Technical / Log Data: Server log files and technical data are retained for up to twelve (12) months for security monitoring and fraud detection purposes, after which they are automatically deleted or anonymised.

Pantas99 implements a multi-layered security framework designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our key security measures include:

• 256-Bit SSL Encryption: All data transmitted between your browser or device and the Pantas99 platform is encrypted using TLS/SSL technology to prevent interception in transit.
• Encrypted Data Storage: Sensitive personal data — including identity documents and payment information — is stored in encrypted form in our secure database infrastructure. Passwords are stored as salted cryptographic hashes and are never stored in plaintext.
• Access Controls: Access to personal data within Pantas99's systems is restricted to authorised personnel on a need-to-know basis. All internal data access is logged and audited.
• Two-Factor Authentication (2FA): We offer 2FA for all user accounts and apply it mandatorily for all administrative access to our internal systems.
• Penetration Testing: Our platform undergoes regular security assessments, including vulnerability scans and penetration tests, to identify and remediate security weaknesses.
• Incident Response: In the event of a data security incident that affects your personal data, Pantas99 will notify affected users promptly in accordance with applicable legal requirements.

Pantas99 uses cookies and similar tracking technologies to provide a functional, personalised, and secure gaming experience. This section explains what cookies we use and how you can control them.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling cookies beyond the strictly necessary category may affect the functionality and personalisation features of the Platform. Instructions for managing cookies are available through your browser's help documentation.

Pantas99 operates as an international online gaming platform. Your personal data may be processed and stored on servers located outside of Malaysia, including in the jurisdiction in which we hold our primary operating licence and in the countries where our third-party service providers are based.

Where your personal data is transferred to countries outside of Malaysia, Pantas99 takes steps to ensure that appropriate safeguards are in place to protect your data in transit and at rest. These safeguards include contractual protections with our service providers, such as data processing agreements that incorporate internationally recognised data protection standards.

As a user of the Pantas99 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 3 business days and provide a substantive response within 30 days.

The Pantas99 Platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data from any person under the age of 21. Our registration process includes mandatory age verification, and all accounts are subject to KYC checks that confirm the account holder's date of birth.

If Pantas99 becomes aware that personal data has been collected from a person under 21 years of age — including through a misrepresentation made during registration — we will immediately close the account, delete or anonymise all associated personal data to the extent not required to be retained for legal compliance purposes, and forfeit any associated balances in accordance with our Terms & Conditions.

If you believe that a minor may have registered an account on Pantas99, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

Pantas99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or the services we offer. When we make material changes to this Policy, we will notify registered users by posting a prominent notice on the Platform and, where appropriate, by sending an email to your registered address.

The effective date and version number at the top of this page indicate when the most recent version was published. We encourage you to review this Policy periodically to remain informed about how Pantas99 handles your personal data. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests regarding this Privacy Policy, the personal data Pantas99 holds about you, or your data rights, please contact us through the following channels. We treat all privacy-related correspondence with priority and confidentiality.