Privacy Policy

Pantas33 ("Pantas33", "we", "us", or "our") operates the online casino and sports betting platform accessible at pantas33.cam. We are committed to protecting the privacy and personal data of all individuals who interact with our platform, including registered users ("Users"), visitors, and prospective players across Malaysia and other permitted jurisdictions.

This Privacy Policy ("Policy") describes in detail the categories of personal data we collect, the purposes for which that data is processed, the legal bases upon which we rely, the parties with whom data may be shared, the rights available to you as a data subject, and the security measures in place to protect your information.

This Policy applies to all data processing activities conducted through the Pantas33 website, mobile-optimised platform, customer support channels, and associated communications, including email correspondence and live chat sessions. It should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, or online identifier.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, Pantas33.
• "Data Processor" means any third party that processes Personal Data on behalf of Pantas33 pursuant to a written agreement.
• "User" means any natural person who has registered an account on the Pantas33 platform.
• "Visitor" means any natural person who accesses the Pantas33 website without having registered an account.
• "KYC Data" means personal data collected for the purpose of identity verification, including government-issued identification documents, proof of address, and payment method verification documents.
• "Cookies" means small text files placed on a user's device by a website for the purpose of storing session information, preferences, and analytics data.
• "MYR" means Malaysian Ringgit, the currency in which all financial transactions on the Pantas33 platform are denominated.

Pantas33 collects and processes the following categories of personal data in connection with the provision of our services. We collect only the data that is necessary for the specific purpose identified, in accordance with the principle of data minimisation.

3.1 Registration and Account Data

• Full legal name;
• Date of birth (for age verification — minimum 21 years);
• Email address;
• Residential address (including city, state, and postcode);
• Username and encrypted password;
• Mobile telephone number (where provided).

3.2 Identity Verification (KYC) Data

• Malaysian MyKad number or passport number;
• Photographic identification documents (scanned copy or photograph);
• Proof of residential address documents (utility bill, bank statement dated within 3 months);
• Payment method ownership verification documents (where required).

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records (amount, date, payment method, status);
• Payment method identifiers (e.g., partial Touch'n Go eWallet account reference, Maybank account suffix, FPX transaction reference);
• Account balance history;
• Bonus and promotional credit records.

3.4 Gaming and Betting Activity Data

• Bet history (markets, stakes, outcomes winnings) across all products including sports betting, live casino, and slots;
• Session duration and gameplay patterns;
• Responsible gambling tool settings (deposit limits, session limits, self-exclusion status).

3.5 Technical and Device Data

• IP address and approximate geographic location;
• Device type, operating system, and browser type;
• Platform access timestamps and session logs;
• Referring URL and navigation path data collected via cookies and analytics tools.

3.6 Communications Data

• Content of live chat sessions with Pantas33 customer support;
• Email correspondence with Pantas33;
• Records of marketing communication opt-in and opt-out preferences.

Pantas33 collects personal data through the following channels and mechanisms:

4.1 Directly from You

The majority of personal data we hold is provided directly by you in the course of registering an account, completing KYC verification, making deposits or withdrawals, placing bets, contacting our customer support team, or responding to surveys and promotional communications. You are not obligated to provide all requested data; however, failure to provide information required for KYC or account registration may limit your ability to access certain features of the platform, including withdrawal processing.

4.2 Automatically During Platform Use

When you access the Pantas33 website or platform, we automatically collect certain technical data — including your IP address, device information, browser type, access timestamps, and navigation behaviour — through server logs, cookies, and similar tracking technologies. This data is collected for security monitoring, fraud prevention, platform performance optimisation, and analytics purposes.

4.3 From Third-Party Payment Processors

When you make a deposit or withdrawal via a Malaysian payment partner (such as Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, or RHB Bank), we receive transactional confirmation data from those processors. We do not receive your full payment credentials; rather, we receive only the transaction reference and partial payment identifier necessary to reconcile your account balance.

4.4 From Identity Verification Services

In some circumstances, Pantas33 may engage third-party identity verification service providers to assist with KYC processing. Such providers process your submitted identification documents on our behalf and return a verification status result. They act as Data Processors under contract with Pantas33 and may not use your KYC data for any purpose other than verification on our behalf.

We process your personal data for the following specific and legitimate purposes. The table below summarises the primary processing activities, their purposes, and the legal bases relied upon (further detailed in Section 6):

Pantas33 processes personal data only where a valid legal basis exists under applicable data protection law. The legal bases we rely upon are:

• Contract Performance: Processing is necessary for the performance of the contract between you and Pantas33 — specifically, to provide you with access to the platform, process your transactions in MYR, and administer your account.
• Legal Obligation: Processing is necessary for compliance with a legal obligation applicable to Pantas33, including anti-money laundering requirements, KYC obligations, and data retention mandates imposed by applicable regulations.
• Legitimate Interest: Processing is necessary for the purposes of legitimate interests pursued by Pantas33, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — except where such interests are overidden by your fundamental rights and freedoms.
• Consent: For certain processing activities — specifically, the sending of direct marketing communications — we rely on your prior, freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

Pantas33 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We may, however, share your personal data with the following categories of third parties in the circumstances described below:

7.1 Payment Service Providers

We share necessary transactional data with Malaysian payment processors and financial institutions — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX operators, Maybank, CIMB, Public Bank, Hong Leong Bank, and RHB Bank — for the purpose of processing your deposits and withdrawals. These parties process your data as independent Data Controllers or as our Data Processors, subject to their own privacy policies and applicable financial regulations.

7.2 Identity Verification Providers

Third-party KYC and identity verification service providers may process your identification documents and personal data on our behalf, solely for the purpose of verifying your identity and age in compliance with our KYC obligations. Such providers are engaged under written data processing agreements and are prohibited from using your data for any other purpose.

7.3 Technology and Platform Providers

We engage third-party technology service providers — including game content providers, platform hosting services, analytics tools, and customer support software — who may process certain personal or technical data in the course of delivering services to Pantas33. All such providers operate under appropriate data processing agreements.

7.4 Legal and Regulatory Authorities

Pantas33 may disclose your personal data to regulatory authorities, law enforcement agencies, or other governmental bodies where required to do so by applicable law, court order, or regulatory directive. We will seek to notify you of such disclosure requests where legally permissible.

7.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of Pantas33's assets, personal data held by Pantas33 may be transferred to a successor entity as part of that transaction. Affected users will be notified in advance where practicable.

Pantas33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active account relationship with Pantas33, and for a period of five (5) years following permanent account closure, in compliance with standard record-keeping obligations.
• KYC and Identity Verification Data: Retained for a minimum of five (5) years following the last transaction date or account closure, whichever is later, in accordance with anti-money laundering record-keeping requirements.
• Financial Transaction Data: Retained for a minimum of five (5) years from the date of each transaction for audit and regulatory compliance purposes.
• Communications Data: Customer support correspondence is retained for up to two (2) years from the date of the interaction, unless required for longer as evidence in a dispute or legal proceding.
• Technical and Device Data: Server logs and access records are retained for up to twelve (12) months for security and fraud analysis purposes, after which they are anonymised or deleted.
• Marketing Preferences: Opt-in and opt-out records are retained indefinitely to evidence your communication preferences and to comply with direct marketing regulations.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

Pantas33 implements robust technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes, but is not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Pantas33 platform;
• Encrypted storage of sensitive data including passwords (hashed and salted) and KYC documents;
• Multi-factor authentication requirements for account access and sensitive account actions;
• Role-based access controls limiting internal access to personal data to authorised personnel with a documented need;
• Regular penetration testing and vulnerability assessments of platform infrastructure;
• Comprehensive audit logging of access to sensitive data systems;
• Incident response and data breach notification procedures aligned with applicable legal requirements.

Whilst we implement stringent security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying Pantas33 immediately if you suspect any unauthorised access to your account.

The Pantas33 platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain session continuity, analyse platform usage patterns, and support security functions. The following categories of cookies are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the operation of the Pantas33 platform. They enable core functionality such as session management, login authentication, account balance display, and security token validation. These cookies cannot be disabled without materially impairing your ability to use the platform. No consent is required for strictly necessary cookies.

10.2 Analytics and Performance Cookies

These cookies collect anonymised or aggregated information about how visitors and users interact with the platform, including page views, click patterns, session durations, and error occurrences. This data is used exclusively to improve platform performance and user experience. Analytics cookies are only placed with your consent.

10.3 Functional Cookies

Functional cookies enable the platform to remember your preferences — such as preferred language, display settings, and previously entered (non-sensitive) form data — to provide a more personalised experience across sessions.

10.4 Marketing and Targeting Cookies

Pantas33 may use marketing cookies to display relevant promotional content based on your browsing behaviour the platform. These cookies are only placed with your explicit consent and can be withdrawn at any time through our cookie preference settings.

Subject to applicable data protection law and any overiding legal obligations (such as anti-money laundering record-keeping requirements), you have the following rights in respect of your personal data held by Pantas33. To exercise any of these rights, please contact our support team using the details provided in Section 15.