1. Who We Are
pantas88 operates the online gaming platform accessible at pantas88.win (the "Platform"). In this Privacy Policy, references to "pantas88", "we", "us", or "our" mean the operator of the Platform. We act as the data controller in respect of the personal information you provide to us when registering an account or using the Platform.
We understand that players in Malaysia — whether in Kuala Lumpur, Penang, Johor Bahru, or across Sabah and Sarawak — value the privacy of their financial and personal information. pantas88 approaches data protection with the same seriousness that the Malaysian banking sector applies to customer data. Your information is treated as a responsibility, not a commodity.
2. Data We Collect
pantas88 collects the following categories of personal data from players:
- Identity Data: Full name, date of birth, nationality, and government-issued identification details (e.g., MyKad number or passport number) collected for account verification and age confirmation purposes.
- Contact Data: Email address, mobile phone number, and residential address.
- Account Data: Username, encrypted password, account preferences, and communication preferences.
- Financial Data: Bank account details, e-wallet identifiers (such as Touch 'n Go eWallet or Boost account references), transaction history, deposit and withdrawal records, and MYR balance information.
- Technical Data: IP address, browser type and version, operating system, device identifiers, time zone settings, and session logs generated when you access the Platform.
- Usage Data: Information about how you use the Platform, including games played, bets placed, session duration, and interaction with promotional materials.
- Communications Data: Records of your interactions with our customer support team, including live chat transcripts and email correspondence.
3. How We Collect Your Data
pantas88 collects personal data through the following means:
- Direct Provision: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, or contacting support.
- Automated Technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, server logs, and similar tracking technologies (see Section 8).
- Third-Party Payment Processors: Transaction confirmation data received from FPX, DuitNow, and supported e-wallet providers in connection with your deposit and withdrawal activity.
- Identity Verification Services: In cases where document verification is required, pantas88 may engage third-party identity verification providers who return a verification result to us.
4. How We Use Your Data
pantas88 uses collected personal data for the following purposes:
- To create and administer your player account on the Platform.
- To verify your identity and confirm that you meet the minimum age requirement of 21 years.
- To process deposits and withdrawals in MYR via FPX, DuitNow, and supported e-wallets.
- To detect, investigate, and prevent fraud, money laundering, and other prohibited conduct.
- To comply with applicable anti-money laundering (AML) and know-your-customer (KYC) obligations.
- To provide and improve customer support services, including live chat and email assistance.
- To send you service-related communications, including account security alerts, transaction confirmations, and updates to our policies.
- To personalise your experience on the Platform, including recommending games relevant to your play history.
- To administer bonuses, promotions, and loyalty programmes and to verify eligibility criteria.
- To support responsible gaming measures, including enforcement of self-exclusion requests and deposit limits.
- To analyse Platform usage and performance for the purpose of improving our services.
5. Legal Basis for Processing
pantas88 processes your personal data on the following legal grounds:
- Contractual Necessity: Processing required to fulfil our obligations under our Terms and Conditions — including operating your account, processing transactions, and providing the gaming service you have requested.
- Legal Obligation: Processing necessary to comply with AML, KYC, and other regulatory requirements applicable to gaming operators.
- Legitimate Interests: Processing for fraud prevention, security monitoring, Platform improvement, and responsible gaming enforcement, where such interests are not overridden by your data protection rights.
- Consent: Where we send you marketing communications or use non-essential cookies, we rely on your consent. You may withdraw consent at any time by contacting support or adjusting your account preferences.
6. Data Sharing & Disclosure
pantas88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data in the following limited circumstances:
- Service Providers: We engage trusted third-party processors — including payment gateways, identity verification providers, fraud detection services, cloud hosting providers, and customer support platforms — who process data on our behalf and are contractually obligated to handle it securely and only as instructed.
- Regulatory Authorities: We may disclose data to gaming regulators, financial intelligence units, law enforcement agencies, or courts where required by law or in connection with an investigation into fraud, money laundering, or other illegal activity.
- Business Transfers: In the event of a merger, acquisition, or sale of substantially all of our assets, player data may be transferred to the acquiring entity, subject to equivalent privacy protections.
- With Your Consent: We will not otherwise disclose your personal data to third parties without your explicit prior consent.
7. Payment & Financial Data
pantas88 takes particular care with financial data. When you make a deposit via FPX, DuitNow, Touch 'n Go eWallet, Boost, or any other supported method, payment processing is handled by certified payment service providers. pantas88 does not store full bank account numbers, card numbers, or e-wallet login credentials on its own servers.
Transaction records — including deposit amounts, withdrawal requests, and processing timestamps — are retained in our systems for a minimum of five years from the date of the transaction to fulfil our AML compliance and audit obligations. These records are accessible to our compliance team and, where required by law, to relevant authorities.
8. Cookies & Tracking Technologies
The pantas88 Platform uses cookies and similar tracking technologies to operate certain Platform functions and to understand how the Platform is used. Cookies are small text files stored on your device by your browser.
pantas88 uses the following categories of cookies:
- Strictly Necessary Cookies: Required for the Platform to function — including session management, login state, and security tokens. These cannot be disabled without impairing Platform functionality.
- Analytical Cookies: Used to understand how players navigate the Platform so that we can improve page structure and content. Data collected is aggregated and does not identify individuals.
- Preference Cookies: Store your account preferences, such as language settings and game display options, to personalise your experience on return visits.
You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies may prevent you from accessing certain areas of the Platform.
9. Data Retention
pantas88 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
- Active Account Data: Retained for the duration of your account and for a period of at least five years following account closure, to satisfy AML, KYC, and audit requirements.
- Transaction Records: Minimum five years from the date of each transaction.
- Customer Support Records: Typically two years from the date of the support interaction, unless the matter is subject to ongoing investigation or legal proceedings.
- Technical/Log Data: Generally retained for up to 12 months.
Upon expiry of the applicable retention period, data is securely deleted or anonymised.
10. Security Measures
pantas88 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
- Encrypted storage of passwords using industry-standard hashing algorithms. pantas88 staff cannot view your plaintext password.
- Access controls that restrict internal access to personal data on a need-to-know basis.
- Automated fraud and anomaly detection systems that flag unusual account activity for investigation.
- Regular security assessments and penetration testing.
No data transmission over the internet can be guaranteed to be completely secure. While pantas88 takes all reasonable precautions, you acknowledge that you transmit data to the Platform at your own risk. pantas88 will notify affected players of any data breach that poses a significant risk to their rights or freedoms, in accordance with applicable notification obligations.
11. Your Data Rights
Subject to applicable law, you have the following rights with respect to your personal data held by pantas88:
- Right of Access: You may request a copy of the personal data we hold about you.
- Right of Rectification: You may request correction of inaccurate or incomplete personal data.
- Right of Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and no legal obligation requires its retention.
- Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances, such as while you contest its accuracy.
- Right to Data Portability: Where processing is based on consent or contractual necessity, you may request that we provide your data in a structured, machine-readable format.
- Right to Object: You may object to processing carried out on the basis of legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact our support team via live chat or email. We will respond to verified requests within 30 days. In some cases, we may need to verify your identity before processing a request.
12. Children and Minors
The pantas88 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals below this age. If pantas88 becomes aware that an account has been registered by a person under the age of 21, the account will be immediately suspended and any funds held will be returned in accordance with applicable procedures, subject to verification. If you believe a minor has registered an account, please notify us via live chat immediately.
13. Changes to This Privacy Policy
pantas88 may update this Privacy Policy periodically to reflect changes in our data practices, applicable law, or Platform functionality. When material changes are made, we will notify registered players via the email address on file or through a prominent notice on the Platform. The date of the most recent revision appears at the top of this page. Your continued use of the Platform following notification of changes constitutes your acceptance of the revised Policy. We encourage you to review this Policy regularly.
14. Contact Us
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way pantas88 handles your personal data, please contact our Data Protection team through the 24/7 live chat support on the Platform. Alternatively, our contact email address is listed in the footer of this page as plain text. When contacting us about a privacy matter, please include your registered username and a clear description of your request or concern to allow us to assist you efficiently.