Privacy Policy pana77 –
Protection of Your Personal Data

This Privacy Policy explains how pana77 (operating through the pana77.app website) collects, uses, stores and protects your personal information when you use our platform. This document applies to all users who register, browse or use any pana77 services, including our website, mobile app and any official communication channels.

By registering or using pana77 services, you agree that your personal data will be processed in accordance with the terms set out in this policy. If you do not agree with any part of this policy, please discontinue use of our platform and contact the support team to close your account.

This Privacy Policy is to be read together with Terms and Conditions pana77 and both documents together form the entire agreement between you and our platform. In the event of any conflict in meaning, this Privacy Policy shall govern all matters relating to personal data protection.

Pana77 only collects personal data that is strictly necessary to deliver our services safely and efficiently. The data we collect can be grouped into several main categories:

Your personal data is used by pana77 solely for lawful, transparent purposes directly related to the provision of our platform services. We do not use your data for any other purpose without your explicit consent.

The following are the main purposes for which your personal data is used:

• User account management — Registers, verifies, and securely manages your account on the pana77 platform.
• Financial transaction processing — Processes deposits, withdrawals, and any payments related to your gaming activity.
• Identity verification (KYC) — Fulfils identity verification requirements to prevent fraud, money laundering, and other unlawful activities.
• Customer support delivery — Responds to enquiries, resolves complaints, and provides technical assistance to you.
• Service communications — Sends important notifications relating to your account, policy changes, promotions, and platform updates.
• Platform improvements — Analyses usage patterns to improve the user experience, system performance, and new features.
• Legal compliance — Meets the legal and regulatory obligations applicable to our operations.
• Risk management and security — Detects and prevents fraud, unauthorised access, and platform abuse.

Every processing of personal data carried out by pana77 is grounded in one or more legal bases recognised under Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure there is a solid and legitimate justification for every data processing action we undertake.

• Consent — You have given explicit consent at the time of registering and using the pana77 platform. This consent may be withdrawn at any time, though doing so may affect your ability to continue using certain services.
• Contract performance — Processing is necessary to fulfil the service agreement between you and pana77, including payment processing and account management.
• Legal obligation — Some data processing is required to comply with the legal and regulatory obligations binding on pana77 as an online platform operator.
• Legitimate interests — We process certain data based on legitimate business interests such as fraud detection, platform security, and service improvement, provided these interests do not override your rights.

Pana77 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are specific situations where we need to share your data with trusted parties in order to deliver our services effectively.

All of pana77's third-party partners are bound by strict data confidentiality agreements and must adhere to data protection standards at least equivalent to those we set ourselves. pana77 is responsible for ensuring every partner fulfils their data protection obligations.

Pana77 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required by law. Retention periods vary depending on the type of data and applicable operational and legal requirements.

• Active account data — Retained for as long as your account is active and all related obligations are settled.
• Financial and transaction data — Retained for a minimum of 7 years from the transaction date, in line with Malaysia's financial record-keeping and tax legislation requirements.
• KYC records — Retained for a minimum of 5 years after account closure, or 7 years after the last transaction, for anti-money laundering (AML) compliance.
• Technical and security logs — Retained for 90 days for security purposes, fraud detection, and technical troubleshooting.
• Support communication records — Retained for 3 years for reference and future dispute resolution.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity. Anonymised data may continue to be used for aggregate analytics purposes.

Pana77 continuously invests in security infrastructure to ensure your personal data remains protected against unauthorised access, accidental disclosure, alteration, or destruction. Our security systems operate 24 hours a day, 7 days a week.

• Data encryption in transit — All communications between your device and pana77 servers use TLS 1.3 protocol with 256-bit encryption.
• Data encryption at rest — Sensitive data stored in our databases is encrypted using AES-256 algorithms.
• Two-factor authentication (2FA) — Available to all player accounts as a highly recommended additional layer of protection.
• Real-time threat monitoring — Our intrusion detection system (IDS) automatically monitors for suspicious activity at all times.
• Regular security testing — Security audits and penetration testing are conducted periodically by independent security experts.
• Role-based access control — Internal staff may only access data relevant to their specific job responsibilities.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have legally protected rights regarding your personal data held by pana77. We respect and facilitate the exercise of these rights.

To exercise any of the rights above, you may contact the pana77 privacy team by email at [email protected]. We will process your request within 30 business days. Some requests may require additional identity verification before being processed.

Pana77 uses cookies and similar tracking technologies to enhance the user experience, analyse platform usage, and maintain the security of your login session. Cookies are small text files stored on your device when you visit our website.

• Essential cookies — Required for core platform functions such as login session verification and security. Cannot be disabled without affecting platform functionality.
• Performance cookies — Collects anonymous information about how visitors use our website to help us improve the user experience.
• Functional cookies — Remembers your preferences such as language, display settings, and other options to deliver a more personalised experience.
• Analytics cookies — Used to understand aggregated usage patterns for product and service improvement purposes.

You can manage cookie settings through your web browser settings. However, disabling certain cookies may affect the functionality or user experience of the pana77 platform.

The pana77 platform is exclusively for individuals aged 18 and above. We do not intentionally collect, process or store any personal data from individuals under the age of 18.

All account registrations require age verification through the KYC process. Should we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question.

Pana77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or the technologies we use. Any material amendments will be communicated to you via email or in-platform notification at least 14 days before taking effect.

Your continued use of the pana77 platform after the effective date of any amendments constitutes your acceptance of the updated terms. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

For any questions, concerns, or requests regarding your privacy and personal data protection, please contact the pana77 Data Protection Officer (DPO):

• Email: [email protected]
• Operating Hours: Monday – Sunday, 9:00 AM – 11:00 PM (GMT+8)
• Response Time: Within 3 business days