Privacy Policy Panen138 — Your Data Fully Protected

Introduction & Scope of This Privacy Policy

Welcome to the panen138 Privacy Policy. This document forms part of panen138's ongoing commitment to protecting the privacy and personal data of everyone who uses our platform. We understand that your trust is invaluable, and data protection is one of the ways we honour that trust.

This Privacy Policy applies to all users of the panen138 platform — including the main website at panen138.run, the Android and iOS mobile apps, and all related services provided by panen138. It explains in detail how panen138 collects, stores, processes, uses, and in certain circumstances shares your personal data.

Panen138 is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing the processing of personal data in the context of commercial transactions in this country. We regard PDPA compliance not merely as a legal obligation, but as a moral responsibility to every one of our users.

Types of Personal Data We Collect

Panen138 only collects data that is strictly necessary to provide you with the best possible service. The following are the categories of data we may collect:

Panen138 does not collect credit/debit card numbers directly — all financial transactions are processed through secure, licensed payment gateways in Malaysia. We also do not store your e-wallet PIN or password.

How We Collect Your Personal Data

Your personal data is collected through various means when you interact with the panen138 platform:

• During Registration: When you create a new account at panen138, you provide information such as your name, phone number, and password directly. This information is required to set up your account and ensure secure login.
• During Financial Transactions: When you make a deposit via Touch 'n Go, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks), Boost, or ShopeePay, your transaction details are recorded for accountability and security purposes. Sensitive information such as full account numbers is processed and protected by the payment gateway provider — not directly by panen138.
• While Playing: The panen138 system automatically records your gameplay data, including bets placed, game outcomes, and session duration. This is necessary to ensure game integrity and for verification in the event of any dispute.
• Through Cookies and Tracking Technologies: The panen138 platform uses cookies and similar tracking technologies to enhance user experience, analyse usage patterns, and maintain the security of your login session.
• Via Support Interactions: When you contact the panen138 support team via Live Chat, WhatsApp, or email, your conversation may be recorded for training and service quality improvement purposes.
• During KYC Verification: When you submit identification documents for the Know Your Customer (KYC) process, those documents are handled securely and retained only for as long as required by law.

How Your Personal Data Is Used

Panen138 uses your personal data only for legitimate and transparent purposes. The following are the primary purposes for which your data is used:

1. Service Provision: To allow you to log in, play, make deposits and withdrawals, and use all panen138 platform features without interruption.
2. Identity Verification & Security: To verify your identity during registration and login, and to prevent fraud, money laundering, and unauthorised access.
3. Payment Processing: To process your deposits and withdrawals via your chosen Malaysian payment method — Touch 'n Go, GrabPay, DuitNow, FPX, Boost, and ShopeePay.
4. Customer Support: To assist you when you contact the panen138 support team, resolve complaints, and ensure issues are addressed promptly and accurately.
5. Platform Improvement: To analyse usage patterns and improve the panen138 platform's interface, performance, and features based on the actual needs of Malaysian users.
6. Service Communications: To send important notifications such as deposit confirmations, bet results, security alerts, and updates to the terms of service.
7. Marketing (with Consent): To send promotional information, bonuses, and special offers from panen138 — only to members who have consented to receive such communications.
8. Legal Compliance: To fulfil legal obligations in Malaysia, including reporting requirements to the relevant authorities where required by law.

Sharing Data with Third Parties

Panen138 is committed to not selling or disclosing your personal data without legitimate justification. However, in certain limited situations, panen138 may need to share your data with the following parties:

• Payment Gateway Provider: Transaction information required for payment processing is shared solely with licensed payment providers (such as FPX operators, Touch 'n Go, and GrabPay) for the purpose of completing your financial transactions. These providers are bound by strict confidentiality agreements.
• Game Providers: For games provided by third-party suppliers, minimum necessary game data may be shared to ensure game integrity and dispute resolution.
• Malaysian Authorities: Where required by Malaysian law, a court order, or direction from a lawful authority, panen138 will disclose the necessary data. Panen138 will notify you of such disclosure unless prohibited by law.
• Trusted Technology Partners: Technical service providers such as server hosting, cybersecurity, and data analytics firms, all bound by strict confidentiality and data protection agreements with panen138.

Data Security Measures

Panen138 continuously invests in the latest security infrastructure to protect your personal data. The following are the key security measures we have in place:

• 256-bit SSL Encryption: All data transmitted between your device and panen138's servers is encrypted using 256-bit SSL/TLS protocol — the same standard used by Malaysian banks.
• Stored Data Encryption (AES-256): Sensitive data stored in our databases is encrypted to AES-256 standards, rendering it useless to any unauthorised party even in the event of a breach.
• Two-Factor Authentication (2FA): Panen138 offers two-factor authentication for login, adding an extra layer of security to your account beyond your password.
• 24/7 Monitoring: panen138's cybersecurity team continuously monitors the platform to detect and respond to any suspicious activity or security threats in real time.
• Regular Penetration Testing: We conduct regular penetration testing by certified independent security experts to identify and patch any vulnerabilities before they can be exploited.
• Internal Access Controls: Access to members' personal data among panen138 staff is restricted on a need-to-know basis. All access is logged and audited on a regular basis.

While panen138 takes all reasonable measures to protect your data, no security system is completely infallible. You also play an important role in keeping your account secure — never share your password, use a strong password, and enable two-factor authentication.

Data Retention Period

Panen138 retains your personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable Malaysian law. In general:

• Active Account Data: Retained for the duration your account is active and for 5 years following account closure, in compliance with financial record-keeping and legal requirements.
• Financial Transaction Data: Retained for a minimum of 7 years in accordance with Malaysia's financial reporting and anti-money laundering (AML) requirements.
• Support Communication Data: Customer support interaction records are retained for 2 years for dispute resolution and service improvement purposes.
• Game Data: Betting and gaming history is retained for 3 years for audit, winnings verification, and regulatory compliance purposes.
• Marketing Data: Retained until you withdraw consent to receive marketing communications, after which the relevant data will be anonymised or deleted within 30 days.

Once the retention period expires, your data will be securely deleted or anonymised in a manner that means it can no longer be linked back to you as an individual.

Cookies & Tracking Technologies

The panen138 platform uses cookies and similar tracking technologies to enhance your user experience. Cookies are small text files stored on your device when you visit our platform. The following are the types of cookies we use:

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the panen138 platform. For more information on how to manage cookies in your browser, refer to your browser's help section.

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and panen138's Privacy Policy, you have the following rights regarding your personal data:

Protection of Children's Data

Panen138 maintains a strict policy regarding the data of minors. The panen138 platform is intended exclusively for individuals aged 18 and above only. We do not knowingly collect or process personal data from individuals under the age of 18.

Cross-Border Data Transfers

In certain cases, your personal data may need to be processed or stored on servers located outside Malaysia — for example, for cloud computing services or by international game providers.

When cross-border data transfers are required, panen138 ensures that:

• The recipient country or entity provides a level of data protection equivalent to or greater than that required under Malaysia's PDPA.
• Appropriate contractual safeguards (such as Standard Contractual Clauses) are used to protect your data during transfers.
• Data transfers only occur when genuinely necessary to deliver the service you have requested.

If you have any questions about cross-border data transfers involving your data, please contact our Data Protection Officer for further information.

Amendments to This Privacy Policy

Panen138 reserves the right to amend this Privacy Policy at any time to reflect changes in our privacy practices, updates to Malaysian law, or improvements to our services. When amendments are made:

• The "Updated" date at the top of this document will be revised to reflect the date of the latest amendment.
• For material (significant) amendments, panen138 will send a notice to your registered email address at least 14 days before the changes take effect.
• For minor amendments or clarifications, notice may be posted on the panen138 platform only.
• Continued use of the platform after the amendment's effective date will be considered acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy from time to time to stay informed of panen138's latest privacy practices. Archives of previous versions of this Privacy Policy are available upon request via our support email.

Contact Panen138's Data Protection Officer (DPO)

If you have any questions, concerns, or wish to exercise your rights regarding your personal data, please contact panen138's Data Protection Officer (DPO) through the following channels:

If you are dissatisfied with panen138's response to your privacy request, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia (PDPC) through official PDPC channels. More information about the PDPC is available on the official website of the Ministry of Communications Malaysia.

This document was last updated on 1 July 2026 (Version 3.1). Panen138 values your trust and remains committed to protecting your privacy to the highest possible standard.