panda95 Privacy Policy — How We Handle Your Personal Data

panda95 ("panda95", "we", "us", "our") operates the online gaming platform accessible at panda95.club. We are committed to protecting the privacy and personal data of all individuals who interact with our platform, including registered players, prospective players, and website visitors ("you", "User", "Player").

This Privacy Policy describes how panda95 collects, uses, stores, discloses, and protects your personal information in connection with your use of the panda95 platform and associated services. It applies to all data processing activities undertaken by panda95, whether conducted online or offline.

This Privacy Policy should be read in conjunction with the panda95 Terms & Conditions, which govern your overall use of the platform. By registering an Account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy.

panda95 collects personal data in several ways, including directly from you during registration and use, automatically through your interaction with the Platform, and in certain cases from third-party sources for identity verification purposes.

2.1 Information You Provide Directly:

• Full legal name and date of birth;
• Residential address (including city, state, and postcode);
• Email address and Malaysian mobile phone number;
• Username and hashed password credentials;
• Identity verification documents (e.g., MyKad, passport) and proof of address submitted during KYC;
• Payment method details necessary to process deposits and withdrawals (e.g., bank account identifiers, e-wallet account numbers for Touch 'n Go eWallet, Boost, GrabPay);
• Communications you send to panda95 support, including live chat transcripts and email correspondence.

2.2 Information Collected Automatically:

• IP address and approximate geolocation derived therefrom;
• Device identifiers, browser type, operating system, and screen resolution;
• Session data, including login timestamps, pages visited, games played, wagering history, and session duration;
• Referral source and traffic channel data;
• Cookie identifiers and similar tracking technology data as described in Section 8.

2.3 Information from Third Parties: panda95 may receive personal data from identity verification service providers, payment processors, fraud prevention agencies, and gaming content providers in connection with the services they supply to us.

panda95 uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your panda95 Account, including authentication and security;
• Service Delivery: To provide gaming services, process bets, calculate and pay out winnings, and manage your MYR wallet balance;
• Payments Processing: To process deposits and withdrawals via FPX, DuitNow, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, and other supported Malaysian payment channels;
• Identity Verification & KYC: To verify your identity, age (21+ requirement), and payment method ownership in compliance with our regulatory obligations;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other prohibited conduct;
• Responsible Gaming: To monitor gaming behaviour, apply player-requested limits, and enforce self-exclusion arrangements;
• Customer Support: To respond to your enquiries, complaints, and support requests;
• Marketing Communications: To send promotional offers, bonuses, and platform updates where you have consented to receive such communications;
• Legal Compliance: To comply with applicable laws, regulations, and orders of regulatory or law enforcement authorities;
• Platform Improvement: To analyse usage patterns, improve game performance, and enhance the overall user experience on panda95.

panda95 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions, including account administration and service delivery;
• Legal Obligation: Processing required to comply with applicable laws, including KYC, AML, and responsible gaming regulations;
• Legitimate Interests: Processing necessary for fraud prevention, platform security, and business analytics, where these interests are not overridden by your rights;
• Consent: Processing for marketing communications, where you have given explicit consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

5.1 panda95 does not sell, rent, or exchange your personal data with third parties for their independent marketing or commercial purposes.

5.2 panda95 may share your personal data with the following categories of recipients, strictly to the extent necessary for the stated purpose:

• Payment Service Providers: Banks, e-wallet operators, and payment aggregators processing your MYR transactions;
• Identity Verification Providers: Third-party KYC services used to verify your identity and age;
• Gaming Content Providers: Licensed game studios (e.g., Pragmatic Play, PG Soft, Evolution Gaming) who may process session data to deliver games;
• IT & Infrastructure Providers: Cloud hosting, data storage, and cybersecurity service providers operating on our behalf;
• Regulatory & Law Enforcement Authorities: Where disclosure is required by law, court order, or regulatory direction;
• Professional Advisers: Legal counsel, auditors, and compliance consultants under appropriate confidentiality obligations.

5.3 All third-party service providers are contractually required to process your data only for the specified purpose, to maintain appropriate security measures, and to comply with applicable data protection obligations.

6.1 Some of panda95's service providers and game content partners operate servers located outside of Malaysia. Where your personal data is transferred internationally, panda95 implements appropriate safeguards to ensure the data receives a level of protection consistent with applicable data protection law.

6.2 Such safeguards may include standard contractual clauses, data processing agreements, or transfers to jurisdictions recognised as providing adequate data protection. By using panda95, you consent to such international transfers as described in this Policy.

7.1 panda95 retains your personal data for as long as your Account is active and for a period thereafter as required by our legal and regulatory obligations, typically a minimum of five (5) years following Account closure for AML compliance purposes.

7.2 Where data is no longer required for its original purpose and no legal retention obligation applies, panda95 will securely delete or anonymise the data.

7.3 Transaction records, gaming history, and KYC documentation may be retained for longer periods where required by applicable law or regulatory authority direction.

8.1 panda95 uses cookies, web beacons, pixels, and similar technologies to operate the Platform, remember your preferences, analyse traffic, and deliver a personalised experience.

Categories of cookies we use:

• Strictly Necessary Cookies: Essential for the Platform to function. These enable session management, authentication, and security features. They cannot be disabled.
• Performance & Analytics Cookies: Used to understand how players navigate the Platform — pages visited, time on page, errors encountered — to help us improve the service.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and display options to personalise your experience.
• Marketing Cookies: Used to deliver relevant promotional content where you have consented to marketing communications. These may track your visits across sessions.

8.2 You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality. Consult your browser's help documentation for instructions specific to your browser.

Subject to applicable law and certain regulatory limitations, you have the following rights in respect of your personal data held by panda95:

• Right of Access: To request a copy of the personal data panda95 holds about you;
• Right to Rectification: To request correction of inaccurate or incomplete personal data;
• Right to Erasure: To request deletion of your personal data where it is no longer necessary, subject to legal retention obligations;
• Right to Restriction: To request that we limit processing of your data in certain circumstances;
• Right to Object: To object to processing based on legitimate interests, including direct marketing;
• Right to Withdraw Consent: To withdraw previously given consent for marketing communications at any time.

To exercise any of the above rights, contact panda95 support via live chat on the Platform or by email at [email protected]. We will acknowledge requests within two (2) business days and respond fully within fourteen (14) business days. Identity verification may be required before processing your request.

panda95 does not knowingly collect personal data from any individual under the age of 21. The Platform and all its Services are strictly intended for adults aged 21 and above. If panda95 discovers that it has inadvertently collected data from a person under 21, the Account will be immediately suspended, all data will be deleted, and any balance will be dealt with in accordance with our responsible gaming obligations.

If you believe a person under the age of 21 has registered an Account, please notify us immediately at [email protected].

11.1 panda95 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit;
• Encrypted storage of passwords using industry-standard hashing algorithms;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security vulnerability assessments and penetration testing;
• Two-factor authentication options for player accounts;
• Real-time fraud monitoring and anomaly detection systems.

11.2 Whilst panda95 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the confidentiality of your Account credentials.

12.1 panda95 reserves the right to update this Privacy Policy at any time. Where changes are material, we will notify you via email or a prominent notice on the Platform prior to the changes taking effect. The date of the most recent revision is displayed at the top of this page.

12.2 Your continued use of the Platform following notification of changes constitutes your acceptance of the revised Privacy Policy. If you do not accept the changes, you should discontinue use of the Platform and request Account closure.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by panda95, please contact our Data Protection team:

Email: [email protected]
Live Chat: Available 24/7 via the panda95 Platform
Response Time: Within 2 business days for acknowledgement; 14 business days for full response.

We are committed to resolving all privacy-related enquiries promptly and transparently. If you are unsatisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.