panengg Privacy Policy

1. Introduction

panengg ("we", "us", "our", "the Platform") is an internationally licensed online gaming platform accessible at https://panengg.cam. We provide sports betting, live casino, and slot gaming services to eligible players, including players located in Malaysia across cities such as Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam.

In the course of providing these services, panengg collects, processes, stores, and in certain circumstances shares personal information belonging to players and website visitors ("you", "your", "the User"). This Privacy Policy sets out a full and transparent account of our data practices — what data we collect, why we collect it, how we use it, how long we keep it, and what rights you have in relation to it.

panengg is committed to data protection as a fundamental principle of platform operation, not merely a compliance obligation. We process personal data only for the purposes described in this Policy, using the minimum data necessary to achieve those purposes, and we implement robust technical and organisational measures to keep that data secure.

This Privacy Policy applies to all data processing activities conducted through the panengg website, platform, mobile experience, customer support channels, and any associated services. It applies to registered players, prospective players who submit enquiries, and anonymous visitors whose data is collected through cookies and analytics tools.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "Account" — A registered user profile on the panengg platform, created following successful registration and identity verification.
• "Controller" — The entity that determines the purposes and means of processing personal data. panengg acts as the data controller in respect of all personal data collected through the platform.
• "Cookies" — Small data files stored on a user's device by a web browser when visiting a website. Cookies enable the platform to recognise returning users, maintain session states, and gather analytics data.
• "KYC" — Know Your Customer. The identity and documentation verification process required to confirm a player's identity, age, and payment ownership in compliance with anti-money laundering regulations.
• "Personal Data" — Any information that directly or indirectly identifies a living individual, including name, email address, device identifier, IP address, financial data, and behavioural data linked to an identified or identifiable person.
• "Processing" — Any operation performed on personal data, including collection, storage, use, disclosure, alteration, and deletion.
• "Processor" — A third party that processes personal data on behalf of panengg under a binding contractual agreement, such as a payment gateway provider or cloud infrastructure supplier.
• "Sensitive Personal Data" — Personal data that warants heightened protection due to its nature, including government-issued identity document numbers, biometric data, and financial account details.

3. Data We Collect

panengg collects the following categories of personal data from players and website visitors:

3.1 Identity and Registration Data

• Full legal name (as per government-issued identity document)
• Date of birth (used for 21+ age verification)
• Gender (optional, for account personalisation)
• Nationality and country of residence
• Malaysian Identity Card (MyKad) number or passport number (collected during KYC verification)
• Username and encrypted account password

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address (required for KYC and regulatory reporting purposes)

3.3 Financial and Payment Data

• Payment method type (e.g., Touch'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Boost, GrabPay, RHB, Hong Leong)
• Transaction reference numbers and amounts
• Deposit and withdrawal history
• Wallet or bank account identifiers (masked — full account numbers are not stored by panengg)

3.4 Technical and Device Data

• IP address and geolocation data
• Device type, operating system, and browser version
• Session data including login timestamps and session duration
• Cookie identifiers and similar tracking data

3.5 Gaming and Behavioural Data

• Game session history (games played, wagers placed, outcomes)
• Sports betting history and markets selected
• Bonus and promotion uptake records
• Responsible gambling tool settings (deposit limits, session limits, self-exclusion status)

3.6 Communications Data

• Live chat transcripts and email correspondence with panengg support
• Support ticket content and resolution records
• Promotional communication preferences

4. How We Collect Your Data

panengg collects personal data through the following channels and mechanisms:

4.1 Direct Collection

Data you actively provide when you: register an account on panengg; submit KYC documentation; make a deposit or request a withdrawal; contact customer support; set responsible gambling preferences; or opt in to promotional communications.

4.2 Automated Collection

Data collected automatically when you visit or interact with the platform, including: server logs capturing IP addresses and request data; cookies and similar technologies (see Section 10); device fingerprinting for fraud prevention; and session tracking within the platform interface.

4.3 Third-Party Sources

In limited circumstances, panengg may receive personal data about you from third parties, including: payment processing partners who provide transaction confirmation data; identity verification service providers engaged for KYC purposes; fraud detection and anti-money laundering screening services; and analytics providers who aggregate behavioural data across sessions.

5. How We Use Your Data

The following table summarises the primary purposes for which panengg processes your personal data:

panengg does not use your personal data for automated decision-making that produces significant legal or similarly significant effects without human review. Responsible gambling risk assessments involve automated flaging but are reviewed by trained staff before any intervention is applied to a player's account.

6. Legal Basis for Processing

panengg processes personal data under the following legal bases:

• Contractual Necessity: Processing required to perform the contract between panengg and the player — including account creation, payment processing, and game delivery — is conducted on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable legal obligations, including KYC identity verification, anti-money laundering screening, and regulatory reporting, is conducted on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, security monitoring, responsible gambling analytics, and platform improvement is conducted on the basis of panengg's legitimate interests in operating a secure and compliant gaming platform, provided those interests are not overridden by the player's fundamental rights and freedoms.
• Consent: Processing for personalised marketing communications, non-essential cookies, and certain analytics tools is conducted on the basis of freely given, specific, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

7. Data Sharing & Disclosure

panengg does not sell your personal data to third parties. We may share your data with the following categories of recipients under binding data processing agreements or legal obligations:

7.1 Service Providers (Processors)

Third-party companies engaged by panengg to provide technical services necessary for platform operation, including payment gateway operators (supporting Touch 'n Go eWallet, DuitNow, FPX, Maybank, and other Malaysian payment methods), identity verification services, cloud infrastructure providers, customer support software vendors, and fraud detection services. All processors are bound by data processing agreements requiring them to handle data only as instructed by panengg.

7.2 Regulatory and Law Enforcement Authorities

panengg may disclose personal data to regulatory bodies, law enforcement agencies, or financial intelligence units where required by applicable law, court order, or regulatory requirement — including for the purposes of anti-money laundering investigation, fraud reporting, or child protection.

7.3 Gaming License Authority

panengg may be required to disclose player account data to its international gaming license authority as part of regulatory audit, compliance review, or licensing condition obligations.

7.4 Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring involving the panengg platform, player data may be transferred to the relevant successor entity as part of that transaction. Players will be notified of any such transfer and the privacy terms applicable thereafter.

8. Data Retention

panengg retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation. The following retention periods apply as general guidance:

• Account data and KYC documents: Retained for a minimum of 5 years from account closure, in accordance with anti-money laundering regulatory requirements.
• Transaction and financial records: Retained for a minimum of 7 years to satisfy financial record-keeping obligations.
• Gaming session history: Retained for a minimum of 3 years from the date of each session.
• Customer support communications: Retained for 2 years from the date of the most recent interaction.
• Marketing preference records: Retained until consent is withdrawn, plus a reasonable period thereafter for compliance evidence purposes.
• Cookies and analytics data: Session cookies expire when the browser is closed. Persistent cookies are retained for up to 12 months unless earlier deleted by the user.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identified individual. Where data has been anonymised, it may be retained indefinitely for aggregated statistical and analytical purposes.

9. Data Security

panengg implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include but are not limited to:

• Encryption in Transit: All data transmitted between your device and the panengg platform is protected by TLS 1.3 encryption (256-bit SSL), rendering it unreadable to any third party who might intercept network traffic.
• Encryption at Rest: Sensitive personal data — including identity document data, financial identifiers, and authentication credentials — is encrypted at rest using AES-256 encryption within panengg's database infrastructure.
• Access Controls: Access to personal data within panengg's systems is restricted on a strict need-to-know basis. All staff with access to player data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication: Two-factor authentication (2FA) is available for all player accounts and is strongly recommended. 2FA is mandatory for all panengg staff with access to production systems containing player data.
• Penetration Testing: panengg's systems are subject to regular independent penetration testing and vulnerability assessments by qualified security professionals.
• Incident Response: panengg maintains a documented security incident response plan. In the event of a data breach that poses a risk to affected individuals, panengg will notify affected players and relevant authorities within the timeframes required by applicable law.

While panengg implements robust security measures, no online system can guarantee absolute security. Players are responsible for maintaining the confidentiality of their account credentials and should contact support immediately if they suspect unauthorised access to their account.

10. Cookies & Tracking Technologies

panengg uses cookies and similar tracking technologies on the platform for the following purposes:

10.1 Essential Cookies

Cookies that are strictly necessary for the platform to function, including session management cookies that maintain your logged-in state, security tokens that protect against cross-site request forgery, and preference cookies that remember your language and display settings. These cookies cannot be disabled without impairing platform functionality.

10.2 Analytical Cookies

Cookies that collect aggregated, anonymised data about how visitors use the platform — including pages visited, time spent on each page, and error events encountered. This data is used to improve the platform's usability and performance. Analytical cookies require your consent and may be disabled through our cookie preference settings.

10.3 Functional Cookies

Cookies that enable enhanced platform features such as remembering your game preferences, recently played titles, and responsible gambling tool settings. These cookies improve your experience but are not essential for basic platform operation.

10.4 Managing Cookies

You may manage your cookie preferences through the cookie settings panel accessible on the panengg platform. You may also configure your browser to block or delete cookies, though doing so may impair certain platform features. Note that disabling essential cookies will prevent you from logging in to your account.

11. Your Rights in Relation to Your Personal Data

Subject to applicable data protection law and the conditions set out below, you have the following rights in relation to your personal data held by panengg:

• Right of Access: You may request a copy of the personal data panengg holds about you, together with information about how that data is used and where it came from. We will respond to access requests within 30 calendar days.
• Right to Rectification: If any personal data held about you is inaccurate or incomplete, you may request that it be corrected. You may update certain account details (such as email address and phone number) directly within your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overiding legal obligation requires its retention. Please note that panengg is required to retain certain data (including KYC and transaction records) for minimum periods under anti-money laundering and financial record-keeping regulations, which take precedence over erasure requests in respect of that data.
• Right to Restriction: You may request that panengg restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity and conducted by automated means, you may request that we provide your data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing conducted on the basis of legitimate interests, including profiling for responsible gambling monitoring. panengg will cease such processing unless there are compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, please contact panengg's support team via Live Chat or by email at [email protected]. We may ask you to verify your identity before processing a request in order to protect your data from unauthorised access.

12. Minors & Age Restriction

The panengg platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect, process, or store personal data from individuals under the age of 21.

Age verification is a mandatory component of the KYC process for all registered players. Where panengg discovers — through its verification processes or through a report — that a registered player is under the age of 21, the account will be immediately suspended, all real-money transactions will be reversed to the depositing payment method, and any personal data collected will be deleted from our systems to the extent permitted by applicable law.

If you are a parent or guardian and believe that a minor may have registered an account or provided personal data on the panengg platform, please contact us immediately via Live Chat or at [email protected] so that we can investigate and take the appropriate action without delay.

13. International Data Transfers

panengg operates an internationally licensed gaming platform and may transfer personal data to countries outside of Malaysia in the course of providing services, including to cloud infrastructure providers, payment processing partners, and identity verification service providers located in other jurisdictions.

Where personal data is transferred internationally, panengg ensures that appropriate safeguards are in place to protect that data at the destination, including contractual data processing agreements with receiving entities that impose data protection obligations equivalent to those described in this Policy.

Players located in Malaysia should be aware that Malaysia's Personal Data Protection Act 2010 (PDPA) applies to the processing of personal data in commercial transactions. panengg is committed to processing Malaysian player data in a manner consistent with the PDPA's data protection principles, including the General Principle, Notice and Choice Principle, Disclosure Principle, Security Retention Principle, Data Integrity Principle, and Access Principle.

14. Policy Amendments

panengg reserves the right to amend this Privacy Policy at any time. Material changes — such as changes to the categories of data collected, the purposes for which data is used, or the parties with whom data is shared — will be communicated to registered players via email notification and/or a prominent in-platform notice at least 14 days before taking effect.

Minor changes, such as typographical corrections and clarifications that do not alter the substance of our data practices, may be made without prior notice and will be effective immediately upon publication.

The current version of this Privacy Policy is always available at https://panengg.cam/privacy-policy. The date of the most recent revision is shown at the top of this document. We encourage players to review this Policy periodically to stay informed of our data practices.

15. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or to panengg's handling of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the panengg platform. Average response time is 3–5 minutes.
• Email: [email protected] (plain text address — not a clickable link)
• Languages: Support is available in English, Bahasa Melayu, and Mandarin.

We aim to acknowledge all privacy-related requests within 5 business days and to provide a substantive response within 30 calendar days. Where a request is complex or voluminous, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.