Official Documents

Privacy Policy pana21 – Personal Data Protection for Malaysian Users

Pana21 is committed to protecting the privacy and security of your personal data. This policy clearly explains how we collect, use, store, and protect your information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: 1 January 2026  |  Version 2.4

Our Commitment

Six Ways pana21 Protecting Data You

Privacy is more than words on paper — it is a responsibility we take seriously every day.

256-bit SSL Encryption

All data transmitted between your device and pana21's servers is protected by bank-grade 256-bit SSL encryption. No one can intercept or read your data while in transit.

Secure Data Storage

Your personal data is stored on servers protected by strict access controls. Only authorized personnel may access your account information, and every access is carefully logged.

No Data Sales

Pana21 does not sell, rent, or disclose your personal data to any third party for marketing purposes without your explicit consent. Your data belongs to you, not to us as a business asset.

Malaysia PDPA Compliance

All data handling practices at pana21 fully comply with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA). We undergo periodic compliance reviews by independent parties.

Full User Control

You have full control over your data — including the right to access, correct, delete, or transfer it at any time via the pana21 account panel.

Data Breach Notification

In the event of any security incident involving your data, pana21 will notify you within 72 hours and take immediate remedial action in accordance with applicable legislation.


PDPA 2010 Compliance: This Privacy Policy is prepared in accordance with the provisions of Malaysia's Personal Data Protection Act 2010. pana21 is a registered data processor and bears full responsibility for all personal data collected through this platform.
1

Introduction

This Privacy Policy explains how pana21 Entertainment Limited ("pana21", "we") collects, uses, discloses, and protects your personal information when you use the pana21.app platform and all related services.

We take seriously the trust you place in us when sharing your personal information. This policy is built on the principles of transparency, user control, and robust data protection. We will not use your data in ways you would not expect or have not agreed to.

By registering an account or using pana21's services, you agree to the collection and use of data as described in this Privacy Policy. If you have any questions, our data protection team is available around the clock through our 24/7 support channels.

Policy Updates: This Privacy Policy may be updated from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes via in-platform notifications or email.

2

Personal Data We Collect

Pana21 collects various types of information to provide and improve our services. Below is a summary of the data categories we collect:

Data Categories Example Information Primary Purpose
Identity Information Full name, date of birth, identification card number, gender Identity verification (KYC) and legal compliance
Contact Information Email address, phone number, residential address Service communications and customer support
Financial Information Bank account number, e-wallet, transaction records Secure deposit and withdrawal processing
Usage Data Game history, wagering activity, login times Product improvement and fraud detection
Technical Data IP address, device type, web browser, cookies Platform security and experience optimisation
KYC Documents Copy of identification card, bank statements, utility bills Identity verification and AML compliance

We only collect data that is strictly necessary for the stated purposes. The principle of data minimization is central to how we handle your personal information.

3

How We Use Your Data

The data we collect is used for the following purposes, all with a valid legal basis under PDPA 2010:

  • Service Delivery: To provide, manage, and maintain your account and all related services on the pana21 platform.
  • Identity Verification: To comply with KYC and AML (Anti-Money Laundering) requirements mandated by regulatory authorities.
  • Financial Processing: To process deposits, withdrawals, and all financial transactions securely and accurately.
  • Fraud Prevention: To detect, investigate, and prevent any fraudulent activity, manipulation, or platform abuse.
  • Customer Support: To address enquiries, resolve complaints, and provide effective technical assistance.
  • Platform Enhancement: To analyse usage patterns and improve platform features, performance, and security.
  • Marketing Communications: To send promotional information, special offers, and updates — provided you have given consent to receive such communications.
  • Legal Compliance: To fulfil legal obligations, court orders, or directives from lawful authorities.

Your Choices: You can withdraw consent to receive marketing communications at any time via your account settings or by contacting our support team. Withdrawing marketing consent will not affect your access to pana21's core services.

4

Data Sharing and Disclosure

Pana21 does not sell your personal data. However, in certain situations, we may share data with the following parties:

  • Payment Service Providers: Banking institutions, payment processors, and e-wallet providers required to process your financial transactions. All these providers are bound by strict data protection agreements.
  • Technology Providers: Companies that provide technical infrastructure, cloud services, and cybersecurity support for pana21's platform operations.
  • Regulatory Authority: Government authorities, law enforcement agencies, or regulatory bodies when we are required to do so by law.
  • Game Partners: Third-party game providers that require limited session data to deliver games securely. No full identity information is shared.
  • Fraud Investigators: A specialized agency that helps us detect and prevent fraud or money laundering activities.

In all cases of data sharing, pana21 ensures that the receiving party upholds data protection obligations equivalent to our own standards.

5

Data Security Measures

Your data security is pana21's highest priority. We implement multiple layers of technical and organisational protection to keep your data safe at all times:

  • Transit encryption: All communications between the platform and your device use TLS 1.3 protocol with 256-bit SSL encryption.
  • Storage encryption: Sensitive data such as passwords is stored in an undecodable hashed format, while KYC documents are stored in encrypted form.
  • Two-factor authentication (2FA): Available as an additional security layer for all user accounts.
  • 24/7 Monitoring: Continuous security monitoring detects and responds to any threats in real time.
  • Regular penetration testing: Independent security audits are conducted regularly to identify and address any system vulnerabilities.
  • Internal access controls: The principle of least privilege is applied — staff can only access data that is strictly necessary for their role.

Security Certification: pana21's infrastructure has received security certification from accredited independent testing bodies. We undergo security audits twice a year to ensure our data protection standards remain current.

6

Cookies and Tracking Technologies

Pana21 uses cookies and similar tracking technologies to enhance your experience on the platform. Below are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login verification, session management, and security. These cookies cannot be disabled.
  • Performance Cookies: Collects information on how you use the platform to help us identify issues and make improvements. All data is collected anonymously.
  • Functional Cookies: Saves your preferences such as language, theme, and display settings to deliver a more personalised experience.
  • Analytics Cookies: Helps us understand overall platform usage patterns for product planning purposes. This data is not used to identify individual users.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect certain functions of the pana21 platform.

7

Your Rights Under the PDPA

As a pana21 user in Malaysia, you have the following rights under the Personal Data Protection Act 2010:

Right of Access

You have the right to request a copy of all personal data we hold about you at any time.

Right to Rectification

You can request that we correct any inaccurate or incomplete data.

Right to Erasure

You can request the deletion of your personal data, subject to legal retention obligations.

Right to Object

You can object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You can request your data in a machine-readable format for transfer to another platform.

Right to Restriction

You can request a restriction on the processing of your data in certain situations provided for by law.

To exercise any of the above rights, contact our data protection team via live chat or support email. We will process your request within 30 business days in accordance with PDPA requirements.

8

Data Retention Period

Pana21 retains your personal data only for as long as necessary to fulfil the purpose of collection or to comply with applicable legal requirements. Below are our data retention guidelines:

  • Active account data: Retained for the duration your account is active plus 7 years after closure for audit purposes.
  • Financial transaction records: Retained for a minimum of 7 years in compliance with Malaysia's financial and tax legal requirements.
  • KYC documents: Retained for the period required by applicable AML laws, typically 5 to 7 years.
  • Support communication logs: Retained for 2 years for quality control and complaint resolution purposes.
  • Analytics data: Anonymized data is retained indefinitely; identifiable data is deleted after 13 months.

Once the retention period expires, your data will be securely deleted or permanently anonymized using methods appropriate to the sensitivity of that data.

9

Child Protection

Pana21 strictly prohibits use of the platform by individuals under the age of 18. Our platform is not designed for, and we do not knowingly collect personal data from, minors or underage individuals.

We apply a strict age verification process during account registration, including KYC document checks that require official identity verification. Should we find that data has been collected from someone under the age of 18, we will immediately delete that data and close the relevant account.

If you become aware that someone under the age of 18 has registered an account on pana21, please contact us immediately so we can take the appropriate action.

10

Contact Our Data Protection Team

If you have any questions, concerns, or complaints regarding how pana21 handles your personal data, we encourage you to contact us directly.

The pana21 Data Protection Team can be reached via:

  • Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the pana21 platform.
  • Email: [email protected] — we aim to respond within 24 business hours.
  • Help Centre: Visit the FAQ for answers to frequently asked questions about privacy.

We are committed to resolving every privacy complaint fairly and transparently. If you are not satisfied with our response, you have the right to refer your complaint to Malaysia's Department of Personal Data Protection.

Quick Response: For urgent privacy enquiries, pana21's live chat is the fastest way to get a response. Our team, trained in data protection matters, is ready to assist you 24 hours a day, 7 days a week.


Your Data Is Safe With Us

Join pana21 With Confidence — Your Privacy is Fully Protected

Register a pana21 account today and enjoy a secure, trusted entertainment platform that fully complies with Malaysia's data protection laws.

Register a Free Account Login

For users aged 18 and above only. Your data is protected under PDPA 2010.

Bahasa Melayu