Panda95 Privacy Policy – Personal Data Protection for Malaysian Players

1Introduction & Scope of Privacy Policy

This Privacy Policy describes how panda95 ("we", "our platform") collects, uses, stores, protects, and discloses your personal data when you use our platform at panda95.world. It also explains your rights as a player and platform user in relation to that personal data.

This policy applies to all users of the panda95 platform, including registered players, website visitors, promotion participants, and anyone who interacts with our platform in any way. By using the panda95 platform, you agree to the data collection and usage practices described in this Privacy Policy.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at support@panda95.world. Our Bahasa Malaysia-proficient support team is ready to help you understand your privacy rights and options.

2Personal Data We Collect

Panda95 collects various categories of personal data depending on how you interact with the platform. We follow a data minimisation principle — collecting only what is strictly necessary for the stated purposes.

We do not directly collect or store your credit or debit card numbers. All payments via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX are processed by authorised third-party payment providers, and panda95 only receives transaction confirmation without access to your full payment details.

3How We Use Your Personal Data

Every piece of data collected by panda95 has a clear and legitimate purpose. We do not use your data for purposes unrelated to the provision of platform services without your consent.

• Identity & Account Verification: Identity data is used to verify that you are who you say you are, that you are aged 18 or above, and that you are eligible to use the panda95 platform under our terms.
• Financial Transaction Processing: Financial data is used to securely process deposits and withdrawals, and to verify that the payment method used belongs to you.
• Account Security & Fraud Detection: Technical and usage data is analysed by our security systems to identify suspicious activity, fraud attempts, or platform usage that violates our terms.
• Legal Compliance & KYC: Identity and financial data is used to fulfil legal compliance obligations, including KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements.
• Customer Support: Contact details and communication records are used by the panda95 support team to provide you with accurate and effective assistance.
• Responsible Gaming: Usage data and betting records are analysed to identify patterns that may indicate a gambling problem, so we can offer appropriate assistance.
• Product & Promotional Communications: With your consent, contact data is used to send you information about promotions, new offers, and platform updates that may be of interest to you. You may unsubscribe at any time.
• Platform Improvements: Aggregated usage data (with no individual identification) is used to understand how players interact with the platform and to make informed decisions on improvements.

4Legal Basis for Data Processing

Panda95 processes your personal data on the following lawful bases, in accordance with the principles of Malaysia's Personal Data Protection Act (PDPA) 2010:

• Contract Performance: Most data processing is necessary to fulfil the service contract between you and panda95 — that is, to enable you to play, make deposits, and withdraw winnings.
• Legal Obligations: Some processing is mandatory to comply with applicable laws, including KYC, AML, and tax compliance requirements.
• Legitimate Interests: Some processing is carried out on the basis of panda95's legitimate interests — such as platform security, fraud detection and service improvement — provided those interests do not override your fundamental rights.
• Consent: For certain types of processing, such as marketing communications, we rely on your explicit consent. You may withdraw that consent at any time.

If you would like to know more about the specific legal basis used for any particular data processing purpose, please contact us at support@panda95.world and we will provide a detailed explanation.

5Third-Party Data Sharing

Panda95 does not sell, lease, or trade players' personal data to third parties under any circumstances. That said, there are limited situations where sharing certain data is necessary for the platform to function properly:

• Payment Providers: Data required to process transactions is shared with authorised payment providers, including the FPX gateway, Touch 'n Go eWallet processor, GrabPay, Boost, ShopeePay, and DuitNow. Such sharing is strictly limited to the data necessary to process your transaction.
• Game Providers: Usernames and game records are shared with third-party game providers (such as Pragmatic Play, Evolution Gaming, and PG Soft) to enable you to play their games within the panda95 platform. This is technically necessary for game integration.
• Technology Service Providers: Panda95 uses certified cloud, hosting, and security service providers who may have limited access to data for purely technical purposes. All such providers are bound by strict confidentiality agreements.
• Legal Authorities: Where required by Malaysian law, panda95 may need to disclose data to the relevant authorities, such as the police, courts or financial regulatory bodies. Any such disclosure will be limited strictly to what is legally required.

6Data Security – How We Protect Your Information

Panda95 continually invests in security infrastructure to ensure that players' personal and financial data is protected to a standard comparable to leading financial institutions. Key security measures we have in place include:

• 256-bit SSL/TLS Encryption: All communication between your browser and panda95's servers is encrypted using 256-bit SSL/TLS protocol. This means the data you send — including login credentials and payment details — cannot be read by any third party attempting to intercept the communication.
• Two-Factor Authentication (2FA): Panda95 supports and encourages the use of two-factor authentication for all player accounts. With 2FA enabled, your account stays secure even if your password is compromised.
• Secure Password Storage: Player passwords are never stored in plain text. We use modern cryptographic hashing algorithms that ensure the original password cannot be recovered — even by panda95 staff.
• 24/7 Security Monitoring: Our automated monitoring system continuously watches for unusual activity on the platform, including repeated failed login attempts, suspicious betting patterns and access from unfamiliar locations.
• Regular Security Audits: Panda95 conducts regular security audits carried out by accredited independent parties to identify and address any vulnerabilities in our security infrastructure before they can be exploited.
• Internal Access Controls: Only panda95 staff who require access to specific data to perform their roles are permitted to do so. All internal access is logged and audited on a regular basis.

While we take all reasonable security measures, no system can guarantee complete protection against every cyber threat. You also play an important role in keeping your account secure — use a strong password, never share your login credentials, and contact us immediately if you suspect any unauthorised activity on your account.

7Data Retention Period

Panda95 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by applicable Malaysian law.

• Active Account: For as long as your panda95 account remains active, your personal data is retained to ensure you can use the platform without interruption.
• After Account Closure: Upon account closure, panda95 retains basic records for a minimum of 5 years to meet legal compliance obligations, including AML requirements and financial record-keeping. After this period, data is securely deleted.
• Support Communication Records: Live chat conversations and support emails are retained for 2 years for reference and quality assurance purposes.
• Technical Data & Logs: Technical access logs and diagnostic data are retained for 90 days and then automatically deleted.
• Financial Transaction Records: Deposit and withdrawal records are retained for a minimum of 7 years in line with standard financial record-keeping requirements, after which they are deleted or anonymized.

8Your Personal Data Rights

As a panda95 player and platform user in Malaysia, you have the following rights regarding your personal data, which you may exercise at any time by contacting our support team:

To exercise any of the rights above, please contact the panda95 support team via 24/7 live chat or by email at support@panda95.world. We will respond within 3 business days and resolve your request within a reasonable timeframe.

9Cookie Policy

The panda95 platform uses cookies — small text files stored on your device — to ensure the platform functions correctly, enhance the user experience and help us understand how the platform is used. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for the platform to function. They store your login session, language preferences, and other basic settings. Without them, you will not be able to log in or use the platform properly. These cookies cannot be disabled.
• Performance Cookies: These cookies collect anonymous information about how visitors use the platform — which pages are visited most often, any error messages encountered, and how long users spend on particular pages. This data helps us improve platform performance.
• Functional Cookies: These cookies allow the platform to remember your preferences — such as your username (not your password), favourite game types and display settings — giving you a more personalised experience.
• Security Cookies: These cookies help panda95's security systems recognise your device as a legitimate, known device, reducing the risk of unauthorised access to your account.

Panda95 does not use third-party cookies for targeted advertising or to collect data for sale to other parties. You may manage cookie settings through your browser, however, disabling essential cookies may affect platform functionality.

10Cross-Border Data Transfers

In operating the panda95 platform, certain data may need to be transferred to or accessed from locations outside Malaysia — for example, when we use international cloud service providers or when you play games hosted by international providers.

When personal data of Malaysian players is transferred overseas, panda95 ensures that a level of protection equivalent to that under Malaysian law is applied through the following measures:

• Binding data processing agreements with all international service providers, requiring them to uphold data protection standards equivalent to our own.
• Use of cloud service providers certified to internationally recognised security standards.
• Data transfers are limited to what is strictly necessary for service delivery — no unnecessary data transfers take place.

If you would like to know more about cross-border data transfers involving your personal data, please contact us and we will provide further details on the safeguards in place.

11Child Protection

The panda95 platform is intended exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. If you are a parent or guardian who believes your child has provided personal data to panda95 without your consent, please contact us immediately at support@panda95.world.

Upon receiving such a complaint, we will conduct a thorough investigation and, if substantiated, promptly delete all relevant data and close the account in question. panda95 performs age verification at registration and again during the first withdrawal as a preventive measure.

12Privacy Policy Amendments

Panda95 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, applicable laws, or how the platform operates. All amendments will be published on this page with the latest update date indicated at the top of the document.

For material amendments — that is, changes that significantly affect how your data is used or your rights — panda95 will provide notice via email or in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the changes and decide whether you wish to continue using the platform.

Your continued use of the panda95 platform after any policy amendment takes effect will be considered your acceptance of the revised terms. If you do not agree with the changes, you have the right to close your account before they take effect and withdraw your existing balance.

If you have any questions about this Privacy Policy or how we handle your personal data, please do not hesitate to reach out. We are committed to being transparent about our privacy practices and are always ready to address any concerns you may have.