panda99 is committed to protecting your personal data. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used, and the rights you hold over your data.
This Privacy Policy (hereinafter "Policy") is issued by panda99, the operator of the online casino and sports betting platform accessible at https://panda99.casa (hereinafter "the Platform", "We", "Us", or "Our"). This Policy applies to all users and registered players (hereinafter "You", "User", or "Data Subject") of the panda99 Platform.
panda99 takes data privacy seriously. We are committed to handling your personal information responsibly, transparently, and in accordance with internationally recognised data protection principles. This Policy describes in plain language what personal data we collect when you use the Platform, how that data is processed, who it may be shared with, how long it is retained, and what rights you have in relation to your data.
panda99 supports MYR-denominated transactions and serves players across Malaysia, including those in Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and other cities. Malaysian users are encouraged to read this Policy in full alongside our Terms & Conditions before registering an account.
Acceptance: By registering an account on panda99 or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree, please discontinue use of the Platform immediately.
The following terms carry the meanings defined below throughout this Policy:
| Term | Definition |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, location data, payment information, and online identifiers. |
| Processing | Any operation performed on personal data, including collection, storage, use, disclosure, transmission, deletion, or any combination thereof. |
| Data Controller | panda99, the entity that determines the purposes and means of processing personal data collected through the Platform. |
| Data Processor | Any third-party service provider that processes personal data on behalf of panda99, subject to contractual data protection obligations. |
| Data Subject | The individual to whom the personal data relates — in the context of this Policy, the registered Player or Platform visitor. |
| KYC | Know Your Customer — identity, age, and document verification process required for account activation and withdrawal eligibility. |
| Cookies | Small text files stored on your device by the Platform for the purpose of session management, analytics, and user experience personalisation. |
| Consent | Freely given, specific, informed, and unambiguous agreement by a Data Subject to the processing of their personal data for a stated purpose. |
panda99 collects personal data from you in the following ways: (a) information you provide directly when registering or using the Platform; (b) information generated automatically through your use of the Platform; and (c) information obtained from third-party verification or payment service providers where necessary.
3.1 Registration and Account Data
3.2 Identity Verification (KYC) Data
3.3 Financial and Transaction Data
3.4 Gaming and Betting Activity Data
3.5 Technical and Usage Data
Data Minimisation: panda99 adheres to the principle of data minimisation — we collect only the personal data that is strictly necessary for the purposes described in this Policy. We do not collect sensitive personal data categories (such as racial or ethnic origin, political opinions, or health data) unless specifically required by regulatory obligation.
panda99 processes your personal data for the following specific purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and administering your panda99 player account, including login authentication, account settings, and profile management. |
| KYC Verification | Verifying your identity, age (21+ requirement), and payment method ownership as part of our mandatory Know Your Customer process and AML compliance obligations. |
| Payment Processing | Processing MYR deposits and withdrawals through supported Malaysian payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency. |
| Platform Delivery | Providing access to casino games, live dealer tables, and sports betting markets including EPL, Liga Super Malaysia, and UFC events. |
| Fraud Prevention & Security | Detecting and preventing fraudulent transactions, unauthorised account access, money laundering, and other prohibited activities. |
| Customer Support | Responding to support queries, complaints, and account-related requests submitted via live chat or email. |
| Legal Compliance | Meeting obligations under applicable international licensing requirements, AML regulations, and data protection frameworks. |
| Platform Improvement | Analysing aggregated, anonymised usage data to improve Platform performance, user experience, and service quality. |
| Responsible Gambling | Monitoring gaming behaviour patterns to identify potential problem gambling indicators and deliver responsible gambling interventions where appropriate. |
| Marketing Communications | Sending promotional offers, bonus notifications, and Platform updates where you have given explicit consent to receive such communications. You may opt out at any time. |
panda99 processes personal data on one or more of the following lawful bases, consistent with internationally recognised data protection principles:
Withdrawal of Consent: Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent for marketing communications will not affect your ability to continue using the Platform. To withdraw consent, contact us at [email protected].
panda99 does not sell your personal data to any third party. We may share your data with carefully selected third-party service providers acting as Data Processors, strictly on a need-to-know basis and subject to contractual data protection obligations. Categories of recipients are as follows:
All third-party Data Processors engaged by panda99 are contractually bound to process your personal data solely for the stated purpose, to maintain adequate security standards, and not to retain, use, or disclose data beyond the scope of the services they provide to panda99.
panda99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following indicative retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account Registration Data | Duration of account plus 5 years from account closure, or as required by licensing obligations. |
| KYC Identity Documents | 5 years from the date of collection, or longer if required by applicable AML regulations. |
| Transaction Records (deposits, withdrawals) | 7 years from the date of each transaction, in accordance with standard financial record-keeping requirements. |
| Gaming and Betting Activity Logs | 3 years from the date of activity, or longer where relevant to an ongoing dispute or investigation. |
| Customer Support Communications | 3 years from the date of the last interaction. |
| Technical and Usage Logs | 12 months on a rolling basis, unless required for longer retention in connection with a security incident or dispute. |
| Marketing Consent Records | Until consent is withdrawn, plus 2 years thereafter for compliance audit purposes. |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.
panda99 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our principal security measures include:
Your Responsibility: While panda99 implements robust security measures, you are also responsible for maintaining the confidentiality of your account credentials. Do not share your password with anyone. If you suspect unauthorised access to your account, contact our support team at [email protected] immediately.
panda99 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device that helps us recognise returning users, maintain your session state, and gather anonymised analytics data.
9.1 Types of Cookies We Use
| Cookie Type | Purpose |
|---|---|
| Essential Cookies | Required for the Platform to function. These maintain your login session, store language preferences, and enable core gaming features. These cannot be disabled without disrupting Platform functionality. |
| Analytics Cookies | Used to collect anonymised data about how users navigate the Platform — including page views, session duration, and feature usage. This data helps us improve Platform design and performance. |
| Functional Cookies | Remember preferences such as your chosen currency (MYR), game display settings, and notification preferences to deliver a more personalised experience. |
| Security Cookies | Assist in fraud detection and authentication security by tracking login patterns and flagging anomalous session behaviour. |
You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will impair Platform functionality. Analytics and functional cookies may be disabled without affecting core Platform access.
As a Data Subject, you hold the following rights in relation to the personal data panda99 holds about you. To exercise any of these rights, please contact us at [email protected]. We will respond to verified requests within a reasonable timeframe, typically within 30 days.
You have the right to request a copy of the personal data panda99 holds about you, together with information about how it is processed.
You have the right to request correction of any personal data we hold that is inaccurate, incomplete, or out of date.
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while a dispute about data accuracy is being resolved.
You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request its transfer to another controller where technically feasible.
You have the right to object to processing of your personal data based on legitimate interests, including direct marketing and profiling activities.
Note: Certain data rights may be limited where processing is required for compliance with legal obligations — for example, we are required to retain KYC and transaction records for specified periods under our licensing and AML obligations. We will inform you of any such limitation when responding to your request.
The panda99 Platform is strictly intended for individuals who are at least 21 years of age. We do not knowingly collect personal data from persons under the age of 21. Registration by minors is prohibited, and all account registration attempts are subject to age verification through our KYC process.
If panda99 becomes aware that personal data has been collected from an individual under 21, we will immediately suspend the account, delete the associated personal data (subject to any legal retention obligations related to the breach), and take appropriate action in accordance with our Responsible Gambling Policy.
Underage Access: If you are a parent or guardian and believe that a minor has registered an account on panda99 or submitted personal data without your consent, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay.
panda99 operates under international online gaming licensing and may utilise cloud infrastructure, payment processors, and technology providers located in jurisdictions outside Malaysia. Personal data may therefore be transferred to, stored, and processed in countries outside Malaysia.
Where such transfers occur, panda99 takes appropriate measures to ensure that your personal data receives adequate protection consistent with internationally recognised standards. This includes entering into contractual data protection agreements with service providers that impose equivalent data protection obligations.
Players based in Malaysia should note that Malaysia's Personal Data Protection Act 2010 (PDPA) may apply to certain aspects of our data processing activities involving Malaysian residents. panda99 respects the principles of the Malaysian PDPA — including lawful processing, consent, data integrity, and security — to the extent applicable to our operations.
panda99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. The most current version of this Policy will be published on this page with an updated effective date at the top of the document.
Where a proposed amendment materially affects your rights or the nature of processing in a way that requires fresh consent, we will provide advance notice via the Platform or by email to your registered address, where reasonably practicable. Your continued use of the Platform following publication of a revised Policy constitutes acceptance of the updated terms.
We encourage you to review this Policy periodically. If you have concerns about any amendment, please contact our support team before continuing to use the Platform.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by panda99, please contact our support team using the details below:
Data Protection Enquiries: [email protected]
Please include "Privacy Request" in your subject line and clearly state the nature of your enquiry (e.g., access request, deletion request, consent withdrawal). Our team responds to all data-related enquiries within 30 days.
For general support or account queries, our Live Chat is available 24 hours a day, 7 days a week. Our team is familiar with Malaysian banking procedures, MYR transaction handling, and local player concerns.
Six privacy commitments that panda99 upholds for every Malaysian player on the Platform.
panda99 does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes — ever. Your information is used solely to operate and improve your experience on the Platform.
All data in transit between your device and panda99 servers is protected by 256-bit SSL encryption. Your personal details, payment data, and session information cannot be intercepted during transmission.
You have the right to access, correct, delete, and port your data. You can withdraw marketing consent at any time. Our team responds to all verified data requests within 30 days.
Personal data collected by panda99 is processed only for the specific purposes stated in this Policy. We do not repurpose your data for unrelated activities or share it with partners for their independent marketing use.
We retain your data only for as long as legally required or operationally necessary — then it is securely deleted or anonymised. Transaction records are retained for 7 years; usage logs roll over at 12 months.
All third-party service providers — including Malaysian payment gateways like Touch 'n Go eWallet, Boost, DuitNow, and FPX operators — are bound by contractual data protection obligations before receiving any player data.
Our support team is available 24/7 and handles data enquiries from Malaysian players across KL, Penang, JB, and beyond. We respond to all privacy requests within 30 days. For players aged 21 and above only.
Privacy enquiries: [email protected] · Live Chat 24/7 · 🇲🇾 Serving KL · Penang · JB · PJ · Shah Alam