panda95 Privacy Policy 🔒🛡️

This Privacy Policy ("Policy") is issued by panda95 ("the Platform", "we", "us", "our") and applies to all personal data processed in connection with your use of the panda95 website at panda95.one and all associated gaming services (collectively, "the Services"). panda95 is committed to protecting the privacy and personal data of its Members in accordance with applicable data protection law and international best practice.

This Policy should be read alongside the panda95 Terms & Conditions, which govern your use of the Services. Capitalised terms used but not defined in this Policy have the meaning given to them in the Terms & Conditions.

By registering a panda95 account or using our Services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

panda95 acts as the data controller in respect of personal data collected from Members and visitors to the platform. As data controller, panda95 determines the purposes and means by which your personal data is processed. Where panda95 engages third-party service providers to process data on its behalf, those parties act as data processors and are bound by contractual obligations to process data only on panda95's instructions and in compliance with applicable data protection law.

For all data protection enquiries, you may contact the panda95 data protection team at the email address listed in the footer of this website.

3.1 Registration Data. When you open a panda95 account, we collect: your full legal name; date of birth; residential address; email address; mobile phone number; and your chosen username. This information is required to create and maintain your account.

3.2 Identity Verification Data (KYC). To comply with anti-money laundering (AML) and age verification obligations, panda95 may collect copies of government-issued identification documents (such as a MyKad, passport, or driver's licence), proof of residential address (such as a utility bill or bank statement), and proof of payment method ownership.

3.3 Financial Data. We collect information about deposits and withdrawals transacted through your panda95 account, including payment method type, transaction amounts, and — where applicable to fraud prevention — partial payment account identifiers. panda95 does not store full credit or debit card numbers.

3.4 Gameplay and Transaction Data. We maintain records of your gaming activity on panda95, including games played, bets placed, outcomes, bonus usage, and account balance history. This data is required for dispute resolution, regulatory reporting, and responsible gaming monitoring.

3.5 Technical and Device Data. We automatically collect certain technical data when you access panda95, including your IP address, device type and operating system, browser type and version, session timestamps, and referral URL. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

3.6 Communication Data. If you contact panda95 support, we retain records of those communications — including live chat transcripts, email correspondence, and call recordings where applicable — for quality assurance, training, and dispute resolution purposes.

3.7 Marketing Preferences. If you opt in to marketing communications, we hold a record of your preferences and the communications you have received from panda95. You may withdraw marketing consent at any time from your account settings.

Directly from you: The majority of personal data we hold is provided by you when you register, complete KYC, make transactions, contact support, or update your account profile.

Automatically: Technical and device data is collected automatically via server logs, cookies, and similar technologies when you visit or interact with the panda95 platform.

From third parties: In limited circumstances, panda95 may receive data from third-party KYC verification providers, payment processors, fraud prevention services, and — where you have given consent — social login providers. All third-party data sources used by panda95 operate under their own privacy policies and are contractually bound to share data with panda95 only for lawful purposes.

panda95 processes your personal data for the following purposes:

(a) Account Management: To create, maintain, and administer your panda95 account, including processing deposits and withdrawals and managing your gaming wallet balance.

(b) Service Delivery: To provide access to the games, sportsbook, and other features available on the panda95 platform.

(c) Identity Verification and Compliance: To verify your identity, confirm you meet the minimum age requirement of 21 years, and comply with AML, KYC, and other regulatory obligations applicable to panda95's operations.

(d) Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, and other unlawful activity on the platform.

(e) Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling and to apply player protection tools including deposit limits and self-exclusion where appropriate or requested.

(f) Customer Support: To respond to your enquiries, resolve disputes, and provide assistance with your panda95 account.

(g) Marketing (with consent): To send you information about panda95 promotions, new games, and platform updates where you have consented to receive such communications.

(h) Platform Improvement: To analyse aggregate usage patterns and improve the performance, design, and content of the panda95 platform.

(i) Legal Compliance: To comply with any legal obligation to which panda95 is subject, including responding to lawful requests from regulatory authorities.

panda95 processes your personal data on the following legal bases:

Contractual necessity: Processing required to fulfil the contract between you and panda95 — including account management, transaction processing, and service delivery.

Legal obligation: Processing required to comply with applicable law — including AML/KYC verification, regulatory reporting, and data retention obligations.

Legitimate interests: Processing carried out for the legitimate business interests of panda95 where those interests are not overridden by your rights and interests — including fraud prevention, security monitoring, and platform analytics.

Consent: Processing carried out on the basis of your freely given, specific, and informed consent — including marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

panda95 does not sell your personal data. We may share your data with the following categories of third parties, strictly to the extent necessary and subject to appropriate data protection agreements:

(a) Game Providers: To facilitate gameplay, limited session and account data is shared with certified game providers whose titles are hosted on the panda95 platform.

(b) Payment Processors: To process deposits and withdrawals, necessary financial data is shared with your chosen payment provider (e.g., Touch 'n Go eWallet, DuitNow, FPX, and internet banking gateways).

(c) KYC and Fraud Prevention Services: Identity verification and anti-fraud service providers may receive identification data for the purpose of verifying your identity and detecting suspicious activity.

(d) Regulatory and Law Enforcement Authorities: Where required by applicable law or a lawful order, panda95 may disclose Member data to regulatory bodies, law enforcement agencies, or courts. panda95 will notify affected Members of such disclosures to the extent permitted by law.

(e) Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of panda95's business, Member data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

panda95 operates as an international online gaming platform. Consequently, your personal data may be transferred to and processed in countries outside of Malaysia, including countries whose data protection laws may differ from those applicable in Malaysia. Where such transfers occur, panda95 implements appropriate safeguards — including standard contractual clauses or equivalent protective mechanisms — to ensure that your data is protected to a standard consistent with this Policy. By using panda95 Services, you consent to such international transfers subject to these safeguards being in place.

panda95 retains personal data for as long as your account remains active and for a minimum period thereafter as required by applicable law and regulatory obligations — typically a minimum of 5 years following account closure for financial and KYC records, consistent with anti-money laundering record-keeping requirements. Gameplay and transaction records are retained for the same minimum period for dispute resolution and audit purposes.

Where data is no longer required for the purpose for which it was collected and there is no legal obligation requiring its continued retention, panda95 will securely delete or anonymise that data. You may request earlier deletion of non-legally-required data by contacting the support team, subject to panda95's ability to comply with any outstanding legal or contractual obligations.

10.1 Types of Cookies Used. panda95 uses the following categories of cookies: Essential cookies — required for the platform to function correctly, including session management and security tokens; Performance cookies — used to collect anonymised data on how users interact with the platform to improve page load times and navigation; Analytics cookies — used to understand aggregate traffic patterns and user behaviour on the platform.

10.2 No Third-Party Advertising Cookies. panda95 does not place third-party advertising cookies or tracking pixels that allow external parties to build profiles of your browsing behaviour across the internet.

10.3 Managing Cookies. Most web browsers allow you to control cookie behaviour through their settings. You may configure your browser to refuse cookies, delete existing cookies, or alert you when cookies are being set. Note that disabling essential cookies will impair your ability to use panda95 Services, including the ability to log in to your account.

Subject to applicable data protection law, you have the following rights in relation to your personal data held by panda95:

Right of Access: You may request a copy of the personal data panda95 holds about you.
Right to Rectification: You may request correction of inaccurate or incomplete personal data.
Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and no legal obligation requires its retention.
Right to Restriction: You may request that panda95 restrict the processing of your data in certain circumstances.
Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.
Right to Data Portability: You may request a copy of data you provided to panda95 in a structured, machine-readable format.

To exercise any of the above rights, contact the panda95 support team. panda95 will respond to all verified rights requests within 30 days. Identity verification may be required before a request is processed.

panda95 strictly prohibits the use of its Services by individuals under the age of 21. panda95 does not knowingly collect personal data from individuals under 21 years of age. Where panda95 becomes aware that personal data has been collected from an underage individual, that data will be immediately deleted and the associated account closed. If you have reason to believe that an underage individual has registered on panda95, please contact support immediately.

panda95 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include: 256-bit TLS encryption for all data in transit; AES-256 encryption for sensitive data stored at rest; role-based access controls limiting internal access to personal data on a need-to-know basis; regular security audits and penetration testing; two-factor authentication for administrative access to production systems; and automated anomaly detection for suspicious account activity.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, panda95 will notify affected Members without undue delay in accordance with applicable data protection law.

The panda95 platform may contain links to third-party websites or services, including game providers' information pages. panda95 is not responsible for the privacy practices of any third-party website. This Privacy Policy applies solely to data processed by panda95 in connection with your use of panda95 Services. We encourage you to review the privacy policies of any third-party sites you visit.

panda95 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, panda95 will provide at least 14 days' advance notice to registered Members via email and/or a prominent notice on the platform. The effective date of the current version of this Policy is displayed at the top of this page. Your continued use of panda95 Services after a Policy update constitutes acceptance of the revised terms. If you do not agree with an updated Policy, you must cease using panda95 Services and may request account closure.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by panda95, please contact our data protection team through the live chat facility available on the platform, or via email at the address displayed in the footer of this website. panda95 will respond to all data protection enquiries within 10 business days. For urgent account security concerns, please use live chat for the fastest response — available 24/7.

Policy Effective Date: June 2026. This Policy supersedes all prior versions.