BetPanda Privacy Policy

This Privacy Policy ("Policy") describes how BetPanda ("BetPanda", "we", "us", "our"), the operator of the online casino and sports betting platform at betpanda.cam, collects, uses, stores, shares, and protects personal data relating to registered players, prospective players, and visitors to the Platform.

This Policy applies to all personal data processed by BetPanda in connection with the operation of the Platform, including data collected through our website, live chat support, email correspondence, and any other channel through which players interact with BetPanda. It is to be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are accessible via this website.

BetPanda is committed to processing personal data in a manner that is lawful, fair, transparent, and consistent with applicable data protection legislation. By registering a BetPanda account and using our services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" — Any information relating to an identified or identifiable natural person ("data subject"), including but not limited to name, email address, device identifiers, IP address, payment information, and betting history.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, erasure, or destruction, whether by automated or manual means.
• "Data Controller" — BetPanda, in its capacity as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — Any third party engaged by BetPanda to process personal data on BetPanda's behalf, pursuant to written instructions and under appropriate contractual safeguards.
• "Consent" — Any freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data.
• "Player" — Any registered user of the BetPanda platform who has created an account and interacts with our gaming and betting services.
• "KYC Data" — Identity and age verification documents collected as part of BetPanda's Know Your Customer compliance process, including but not limited to government-issued identification and proof of address.

BetPanda collects the following categories of personal data, depending on how you interact with our Platform:

3.1 Registration Data

When you create a BetPanda account, we collect information necessary to establish and maintain your account:

3.2 KYC and Identity Verification Data

To comply with anti-money laundering (AML) regulations and age verification requirements, we collect:

• Copies of government-issued photo identification (Malaysian NRIC/MyKad, Passport, or Driver's Licence);
• Proof of address documents (e.g., utility bills, bank statements dated within three months);
• Selfie photographs taken while holding the identity document;
• Source of funds declarations where required by our compliance framework.

3.3 Financial Data

We collect data related to your deposits and withdrawals, including payment method details (e-wallet identifiers for Touch 'n Go eWallet, Boost, GrabPay; bank account references for Maybank, CIMB, Public Bank, Hong Leong; cryptocurrency wallet addresses for USDT), transaction amounts, timestamps, and payment status records. BetPanda does not store full card numbers or sensitive payment authentication credentials.

3.4 Transactional and Gaming Data

We collect a full record of your activity on the Platform, including bet history, game sessions, wager amounts, outcomes, bonus redemptions, and account balance changes. This data is essential for account integrity, dispute resolution, and regulatory reporting.

3.5 Technical Data

When you access the Platform, we automatically collect technical information including your IP address, browser type and version, operating system, device identifiers, screen resolution, time zone, and referring URL. This data helps us maintain platform security and optimise the player experience.

3.6 Communications Data

We retain records of all communications between you and BetPanda, including live chat transcripts, email correspondence, and any complaints or enquiries submitted to our support team.

BetPanda collects personal data through the following channels:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, or contacting our support team.
• Automated Collection: Technical data collected automatically when you browse or use the Platform, through cookies, log files, and similar tracking technologies (see Section 7).
• Third-Party Verification Services: Identity verification data confirmed through our KYC and AML compliance partners, who may cross-reference information you have provided against authoritative data sources.
• Payment Processors: Transaction data received from payment service providers, including Malaysian e-wallet operators and banking networks, in the course of processing your deposits and withdrawals.
• Fraud Prevention Services: Data shared with or received from fraud detection and risk management platforms to identify and prevent fraudulent activity on the Platform.

BetPanda processes personal data only where a valid legal basis exists. The following table outlines the primary purposes for which we process your data and the corresponding legal basis:

BetPanda does not sell, rent, or trade personal data with third parties for their own marketing purposes. We share personal data only where strictly necessary and only with the categories of recipients described below.

6.1 Service Providers and Data Processors

We engage third-party service providers who process data on BetPanda's behalf under written data processing agreements. These include identity verification and KYC service providers; payment processors and e-wallet operators (including providers supporting Touch 'n Go eWallet, DuitNow, FPX, and bank transfers via Maybank, CIMB, and Public Bank networks); fraud detection and risk management platforms; cloud hosting and infrastructure providers; and customer support technology providers.

6.2 Regulatory and Law Enforcement Authorities

BetPanda may be required by applicable law, regulatory obligation, court order, or lawful authority to disclose personal data to government bodies, law enforcement agencies, or regulatory authorities. We will comply with such obligations and, where legally permissible, will notify affected players of any such disclosure.

6.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of assets involving BetPanda, personal data held by BetPanda may be transferred to the successor entity as part of that transaction. Affected players will be notified in advance where feasible, and the successor entity will be required to process your data in accordance with this Policy.

BetPanda uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, and analyse usage patterns to improve the player experience.

7.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your authenticated login state and security tokens. These cannot be disabled without impacting platform functionality.
• Performance and Analytics Cookies: Used to understand how players interact with the Platform, which pages are visited most frequently, and where errors occur. This data is aggregated and does not identify individual players.
• Functionality Cookies: Remember your preferences such as language selection, display settings, and recently viewed games to provide a more personalised experience.
• Marketing and Targeting Cookies: Used only where you have provided consent. These cookies may track your browsing activity to deliver relevant promotional content.

7.2 Cookie Management

You can manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to reject cookies entirely or on a site-by-site basis. Please note that disabling certain cookies may affect the functionality of the BetPanda Platform.

BetPanda retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, whichever is longer. Our principal data retention periods are as follows:

• Active Account Data: Retained for the duration of your account's active status plus a minimum period of five (5) years following account closure, to satisfy anti-money laundering record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of submission or the date of account closure, whichever is later, in compliance with applicable AML regulations.
• Transaction Records: Retained for a minimum of five (5) years for regulatory reporting and dispute resolution purposes.
• Communications Records: Support tickets, chat transcripts, and email correspondence are retained for three (3) years from the date of the communication.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever occurs first.
• Technical Logs: Retained for twelve (12) months from the date of generation, unless required for an ongoing investigation or legal matter.

Upon expiry of the applicable retention period, personal data is either securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

BetPanda implements a multi-layered security programme to protect personal data against unauthorised access, disclosure, alteration, loss, and destruction. Our key security measures include:

• Encryption in Transit: All data transmitted between your device and BetPanda's servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at Rest: Sensitive personal data stored on our servers is encrypted using industry-standard algorithms.
• Access Controls: Access to personal data is restricted to authorised BetPanda personnel with a documented operational need, using role-based access controls and multi-factor authentication.
• Security Audits: BetPanda conducts regular internal security audits and periodic third-party penetration testing to identify and remediate vulnerabilities.
• Incident Response: We maintain a documented data breach response plan. In the event of a breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities as required by applicable law.
• Employee Training: All staff with access to personal data receive regular data protection training.

BetPanda operates as an international platform, and your personal data may be transferred to and processed in countries outside of Malaysia, including countries where data protection laws may differ from those in your home jurisdiction.

Where personal data is transferred outside Malaysia, BetPanda ensures that appropriate safeguards are in place to protect your data. These safeguards may include contractual clauses requiring the recipient to process data to the same standard as BetPanda, or reliance on the adequacy of data protection laws in the recipient country as determined by relevant regulatory authorities.

By using the BetPanda Platform, you acknowledge and consent to the international transfer of your personal data as described in this section. If you have questions about the safeguards in place for a specific transfer, please contact our privacy team as described in Section 14.

Subject to applicable law and certain limitations inherent to our regulatory obligations, you have the following rights in relation to your personal data held by BetPanda. To exercise any of these rights, please contact our privacy team as set out in Section 14.