Pantaislot Privacy Policy — Personal Data Protection Commitment for Malaysian Members

1. Introduction & Purpose of This Policy

This Privacy Policy ("Policy") describes how Pantaislot ("we", "the platform") collects, processes, stores, and protects your personal data when you use the pantaislot.onl website and all related services. This Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data security industry best practices.

By registering as a pantaislot member or by continuing to use this platform, you consent to the processing of your personal data as described in this Policy. If you do not agree with the terms stated, please stop using the platform and contact us to close your account.

Pantaislot acts as the "Data Controller" under this Policy — meaning we determine the purposes and means by which your personal data is processed. Any third-party service providers we engage act as "Data Processors" and are bound by strict data processing agreements.

2. Personal Data We Collect

Pantaislot collects your personal data in several different situations as you interact with our platform. Below are the categories of data we collect and their sources:

Data You Provide Directly:

• Full name, email address, phone number, and date of birth provided during account registration.
• MyKad or passport number where identity verification (KYC) is required.
• Bank account details or digital wallet information (FPX, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow) for deposit and withdrawal purposes.
• Correspondence with our customer support team via Live Chat or email.
• Feedback, comments, and survey responses that you voluntarily provide.

Automatically Collected Data:

• IP address, device type, operating system, and web browser used to access pantaislot.
• A record of all gaming activity — including games played, bet amounts, winnings, and session duration.
• A record of all financial transactions — deposits, withdrawals, bonuses received, and loyalty points exchange history.
• Approximate geolocation data (city/state level) derived from your IP address, used to verify regional eligibility.
• Login timestamps, failed login attempts, and account settings changes.

*Shared only when required by law, payment verification processes, or instructions from a legitimate authority.

3. How Pantaislot Uses Your Data

Every piece of data we collect has a clear and legitimate purpose. Pantaislot uses your personal data solely for the following:

• Service Provision: To verify your identity, process account registration, manage deposits and withdrawals, and enable you to enjoy all games available on pantaislot.
• Verification & KYC: To verify that you meet the age eligibility requirement (18 years and above) and to comply with anti-money laundering (AML) obligations as required by law.
• Account Security: To detect and prevent unauthorized access attempts, fraud, multi-account usage, and other unlawful activities that could compromise your account or our platform.
• Customer Support: To enable the pantaislot support team to assist you in resolving technical issues, account enquiries, or complaints more efficiently and effectively.
• Platform Improvements: To analyze usage patterns in aggregate (without identifying individuals) in order to improve the performance, design, and user experience of the pantaislot platform over time.
• Responsible Gambling: To monitor gameplay activity patterns that may indicate signs of problem gambling, and to enforce the self-limits you have set in your account settings.
• Service Communications: To send you important account-related notifications — such as deposit confirmations, successful withdrawals, security changes, or significant updates to the terms of service.
• Marketing (with consent only): To send you information about pantaislot promotions, bonuses, new games, and exclusive offers — only where you have given explicit consent, and you may unsubscribe at any time.

Pantaislot will not use your data for any purpose not stated above without first obtaining your fresh consent. If the purpose of processing changes materially, we will notify you and seek renewed consent where required.

4. Sharing Data with Third Parties

Pantaislot does not sell your personal data to any party. However, in certain situations, we may need to share some of your data with the following parties to enable our services to function properly:

• Payment Service Providers: Data required to process your financial transactions (deposits via FPX, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow) is shared with the respective payment providers solely for the purpose of processing those transactions.
• Game Providers: Required game session data is shared with game studios such as Pragmatic Play, PG Soft, and Evolution Gaming to enable gameplay. These providers are bound by strict confidentiality agreements with pantaislot.
• Legal Authority: Pantaislot is legally required to disclose personal data to competent authorities — such as the Royal Malaysia Police or the Inland Revenue Board — when required by a court order or valid legal process.
• Identity Verification Provider: For the KYC process, your identity information may be verified through recognised third-party identity verification services — subject to strict data protection agreements.
• Technical Infrastructure Providers: Cloud computing service providers that host the pantaislot platform may have technical access to stored data — but are bound by data processing agreements that prohibit them from using that data for their own purposes.

5. Data Security & Protection Measures

Pantaislot continually invests in security infrastructure to ensure that member personal data remains protected at all times against unauthorized access, loss, or leakage. Key security measures we have implemented include:

• Data in transit is encrypted using TLS 1.3 and 256-bit SSL protocols for all communications between your browser and pantaislot servers.
• Data at rest is encrypted — all sensitive data such as passwords (stored as hashes) and financial information is held in encrypted form on our servers.
• Role-based access control (RBAC) ensuring that only pantaislot staff with a legitimate operational need can access specific data.
• Round-the-clock real-time security monitoring, 24 hours a day, by automated threat detection systems and our cybersecurity team.
• Regular penetration testing by independent security firms to identify and address any vulnerabilities before they can be exploited.
• Two-factor authentication (2FA) is available for all pantaislot member accounts — we encourage you to enable it in your account settings.

While we take all reasonable steps to protect your data, no security system can guarantee 100% protection against all cyber threats. In the event of a security incident involving your data, pantaislot will take immediate action and notify you within 72 hours as committed.

6. Cookies, Analytics & Tracking Technologies

Pantaislot uses cookies and similar tracking technologies to enhance the user experience, understand how the platform is used, and maintain the security of your session. By using the pantaislot platform, you consent to the use of cookies as described below.

• Essential Cookies: These cookies are essential for the pantaislot platform to function — including session cookies to keep you logged in, security cookies to prevent cross-site request forgery (CSRF), and language preference cookies. They cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: We use analytics data collected in aggregate and in non-identifiable form to understand which pages are visited most frequently, how long users spend on particular games, and general navigation patterns. This data helps us improve the design and performance of the pantaislot platform.
• Preference Cookies: These cookies store your preferences — such as display language and interface settings — so you don't have to reconfigure them each time you access pantaislot.
• Security Cookies: Used to detect suspicious login attempts, identify new devices accessing your account, and protect against brute force attacks.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality of the pantaislot platform. For more details on the cookies we use and how to manage them, please contact our support team.

7. Data Retention & Deletion

Pantaislot does not retain your personal data longer than necessary for the purposes stated in this Policy, or as required by applicable law. The general principles we follow are as follows:

• Active account data is retained for the duration of your pantaislot membership and updated whenever you provide new information.
• Financial transaction records and KYC data are retained for seven (7) years from the date of the transaction or account closure — in line with Malaysia's anti-money laundering and tax reporting legal requirements.
• Game activity records and system logs are retained for three (3) years for dispute resolution and audit purposes.
• Customer support correspondence is retained for two (2) years so we can refer to historical context when assisting you.
• Data collected with your consent for marketing purposes will be deleted immediately upon withdrawal of that consent.

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to your identity. The deletion process uses methods that ensure data cannot be recovered.

8. Your Rights as a User

As a pantaislot member who has entrusted us with your personal data, you have the following rights under Malaysia's Personal Data Protection Act 2010 and our policies:

To exercise any of the rights above, please contact the pantaislot Data Protection Officer by email at support@pantaislot.onl with the subject line "Privacy Rights Request", or via our 24/7 Live Chat. Please include your account information to speed up the verification process. We may need to verify your identity before processing your request in order to protect your privacy.

9. Children's Data & Minor User Protection

Pantaislot is an adult entertainment platform intended exclusively for users aged 18 and above. We do not knowingly collect any personal data from individuals under the age of 18.

• All pantaislot registration processes require verification that the applicant is 18 years of age or older.
• If we discover that personal data belonging to an individual under the legal age has been collected inadvertently, we will delete that data immediately and close the account in question.
• Parents and guardians who become aware that their child has registered on pantaislot without authorization are requested to contact us immediately at support@pantaislot.onl so that immediate action can be taken.

10. Amendments to This Privacy Policy

Pantaislot reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we protect your data. We are committed to being fully transparent about any such changes.

• Any material changes to the way we collect or use your personal data will be communicated to your registered email address at least 14 days before the changes take effect.
• Minor changes that do not materially affect your privacy rights will be updated on this page with a clear revision date.
• The latest version of the pantaislot Privacy Policy is always available on this page. We encourage you to review it periodically.
• Continued use of the pantaislot platform after changes take effect will be considered acceptance of the amended Policy, except for changes that require fresh explicit consent.

11. Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding how pantaislot handles your personal data, you may contact our Data Protection Officer (DPO) through the following channels:

• Email: support@pantaislot.onl — use the subject line "Privacy Complaint" or "Data Request" to be prioritised.
• Live Chat: Available 24/7 directly within the pantaislot platform — the fastest option for quick enquiries.
• FAQ: Many privacy-related questions have been answered in the Frequently Asked Questions us.

We are committed to responding to all privacy-related enquiries within three (3) business days and resolving formal complaints within thirty (30) business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

Pantaislot values your trust and is committed to protecting your privacy at all times. Thank you for taking the time to read and understand our Privacy Policy.