Panglima77 Privacy Policy — Malaysia Personal Data Protection

Welcome to panglima77's Privacy Policy, operating at panglima77.best. This document outlines panglima77's commitment to protecting the personal data of all users and members on our platform in Malaysia.

Panglima77 takes member privacy very seriously. As an online entertainment platform operating in Malaysia, we are bound by and fully committed to complying with Personal Data Protection Act 2010 (PDPA) Malaysia, which is the primary legislation governing how companies collect, process, store and disclose the personal data of individuals in this country.

This Privacy Policy applies to all personal data collected by panglima77 through the panglima77.best website, mobile applications (where applicable), and all official communication channels including email, live chat, and customer support phone numbers.

By registering an account or using panglima77's services, you acknowledge that you have read and understood this Privacy Policy, and agree to the data collection and processing practices described herein. If you do not agree, please discontinue use of our platform.

Panglima77 collects personal data across several categories depending on the nature of your interaction with our platform. Below is a full breakdown of the data we collect:

2.1 Registration & Identity Data

• Full name as it appears on your official Malaysian identification document
• MyKad or passport number for age and identity verification purposes
• Date of birth to verify member eligibility (18 years and above)
• Gender
• Active email address
• An active Malaysian phone number

2.2 Financial & Payment Data

• Malaysian e-wallet account details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) used for deposits and withdrawals — account number or ID only, not passwords
• Malaysian bank account information for withdrawals via DuitNow or FPX (Maybank2u, CIMB Clicks) — account number only
• Records of all deposit and withdrawal transactions, including amount, date, time, and payment method
• Betting and gaming activity history

2.3 Technical & Usage Data

• IP address of the device used to access the platform
• Web browser type and version
• Device type (phone, tablet, computer) and operating system
• Platform activity logs, including pages visited, login times, and logout times
• General location information based on IP address (state or city — not precise GPS coordinates)

2.4 Communication Data

• Conversation content from live chat sessions with the panglima77 customer support team
• Emails sent to and from support@panglima77.best
• Complaint records and dispute resolution logs

Every piece of data collected by panglima77 is used solely for legitimate, clearly stated purposes. We do not use your data for anything beyond what is described below:

Panglima77 will not use your personal data for any purpose not stated above without first obtaining your consent. If you do not wish to receive promotional communications from us, you may unsubscribe at any time by contacting our support team or using the "unsubscribe" link in any promotional email.

Panglima77 does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. Full stop. This is a principle we do not compromise on.

However, in the course of operating the platform, panglima77 may share personal data with the following limited categories of third parties, solely to enable us to provide services to you:

• Payment processing providers: E-wallet and payment service providers we work with (such as FPX processors and payment gateway providers) receive only the information required to process your deposits and withdrawals. They do not receive any data beyond what is necessary for the transaction in question.
• Licensed game providers: Game providers such as Pragmatic Play, PG Soft, and others may receive the minimum technical data required to operate their games. They are bound by confidentiality agreements and strict security standards.
• Technology infrastructure provider: Companies providing server hosting, CDN, and cybersecurity services used by panglima77 may have technical access to data, but are bound by strict data processing agreements and are not permitted to use that data for any other purpose.
• Legal authorities: Panglima77 may disclose personal data to Malaysian authorities (police, courts, regulatory bodies) when required by law, court order, or in the course of a legitimate criminal investigation.

All third-party service providers working with panglima77 are required to sign data processing agreements ensuring they handle our members' personal data in accordance with data protection standards equal to or higher than those of panglima77 itself.

Panglima77 continuously invests in security infrastructure to ensure members' personal data is protected against both external and internal threats. The security measures we have in place include:

• Data Encryption in Transit: All communications between your browser and panglima77's servers are encrypted using TLS 1.3 protocol with 256-bit SSL certificates. This ensures that data in transit — including login credentials and transaction details — cannot be intercepted or read by any third party.
• Data Encryption at Rest: Sensitive personal data stored in panglima77's databases is encrypted using AES-256 standards. Passwords are stored as one-way hashes that cannot be decrypted.
• Internal Access Controls: Only panglima77 staff with a legitimate professional need to access specific data are permitted to do so. Access is governed by the principle of least privilege, and all access is logged and audited.
• Two-Factor Authentication (2FA): panglima77's internal systems containing user data require two-factor authentication for staff access. Members are also encouraged to enable 2FA on their accounts for added protection.
• Periodic Vulnerability Scanning: panglima77 conducts regular penetration testing and security vulnerability scanning using independent cybersecurity professionals to identify and address any weaknesses before they can be exploited.
• Tier-1 Data Centres: panglima77 data is stored in data centres with recognised physical and digital security certifications, featuring multi-layered protection including physical access controls, fire suppression systems, and automatic backup systems.

Panglima77 uses cookies and similar technologies to ensure the platform functions correctly and to enhance the user experience. Below is an overview of the types of cookies we use:

You can manage cookie settings through your web browser preferences. However, disabling essential cookies will affect the functionality of the panglima77 platform and may prevent you from logging in or using certain services.

Panglima77 retains members' personal data for as long as necessary to fulfil the stated purposes of collection, subject to applicable legal requirements. The following outlines our data retention guidelines:

• Active Account Data: Personal data of members with active accounts is retained for as long as the account remains active. "Active" means an account that has had at least one transaction within the past 24 months.
• Financial Transaction Data: Records of all financial transactions are retained for a minimum of 7 years after a transaction takes place, in line with Malaysia's financial and anti-money laundering (AML) legal requirements.
• Customer Support Communication Data: Live chat conversation records and emails are retained for 3 years for dispute resolution and service improvement purposes.
• Technical Log Data: Access logs and technical activity records are retained for 12 months for security purposes and incident investigation.
• Closed Account Data: Following account closure, data is retained for the minimum period required by law, then securely deleted or anonymised.

Once the relevant retention period has expired, personal data will be securely deleted from all panglima77 systems using methods that ensure the data cannot be recovered.

As a panglima77 member whose personal data we process, you have the following rights under Malaysia's Personal Data Protection Act 2010. We are committed to facilitating the exercise of these rights:

Panglima77 is a platform restricted to individuals aged 18 years of age and above only. We do not knowingly collect personal data from individuals under 18 years of age.

We apply multiple layers of controls to prevent registration by underage individuals:

• Date of birth verification during registration
• Age verification process via Malaysian identity documents where required
• A behavioural detection system that identifies usage patterns indicative of potential underage users

Should panglima77 discover that personal data of an underage individual has been collected — whether through inaccurate information provided during registration or by other means — we will take immediate action to:

• Suspending and closing the relevant account
• Delete all personal data belonging to such underage individuals from our systems
• Returning any remaining funds in the account in accordance with the applicable procedures

Parents or guardians who suspect their child has registered an account on panglima77 are urged to contact us immediately at support@panglima77.best for prompt action. We will prioritise and resolve such cases without delay.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how panglima77 handles your personal data, we encourage you to reach out to us directly. We are committed to addressing every enquiry seriously and within a reasonable timeframe.

If you are not satisfied with how panglima77 has handled your privacy complaint, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection, the regulatory body responsible for enforcing the PDPA 2010.

Panglima77 will periodically review and update this Privacy Policy whenever there are changes to our data practices, the technologies we use, or legal requirements. Any material changes will be communicated to members via email or a notice displayed on the platform's homepage.