Privacy Policy — Panglima77
This Privacy Policy explains how Panglima77 collects, uses, stores, and protects the personal data of users who access our platform at panglima77.cam. We are committed to handling your information with transparency, integrity, and full respect for your privacy rights.
1 Introduction
Panglima77 ("we", "us", "our", or the "Company") operates the online gaming platform accessible at panglima77.cam (the "Platform"). In the course of providing our services to registered users — including sports betting, live casino, slots, esports wagering, and related account and payment services — we necessarily collect and process personal data relating to our users and website visitors.
This Privacy Policy (the "Policy") has been prepared to inform you clearly and fully about: what personal data Panglima77 collects from you; the purposes for which we process that data; the legal basis on which we rely to process it; how long we retain it; the circumstances in which we may share it with third parties; the security measures we apply to protect it; and your rights as a data subject in relation to your personal information.
This Policy applies to all individuals who access the Platform, including registered account holders and unregistered visitors browsing panglima77.cam. It applies equally to users accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations.
By creating an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions, which govern the overall legal relationship between you and Panglima77.
Our Core Commitment: Panglima77 does not sell, rent, or trade your personal data to third-party marketers. Your information is used exclusively to deliver, improve, and secure our services and to meet our legal and regulatory obligations.
2 Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings assigned to them below:
- "Personal Data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, or online identifier.
- "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, and erasure.
- "Data Controller" means Panglima77, the entity that determines the purposes and means of processing your personal data.
- "Data Processor" means any third-party service provider that processes personal data on Panglima77's behalf and in accordance with Panglima77's instructions.
- "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for specified purposes.
- "User" / "Account Holder" means any individual who has registered an account on the Panglima77 Platform.
- "KYC Data" means identity verification documents and information collected in the course of Know Your Customer (KYC) procedures, including government-issued identification documents, proof of address, and source of funds declarations.
- "Cookies" means small text files stored on a user's device by a web browser, used to retain session information, preferences, and tracking identifiers.
3 Data We Collect
Panglima77 collects personal data across several categories, depending on the nature of your interaction with the Platform:
3.1 Registration Data
When you create an account on Panglima77, we collect the information you provide during the registration process, including: full legal name, date of birth, residential address, nationality, email address, and telephone number. This information is necessary to establish your identity and to verify your eligibility to use the Platform.
3.2 Identity Verification (KYC) Data
In compliance with our anti-money laundering (AML) obligations and licensing requirements, we collect identity verification documents. These may include a copy of your Malaysian Identity Card (MyKad) or passport, proof of residential address (such as a utility bill or bank statement), and proof of payment method ownership. We may also request source of funds declarations in certain circumstances.
3.3 Financial Transaction Data
We collect records of all financial transactions conducted through your account, including deposit amounts, payment methods used (e.g., DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank), withdrawal requests, transaction timestamps, and transaction reference numbers. We do not store full card numbers or full bank account numbers — these are handled by our PCI-DSS compliant payment partners.
3.4 Gaming Activity Data
We maintain records of your gaming activity on the Platform, including games played, wagers placed, outcomes, session durations, bonus usage, and betting history. This data is used for regulatory compliance, fraud detection, responsible gambling monitoring, and to personalise your gaming experience.
3.5 Technical & Device Data
When you access the Platform, we automatically collect technical information including your IP address, browser type and version, operating system, device identifiers, screen resolution, referring URLs, and page interaction data. This data is used for security, fraud prevention, and platform optimisation purposes.
3.6 Communications Data
We retain records of communications between you and Panglima77, including live chat transcripts, email correspondence, and support ticket histories. These records are maintained for quality assurance, dispute resolution, and regulatory audit purposes.
4 How We Collect Your Data
Panglima77 collects personal data through the following means:
| Collection Method | Data Collected |
|---|---|
| Account Registration | Name, date of birth, address, email, phone number, nationality |
| KYC Verification Submission | Identity documents, proof of address, payment method proof |
| Deposit & Withdrawal Transactions | Transaction amounts, payment method references, timestamps |
| Platform Usage (automatic) | IP address, device data, session data, browsing behaviour |
| Cookies & Tracking Technologies | Session identifiers, preference settings, analytics data |
| Customer Support Interactions | Live chat transcripts, email records, support ticket content |
| Third-Party Sources | Identity verification results from KYC service providers; fraud screening results from AML partners |
5 Data Processing Purposes
Panglima77 processes your personal data for the following clearly defined purposes:
- Account Administration: To create, maintain, and manage your Panglima77 account, including authentication, password resets, and account preferences.
- Service Delivery: To provide you with access to the gaming products, payment processing, bonus management, and customer support services available on the Platform.
- Identity Verification & KYC Compliance: To verify your identity and age (minimum 21 years) as required by our licensing obligations and applicable anti-money laundering regulations.
- Financial Transactions: To process deposits, withdrawals, and refunds in MYR via your selected payment method (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, bank transfer, or cryptocurrency).
- Regulatory Compliance & AML: To monitor transactions and gaming activity for suspicious patterns consistent with money laundering or fraud, and to file statutory reports to the relevant authorities where required by law.
- Responsible Gambling: To monitor gaming behaviour for signs of problem gambling and to deliver responsible gambling interventions, including session time notifications, deposit limit reminders, and self-exclusion management.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account abuse, bonus abuse, and unauthorised access to the Platform.
- Service Improvement: To analyse aggregated user behaviour data (in anonymised form) to improve the Platform's functionality, user interface, and gaming content.
- Marketing Communications: Where you have opted in to receive promotional communications, to send you personalised offers, bonus notifications, and product updates relevant to your gaming activity.
- Dispute Resolution: To investigate and resolve complaints, chargebacks, and disputes, using account records and communication histories as evidence.
6 Legal Basis for Processing
Panglima77 processes your personal data on the following legal grounds:
- Performance of Contract: The majority of our data processing is necessary for the performance of the contract between you and Panglima77 — specifically, the delivery of gaming, payment, and account management services as described in our Terms & Conditions.
- Legal Obligation: We process certain categories of data — particularly KYC documentation, transaction records, and AML monitoring data — because we are legally required to do so under our gaming licence conditions and applicable anti-money laundering legislation.
- Legitimate Interests: We process technical and device data, communications records, and fraud detection data on the basis of our legitimate interest in maintaining the security and integrity of the Platform and protecting both Panglima77 and our users from fraud, abuse, and unauthorised access.
- Consent: Where we send you marketing communications, we do so only on the basis of your explicit opt-in consent. You may withdraw this consent at any time by contacting our support team or updating your account preferences.
7 Data Sharing & Disclosure
Panglima77 does not sell your personal data to any third party. We may share your personal data only in the following circumstances, and only to the minimum extent necessary for the stated purpose:
7.1 Service Providers and Data Processors
We engage third-party service providers who process data on our behalf as data processors under written data processing agreements. These include: payment processing partners (including providers of DuitNow, FPX, and eWallet services), KYC and identity verification providers, fraud detection and AML screening services, cloud hosting providers, and customer support platform providers. All data processors are contractually bound to process your data only for the purposes specified by Panglima77 and to maintain appropriate security standards.
7.2 Regulatory and Law Enforcement Authorities
Panglima77 may be required to disclose your personal data to our gaming licensing authority, financial intelligence units, law enforcement agencies, or other regulatory bodies where such disclosure is required or permitted by applicable law. We will, where permitted by law, attempt to notify you of any such compelled disclosure before it occurs.
7.3 Corporate Transactions
In the event of a merger, acquisition, corporate restructuring, or sale of all or part of Panglima77's business, your personal data may be transferred to the relevant successor entity as part of that transaction. We will provide reasonable notice before your data becomes subject to a different privacy policy.
We will never share your personal data with third-party advertising networks, data brokers, or any entity for direct marketing purposes without your explicit prior consent.
8 International Data Transfers
Panglima77 operates as an internationally licensed gaming platform. In the course of providing our services, your personal data may be transferred to, stored in, or processed in countries outside Malaysia. Such transfers may occur to server infrastructure located in other jurisdictions, or to third-party service providers operating in other countries.
Where your personal data is transferred internationally, Panglima77 takes appropriate measures to ensure that such transfers are carried out with adequate protection for your privacy rights. These measures may include: contractual clauses that require the recipient to protect personal data to standards equivalent to those applicable under this Policy; the use of service providers who have obtained relevant international data protection certifications; or transfers to jurisdictions that have been assessed as providing adequate data protection.
9 Data Retention
Panglima77 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account Registration Data | Duration of account + 5 years post-closure | Regulatory / AML compliance |
| KYC Documents | Duration of account + 5 years post-closure | Legal obligation (AML regulations) |
| Financial Transaction Records | 7 years from transaction date | Financial reporting obligations |
| Gaming Activity Records | Duration of account + 3 years post-closure | Regulatory audit / dispute resolution |
| Customer Support Records | 3 years from last interaction | Dispute resolution / quality assurance |
| Marketing Preferences | Until consent is withdrawn | Consent-based processing |
| Technical / Device Data | 13 months from collection | Security / fraud detection |
Following the expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be associated with you as an individual.
10 Data Security
Panglima77 implements robust technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include:
- 256-bit SSL/TLS Encryption: All data transmitted between your browser or app and the Panglima77 platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
- Data Encryption at Rest: Sensitive personal data stored in our databases is encrypted at rest using AES-256 encryption.
- Access Controls: Access to personal data within Panglima77 is restricted on a strict need-to-know basis. All staff accessing personal data are subject to confidentiality obligations and undergo data protection training.
- Two-Factor Authentication: 2FA is available for all user accounts and is strongly recommended to prevent unauthorised account access.
- Intrusion Detection Systems: We deploy real-time monitoring and intrusion detection systems to identify and respond to potential security threats to the Platform.
- Payment Card Data: We do not store full payment card numbers on our servers. Card transactions are processed by PCI-DSS certified payment partners.
- Security Audits: Our platform and data security practices are subject to regular independent security audits and penetration testing.
While Panglima77 takes all reasonable and practicable steps to protect your personal data, no internet transmission or electronic storage system is completely secure. You are also responsible for maintaining the security of your own account credentials.
11 Your Rights as a Data Subject
Subject to applicable data protection legislation and certain conditions, you have the following rights in relation to your personal data held by Panglima77:
Right of Access
You have the right to request a copy of the personal data that Panglima77 holds about you, together with information about how that data is being processed.
Right to Rectification
You have the right to request that Panglima77 corrects any personal data that is inaccurate, incomplete, or out of date. You may update certain data directly in your account settings.
Right to Erasure
In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to our legal obligations to retain data for regulatory and AML compliance purposes.
Right to Restriction
You may request that Panglima77 restricts the processing of your personal data in certain circumstances — for example, while you contest the accuracy of the data held.
Right to Portability
Where processing is based on consent or contract, you have the right to receive a copy of the personal data you have provided to us in a structured, machine-readable format.
Right to Object
You have the right to object to Panglima77 processing your personal data on the basis of our legitimate interests or for direct marketing purposes. You may withdraw marketing consent at any time.
To exercise any of the above rights, please contact our Data Protection team using the contact details in Section 15 of this Policy. We will respond to all verified requests within thirty (30) calendar days. We may require you to verify your identity before processing a data rights request.
12 Cookies & Tracking Technologies
Panglima77 uses cookies and similar tracking technologies (including local storage and session storage) to operate and improve the Platform. Cookies are small files placed on your device when you access panglima77.cam. The following categories of cookies are used:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, authentication, security tokens — required for the Platform to function. Cannot be disabled. | Session |
| Functional | Remembering user preferences such as language settings, display preferences, and last-visited game categories. | Up to 12 months |
| Analytics | Aggregated, anonymised data on how users navigate the Platform — used to improve usability and identify performance issues. | Up to 13 months |
| Fraud Detection | Device fingerprinting and behavioural signals used to detect suspicious activity and prevent account takeover. | Up to 12 months |
You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may impact the functionality and security of the Platform. Panglima77 does not use third-party advertising cookies or serve behavioural advertising from third-party networks.
13 Protection of Minors
The Panglima77 Platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of our KYC process for all registered users.
If Panglima77 discovers or is notified that it has collected personal data from a person under the age of 21, we will immediately suspend the relevant account, delete the personal data collected from that individual to the extent permitted by our regulatory obligations, and void all associated gaming activity.
Parents and guardians who believe that their child may have accessed the Platform and provided personal data are encouraged to contact our support team immediately so that appropriate action can be taken.
14 Amendments to This Policy
Panglima77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the scope of our services. The effective date and version number at the top of this Policy will be updated whenever a material change is made.
Where amendments are material — meaning they substantively affect your rights or how your personal data is processed — Panglima77 will provide reasonable notice by publishing a notice on the Platform homepage and, where practicable, by notifying registered users via their registered email address. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.
We encourage you to review this Privacy Policy periodically to stay informed about how Panglima77 protects your personal data.
15 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or Panglima77's handling of your personal data, please contact us through the following channels. We are committed to responding to all privacy-related enquiries promptly and constructively.
Data Protection & Privacy Enquiries Email: [email protected] — please use subject line "Privacy Enquiry" Live Chat: Available 24/7 at panglima77.cam Response time: Within 2 business days for privacy requests; within 30 days for formal data subject rights requests
Where your enquiry relates to the exercise of a formal data subject right (access, erasure, portability, etc.), please provide your registered account username, a clear description of the right you wish to exercise, and any relevant account details to assist our team in processing your request. You may be asked to verify your identity before we can act on your request.
How Panglima77 Protects Your Data
Six concrete ways we put this Privacy Policy into practice for every Panglima77 player in Malaysia.
256-bit SSL Encryption
Every byte of data exchanged between you and Panglima77 — deposits, withdrawals, personal details — is protected by bank-grade TLS encryption in transit and AES-256 encryption at rest.
No Data Sales. Ever.
Panglima77 has a categorical policy against selling, renting, or trading your personal data to advertisers, data brokers, or any third-party marketers. Your data stays within the Panglima77 ecosystem.
Full Data Subject Rights
You can request access to, correction of, or deletion of your personal data at any time. Our Data Protection team responds to all formal requests within 30 days, as required under applicable regulations.
Regulatory Compliance
Our data practices are designed to comply with our gaming licence requirements and applicable data protection legislation. We undergo regular external audits to verify compliance.
Defined Retention Periods
We do not hold your data indefinitely. Clear, documented retention periods govern every category of personal data we collect — and we actively delete data when the retention period expires.
Strict 21+ Age Verification
Identity and age verification is mandatory for all users before any withdrawal can be processed. Panglima77 takes the protection of minors seriously and enforces a hard 21+ minimum age policy.
Your Privacy. Our Responsibility.
Have questions about how Panglima77 uses your data, or want to exercise your privacy rights? Our support team is available around the clock to assist you.
🔞 For players aged 21 and above only. Play responsibly.