Privacy Policy pantas33 –
Protection of Your Personal Data

Pantas33 ("we", "our platform") values the privacy of all members and users on our platform. This Privacy Policy clearly explains what types of personal data we collect, how we use it, who we share it with, and the rights you hold over your personal data.

This policy applies to all services provided by Pantas33 through the website pantas33.vin, our mobile app, and any related communication channels. By using our platform, you agree to the practices described in this Privacy Policy.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection regulations. If anything in this policy is unclear or you have questions, our support team is available to assist at any time.

Pantas33 collects various types of data depending on how you interact with our platform. Below is a detailed list of the data we collect and its purposes:

Every piece of data we collect has a clear and legitimate purpose. We use your personal data for the following purposes:

• Account Management: To create, verify, and maintain your pantas33 account and process all related transactions.
• Identity Verification (KYC): To verify your identity as required by anti-money laundering regulations and Know Your Customer procedures.
• Account Security: To detect and prevent unauthorised access, fraud, money laundering, and other suspicious activity that could compromise your account.
• Payment Processing: To securely process deposits and withdrawals through your chosen payment provider.
• Customer Support: To respond to enquiries, resolve complaints, and provide you with technical assistance.
• Service Communications: To send account-related notifications, security updates, and other important information relevant to your use of the platform.
• Platform Improvements: To analyse usage patterns in order to improve user experience, enhance existing features, and develop new ones.
• Legal Compliance: To fulfil legal and regulatory obligations applicable to our platform's operations.

Pantas33 does not sell your personal data to anyone. However, there are certain situations where we need to share information with carefully selected third parties in order to provide our services to you:

• Payment Providers: Information required to process transactions is shared with approved payment providers such as banks, e-wallet operators, and card processors. All such providers are held to strict data security standards.
• Technical Service Providers: We use trusted cloud infrastructure and technical service providers to operate our platform. They may only use your data for the purpose of providing those services to us.
• Authority: We will disclose information to authorities, tribunals, or regulatory bodies when required by law or a valid court order.
• Anti-Fraud Partner: To detect and prevent fraud, we may share certain technical data with third-party fraud detection services.

Pantas33 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or disclosure:

• Encryption in Transit: All data transmitted between your device and our platform is protected with 256-bit SSL/TLS encryption — making it impossible for third parties to intercept.
• Encryption at Rest: Sensitive data such as financial information and identification numbers are encrypted when stored in our database.
• Strict Access Control: Access to members' personal data is restricted to staff with a legitimate operational need only, and all access is logged for audit purposes.
• Two-Factor Authentication: Member accounts are protected by a two-factor authentication (2FA) system that requires an additional OTP for sensitive operations such as withdrawals.
• Continuous Monitoring: Automated monitoring systems operate 24/7 to detect any unusual activity or unauthorised access attempts.
• Regular Security Audits: Our platform undergoes regular security testing and audits by independent third parties to identify and address potential vulnerabilities.

Pantas33 uses cookies and similar tracking technologies to enhance platform functionality and your user experience. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functionality — account login, session security, and basic preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: To collect information about how you use the platform, helping us identify areas for improvement. All data is collected anonymously.
• Functional Cookies: To save your preferences such as language, display theme, and other settings so you do not need to reconfigure them each time.

You can manage or delete cookies through your web browser settings at any time. Please note that disabling essential cookies may affect the functionality of the Pantas33 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and Pantas33's internal policies, you have the following rights regarding your personal data:

Pantas33 does not retain your data indefinitely. We have a clear data retention policy based on operational needs and applicable laws and regulations:

• Active Account Data: Retained for as long as your account is active and required for service delivery.
• Financial Records & Transactions: Retained for at least 7 years as required by Malaysia's accounting and anti-money laundering laws.
• KYC Data: Retained for at least 5 years after the business relationship ends, in line with applicable regulatory requirements.
• Security Logs: Retained for 2 years for security incident investigation purposes if needed.
• Support Communications: Retained for 3 years for reference and service improvement purposes.

Once the retention period ends and there is no legal requirement to continue storing the data, the information will be securely deleted or anonymised so that you can no longer be identified from it.

Pantas33 takes the protection of children and minors very seriously. Our platform is intended solely for individuals aged 18 and above. We do not knowingly collect or process personal data from any individual under the age of 18.

If we discover that we have collected data from an underage individual, we will immediately delete that data and close the account in question. If you are a parent or guardian and discover that your underage child has registered a Pantas33 account, please contact us immediately and we will address the matter with the highest priority.

Pantas33 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. The date of the latest amendment will always be displayed at the top of this document.

For significant amendments that affect how we process your personal data, we will provide reasonable notice via in-account notifications or email before the changes take effect. Your continued use of the Pantas33 platform after amendments take effect constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

• Live Chat: The fastest way — available 24/7 via the Pantas33 platform
• Email: [email protected] — replies within 24 hours on business days
• Frequently Asked Questions: Check the FAQ for instant answers