Privacy Policy

This Privacy Policy ("Policy") describes how Pandora88 ("the Company", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at pandora88.cam, collects, processes, stores and protects the personal data of individuals who access or use our Platform ("you", "your", "Member").

Pandora88 is committed to responsible data stewardship. We process personal data only for legitimate operational purposes, retain it no longer than necessary, and maintain technical and organisational safeguards appropriate to the sensitivity of the information we hold. This Policy is designed to be transparent, specific and readable — not simply a compliance formality.

By registering an Account on the Platform, making a deposit, or otherwise using our services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform.

In this Policy, the following terms have the meanings assigned below:

Pandora88 collects only the personal data that is necessary for the purposes described in this Policy. The categories of data we collect are as follows:

• Full legal name as it appears on a government-issued identification document;
• Date of birth (to verify you are 21 years of age or older);
• Residential address, including postcode and state (e.g., Kuala Lumpur, Selangor, Penang);
• Email address and mobile phone number;
• Nationality and country of residence.

• Copy of Malaysian MyKad, passport or other accepted government-issued photo identification;
• Proof of payment method ownership (e.g., screenshot of e-wallet account or bank statement) where required for withdrawal verification;
• Selfie or liveness verification where triggered by our enhanced due diligence process.

• Payment method type and identifiers (e.g., masked bank account number, Touch 'n Go eWallet account reference, Boost or GrabPay account identifier, cryptocurrency wallet address);
• Deposit and withdrawal transaction records including amounts in MYR or cryptocurrency equivalent;
• Bonus redemption records and wagering history.

• IP address and geolocation data derived from IP;
• Device type, operating system and browser version;
• Session duration, pages visited and features accessed;
• Login timestamps and authentication events;
• Game play logs including stakes, outcomes and RTP data.

• Contents of live chat conversations with customer support;
• Email correspondence with support or compliance teams;
• Feedback, complaints and dispute records.

We collect personal data through the following means:

• Direct Submission: Data you provide when registering an Account, completing KYC, submitting a payment, contacting support or participating in a promotion;
• Automated Collection: Technical and usage data collected automatically when you access the Platform, via server logs, cookies and similar tracking technologies;
• Payment Providers: Transaction status and payment method verification data received from our integrated payment processors, including those facilitating FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank and Hong Leong Bank transactions;
• Identity Verification Partners: Results of automated or assisted KYC checks conducted through our identity verification service providers;
• Fraud Prevention Systems: Device fingerprint and behavioural anomaly signals generated by our fraud detection infrastructure.

Pandora88 processes your personal data for the following specific purposes:

Pandora88 processes personal data under one or more of the following lawful bases:

• Contractual Necessity: Processing required to perform the contract between you and Pandora88, including account management, payment processing and KYC verification;
• Legal Obligation: Processing required to comply with applicable licensing conditions, anti-money laundering obligations and lawful requests from regulatory or law enforcement authorities;
• Legitimate Interests: Processing carried out for the Company's legitimate interests in fraud prevention, platform security, responsible gambling monitoring and business analytics, where those interests are not overridden by your fundamental rights;
• Consent: Processing of your data for direct marketing purposes, where you have given explicit and informed consent, and which you may withdraw at any time by contacting support.

Pandora88 does not sell, rent or trade your personal data to unaffiliated third parties for their own commercial marketing purposes. We share personal data only in the following limited circumstances:

• Payment Processors: Transactional data shared with payment service providers to facilitate deposits and withdrawals, including providers supporting Touch 'n Go eWallet, Boost, GrabPay, FPX, DuitNow and cryptocurrency networks;
• Identity Verification Partners: Verification documents shared with KYC service providers acting as our data processors under contractual data protection obligations;
• Fraud Prevention Networks: Device and behavioural signals shared with fraud detection systems used to protect the Platform and its Members;
• Game Providers: Limited technical and session data shared with licensed game studios to facilitate gameplay and resolve game-related disputes;
• Legal & Regulatory Disclosure: Data disclosed to competent authorities, courts or regulatory bodies where we are legally required to do so under applicable licensing obligations or law enforcement orders;
• Corporate Transactions: In the event of a merger, acquisition or restructuring of the Company, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable licensing obligations and legal requirements. The following retention framework applies:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

Pandora88 implements a layered security architecture designed to protect personal data against unauthorised access, disclosure, alteration and destruction. Our security measures include:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using industry-standard TLS (Transport Layer Security) with 256-bit encryption. The padlock icon in your browser address bar confirms this connection is active.
• Encryption at Rest: Sensitive personal data, including KYC documents and financial records, is encrypted in storage using AES-256 encryption.
• Access Controls: Access to systems containing personal data is restricted on a need-to-know basis. All access events are logged and reviewed.
• Two-Factor Authentication: Two-factor authentication (2FA) is available for all Member accounts and is enforced for internal staff accounts with access to member data.
• Penetration Testing: The Platform is subject to periodic security assessments by independent external specialists to identify and remediate vulnerabilities.
• Incident Response: We maintain a documented data breach response procedure. In the event of a breach that is likely to result in significant risk to individuals, affected Members will be notified without undue delay.

While we apply rigorous security measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and for using a secure, private network when accessing the Platform.

Pandora88 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session and understand how members interact with our services. The following types of cookies are used:

You may manage or disable non-essential cookies through your browser settings. Note that disabling cookies may impair the functionality of the Platform, including the ability to maintain your session across pages. For more information on managing cookies, consult your browser's help documentation.

Subject to applicable law and the limitations described below, you hold the following rights in respect of your personal data held by Pandora88. To exercise any of these rights, please contact us using the details in Clause 15.

• Right of Access: You may request a copy of the personal data we hold about you, including the categories of data, processing purposes and any recipients to whom it has been disclosed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your Account. You may update basic contact details directly via your account settings dashboard.
• Right to Erasure: You may request deletion of your personal data in certain circumstances, for example where it is no longer necessary for the original purpose. This right is subject to overriding retention obligations under anti-money laundering regulations and our licensing conditions.
• Right to Restriction: You may request that processing of your data be restricted — for example, while a complaint or rectification request is being resolved.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, and is carried out by automated means, you may request that your data be provided to you in a structured, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests or for direct marketing purposes. Where you object to direct marketing, processing for that purpose will cease immediately.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

The Platform is strictly intended for adults aged 21 years and above. Pandora88 does not knowingly collect or process personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21 — whether through a fraudulent registration or other means — we will take immediate steps to delete that data, close the associated account and return any deposited funds where technically feasible.

Parents and guardians who believe that a minor may have registered on the Platform are encouraged to contact our support team immediately at [email protected] (plain text, not a clickable link). We investigate all such reports with priority.

The Platform may display informational references to third-party services, such as payment method providers (Touch 'n Go eWallet, Maybank, CIMB etc.) or game studios. Where any link or reference leads to a third-party website or service, Pandora88 has no control over the privacy practices or content of those third parties. This Policy does not apply to data processed by third parties outside the Platform. We encourage you to review the privacy policies of any third-party services you interact with.

Pandora88 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or Platform functionality. Where a material change is made, we will provide reasonable advance notice to active Members via email to the registered account address and/or via a prominent notice on the Platform.

The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy. We recommend reviewing this page periodically.

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a privacy-related concern, please contact the Pandora88 Data team through the following channels:

For further information about your rights and data protection principles, you may also refer to our Terms & Conditions or visit our FAQ page which addresses common privacy questions.