Pantaislot ("we", "us", "our", "the Company") is committed to protecting the privacy and personal data of every individual who accesses our online casino and sports betting platform atpantaislot.cam ("the Platform"). This Privacy Policy ("Policy") describes in detail how we collect, use, store, disclose, and protect your personal data when you use our services.
This Policy applies to all persons who register an account, make a deposit, place a wager, contact our support team, or otherwise interact with any aspect of the Pantaislot platform, including Malaysian players located in Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and all other locations.
By using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not consent to these practices, you must not access or use the Platform.
Your Consent Matters: Where we rely on your consent as the legal basis for processing your personal data, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, please contact our support team via Live Chat or email.
The following terms carry the meanings set out below throughout this Privacy Policy:
| Term |
Meaning |
| "Personal Data" |
Any information that identifies or could reasonably identify a natural person, directly or indirectly — including name, email address, phone number, IP address, payment details, and identity documents. |
| "Processing" |
Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction. |
| "Data Controller" |
Pantaislot, the entity that determines the purposes and means of processing your personal data. |
| "Data Processor" |
A third party that processes personal data on behalf of Pantaislot under a written data processing agreement (e.g., payment service providers, KYC verification services). |
| "KYC" |
Know Your Customer — our identity and age verification process, including review of government-issued ID documents and proof of address. |
| "Cookies" |
Small text files placed on your device by the Platform to enable functionality, remember preferences, and support analytics. |
| "Player" / "You" |
Any natural person who holds a registered account on the Pantaislot platform or who accesses the Platform without an account. |
Pantaislot collects the following categories of personal data, depending on how you interact with the Platform:
3.1 Identity & Account Data
- Full legal name as it appears on your government-issued identity document
- Date of birth (used for age verification —21+ requirement)
- Email address and Malaysian mobile phone number
- Username and encrypted password
- MyKad number, passport number, or other government-issued ID reference (for KYC)
- Residential address (for KYC and regulatory compliance)
3.2 Financial & Transaction Data
- Payment method details (e.g., Touch 'n Go eWallet account reference, DuitNow registered number, FPX bank account identifier)
- Deposit and withdrawal transaction records, including amounts MYR and timestamps
- Cryptocurrency wallet address (for USDT TRC20 transactions only)
3.3 Gaming & Behavioural Data
- Game session history, bet amounts, wins and losses
- Sports betting market selections and settlement history
- Bonus and promotion participation records
- Responsible gambling settings (deposit limits, session, self-exclusion status)
3.4 Technical & Device Data
- IP address and approximate geolocation derived from IP
- Device type, operating system, browser type, and version
- Session start and end times, pages visited, and features used
- Cookie identifiers and similar tracking technology data (see Section 8)
3.5 Communications Data
- Live chat transcripts, email correspondence, and WhatsApp messages with our support team
- Complaint records and dispute correspondence
- Responses to surveys or feedback requests (where provided voluntarily)
We collect personal data through the following channels:
- Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account profile.
- Automatically through the Platform — technical data such as IP address, device identifiers, and session activity is collected automatically when you access the Platform.
- From payment service providers — when you make a deposit or withdrawal via Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, or USDT, our payment processors share transaction confirmation data with us.
- From KYC verification partners — we may use third-party identity verification services to cross-reference the documents you provide during KYC against authoritative databases.
- From fraud prevention services — we may receive risk signals and device fingerprint data from fraud detection partners to protect the integrity of our platform.
- Via cookies and similar technologies — as described in Section 8 of this Policy.
Pantaislot uses your personal data for the following purposes, each of which is tied to a lawful basis described in Section 6:
| Purpose |
Examples |
| Account Management |
Creating and maintaining your player account, processing logins, and managing account security settings. |
| KYC & Age Verification |
Verifying your identity, age (21+), and address to comply with our licensing obligations and the Personal Data Protection Act (PDPA). |
| Payment Processing |
Processing deposits and withdrawals in MYR via Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, and USDT. |
| Fraud & AML Prevention |
Monitoring transactions for suspicious activity, investigating fraud reports, and fulfilling anti-money laundering (AML) reporting obligations. |
| Platform Personalisation |
Recommending games, customising promotional offers, and tailoring the Platform experience based on your gaming preferences. |
| Responsible Gambling |
Monitoring gaming patterns to identify signs of problem gambling behaviour and administering self-exclusion and deposit limit requests. |
| Customer Support |
Responding to enquiries, resolving complaints, and maintaining records of support interactions. |
| Marketing Communications |
Sending promotional emails, SMS, or notifications about bonuses and offers — only where you have provided consent. |
| Legal & Regulatory Compliance |
Meeting our obligations under our international gambling licence, applicable data protection legislation, and AML regulations. |
Each use of your personal data described in Section 5 is underpinned by one or more of the following lawful bases:
- Contractual necessity — processing required to provide you with the services you have requested when creating a Pantaislot account (e.g., account management, payment processing, KYC).
- Legal obligation — processing required to comply with our licensing conditions, AML obligations, and applicable data protection law (e.g., transaction record-keeping, fraud reporting).
- Legitimate interests — processing necessary for Pantaislot's legitimate business interests, provided those interests are not overridden by your rights (e.g., fraud prevention, platform security, responsible gambling monitoring).
- Consent — where we rely on your freely given, specific, informed consent (e.g., marketing communications, non-essential cookies). You may withdraw consent at any time.
Pantaislot does not sell your personal data to any third party. We share your data only in the following limited circumstances, and only to the extent strictly necessary for each purpose:
7.1 Authorised Service Providers (Data Processors)
We engage third-party service providers who process data on our behalf under written data processing agreements that bind them to the same data protection standards we apply. These include:
- Payment processors — Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, and USDT payment infrastructure providers require minimum transaction data to process your deposits and withdrawals.
- KYC verification providers — identity document verification and age confirmation services used to fulfil our licensing obligations.
- Fraud prevention & AML services — risk scoring and transaction monitoring platforms that help protect the Platform and its players.
- Game providers — licensed slot and live casino game software providers may receive anonymised session data for game integrity and technical support purposes.
- Customer support platforms — live chat and helpdesk software providers who process communications between you and our support team.
7.2 Regulatory & Legal Disclosure
Pantaislot may disclose your personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or our licensing authority's directives — including AML reporting obligations. We will notify you of such disclosure where legally permitted to do so.
No Third-Party Marketing: Pantaislot does not share your personal data with any third-party advertisers, data brokers, or marketing companies. Your email address, phone number, and gaming activity data are never used for targeted advertising by external parties.
Pantaislot uses cookies and similar technologies (including local storage and session storage) to operate the Platform, remember your preferences, and understand how players use our services. The following table describes the categories of cookies we use:
Strictly Necessary Cookies
Essential for platform login, session management, and security token validation. Cannot be disabled.
Always Active
Functional Cookies
Remember your language preference, display settings, and last-played game for a smother experience.
Always Active
Analytics Cookies
Collect anonymised data about Platform usage to help improve page performance and navigation flows.
Opt-In
Marketing / Tracking Cookies
Used to measure the effectiveness of our promotional campaigns. We do not use cross-site adnetwork trackers.
Opt-In
Third-Party Social Cookies
We do not embed social network widgets or third-party social tracking pixels on the Platform.
Not Used
You can manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies will impair the Platform's core functionality, including the ability to log in to your account. For detailed guidance on managing cookies in popular browsers, please refer to your browser's help documentation.
Pantaislot retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, and in any event no longer than required by our licensing authority's data retention mandates and applicable AML regulations.
| Data Category |
Retention Period |
Reason |
| Account & Identity Data |
5 years post-closure |
AML regulatory requirement; licensing obligation |
| KYC Documents |
5 years post-closure |
Licensing and AML compliance |
| Transaction Records |
5 years post-transaction |
AML reporting; financial record-keeping |
| Gaming History |
3 years post-closure |
Dispute resolution; responsible gambling monitoring |
| Support Communications |
3 years post-interaction |
Complaint records; quality assurance |
| Marketing Consent Records |
Until consent withdrawn + 1 year |
Evidence of lawful consent basis |
| Analytics Data (anonymised) |
24 months rolling |
Platform performance improvement |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data must be retained for conflicting periods under different obligations, the longer period applies.
Pantaislot implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:
- Encryption in transit: All data between your browser and our servers is encrypted using TLS 1.3 /256-bit SSL.
- Encryption at rest: Stored personal data and KYC documents are encrypted using AES-256 at the database layer.
- Access controls: Role-based access (RBAC) ensure that only authorised personnel with a documented business need can access specific categories of personal data.
- Two-factor authentication (2FA): All internal staff accounts with access to player data require 2FA. Players are also encouraged to enable 2FA on their own accounts.
- Intrusion detection: Real-time monitoring systems are in place to detect and respond to unauthorised access attempts and anomalous activity patterns.
- Penetration testing: Regular third-party security audits and penetration tests are conducted to identify and remediate vulnerabilities.
- Data breach response: In the event of a personal data breach that poses a risk to your rights, we will notify affected players without undue delay and report to relevant authorities as required.
Your Account Security: The security of your Pantaislot account also depends on you. Keep your password confidential, do not share your login credentials, and enable2FA in your account security settings. If you suspect unauthorised access to your account, contact our support team immediately via Live Chat.
As a Pantaislot player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] or via Live Chat. We will respond within 30 calendar days.
Right of Access
Request a copy of all personal data we hold about you, including your account history, transaction records, and KYC status.
Right to Rectification
Request correction of any inaccurate or incomplete personal data in your account. For identity data, supporting documentation may be required.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes collected, subject to our regulatory retention obligations.
Right to Restriction
Request that we restrict processing of your data in certain circumstances — for example, while a dispute about accuracy is being resolved.
Right to Portability
Receive your personal data in a structured, commonly used, machine-readable format to transfer to another service, where technically feasible.
Right to Object
Object to processing based on legitimate interests — including direct marketing. Your objection to marketing will be honoured immediately upon receipt.
Response Timeframe: We aim to respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or voluminous, we may extend this period by a further 30 days with written notice. There is no charge for exercising your rights in most circumstances.
The Pantaislot platform is strictly for individuals aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. Age is verified during the KYC process through review of government-issued identity documents.
If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that data from our systems and close the associated account. Any deposits made by an under-age player will be returned to the originating payment method.
21+ Strict Policy: If you are the parent or guardian of a person under 21 who you believe may have registered on the Pantaislot platform, please contact us immediately at
[email protected] and we will investigate and take action without delay.
Pantaislot is an internationally operated platform. In the course of providing our services to Malaysian players, your personal data may be transferred to and processed in countries outside Malaysia. Such transfers may occur in connection with our payment processing partners, KYC verification services, fraud prevention providers, and cloud infrastructure.
Where personal data is transferred internationally, Pantaislot ensures that appropriate safeguards are in place to protect your data, including:
- Contractual data protection clauses in all agreements with international data processors
- Selection of processors who maintain security standards equivalent to or exceding those applied within Malaysia
- Regular assessment and audit of international data processor compliance
Pantaislot may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or Platform functionality. When we make material changes, we will:
- Post a notice on the Platform highlighting the nature of the change and the date it takes effect
- Update the "Last Updated" date at the top of this page
- Where required by applicable law, seek your renewed consent for any processing that represents a material change in how we use your data
Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed of how we protect your information.