Privacy Policy

Pandora188 ("we", "us", "our", or "the Company") operates the online casino and sports betting platform accessible atpandora188.cam. We are committed to handling your personal data with care, transparency, and in accordance with applicable data protection principles under our international gaming licence.

This Privacy Policy ("Policy") applies to all users of the Pandora188 platform — whether you are a registered account holder, a visitor browsing the site, or a person who has submitted an enquiry to our customer support team. It covers all personal data collected through the Platform, including our website, mobile browser interface, live chat system, and any associated communication channels.

By using the Pandora188 Platform, creating an account, making a deposit, or communicating with our support team, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, directly or in combination with other data — including name, email address, identification number, device identifiers, and IP address.
• "Data Subject" means any natural person whose personal data is collected, held, or processed by Pandora188.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Controller" means Pandora188, which determines the purposes and means of processing your personal data.
• "Processor" means any third party that processes personal data on behalf of Pandora188pursuant to a data processing agreement.
• "KYC" means Know Your Customer — the identity verification process required for regulatory compliance and withdrawal eligibility.
• "Cookies" means small text files placed on your device by the Platform to enable functionality, session management, and analytics.
• "Third Party" means any natural or legal person other than the Data Subject, Pandora188, or its authorised processors.

Pandora188 collects personal data through several channels and at multiple points during your use of the Platform. The categories of personal data we collect include:

3.1 Registration Data

When you create a Pandora188 account, we collect the information you provide, including:

• Full legal name
• Date of birth (for age verification — minimum age 21 is strictly enforced)
• Email address
• Username and encrypted password
• State and country of residence (including Malaysian state, e.g., Selangor, Kuala Lumpur, Penang, Johor, Sabah, Sarawak)
• Preferred currency (Malaysian Ringgit — MYR — is the default for Malaysian players)

3.2 KYC Verification Data

To process withdrawals and comply with anti-money laundering (AML) obligations, we collect:

• Government-issued photo identification (MyKad, passport, or driving licence)
• Proof of address (utility bill, bank statement, or equivalent document dated within 90 days)
• Proof of payment method ownership (e.g., screenshot of Maybank2u, Touch'n Go eWallet, or other Malaysian payment account showing your name)
• Selfie or identity confirmation photograph where requested

3.3 Transactional Data

We automatically record all financial transactions associated with your account, including:

• Deposit amounts, dates, and payment methods used (e.g., DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect)
• Withdrawal requests, amounts, processing status, and destination payment method
• Bonus credits, wagering activity, and cashback calculations
• Account balance history

3.4 Gameplay Data

• Game titles played, session durations, bet amounts, and win/loss records
• Sports betting markets selected, odds accepted, and bet outcomes
• Platform features accessed (live casino, slots, crash games, etc.)

3.5 Technical & Device Data

• IP address and approximate geolocation
• Browser type and version
• Device type, operating system, and screen resolution
• Session timestamps and navigation path data
• Cookie identifiers and analytics tags (see Section 7)

3.6 Communication Data

• Content of live chat conversations with our support team
• Email correspondence sent to or received from [email protected]
• Feedback, complaint submissions, and dispute correspondence

We process your personal data for the following specific purposes:

Pandora188 processes personal data under the following legal bases, depending on the specific purpose:

• Contract Performance: Processing is necessary to provide the services you have contracted for — including operating your account, processing deposits and withdrawals, and delivering game services.
• Legal Obligation: Certain processing activities are required to comply with applicable law, including anti-money laundering (AML) regulations, age verification obligations under our gaming licence, and fraud prevention requirements.
• Legitimate Interest: We process certain data based on our legitimate interests as an operator — including fraud detection, platform security, analytics, and responsible gambling monitoring — where these interests are not overridden by your rights and freedoms.
• Consent: Where we rely on your consent (for example, for marketing emails or optional communications), you may withdraw consent at any time by contacting our support team or using the unsubscribe mechanism in any promotional email.

Pandora188 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data in the following limited and controlled circumstances only:

• Payment Service Providers: We share transactional data with Malaysian payment processors (including those facilitating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect transactions) solely to process deposits and withdrawals. These providers operate under their own data protection frameworks.
• KYC & Identity Verification Partners: Where automated identity verification tools are used, your KYC documents may be processed by a contracted third-party verification service under a strict data processing agreement.
• Game Studio Technology Partners: Anonymised or pseudonymised gameplay data may be shared with our licensed game studio partners for the purpose of RNG certification, fair-play audits, and game performance reporting. No personally identifiable information is included in these transmissions.
• Legal and Regulatory Authorities: We may disclose personal data to courts, law enforcement agencies, or regulatory bodies where required by valid legal order, court warrant, or regulatory instruction. We will notify you of such requests where legally permitted to do so.
• Fraud Prevention Networks: We may share flaged account data with industry fraud prevention databases where we have reasonable grounds to suspect fraudulent activity, for the purpose of protecting other Platform users.

Pandora188 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your session state, to analyse how the Platform is used, and to deliver a consistent experience across visits.

Types of cookies we use:

• Strictly Necessary Cookies: Required for core Platform functionality — including login session management, account security tokens, and payment process state tracking. These cannot be disabled without impairing Platform use.
• Performance and Analytics Cookies: Used to collect anonymised data about how users navigate the Platform — pages visited, session duration, error logs, and feature usage. This data is used to improve the Platform experience.
• Functionality Cookies: Used to remember your preferences — such as preferred language, display settings, and last-used payment method — to personalise your experience across sessions.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and automated abuse of the Platform.

Most browsers allow you to refuse or delete cookies through your browser settings. However, disabling strictly necessary cookies may prevent you from logging in or using core Platform features. Please consult your browser's help documentation for specific cookie management instructions.

Pandora188 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming licence obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, to meet AML record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification, in compliance with anti-money laundering regulations applicable under our gaming licence.
• Transactional Records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer Support Correspondence: Retained for a minimum of two (2) years from the date of the last communication in a support thread.
• Technical and Device Data: Session logs retained for up to ninety (90) days; aggregated analytics data retained indefinitely in anonymised form.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, for audit purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. You may request early deletion of certain data categories where no overiding legal obligation requires its continued retention (see Section 10— User Rights).

Pandora188 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Pandora188 Platform is encrypted in transit using industry-standard TLS protocols.
• Encrypted Data Storage: Sensitive personal data — including KYC documents and payment details — is stored using AES-256 encryption at rest.
• Password Hashing: Account passwords are stored using one-way cryptographic hashing algorithms (bcrypt or equivalent). Pandora188 staff cannot retrieve or view your plaintext password.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular security training.
• Intrusion Detection: Automated monitoring systems are in place to detect and alert on unusual access patterns, potential data breaches, and security anomalies.
• Regular Security Audits: Our platform undergoes periodic independent security assessments to identify and remediate vulnerabilities.

Subject to applicable law and the overiding requirements of our gaming licence obligations, you have the following rights with respect to your personal data held by Pandora188:

• Right of Access: You may request a copy of the personal data we hold about you, along with information on how it is processed. We will respond to verified access requests within 30 days.
• Right to Rectification: If you believe any personal data we hold about you is inaccurate or incomplete, you may request correction. Account holders can update basic profile information directly through account settings; other corrections must be requested via our support team.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where no overiding legal obligation requires its continued retention. Note that AML and gaming licence obligations require us to retain certain records for a minimum of five years regardless of an erasure request.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances — for example, where you contest the accuracy of data or object to processing based on legitimate interest.
• Right to Data Portability: Where processing is based on consent or contract, you may request your personal data in a structured, machine-readable format for transfer to another service.
• Right to Object: You may object to processing carried out on the basis of legitimate interest, including direct marketing. Where you object to marketing communications, we will cease such processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our Data Protection team directly via email at [email protected] with the subject line "Data Rights Request". We will acknowledge all requests within 5 business days and aim to complete them within 30 days, or notify you if additional time is required.

Pandora188 strictly prohibits access by persons under the age of 21. Our Platform is not directed at, designed for, or intended to be used by minors. We do not knowingly collect personal data from any person under the age of 21.

Age verification is a mandatory step of the registration and KYC process. Where we identify — through identity document review or other means — that a user has misrepresented their age to create an account, we will:

• Immediately suspend and permanently close the account.
• Void all balances, wagers, and winings associated with the account.
• Securely delete the personal data of the minor except where retention is required for regulatory reporting purposes.
• Return any net deposited funds (excluding bonus funds) to the original payment source where technically possible.

Pandora188 operates as an international platform and, as such, personal data may be processed or stored in servers and facilities located outside Malaysia. This may include data centres in offshore jurisdictions associated with our gaming licence authority, as well as the operational locations of our authorised data processors.

Where personal data is transferred outside of the country in which it was collected, Pandora188 ensures that appropriate safeguards are in place to maintain an equivalent level of data protection. These safeguards may include:

• Contractual data processing agreements incorporating internationally recognised standard contractual clauses.
• Transfers to jurisdictions that maintain an adequate level of data protection under applicable frameworks.
• Technical security measures ensuring data is encrypted both in transit and at rest during transfer and storage.

You may request information about the specific safeguards applicable to any cross-border transfer of your personal data by contacting our support team.

Pandora188 reserves the right to update, modify, or replace this Privacy Policy at any time. Where changes are material — such as a change in the categories of data collected, the purposes for which it is used, or a new category of data sharing — we will notify registered users via email or a prominent in-platform notice prior to the changes taking effect.

The most current version of this Privacy Policy is always accessible at pandora188.cam/privacy-policy, with the effective date displayed at the top of the page. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

If you disagree with any update to this Privacy Policy, you should stop using the Platform and may request account closure by contacting our support team. Any data collected prior to the policy change remains subject to the version of the Policy that was in effect at the time of collection, except where applicable law requires otherwise.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our team through the following channels:

• Data Privacy Email: [email protected] (Subject: "Privacy Policy Enquiry" or "Data Rights Request")
• Live Chat Support: Available 24/7 on the Pandora188 Platform — average response time under 3 minutes.
• Support Hours: Our team operates 24 hours a day, 7 days a week, including Malaysian public holidays such as Hari Raya, Chinese New Year, and Deepavali.

We aim to acknowledge all privacy-related enquiries within 5 business days and to provide a substantive response within 30 calendar days. For complex requests involving data access, erasure, or portability, we may require up to 45 days where permitted by applicable law, and will notify you if an extension is required.