1pantas Privacy Policy – Data Protection for Malaysian Users

1pantas ("we", "platform") is the personal data controller responsible for all information collected through our online betting platform at https://1pantas.onl. As data controller, we determine the purposes and means of processing your personal data, and we are fully responsible for ensuring that such data is handled in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

By registering an account, using any feature of the platform, or contacting our support team, you give your consent to the collection and use of your personal data as described in this policy. If you do not agree with any part of this policy, you should not register for or use the platform 1pantas.

1pantas collects your personal data through three main channels: information you provide directly during registration and platform use, data collected automatically while you use the platform, and in certain limited circumstances, information from legitimate third-party sources.

We not collect your credit or debit card numbers directly — all financial transactions are processed through separate, Malaysia-registered third-party payment providers. 1pantas only receives transaction confirmations, not your full card or bank account details.

1pantas uses your personal data solely for lawful, necessary, and relevant purposes in connection with providing our platform services to you. The following are the primary purposes for which data is used:

Account Management & Services

Your personal data is used to create and manage your account at 1pantas, process deposits and withdrawals via your chosen Malaysian payment method, verify your identity for legal compliance purposes, and ensure all financial transactions on your platform run correctly and securely.

Security & Fraud Prevention

We analyse account usage patterns, transaction data, and technical information to detect and prevent fraud, money laundering, unauthorised access, and platform abuse. This is a legal obligation under applicable Malaysian law, including the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.

Service Communications

We use your email address and phone number to send important account notifications — including OTP verification, transaction alerts, updates to our terms and policies, and responses to your support enquiries. These communications are necessary for the operation of your account and cannot be opted out of, as they are transactional in nature.

Platform Improvement

Usage data collected in aggregate and anonymised form helps 1pantas understand how players interact with our platform, identify technical issues, and make better product decisions. This analysis is not used to evaluate you as an individual.

Legal Compliance

In certain circumstances, 1pantas required by Malaysian law to process your personal data — for example, to maintain financial records for audit purposes, or to provide information to the relevant authorities when ordered by a court or law enforcement agency.

1pantas does not sell, rent, or trade your personal data to any third party. However, in operating our platform, we may need to share data in limited and controlled circumstances with the following parties:

• Payment Providers: Malaysia-licensed payment gateways such as Touch 'n Go, GrabPay, Boost, DuitNow, ShopeePay, and FPX processors (Maybank2u, CIMB Clicks) receive the information necessary to process your transactions. They only receive data required for that purpose and are subject to their own privacy policies and security standards.
• Technology Service Providers: Companies that provide the technical infrastructure for our platform — such as cloud computing, cybersecurity, and analytics services — may process some of your data on behalf of 1pantas. All such providers are bound by strict confidentiality agreements and may only use the data for purposes we specify.
• Government Authorities: If required by a court order, warrant, or lawful request from a Malaysian law enforcement agency such as the PDRM, MACC, or Bank Negara Malaysia, we will comply with that legal obligation. We will endeavour to notify you of any such request where permitted to do so by law.
• Identity Verification Providers: For KYC (Know Your Customer) and AML compliance purposes, we may engage Malaysia-licensed third-party identity verification services to verify the information you provide.

In all of the data sharing cases described above, 1pantas ensuring that data recipients are bound by agreements that require them to protect your data and use it solely for the specified purposes. We do not permit third parties to use your data for marketing or any other purposes unrelated to the services they provide to us.

The security of your personal data is the highest technical and operational priority at 1pantas. We continuously invest in security technology and processes to ensure your data is always protected against unauthorised access, loss, destruction, or disclosure.

Technical Measures

• 256-bit SSL Encryption for all communications between your browser and our servers — meaning all data transmitted is unreadable to any party attempting to intercept it.
• Data-at-rest encryption for sensitive information stored in our databases, including passwords stored as non-reversible hashes.
• Two-Factor Authentication (2FA) is available and strongly encouraged for all user accounts as an additional layer of protection.
• Real-time threat monitoring by automated security systems running 24 hours a day to detect any suspicious activity.
• Regular security audits by our internal security team and independent external experts.

Organisational Measures

• Access to users' personal data is restricted exclusively to 1pantas with a legitimate business need, in accordance with the principle of least privilege.
• All staff who handle personal data undergo regular data protection and information security training.
• A clear incident response procedure is in place to ensure any data breach is addressed promptly and effectively.

Platform 1pantas use cookies and similar tracking technologies to keep the platform running properly and to deliver a better user experience. The types of cookies we use are as follows:

Essential Cookies

These cookies are required for the platform's core functions — including maintaining your login session, storing language preferences, and ensuring the security of your betting session. Without these cookies, the platform 1pantas will not function correctly. Essential cookies cannot be declined.

Performance & Analytics Cookies

We use analytics tools to understand how players use our platform in aggregate and anonymised form — which pages are visited most often, how long a typical session lasts, and where users run into issues. This information is used solely to improve the platform and not to identify you as an individual.

Functional Cookies

These cookies store your preferences such as odds display settings, favourite sports, and other personalised configurations. They ensure you do not need to reconfigure these preferences each time you log in to 1pantas.

You can manage your cookie settings through your browser settings. Please note that blocking all cookies may affect the functionality of the platform 1pantas, particularly essential cookies required for login and secure betting sessions.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding the personal data we hold about you. 1pantas respect and facilitate the exercise of these rights:

1pantas retains your personal data for as long as necessary to fulfil the purposes outlined in this policy, subject to any legal requirements that may mandate longer retention periods.

• Active account data: Retained for the duration your account is active and for two years after account closure, for the purpose of resolving any disputes that may arise.
• Financial transaction records: Retained for seven years in accordance with the Companies Act and applicable Malaysian accounting legislation.
• KYC records and identity verification: Retained for five years after the business relationship ends, in accordance with the Anti-Money Laundering Act 2001.
• Support communication logs: Retained for two years for service quality and dispute resolution purposes.
• Technical data and access logs: Retained for 12 months for security and fraud detection purposes.

Once the applicable retention period has expired, data will be securely deleted or anonymised so that it can no longer be linked back to you as an individual.

Platform 1pantas is strictly for adults aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21. If we discover that we have collected data from an underage user, we will promptly take steps to delete that data and close the relevant account.

If you are a parent or guardian with reason to believe that your child who is under the age of majority has registered an account at 1pantas, please contact us immediately at support@1pantas.onl so that we may take appropriate action.

1pantas may update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to how we handle data. Each updated version will be published on this page along with a clear revision date.

For significant changes that affect how we use your data, we will make reasonable efforts to provide advance notice via email or in-platform notification before the changes take effect. Your continued use of the platform 1pantas after the updated policy is published will be considered your acceptance of the latest version.

We encourage you to check this page periodically to stay informed about how we protect your privacy. If you have any concerns about changes made, please contact us before continuing to use the platform.

If you have any questions, concerns, or complaints regarding how 1pantas handles your personal data, or if you wish to exercise any of your data rights, please contact us through the following channels:

We are committed to addressing all privacy-related enquiries seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Communications and Digital.