Privacy Policy

01 Introduction

This Privacy Policy describes how Palang200 ("we", "us", "our", "the Platform") — operating the online casino and sports betting services accessible at palang200.cam — collects, processes, stores, and discloses personal data relating to users ("you", "User") and visitors of our platform.

Palang200 takes its data-protection obligations seriously. We are committed to handling personal data in a manner that is transparent, purpose-limited, and proportionate to our legitimate operational and regulatory needs. This Policy is designed to give you a clear and complete picture of our data practices so that you can make an informed decision about using the platform.

By registering an Account with Palang200, accessing any part of the platform, or submitting personal information to us in any form, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein.

This Privacy Policy should be read alongside our Terms & Conditions, which form the primary agreement governing your use of the Palang200 platform.

02 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, or deletion.
• "Data Controller" — Palang200, the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" — a third-party service provider that processes Personal Data on behalf of Palang200, under contract and in accordance with our instructions.
• "User / "You" — any individual who registers an Account on or otherwise accesses the Palang200 platform.
• "Account" — the registered profile created by a User upon completing the Palang200 registration process.
• "KYC" — Know Your Customer; the identity and document verification process required before withdrawal processing and for ongoing compliance monitoring.
• "Cookies" — small data files placed on your device by websites to enable functionality, security features, session management, and aggregate analytics.

03 Data We Collect

Palang200 collects Personal Data in the following categories, depending on how you interact with the platform:

3.1 Registration & Identity Data

When you create an Account, we collect: full name; date of birth; email address; username; password (stored in hashed, non-reversible form); and country of residence. This information is used to establish and manage your Account.

3.2 KYC & Verification Data

Before processing withdrawals, and at other times required by our compliance obligations, we collect: government-issued identity document (Malaysian MyKad, passport, or equivalent); proof of address; proof of payment method ownership. These documents are processed in a secure environment and retained only for as long as legally required.

3.3 Financial & Transaction Data

We record all deposit and withdrawal transactions, including payment method type (e.g., Touch 'n Go eWallet, DuitNow, FPX, CIMB, Maybank, Public Bank), transaction amounts in MYR, timestamps, and transaction reference numbers. We do not store full card numbers or sensitive authentication credentials for payment methods — these are handled directly by our payment processing partners.

3.4 Gaming & Betting Activity Data

We collect records of your gaming sessions, bet placement history, wagering amounts, game results, and responsible-gambling tool usage (such as deposit limit settings and self-exclusion requests). This data is used for account management, dispute resolution, responsible-gambling monitoring, and regulatory compliance.

3.5 Technical & Usage Data

When you access the platform, we automatically collect: IP address; device type and operating system; browser type and version; session timestamps; pages visited; and referral source. This data is used for platform security, fraud detection, and aggregate analytics.

3.6 Communications Data

We retain records of your communications with our support team (live chat transcripts and email correspondence) for quality assurance, dispute resolution, and compliance purposes.

04 How We Use Your Data

The following table summarises our primary data-processing activities, the category of data used, and the corresponding lawful basis:

05 Legal Basis for Processing

Palang200 relies on the following legal bases for processing Personal Data:

• Contractual Necessity: Processing required to perform the contract between you and Palang200 — principally to operate your Account, process transactions, and deliver gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC verification, anti-money laundering obligations, and responsible-gambling mandates under our operating licence.
• Legitimate Interests: Processing carried out for our legitimate business interests where those interests are not overridden by your rights and freedoms — for example, fraud prevention, platform security monitoring, and internal aggregate analytics. We conduct a proportionality assessment before relying on this basis.
• Consent: Processing for optional purposes, such as sending promotional communications, which requires your explicit opt-in. You may withdraw consent at any time by adjusting your Account preferences or contacting support.

06 Data Sharing & Disclosure

Palang200 does not sell your Personal Data. We do not share your information with third parties for their own marketing or commercial purposes. Personal Data is shared only in the following limited circumstances:

6.1 Service Providers (Data Processors)

We engage carefully selected third-party service providers who process Personal Data on our behalf to help us operate the platform. These include payment processors (who handle transaction data for deposits and withdrawals via DuitNow, FPX, and e-wallet providers), KYC verification technology providers, fraud-detection system operators, cloud infrastructure providers, and customer-support platform vendors. All processors are bound by data-processing agreements that prohibit use of your data for any purpose other than delivering services to Palang200.

6.2 Legal and Regulatory Disclosure

We may disclose Personal Data to regulatory authorities, law enforcement agencies, courts, or government bodies where we are legally required to do so, or where disclosure is necessary to protect the rights, safety, or interests of Palang200, its Users, or the public.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a material part of Palang200's assets, User data may form part of the transferred assets. You will be notified of any such change via email and in-platform notice, and any successor entity will be required to honour the privacy commitments set out in this Policy.

07 Data Retention

We retain Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our general retention principles are as follows:

• Account and identity data: Retained for the duration of the active Account relationship and for a minimum of five (5) years following Account closure, in accordance with anti-money laundering record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years from the date of verification or date of the last transaction, whichever is later.
• Transaction and financial records: Retained for a minimum of five (5) years to comply with financial reporting and AML requirements.
• Gaming activity logs: Retained for three (3) years from the date of each session for dispute resolution and responsible-gambling monitoring purposes.
• Customer support communications: Retained for two (2) years from the date of each interaction.
• Marketing consent records: Retained for the duration of the consent and for one (1) year following withdrawal of consent as evidence of the original opt-in.

Upon expiry of the relevant retention period, Personal Data is securely deleted or permanently anonymised in accordance with our data-destruction procedures.

08 Data Security

Palang200 implements a comprehensive set of technical and organisational security measures designed to protect Personal Data against unauthorised access, loss, destruction, alteration, or disclosure. Our security programme includes:

• Encryption in transit: All data transmitted between your device and the Palang200 platform is encrypted using TLS 1.3 / 256-bit SSL.
• Encryption at rest: Sensitive data stored in our systems — including KYC documents and financial records — is encrypted using AES-256.
• Access controls: Access to personal data within our organisation is restricted on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for all internal systems.
• Penetration testing: Our platform undergoes regular independent security testing and vulnerability assessments.
• Password hashing: User passwords are stored as salted hashes using industry-standard algorithms — we do not store plaintext passwords at any point.
• Incident response: We maintain a documented data-breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected Users and the relevant regulatory authority within the timeframes required by applicable law.

09 Cookies & Tracking Technologies

Palang200 uses cookies and similar technologies (such as local storage and session tokens) to enable core platform functionality, maintain security, and collect aggregate usage analytics. We categorise our cookie use as follows:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. You cannot opt out of these without impairing core functionality.
• Functional Cookies: Remember your preferences — such as language settings and account display options — to improve your experience across sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how Users interact with the platform (pages visited, session duration, error occurrences). This data is used solely for internal platform improvement and is not shared with third-party advertising networks.

We do not use advertising cookies, cross-site tracking technologies, or any cookie that profiles your activity outside of the Palang200 platform. You may manage cookie preferences via your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use the platform.

10 International Data Transfers

Palang200's platform infrastructure and certain service providers operate across international jurisdictions. As a result, your Personal Data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data in accordance with internationally recognised data-protection standards, including:

• Data-processing agreements with processor entities that impose equivalent data-protection obligations to those set out in this Policy.
• Use of jurisdictions that maintain adequate data-protection frameworks as recognised by relevant international standards bodies.
• Technical security measures that apply uniformly regardless of the geography of processing.

11 Your Data Rights

Subject to applicable law and certain legitimate exceptions (such as legal retention obligations), you have the following rights in relation to your Personal Data held by Palang200:

• Right of Access: You may request a copy of the Personal Data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to Data Portability: You may request a copy of data you have provided to us in a structured, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including for direct marketing purposes (if applicable).
• Right to Restrict Processing: You may request that we pause processing of your data in certain circumstances — for example, where you contest its accuracy while we verify it.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our support team via live chat at palang200.cam or by email at [email protected]. We will respond to all valid requests within thirty (30) days. In exceptional cases requiring additional verification or complex processing, we may extend this period by a further thirty (30) days with notice.

12 Minors & Age Restriction

The Palang200 platform is strictly for users aged 21 years and above. We do not knowingly collect Personal Data from individuals below this age. Age verification is enforced through our registration process and KYC procedures.

If we become aware that Personal Data has been collected from an individual below the minimum age, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor has registered an Account on our platform, please contact us immediately via live chat so that we can investigate and take appropriate action.

13 Policy Amendments

Palang200 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements. Where changes are material — for example, where we introduce a new category of data processing or change how we share data — we will notify registered Users via email and in-platform notification at least fourteen (14) days before the changes take effect.

The "Last updated" date at the top of this page reflects when the current version of the Policy was published. We encourage you to review this page periodically to stay informed of how your data is handled.

14 Contact & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data, please contact us through the following channels:

• Live Chat: Available 24/7 at palang200.cam — the fastest way to reach our team.
• Email: [email protected] (displayed as plain text — not a clickable link)

We are committed to resolving all privacy-related concerns promptly and fairly. If you are not satisfied with our response, you may have the right to lodge a complaint with a relevant data-protection supervisory authority in your jurisdiction. Malaysian residents may wish to refer to the Personal Data Protection Act 2010 (PDPA) and the guidance published by the Department of Personal Data Protection Malaysia (JPDP) for further information on their rights and available recourse mechanisms.

Palang200 — palang200.cam — Privacy Policy last updated 1 January 2026. For players aged 21 and above only.