This Privacy Policy was last updated on 1 January 2026. We are committed to protecting your personal information at all times.
Official Data Protection Document

Pena67 Privacy Policy – Malaysia Member Personal Data Protection

Pena67 takes our responsibility to protect your personal information seriously. This document transparently explains how we collect, use, store, and safeguard your data.

Updated: 1 January 2026 Version 3.2 Bahasa Melayu (Malaysia)

Pena67 Privacy Commitment


Six core principles that form the foundation of how pena67 handles the personal data of every member.

Advanced-Level Data Encryption

All personal data and financial transactions are protected with 256-bit SSL encryption. Your information is never stored in a readable format without explicit authorisation.

No Sale of Data to Third Parties

Pena67 does not sell, rent, or disclose your personal data to any third party for marketing or commercial purposes without your consent.

Full Control in Your Hands

You have the right to access, correct, or delete your personal data at any time. Requests can be made through our customer support channels.

Limited Data Collection

We only collect data that is strictly necessary to provide you with the best service. No excess data is collected beyond the operational requirements of the platform.

Malaysian Legal Compliance

Pena67's privacy policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

Policy Change Notifications

Any significant changes to this Privacy Policy will be communicated to members via in-platform notifications before the changes take effect.

This Privacy Policy describes pena67's privacy practices regarding the collection and use of your personal information. By using the pena67 platform, you agree to the terms set out in this document.

Introduction

Pena67 ("we", "Platform", "pena67") respects the privacy of every individual who uses our services. As a responsible online entertainment platform, we understand how vital the security and confidentiality of your personal information is in today's increasingly complex digital landscape.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. We want to ensure you always know what information we collect, why it is collected, how it is used, and who may have access to it.

If you have any questions about how we handle your personal data, the pena67 support team is always ready to assist you.

Information We Collect

2.1 Information You Provide Directly

During the registration process and your use of the platform, you may provide us with the following information:

Type of Information Example Primary Purpose
Identity Information Full name, date of birth, identification card number Identity verification (KYC), fraud prevention
Contact Information Email address, phone number Account communications, security notifications
Financial Information Bank account number, bank name Deposit and withdrawal processing
Supporting Documents MyKad copy, proof of address KYC compliance and regulatory requirements
Account Information Username, password (encrypted) Secure access to your account

2.2 Automatically Collected Information

When you use the pena67 platform, we automatically collect certain information through standard tracking technologies used by most online platforms:

  • Technical Data: IP address, web browser type, operating system, screen resolution, and device information.
  • Usage Data: Pages visited, session duration, games played, and navigation patterns within the platform.
  • Transaction Data: A complete record of all deposits, withdrawals, wagering, and wins associated with your account.
  • Location Data: General location information based on your IP address for security and compliance purposes.
  • Cookie Data: Session cookies and persistent cookies to improve your browsing experience.

How We Use Your Data

Pena67 uses the information collected solely for legitimate purposes related to the provision of our services. The following are the primary purposes for which your personal data is used:

  • Account Management: Creating and managing your member account, including identity verification and required KYC processes.
  • Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
  • Platform Security: Detecting and preventing fraud, money laundering, unauthorized access, and other suspicious activities.
  • Service Improvement: Analyzing usage patterns to improve platform performance, user interface, and game quality.
  • Important Communications: Sending account-related notifications, security updates, and relevant transaction information.
  • Legal Compliance: Fulfilling applicable legal obligations and regulatory requirements.
  • Customer Support: Resolving complaints, inquiries, and technical issues you report to us.
  • Responsible Gaming: Monitoring gameplay patterns to identify members who may need assistance related to problem gambling.

Purpose Limitation Principle: pena67 will not use your personal data for any purpose other than those stated in this Privacy Policy without first obtaining your consent.

Data Storage & Security

4.1 Security Infrastructure

Pena67 continually invests in the latest cybersecurity infrastructure to ensure your personal data remains protected at all times. The security measures we employ include:

  • 256-bit SSL/TLS encryption for all communications between your device and our servers.
  • Database-level data encryption for sensitive information such as financial details.
  • Multi-layered firewalls and an intrusion detection system (IDS) active 24/7.
  • Strict role-based access control for internal staff — only authorized personnel may access member personal data.
  • Regular security audits by independent parties to identify and address any vulnerabilities.
  • Periodically encrypted data backups stored at geographically separate locations.

4.2 Data Storage Location

Your personal data is stored on secure servers. In certain circumstances, data may be transferred to or stored at facilities outside Malaysia. In such cases, pena67 ensures that all relevant service providers comply with protections equivalent to or higher than Malaysia's PDPA.

Sharing Information with Third Parties

Pena67 does not sell or rent your personal data to third parties. However, under certain circumstances, we may share necessary information with the following parties:

  • Payment Service Providers: To securely process deposits and withdrawals through approved payment channels.
  • Game Providers: Limited information required to allow you to access and play games from third-party providers within the platform.
  • Statutory Authority: When required by law, court order, or a legitimate request from law enforcement agencies.
  • Technical Service Providers: Companies that assist us in platform operations such as hosting, analytics, and cybersecurity — subject to strict confidentiality agreements.
  • Identity Verification Service Providers: For KYC purposes and anti-money laundering (AML) verification.

All third parties working with pena67 are required to sign binding data protection agreements and comply with the security standards we set. They are not permitted to use your data for any purpose other than what has been agreed upon.

Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. pena67 uses cookies and similar technologies to enhance your experience, maintain session security, and understand how our platform is used.

6.2 Types of Cookies Used

  • Session Cookies: Temporary cookies that are deleted when you close your browser. Used to maintain your login session and ensure security during use.
  • Persistent Cookies: Stored on your device for a set period. Allows us to remember your preferences and improve your experience on future visits.
  • Analytics Cookies: Helping us understand how members interact with the platform for continuous improvement purposes.
  • Security Cookies: Used to detect suspicious activity and protect your account from unauthorized access.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of some parts of the pena67 platform.

Your Rights Regarding Personal Data

As a pena67 member, you have the following rights regarding your personal data, in accordance with Malaysia's PDPA:

01
Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

02
Right to Rectification

You may request that we correct any personal data that is inaccurate or incomplete.

03
Right to Erasure

You may request the deletion of your personal data, subject to applicable legal obligations.

04
Right to Restrict Processing

You have the right to request that we restrict the processing of your data under certain circumstances.

05
Right to Data Portability

You may request your personal data in a machine-readable format for transfer to another service.

06
Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time.

To exercise any of the above rights, please contact the pena67 customer support team via live chat on the platform. We will process your request within 14 business days. Please note that some requests may be subject to certain conditions or restrictions based on our legal obligations.

Children's Data Protection

The pena67 platform is strictly for individuals aged 18 and above. We do not knowingly collect, store, or process any personal information from individuals under the age of 18. Should we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that information from our systems.

Parents or guardians who have reason to believe their child has registered an account on pena67 are urged to contact our support team immediately.

Links to Third-Party Sites

The pena67 platform may contain links to third-party websites or services in certain contexts. Please note that pena67's Privacy Policy applies solely to our platform. We are not responsible for the privacy practices or content of any third-party websites.

We encourage you to review the privacy policy of every website you visit before providing any personal information to them.

Data Retention Period

Pena67 retains your personal data for as long as your account is active or as long as necessary to provide services to you. Following account closure, certain data may be retained for the following additional periods:

  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with tax and anti-money laundering legal requirements.
  • KYC Documents: Retained for a minimum of 5 years after account closure for regulatory compliance purposes.
  • Communication Logs: Retained for 2 years for reference in the event of disputes or complaints.
  • Technical Data & System Logs: Retained for 90 days for security and troubleshooting purposes.

Upon expiry of the specified retention period, your data will be securely deleted or anonymised in accordance with established procedures.

Amendments to This Privacy Policy

Pena67 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or service improvements. Every update will be accompanied by the latest amendment date at the top of this document.

For significant changes that affect how we use your personal data, we will notify you via in-platform notification at least seven (7) days before the changes take effect. Your continued use of the pena67 platform after the notice is given will be considered your acceptance of the amended Privacy Policy.

Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

  • Live Chat: Available 24/7 via the pena67 platform — the fastest way to get a response.
  • Email: [email protected] (text display only)
  • FAQ: Visit page FAQ us for answers to common privacy-related questions.

We aim to respond to all privacy-related inquiries within 3 working days. For formal complaints regarding personal data processing, you also have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia in accordance with PDPA 2010.

Your Data Is Safe with pena67

With high-level encryption and a transparent privacy policy, you can play with peace of mind at pena67. Join our trusted member community today.

256-bit SSL Encrypted Complying with Malaysia's PDPA No Data Sales
Bahasa Melayu