Official Privacy Policy

Privacy Policy pena67 — Your Privacy Is Our Priority

Pena67 is fully committed to protecting the personal information of every member. This document clearly explains how we collect, use, store, and protect your data — without confusing technical jargon.

Last Updated: 1 January 2026
256-bit SSL Protected
No Data Sales

Version: January 2026
Quick Summary: pena67 collects only the information necessary to operate the platform safely. We do not sell your data to third parties. You have the right to access, correct, and request deletion of your data at any time.

1 Introduction

Pena67 ("we", "Platform", "pena67") values the privacy of every user who uses our services. This Privacy Policy explains in detail how we handle your personal information when you use the website, mobile app, or any service provided by pena67.

By registering or using the pena67 platform, you agree to the data collection and usage practices described in this document. If you do not agree, please discontinue use of the platform and contact us to close your account.

This policy is drafted in accordance with internationally recognised data protection principles and meets the compliance requirements of applicable personal data protection laws.

2 Personal Data We Collect

Pena67 only collects information that is truly necessary to provide a safe, seamless, and responsible service. Below is a summary of the types of data we collect:

Data Category Example Information Purpose of Collection
Identity Information Full name, identification card number, date of birth Identity verification (KYC) and legal compliance
Contact Information Phone number, email address, residential address Account communications, notifications and customer support
Financial Information Bank account number, bank name, transaction records Deposit and withdrawal processing
Usage Data Game records, wagering history, login timestamps Service improvement and fraud detection
Technical Data IP address, device type, web browser, operating system Account security and platform analytics
Cookie Data Session cookies, preference cookies, analytics identifiers Enhanced user experience and analytics
Data Minimisation Principle: pena67 only requests information that is genuinely necessary. We do not request documents or sensitive data beyond what is required for platform operations and legal compliance.

3 How We Use Your Data

Every piece of information we collect is used for a defined and legitimate purpose. We do not use your data for any other purpose without notifying you first.

  • Account management: To create, maintain and protect your account on the pena67 platform.
  • Transaction processing: To process deposits and withdrawals securely and accurately.
  • Identity verification: To conduct KYC processes to meet anti-money laundering legal compliance requirements.
  • Fraud prevention: To detect and investigate any suspicious or unauthorized activity on the platform.
  • Service communications: To send account notifications, promotional updates and important platform-related information.
  • Platform improvement: To analyze usage patterns to improve user experience and platform performance.
  • Customer support: To resolve your inquiries, complaints and support requests more effectively.
  • Legal compliance: To fulfill legal obligations and reporting requirements to relevant authorities.

Whenever we intend to use your data for a new purpose not stated here, we will notify you and request fresh consent where required by law.

4 Data Sharing & Disclosure

Pena67 does not sell, does not rent, and does not trade your personal information to any third party for marketing purposes. Data sharing only occurs in limited and legitimate situations:

  • Trusted service providers: Third-party companies that assist us in operating the platform (payment processors, cloud infrastructure providers, identity verification services) — all of whom are bound by strict confidentiality agreements.
  • Legal requirements: When required by court order, regulatory directive, or applicable legal obligation.
  • Financial crime prevention: In cases suspected to involve money laundering or financing of illegal activities, information may be shared with the relevant authorities.
  • Business transfers: Should pena67 undergo a merger or acquisition, user data may be transferred to the new entity with appropriate notice given to users.
Our Commitment: pena67 will not share your data with advertising companies, data brokers, or any third party for commercial purposes without your explicit consent. This is a non-negotiable commitment.

5 Security & Data Protection

Your data security is a core technical and operational priority at pena67. We continuously invest in security infrastructure to ensure your information remains protected at all times.

  • 256-bit SSL encryption: All data transmitted between your device and pena67's servers is encrypted using the latest TLS protocol.
  • Secure storage: Sensitive data such as passwords is stored in hashed form and cannot be read even by internal staff.
  • Strict access controls: Only staff who require access to specific data are granted permission — based on the principle of minimum access.
  • 24/7 Monitoring: An active intrusion detection system monitors suspicious activity around the clock.
  • Regular security audits: pena67 conducts regular penetration testing and security audits to identify and address system vulnerabilities.
  • Two-factor authentication (2FA): An additional security layer is available for all user accounts to prevent unauthorized access.

While we take all reasonable precautions, no system can be guaranteed 100% secure. You also play an important role in protecting your account by using a strong password and not sharing it with anyone.

6 Cookies & Tracking Technologies

Pena67 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse platform usage patterns.

Types of cookies we use:

  • Essential cookies: Required for core platform operations such as login verification and session security. Cannot be disabled without affecting platform functionality.
  • Performance cookies: To collect information about how you use the platform to help us improve our services. All data is collected anonymously.
  • Functionality cookies: To save your preferences such as language and display settings for a more personalized experience.
  • Analytics cookies: Helps us understand traffic and aggregate user behavior for continuous improvement.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the full functionality of the pena67 platform.

No Cross-Site Tracking: pena67 does not use tracking technologies that monitor your activity on other websites outside our platform.

7 Your Rights as a User

You have the following rights regarding your personal data held by pena67. We are committed to respecting and facilitating the exercise of these rights:

Right of Access

Request a copy of all personal data we hold about you.

Right to Rectification

Correct any inaccurate or incomplete information in your account.

Right to Erasure

Request deletion of your personal data subject to legal requirements.

Right to Restriction

Restrict the processing of your data in certain legitimate situations.

Right to Portability

Receive your data in a structured format for transfer to another platform.

Right to Object

Object to the processing of your data for direct marketing purposes.

To exercise any of the above rights, contact the pena67 support team via live chat or email. We will process your request within 30 business days. For complex cases, this period may be extended with appropriate notice.

8 Data Retention Period

Pena67 retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by applicable law.

  • Active account data: Retained for the duration your account remains active and in service.
  • Data after account closure: Certain information such as transaction records and KYC documents are retained for a minimum of 7 years after account closure for anti-money laundering legal compliance purposes.
  • System logs: Technical and security logs are retained for 12 months before being automatically deleted.
  • Cookie data: Session cookies are deleted when you close your browser; persistent cookies expire according to their configured settings (typically 30–365 days).
Secure Deletion: When the retention period expires, data is deleted using secure disposal methods that ensure the information cannot be recovered.

9 International Data Transfers

In the course of its operations, pena67 may transfer your personal data to servers or service providers operating outside Malaysia. Any such transfer is carried out with adequate safeguards:

  • All international data transfers are protected by legally binding data processing agreements (DPA).
  • Third-party service providers we engage must adhere to data protection standards equivalent to or higher than our own.
  • Sensitive financial data is processed through encrypted, PCI DSS-certified channels.

If you have concerns about the transfer of your data overseas, you may contact us for further information on the protection measures we have in place.

10 Children's Privacy

The pena67 platform is exclusively for individuals aged 18 years and above. We do not knowingly collect, process, or store personal information from any individual under the age of 18.

Should we discover that personal information of a minor has been collected without our knowledge, we will take immediate steps to delete that information and close the account in question. If you believe a minor has registered an account on our platform, please contact us immediately.

11 Amendments to This Privacy Policy

Pena67 reserves the right to update or modify this Privacy Policy from time to time in line with changes in law, industry practices, or platform operations. Any significant amendments will be communicated to you via:

  • A notice prominently displayed on the pena67 platform homepage.
  • Notification emails to your registered email address.
  • An in-account notification upon your next login.

The "Updated" date at the top of this page always reflects the latest version of this policy. Continued use of the pena67 platform after any amendment takes effect will be considered your acceptance of those changes.

Your Rights: If you disagree with any new amendments, you have the right to stop using the platform and close your account. Any valid balance will be returned after the required identity verification.

12 Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your privacy rights, the pena67 team is ready to assist through the following channels:

  • Live Chat: Available 24 hours a day, 7 days a week — the fastest way to get a response.
  • Privacy Email: [email protected] (plain text display only)
  • FAQ Page: Visit FAQ page us for answers to frequently asked questions about privacy.

All privacy-related enquiries are handled by our dedicated team and responded to within 5 working days. For formal requests such as data access or deletion, please clearly state the type of request and your account information so we can process it more efficiently.

Our Commitment: Every privacy complaint is taken seriously by pena67. We do not rely on automated responses alone — each case is individually reviewed by the responsible team.

Data Protection You Can Count On

Behind this document are real systems and commitments that ensure your privacy is protected every day.

High-Grade Encryption

All data transmitted through the pena67 platform is protected with 256-bit SSL encryption — the same standard used by the world's leading financial institutions. Your data is secure both in transit and at rest.

Transparent & Secure KYC

Pena67's identity verification process is handled efficiently, and your document data is stored with maximum protection. Our KYC is more than a requirement — it's an added layer of security for your own account.

No Sale of Data to Third Parties

Pena67 has never and will never sell or trade your personal information to any other company for marketing or commercial gain. Your data remains yours.

Fast Privacy Request Response

Access, correction, or deletion requests are processed within 5 business days. We never leave your request unattended — every case receives serious attention from our privacy team.

Strict Internal Access Controls

Only authorised staff may access user data, and only for legitimate operational purposes. All internal access is logged and audited to ensure no misuse occurs.

Data Breach Notification

In the event of any security incident involving your data, pena67 is committed to notifying affected users within the stipulated timeframe and taking immediate remedial action.


Your Data Is Safe — Start Your Gaming Journey

With a transparent Privacy Policy and high-grade security systems, you can play on pena67 with complete confidence. Register today and experience a Malaysia gaming platform that truly puts your privacy first.

Bahasa Melayu