Your privacy matters to pana21. This policy explains exactly what personal data we collect, why we collect it, how we use it, and the rights you hold over your own information as a player on our platform.
Last Updated: January 2026A concise overview of the principles that shape how pana21 handles your personal data — before you read the full policy detail below.
All personal data and financial information submitted to pana21 is protected by industry-standard TLS/SSL encryption in transit and AES-256 encryption at rest. We conduct regular security audits to maintain the integrity of our infrastructure.
pana21 does not sell, rent, or trade your personal data to third-party marketing organisations. Data shared with service partners — such as payment processors and KYC verification providers — is strictly limited to what is necessary for them to perform their contracted services.
Registered players may request access to their personal data, ask for corrections, or submit a data deletion request at any time by contacting our support team. We respond to all data subject requests within 30 calendar days of receipt.
pana21 uses cookies and similar tracking technologies solely to maintain session state, measure site performance, and improve the player experience. We do not deploy third-party advertising or cross-site tracking cookies on our platform.
We retain your personal data only for as long as is necessary to fulfil the purposes described in this policy, or as required by applicable law. Account data is retained for a minimum of five years following account closure to comply with anti-money-laundering obligations.
In the event of a confirmed data security breach that poses a significant risk to your rights and freedoms, pana21 will notify affected players without undue delay, providing a clear description of the nature of the breach and the steps we are taking to address it.
Your Privacy Matters: This Privacy Policy explains how pana21 ("the Company", "we", "us", "our") collects, processes, stores, and protects the personal data of users ("Player", "you", "your") who access or use the pana21 platform at https://pana21.cam. Please read this policy carefully. By registering an account on pana21, you confirm that you have read and understood how we handle your personal data as described herein.
pana21 operates an online gaming and sports betting platform accessible at https://pana21.cam, primarily serving players based in Indonesia. As part of delivering our services — including account management, payment processing, customer support, bonus administration, and responsible gaming tools — we necessarily collect and process personal data relating to our players and website visitors.
This Privacy Policy sets out a transparent, complete, and accurate account of our data practices. It is intended to give you a clear understanding of what we collect, why we collect it, who we share it with, and the rights you hold over your own information. Where you have concerns or questions about our data handling practices, we encourage you to contact our Data Protection Officer using the contact details at the end of this document.
For the purposes of this Privacy Policy, the following terms shall have the meanings assigned below:
Any information relating to an identified or identifiable natural person. This includes but is not limited to name, date of birth, email address, phone number, residential address, government-issued ID number, financial transaction data, and IP address.
Any operation or set of operations performed on Personal Data, whether or not by automated means, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
The natural or legal person, public authority, or body which determines the purposes and means of processing Personal Data. In the context of this policy, pana21 acts as the Data Controller for all Personal Data collected through the platform.
A natural or legal person, public authority, or body which processes Personal Data on behalf of the Data Controller. Examples include payment service providers, KYC verification vendors, and cloud hosting infrastructure providers.
The identified or identifiable natural person to whom Personal Data relates. In the context of this policy, any player or visitor whose data is processed by pana21 is a Data Subject.
pana21 collects the following categories of Personal Data in the course of operating the platform:
pana21 collects Personal Data through the following methods:
The majority of Personal Data is provided by you during account registration, KYC verification, deposit and withdrawal requests, customer support inquiries, and when configuring your account preferences.
When you access the pana21 platform, certain technical and usage data is automatically collected via cookies, server logs, and similar technologies. This includes IP address, browser fingerprint, page navigation patterns, and session duration. For more detail, see the Cookies & Tracking section below.
Where permitted by law, we may receive Personal Data from third parties such as KYC verification providers (to confirm your identity and prevent fraud), payment processors (to verify bank or e-wallet account ownership), and public databases (to comply with anti-money-laundering and sanctions screening obligations).
pana21 processes your Personal Data for the following purposes, each supported by a lawful basis under applicable data protection principles:
| Purpose | Legal Basis |
|---|---|
| Account Creation & Management To create, maintain, and administer your player account. |
Performance of a contract (the Terms & Conditions you agreed to at registration). |
| Identity Verification (KYC) To confirm your identity, age, and eligibility to play, and to comply with anti-money-laundering (AML) regulations. |
Legal obligation and legitimate interest (fraud prevention, regulatory compliance). |
| Payment Processing To process deposits, withdrawals, and refunds via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, and other supported payment methods. |
Performance of a contract. |
| Game Delivery & Settlement To enable you to place wagers, play casino games, participate in togel draws, and receive your winnings. |
Performance of a contract. |
| Bonus Administration To award, track, and enforce the terms of bonuses and promotional offers. |
Performance of a contract. |
| Customer Support To respond to your inquiries, resolve disputes, and provide technical assistance. |
Performance of a contract and legitimate interest (providing high-quality customer service). |
| Responsible Gaming To enforce age restrictions, monitor for problem gambling indicators, and facilitate self-exclusion or cooling-off requests. |
Legal obligation and legitimate interest (protecting vulnerable players). |
| Fraud Prevention & Security To detect and prevent fraudulent activity, money laundering, account abuse, and security breaches. |
Legal obligation and legitimate interest (protecting our business and other players). |
| Platform Analytics & Improvement To analyse how players use the site and improve platform performance, features, and user experience. |
Legitimate interest (operating an effective and competitive platform). |
| Marketing Communications To send you promotional emails, SMS messages, or push notifications about bonuses, new games, and special events (only where you have opted in). |
Consent (you may withdraw consent at any time via your account settings or unsubscribe links). |
| Legal Compliance & Dispute Resolution To comply with court orders, regulatory investigations, audit requests, and to defend against legal claims. |
Legal obligation and legitimate interest. |
pana21 does not sell or rent your Personal Data to third parties for their own marketing purposes. However, we do share your data with carefully selected service providers who assist us in operating the platform. These third parties act as Data Processors under our instruction and are contractually bound to protect your data in accordance with this policy.
We may disclose your Personal Data to law enforcement agencies, regulators, courts, or other governmental authorities where required by applicable law, court order, or regulatory investigation. We will only disclose the minimum data necessary to satisfy the legal obligation.
In the event pana21 is acquired by another company, merges with a third party, or undergoes a corporate restructuring, your Personal Data may be transferred to the acquiring entity as part of the transaction. We will notify you via email if such a transfer occurs, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.
pana21 operates internationally and utilises cloud infrastructure and service providers located in multiple jurisdictions. Your Personal Data may be transferred to, stored in, and processed in countries outside of Indonesia, including jurisdictions that may not offer the same level of data protection as Indonesian law.
Where we transfer data internationally, we take steps to ensure that your data remains protected in accordance with this Privacy Policy and applicable data protection laws. This includes entering into standard contractual clauses (SCCs) with our international service providers and ensuring that any third-party processors adhere to internationally recognised data protection standards.
By registering an account on pana21, you consent to the transfer of your Personal Data outside Indonesia for the purposes described in this policy.
pana21 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, tax, and accounting obligations.
For players with active accounts, we retain your Personal Data for the duration of your account lifecycle and for a period of five (5) years following account closure to comply with anti-money-laundering regulations and to facilitate any post-closure inquiries or disputes.
Accounts that remain inactive (no login or wagering activity) for a continuous period of 12 months will be flagged for review. If inactivity extends beyond 24 months, we may close the account and retain only essential data for legal compliance purposes.
Transaction records, deposit and withdrawal history, and payment method details are retained for a minimum of seven (7) years from the date of the last transaction to meet tax, audit, and financial reporting obligations.
If you have opted in to receive marketing communications but later withdraw consent, we will suppress your contact details from future campaigns but may retain a record of your opt-out preference indefinitely to ensure we do not re-contact you.
Server logs, IP addresses, and technical session data are typically retained for 90 days for security monitoring and troubleshooting purposes, after which they are automatically purged unless required for ongoing fraud investigations.
pana21 uses cookies and similar tracking technologies to maintain session state, remember your preferences, and analyse how players interact with the platform.
Cookies are small text files stored on your device by your web browser when you visit a website. They enable the website to remember your actions and preferences (such as login credentials, language selection, and font size) over a period of time, eliminating the need to re-enter this information each time you visit or navigate between pages.
Some cookies on the pana21 platform are set by third-party service providers we work with, such as content delivery networks (CDNs) and analytics platforms. These third parties may also collect data about your browsing activity across multiple sites. We do not permit third-party advertising or cross-site tracking cookies on our platform.
Most web browsers allow you to control cookies through their settings. You can typically configure your browser to refuse all cookies, accept only certain cookies, or delete cookies after your browsing session ends. Please note that disabling cookies may impair certain features of the pana21 platform, such as automatic login and preference memory.
pana21 takes the security of your Personal Data seriously and has implemented a comprehensive set of technical and organisational measures to protect against unauthorised access, alteration, disclosure, or destruction of data.
In the unlikely event of a data breach that poses a significant risk to your rights and freedoms, pana21 will notify you without undue delay via email to the address registered on your account. The notification will describe the nature of the breach, the data affected, the likely consequences, and the measures we are taking to address the breach and prevent recurrence.
As a player whose Personal Data is processed by pana21, you hold the following rights under applicable data protection principles:
You may request a copy of the Personal Data we hold about you. We will provide this data in a structured, commonly used, and machine-readable format (such as CSV or JSON) within 30 calendar days of receiving your request.
If you believe any Personal Data we hold about you is inaccurate or incomplete, you may request that we correct or update it. You can update certain information (such as email address, phone number, or residential address) directly from your account settings.
You may request deletion of your Personal Data where: (a) the data is no longer necessary for the purposes for which it was collected; (b) you withdraw consent (where consent was the legal basis); (c) you object to processing and there are no overriding legitimate grounds; or (d) the data has been unlawfully processed. Note that we may be required to retain certain data to comply with legal obligations (e.g., AML record-keeping requirements).
You may request that we temporarily suspend processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or object to processing while we verify the legitimacy of our processing activity.
Where technically feasible, you may request to receive your Personal Data in a structured, machine-readable format, or ask us to transmit it directly to another service provider (where this is technically possible).
You may object to processing of your Personal Data where the legal basis is legitimate interest. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where the processing is necessary for the establishment, exercise, or defence of legal claims.
Where we process your Personal Data based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time by updating your preferences in your account settings, clicking the unsubscribe link in promotional emails, or contacting our support team. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.
To exercise any of the rights described above, please contact our Data Protection Officer at [email protected] (plain text — not a clickable link). We will respond to all valid data subject requests within 30 calendar days of receipt. If your request is complex or we receive multiple requests from you, we may extend this period by a further 30 days and will notify you of any such extension.
We may request additional information from you to verify your identity before processing your request, particularly for requests involving access to or deletion of Personal Data. This is a security measure to ensure that Personal Data is not disclosed to or erased at the request of an unauthorised party.
pana21 strictly prohibits the use of our platform by individuals under the age of 21 years. We do not knowingly collect or process Personal Data from minors. If we become aware that a player is below the minimum age, we will immediately close the account, cease processing their Personal Data, and forfeit any funds held in the account.
As part of our Know Your Customer (KYC) verification process, we require all players to submit proof of age via government-issued identification documents. If you are a parent or guardian and believe your child has registered an account on pana21, please contact us immediately at [email protected] (plain text — not a clickable link) so we can take appropriate action.
The pana21 platform may contain links to third-party websites, including payment provider portals (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja), game studio sites, or responsible gaming resource pages. This Privacy Policy applies only to data collected by pana21. We are not responsible for the privacy practices or content of third-party websites, even where you access them via a link from our platform.
We strongly encourage you to read the privacy policies of any third-party sites you visit to understand how they collect, use, and protect your Personal Data. pana21 has no control over and assumes no responsibility for the data practices of external sites or services.
pana21 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. Where changes are material and affect how we process your Personal Data, we will notify you in advance via email to the address registered on your account or via a prominent notice displayed on the platform homepage.
The "Last Updated" date at the top of this page indicates when the policy was most recently revised. Continued use of the pana21 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated terms, you must cease using the platform and may request account closure and data deletion in accordance with your rights as described above.
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your Personal Data.
If you have any questions, concerns, or complaints about this Privacy Policy, our data handling practices, or wish to exercise any of your data subject rights, please contact our Data Protection Officer:
Email: [email protected] (plain text — not a clickable link)
Support Hours: 24 hours a day, 7 days a week, including Indonesian public holidays. We aim to respond to all privacy inquiries within 48 hours during standard WIB (UTC+7) business hours.
If you are dissatisfied with our response to a privacy concern, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. For Indonesian residents, this may include the Ministry of Communication and Information Technology (Kementerian Komunikasi dan Informatika / Kominfo) or any successor body responsible for data protection oversight.
We are committed to working with you to resolve any data privacy issues fairly and promptly. Before escalating your complaint to a regulator, we encourage you to contact us directly so that we may have the opportunity to address your concerns.
Thank You for Reading: We appreciate that you have taken the time to understand how pana21 handles your Personal Data. Your trust is fundamental to our relationship, and we are committed to maintaining the highest standards of data protection and privacy. If you have any questions about any aspect of this policy, our team is here to help.
Our Data Protection Officer and support team are available around the clock to answer any questions you may have about this Privacy Policy. You can also review our Terms & Conditions, Responsible Gaming page, or browse our FAQ for additional information.