Privacy & Management of Personal Data

Introduction and scope

Panalobet is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, store, use, disclose and safeguard your information in connection with your use of Panalobet’s online gambling platform and related services. By registering an account, placing bets, or using our services, you acknowledge and consent to the practices described herein. We may update this policy from time to time; we will post changes on our platform with an effective date for the revised terms.

Who controls your personal data

Panalobet acts as the data controller for the personal information you provide. We may appoint a Data Protection Officer or Privacy Team to oversee questions about this policy. To contact our privacy team, use the in‑platform support channels described under “How to contact us.”

Categories of personal data we collect

Identity data: name, username, date of birth, and gender where provided.
Contact data: email address, postal address, telephone numbers.
Financial data: payment card details, bank account information, and related payment records.
Transaction data: bets placed, deposits, withdrawals, refunds, and other payment events.
Technical data: IP address, device identifiers, browser type and version, time zone, language settings, and activity logs.
Profile data: account preferences, settings, and feedback or survey responses.
Usage data: interactions with our platform, features used, and navigation paths.
Marketing and communications data: preferences for receiving marketing communications and responses to campaigns.

We do not actively collect or process special categories of data unless required by law or strictly necessary to provide services and with appropriate safeguards.

How we collect your data

Direct interactions: you provide data when opening an account, depositing funds, placing bets, submitting documents for verification, or contacting support.
Automated technologies: we collect Technical Data and Usage Data through cookies and similar technologies as you interact with our platform.
Third parties: we obtain information from identity verification providers, payment processors, fraud prevention services, and regulators where permitted by law.

How we use your personal data

To provide products and services you have requested, including account management, betting, and payments.
To verify age, identify, and prevent underage or restricted access to services.
To monitor, secure and improve the performance and integrity of the platform, including fraud prevention and risk management.
To communicate with you about account activity, changes to terms, and customer service matters.
To conduct data analytics to improve our offerings, user experience, and marketing relevance.
To provide marketing communications, where you have consented or where permitted by applicable law, and to manage your marketing preferences.

Legal bases for processing

Performance of a contract: processing necessary to establish, manage, or fulfill our services and your bets.
Legitimate interests: processing for security, fraud prevention, platform improvement, and direct marketing where allowed by law.
Legal obligations: processing to comply with applicable regulatory and legal requirements.
Consent for direct marketing: where required, we rely on your consent to send marketing communications. You may withdraw consent at any time.

Cookies and tracking technologies

We use cookies and similar technologies to enable core functionality, analyze usage, and customize content. Session cookies are deleted when you close your browser; persistent cookies remain on your device to recognize you on return visits. You may manage cookies through your browser settings or our in‑platform preferences. Disabling cookies may limit some features or access to parts of the platform.

International transfers and cross-border processing

We may transfer your personal data to countries outside your residence or outside the jurisdiction in which you are located. We will implement safeguards to protect your information, including standard contractual clauses or other legally recognized transfer mechanisms where required. Where feasible, transfers will be to jurisdictions providing an adequate level of data protection.

Sharing your personal data

Service providers: IT, security, customer support, payment processing, and analytics services acting on our behalf under confidentiality obligations.
Regulators and law enforcement: as required by applicable law or to protect our rights and the safety of users.
Fraud prevention and compliance: to detect and prevent fraud, money laundering, or other unlawful activities.
In the event of corporate transactions: in a merger, acquisition, or sale of assets, your data may be transferred to the successor entity under equivalent privacy protections.

Data retention and deletion

We retain personal data for as long as necessary to provide our services and fulfil legal, regulatory, or business purposes. Retention periods are determined by regulatory requirements, contractual obligations, and reasonable expectations of our customers. When data is no longer required, we securely delete or anonymize it unless a longer retention is legally mandated or necessary for ongoing protections.

Security of your data

We implement appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. This includes encryption of data at rest and in transit (e.g., TLS 1.2 and above), access controls, audit trails, regular security assessments, and vendor due diligence. We require third parties to maintain equivalent safeguards and to process personal data only for specified purposes.

Your rights

You have rights regarding your personal data, subject to applicable law. To exercise these rights, contact our Privacy Team through the platform’s support channel. We will respond within one month unless a longer period is permitted by law for complex requests.

Right of access: obtain confirmation of whether we process your data and access to that data.
Right to rectification: correct inaccurate or incomplete data.
Right to erasure: request deletion where there is no overriding legitimate reason to continue processing.
Right to restriction: limit processing under certain circumstances.
Right to data portability: obtain an electronic copy of your data in a structured, commonly used format.
Right to object: stop processing based on legitimate interests or direct marketing, where applicable.
Right to withdraw consent: revoke consent for processing, including marketing, where consent is the basis for processing.

Marketing and preferences

You may opt out of marketing communications at any time via the in‑platform settings or by following the unsubscribe instructions in emails or messages. We will not share your personal data with third parties for their own marketing purposes without your explicit consent. You may set or adjust marketing preferences in your account profile.

Children’s privacy

Access to Panalobet is strictly limited to adults. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a child has provided personal information in connection with our services, we will take steps to delete such data and may suspend or terminate the child’s account.

How to contact us and how to lodge a complaint

If you have questions about this policy or wish to exercise your rights, contact our Privacy Team via the platform’s Support feature. You may also raise concerns with your local data protection authority in accordance with local law. We will provide information about how to submit a complaint upon request.

Changes to this Privacy Policy

We may revise this Privacy Policy periodically. We will publish the updated policy on our platform and, where required by law, obtain your consent for material changes. The revised policy takes effect on the stated effective date.