This Privacy Policy explains how Pagoda127 collects, processes, stores, and protects the personal data of users accessing our platform. We handle your information with care and in accordance with internationally recognised data protection principles.
Your personal information and financial data are stored on encrypted servers with industry-standard 256-bit SSL protection. We apply strict access controls so only authorised personnel can handle your data.
Pagoda127 does not sell, rent, or trade your personal data to any third party for marketing purposes. Data shared with service providers is limited strictly to what is necessary for operational purposes.
You retain the right to access, correct, export, or request deletion of your personal data at any time. Our data team responds to verified requests within 30 days of receipt.
We use cookies solely to improve platform performance, maintain your session, and deliver relevant content. You can manage cookie preferences through your browser settings at any time.
Payment data linked to your Maybank, Touch'n Go eWallet, CIMB, DuitNow, or crypto transactions is processed via secure gateways. Full payment credentials are never stored on Pagoda127 servers.
Marketing communications are only sent to users who have explicitly consented. You may withdraw consent and unsubscribe from promotional emails or WhatsApp messages at any time through your Account Settings.
This Privacy Policy ("Policy") is published by Pagoda127 ("we", "us", "our") and applies to all users ("you", "your") who access or use the platform available at https://pagoda127.cam, including its associated mobile-optimised website and any related services.
Pagoda127 is committed to handling personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. We have designed our data practices to give you clarity over what information we hold, why we hold it, how long we keep it, and what choices you have regarding its use.
This Policy should be read alongside our Terms and Conditions, which govern your overall use of the platform. By creating an Account on Pagoda127 or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy.
For Malaysian Users: While Malaysia's Personal Data Protection Act 2010 (PDPA) applies to data processors operating domestically, Pagoda127 operates as an international platform. We nonetheless apply data protection standards consistent with those expected under the Malaysian PDPA as a matter of principle, because the privacy of our Malaysian users matters to us.
The following definitions apply throughout this Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that can identify you, directly or indirectly, as an individual — including your name, email address, phone number, payment details, device identifiers, and IP address. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transfer, or deletion. |
| "Data Controller" | Pagoda127, in its capacity as the entity that determines the purposes and means of processing Personal Data collected through the platform. |
| "Data Processor" | A third party that processes Personal Data on behalf of Pagoda127 under a binding data processing agreement — for example, payment gateway providers and identity verification services. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose. |
| "Cookies" | Small data files placed on your browser or device by the platform to facilitate session management, performance analytics, and user preference storage. |
| "KYC Data" | Identity verification documents and information collected as part of our Know Your Customer process, including copies of government-issued identification such as the Malaysian MyKad or passport. |
Pagoda127 collects the following categories of Personal Data from users of the platform:
3.1 Identity Data
3.2 Contact Data
3.3 Financial Data
3.4 Technical Data
3.5 Behavioural Data
Minimum Data Principle: Pagoda127 collects only the Personal Data that is necessary for the specific purposes outlined in this Policy. We do not collect data for its own sake, and we regularly review our data collection practices to ensure they remain proportionate.
We collect your Personal Data through the following channels:
Pagoda127 processes your Personal Data one or more of the following legal bases:
| Legal Basis | Applicable Processing Activities |
|---|---|
| Contractual Necessity | Processing required to fulfil our obligations under the account agreement — including account creation, payment processing, withdrawal execution, and customer support. |
| Legal Obligation | Processing required to comply with anti-money laundering (AML) obligations, KYC regulations, and international gaming licence conditions — including identity verification and transaction monitoring. |
| Legitimate Interests | Fraud detection and prevention, platform security, responsible gambling monitoring, and internal analytics to improve the platform — where such interests are not overridden by your fundamental privacy rights. |
| Consent | Marketing communications, personalised promotions, and non-essential cookies — only where you have provided explicit, freely given consent that can be withdrawn at any time. |
The Personal Data we hold about you is used for the following purposes:
Pagoda127 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis:
All third-party Data Processors engaged by Pagoda127 are subject to contractual data protection obligations that require them to process your Personal Data only as instructed, to maintain appropriate security measures, and not to retain data beyond the purposes for which it was shared.
Pagoda127 retains Personal Data only for as long as necessary to fulfil the purposes outlined in this Policy, or as required by our legal and regulatory obligations. Our general retention schedule is as follows:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | Duration of account registration, plus a minimum of 5 years following account closure, in line with AML record-keeping standards. |
| Financial Transaction Records | Minimum of 5 years from the date of each transaction, or longer where required by gaming licence conditions. |
| KYC Documents | Minimum of 5 years from the date of submission or account closure, whichever is later. |
| Customer Support Records | 3 years from the date of the most recent interaction. |
| Marketing Preferences & Consent Records | Duration of account registration, or until consent is withdrawn (whichever is earlier). Consent records are retained for 3 years post-withdrawal as evidence of prior consent. |
| Technical / Log Data | 90 days for standard server logs; up to 12 months for security-related logs where an investigation is ongoing. |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in manner that prevents re-identification.
The Pagoda127 platform uses cookies and similar tracking technologies to provide functional, secure, and personalised experience. We use the following categories of cookies:
Managing Cookies: You can control and manage cookies through your browser settings. Instructions vary by browser — consult your browser's help documentation for guidance on blocking, deleting, or receiving alerts about cookies. Note that disabling strictly necessary cookies will affect your ability to use key platform features.
As an internationally operating platform, Pagoda127 may process or transfer your Personal Data to servers and third-party service providers located outside Malaysia. Such transfers may occur to countries that do not have data protection laws equivalent to those in Malaysia.
Where such transfers take place, Pagoda127 ensures that appropriate safeguards are in place to protect your Personal Data, including:
You may request further information about the specific safeguards applied to international data transfers affecting your Personal Data by contacting us at [email protected].
Subject to applicable data protection law and our legitimate operational and legal obligations, you have the following rights in relation to your Personal Data held by Pagoda127:
Right of Access
Request a copy of the Personal Data we hold about you, along with information about how it is being processed.
Right to Rectification
Request correction of inaccurate or incomplete Personal Data. You may also update most account details directly via your Account Settings.
Right to Erasure
Request deletion of your Personal Data where it is no longer necessary for the purposes it was collected, subject to our legal retention obligations.
Right to Restrict Processing
Request that we restrict the processing of your data in specific circumstances — for example, while a correction request is being assessed.
Right to Data Portability
Request a copy of Personal Data you have provided to us in a structured, machine-readable format, where technically feasible.
Right to Object
Object to the processing of your Personal Data where we rely on legitimate interests as the legal basis, unless our interests are overriding.
To exercise any of the above rights, please submit a written request to[email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days of receiving your verified request. We may need to verify your identity before processing the request.
Exercising your data rights will not result in any penalty or adverse treatment to your Account, except where the exercise of a right (e.g., erasure) requires account closure under our regulatory obligations.
Pagoda127 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or alteration. These measures include:
While we take all reasonable precautions, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your own Account credentials.
The Pagoda127 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21.
Our registration process includes mandatory date-of-birth verification, and full KYC identity verification is required before real-money activity is permitted. Any account found to belong to a person under 21 years of age will be immediately suspended, and any funds held in the account will be dealt with in accordance with our Terms and Conditions.
If you believe that a minor has registered on the Pagoda127 platform, please contact us immediately at [email protected] so that we can take appropriate action without delay.
The Pagoda127 platform does not include links to third-party websites in its navigation or content pages. However, if any promotional material or informational content contains references to third-party services (such as responsible gambling support organisations), those third-party websites operate under their own privacy policies.
Pagoda127 is not responsible for the privacy practices, content, or data security of any third-party websites or services. We recommend that you review the privacy policy of any third-party site you visit independently of the Pagoda127 platform.
Pagoda127 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform functionality. The most current version of this Policy will always be published on this page, with the effective date updated accordingly.
Where amendments are material — meaning they substantially alter how we collect or use your Personal Data — we will notify registered users via email to their registered email address prior to the changes taking effect. Non-material clarificatory amendments may be made without prior notice.
Your continued use of the Pagoda127 platform following the publication of an amended Privacy Policy constitutes your acceptance of the amended terms. If you do not agree with any amendment, you should cease using the platform and request account closure.
If you have any questions, concerns, or complaints regarding this Privacy Policy or Pagoda127's data handling practices, please contact our data team via the following channel:
Email: [email protected]
Subject line: "Privacy Query" or "Data Rights Request"
Response time: Within 30 calendar days of verified receipt
Our support team is available in English, Bahasa Melayu, and Mandarin, 24 hours a day, 7 days a week. For data rights requests specifically, we may require identity verification before processing your request to ensure we are responding to the correct account holder.
If you are dissatisfied with our response to a privacy complaint, you may have the right to escalate the matter to a relevant data protection supervisory authority under the laws applicable in your jurisdiction.
This Privacy Policy was last reviewed and updated on 1 January 2026. Pagoda127 © 2026. All rights reserved.
Your Privacy Is Protected
Now that you understand how we protect your data, explore Malaysia's most trusted online casino and sports betting platform. Secure payments, fair games, and genuine player care — for players aged 21 and above.
For players aged 21 and above only. Please gamble responsibly. Responsible Gambling →