PandiBet Privacy Policy
Who decides what happens to your data
The operator of pandibet.io decides why and how your personal data is processed, and acts as the data controller. The website is operated under Anjouan licence ALSI-152312007-FI3, and the operator is registered in Anjouan, with its address at Hamchako, Mutsamudu, Autonomous Island of Anjouan, Union of the Comoros.
Every request about your data goes to [email protected], and the same address serves as our data contact.
What happens when you ask to use your rights
You can ask us for access to the data we hold about you, for a correction, for deletion, for a restriction on its use, for a copy in a portable format, or you can object to a type of processing you disagree with. Send the request from the email address registered on your account, so that we can confirm it is you without asking for more documents.
Some requests have limits. We cannot delete the records we must keep to meet identity and payment checks, and a restriction can pause a withdrawal that depends on the data in question. We tell you in the reply which part we carried out and which part we kept, with the reason.
What happens when your data leaves Australia
Your data does not stay in Australia, because the operator is registered in Anjouan and because the payment and game providers listed below process it on their own systems. By registering you accept that your data is handled outside Australia and outside the country you play from.
We limit what we send abroad to what a provider needs to do its job, such as a payment reference for a deposit or a player identifier for a game round. Connections between your device and the website use TLS encryption, and your personal data is stored in encrypted form.
Which providers receive part of your data
We share data with payment providers, game studios and the networks that carry your transactions, and only the part each one needs. Payments are handled by PCI DSS certified providers.
Deposits and withdrawals pass through PayID, PayPal, Apple Pay, Google Pay, Visa, Mastercard, Paysafecard, Revolut and bank transfer through Osko, and crypto payments pass through the Bitcoin, Ethereum, Litecoin and USDT networks. Game rounds run on the platforms of Pragmatic Play, Play’n GO, Hacksaw Gaming, Nolimit City, Habanero, Spribe, Aviatrix, Evolution Gaming, Ezugi, Vivo Gaming and Playtech Live, which receive a player identifier and the stake of each round. The identity documents you upload in the Verification section are used for the checks described in this policy and are not part of what game studios receive.
Cookies and the choices you have over them
The website uses cookies and similar browser storage in three groups. Strictly necessary ones keep your session open, remember the Remember Me option and apply the 30-minute idle logout. Preference ones remember choices such as a closed notice. Measurement ones count visits in aggregate form, so that we can see which pages are used.
You can refuse or delete cookies from your browser settings, and the cookie notice on the website lets you accept them or read more. Blocking the strictly necessary group stops sign-in from working, and the other two groups can be refused without losing access to the games.
What we use your data for, and on what basis
We process your data to run the account, which is the contract between you and us, covering registration, deposits, withdrawals, bonuses and the Tier programme. We also process it to meet legal duties, such as confirming that you are at least 18 and checking identity before a withdrawal.
Our legitimate interests cover keeping the site secure, including the 30-minute block after 5 failed login attempts and two-factor authentication, and detecting duplicate accounts and bonus abuse. Where we send you offers or use non-essential cookies, we rely on your consent, which you can withdraw at any time through [email protected].
What happens when you want to complain
If you think we have mishandled your data, write to [email protected] first, because most problems are settled directly. You also have the right to complain to a supervisory authority. For a player in Australia, that is the Office of the Australian Information Commissioner, and you may also contact the data protection authority of the country where you live.
Where each piece of your data comes from
The table below lists each group of data and the moment we receive it.
| Category | What we collect | When |
|---|---|---|
| Registration | Email address, optional Refer code, phone number, optional promo code and password | When you open the account |
| Profile | Name, date of birth, address, country and currency | When you complete your profile |
| Verification | Passport or Australian driver’s licence, selfie, proof of address under 3 months old, bank details (BSB and account number) | Before your first withdrawal |
| Payments | Method, amount, date and status of each deposit and withdrawal | When you use the cashier |
| Technical | IP address, device and browser details, login attempts and server logs | Whenever you use the site |
| Play | Bets, wins, bonus use and Tier points | Whenever you play |
What happens to your data after you close your account
We keep your data for as long as the account is open. After you close it, we delete or anonymise what we no longer need and keep the transaction and verification records that the law requires us to retain, for the period it requires.
If you use self-exclusion, which runs from 6 months to permanent, we keep the minimum needed to enforce it, such as your email address and the exclusion dates, so that a new account cannot be opened during the period. Backup copies are overwritten in the normal cycle of our systems.
Where to send a personal data request
For any request or question about personal data, write to [email protected] from the email address of your account, and put “Personal data request” in the subject line. State which right you want to use and attach nothing except what we ask for, because we never need your password or a one-time code to deal with a request.