Privacy Policy pena67 — Your Personal Data Protection

1 Introduction and Scope of This Policy

Welcome to the pena67 Privacy Policy. This document outlines pena67's commitment to protecting your personal data and explains how we handle the information you provide when using the pena67 online gaming platform.

This privacy policy applies to all users who access or use the pena67 platform via the website, mobile app, or any other digital channel operated by pena67. By registering an account and using pena67 services, you agree to the practices described in this document.

Pena67 recognises the importance of privacy to every individual and takes our responsibilities as a data controller seriously. We are committed to ensuring that every decision regarding the use of your data is made with full transparency and in your best interests as a pena67 member.

2 Information We Collect

Pena67 collects various categories of information for different purposes. The following are the types of information we collect and the reasons why:

We may also collect information from trusted third-party sources, such as identity verification service providers, to confirm the accuracy of the information you provide. All such information is handled with the same high level of protection.

3 How We Use Your Information

Pena67 uses the information collected for the following purposes, all based on a valid legal basis:

• Account Management: Creating, maintaining, and managing your pena67 account, including a secure login process.
• Transaction Processing: Processing deposits, withdrawals, and any financial transactions related to your account.
• Identity Verification (KYC): Meeting identity verification requirements to ensure platform security and regulatory compliance.
• Fraud Prevention: Detecting, investigating, and preventing any suspicious or potentially fraudulent activity.
• Customer Support: Providing assistance and effectively resolving your queries or complaints.
• Platform Improvements: Analysing usage patterns to enhance the gaming experience and platform performance.
• Marketing Communications: Sending information about the latest promotions and offers — only if you have agreed to receive them.
• Responsible Gaming: Monitoring gameplay patterns to identify members who may need responsible gaming support.

We will not use your data for any purpose other than those stated above without obtaining your consent first.

4 Information Sharing and Disclosure

Pena67 understands the trust you place in us when sharing your personal information. We will not share your information except in the following circumstances:

• Integrated Service Providers: Technical partners and payment service providers working on behalf of pena67, subject to strict confidentiality agreements.
• Legal Requirement: When required by a court order, regulatory authority directive, or applicable law.
• Crime Prevention: To prevent or investigate fraudulent activity, money laundering, or other financial crimes.
• Business Transfers: In the event of a merger, acquisition, or transfer of pena67 assets, your data will be transferred with the same level of protection in place.

All third parties involved in processing your data are bound by data protection agreements that require them to handle your information at a security standard equal to or higher than that of pena67.

5 Data Security and Protection Measures

Pena67 continually invests in security infrastructure to ensure your personal data is always protected. The technical and organisational measures we implement include:

• Data Encryption in Transit: All communications between your device and pena67 servers are secured with TLS 1.3 protocol.
• Data Encryption at Rest: Sensitive data such as financial information is stored in encrypted form using AES-256.
• Multi-Layered Access Control: Only authorised staff with a legitimate business need may access member data, and every access is recorded.
• 24/7 Security Monitoring: Our systems are continuously monitored to detect any security threats or unauthorised access.
• Regular Security Audits: pena67 conducts regular penetration testing and security audits by independent third parties.
• Two-Factor Authentication (2FA): Additional security features that members can enable to protect their accounts.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure against all threats. We encourage you to play your part in protecting your account by using a strong password and enabling 2FA.

6 Data Retention Period

Pena67 retains your personal data only for as long as necessary for the purposes stated in this policy or as required by law. General retention periods are as follows:

• Active Account Data: Retained for the duration your account is active plus 5 years after account closure.
• Financial Transaction Records: Retained for a minimum of 7 years for legal and tax compliance purposes.
• Support Communication Logs: Retained for 3 years after case resolution.
• Technical Data and Access Logs: Retained for 12 months for security and fraud detection purposes.
• KYC Records: Retained for 5 years after the business relationship ends, or longer if required by law.

7 Your Rights as a Data Subject

Pena67 recognises and respects your rights regarding your personal data. The following are the rights you hold:

To submit any request relating to the above rights, please contact the pena67 data protection team via live chat within the platform. We will process your request within 30 business days.

8 Cookies, Pixels, and Tracking Technologies

Pena67 uses cookies and similar tracking technologies to enhance your experience on the platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Analytics Cookies: Helping us understand how users interact with the platform so we can continuously improve it.
• Functional Cookies: Saving your preferences such as language and display settings to provide a more personalised experience.
• Marketing Cookies: Used to display more relevant ads to you — only activated with your consent.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some areas of the pena67 platform.

9 Children's Privacy

The pena67 platform is strictly intended for individuals who are of age 18 and above. Pena67 does not intentionally collect, use, or store any personal information from children or individuals under the age of 18.

If we identify that we have inadvertently collected information from a minor, we will immediately take the following steps:

• Immediately deleting all related information from our systems.
• Permanently closing the account in question.
• Returning any related funds in accordance with standard procedures.

10 Amendments to This Privacy Policy

Pena67 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we handle data.

When we make significant changes to this policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending notifications to members via their registered email or in-platform notifications.
• Displaying a clear notice on the pena67 homepage for at least 7 days before changes take effect.

Continued use of the pena67 platform after amendments take effect will be considered your acceptance of the revised policy. We encourage you to review this page periodically.

11 Contact Our Data Protection Team

If you have any questions, concerns, or complaints regarding how pena67 handles your personal data, our team is ready to assist you.

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the platform.
• Support Email: [email protected] (please include "Privacy Inquiry" in the subject line of your email).
• Response Time: We are committed to responding to all privacy inquiries within 3 business days.