Privacy notice

Your data at PANPET

This notice explains what personal data PANPET collects, why, who can see it, how long we keep it, and how you can see, correct or delete it. It is written to be read — including by our younger players. It follows Singapore's Personal Data Protection Act (PDPA).

Who we are

PANPET (panpet.com) is run by Link 2 Link Asia Pacific Pte Ltd, a company in Singapore. We decide how your personal data is used, so under the PDPA we are responsible for it. Our Data Protection Officer can be reached at [email protected].

What we collect

What	Details
Your account	Email address and password (the password is stored scrambled — nobody at PANPET can read it). Your name, from which we make a display name such as "Priya T.".
Date of birth	Required when you sign up. Used to check the 13+ rule for accounts and the 18+ rule for prizes — nothing else.
Gender	Optional; "prefer not to say" is a full answer.
Mobile number and area	Optional, only if you add them in My account.
Your pets	Optional at sign-up: name, species, breed and age. When the pet tools open, also weights, diet, health notes and reminders — only what you enter.
Care Advisor	When it opens: your answers about your pet and the plan we make from them, if you save it.
Games	Your scores, when you played, and a short technical record of each round that lets us check the score is genuine.
Invites	If you joined through a friend's link, which friend's; if you share yours, how many friends joined.
Marketing choice	Whether you agreed to offers and tips by email and SMS, and when.
Prizes	If you win: the month, your place, the amount, and the voucher we emailed you.
Emails we send you	A copy of each account or prize email, so we can show it was sent.
Orders	When the shop opens: what you ordered, the delivery name, phone and address.
Technical data	Like every website, our hosting providers see your IP address and browser type when you visit. We do not use it to identify you.

Cookies and browser storage

We do not use advertising, analytics or tracking cookies. The site keeps a few small things in your own browser so it works: your sign-in, a friend's invite code until you sign up, your cart, and settings such as sound on or off. Clearing your browser removes them.

Why we use it

• To run your account and let you sign in.
• To run the games and the monthly board: scores, the invite bonus, checking scores are genuine, and working out winners.
• To check your age for accounts (13+) and prizes (18+).
• To pay prizes: emailing the winner their voucher.
• To give care advice for your pets, and reminders you set — once the Care Advisor and pet tools open. Until then, the pets you tell us about stay in your account.
• To send you service emails — confirming your email, resetting your password, prize news, reminders you set for your pets (once the pet tools open), and a warning before an unused account is deleted.
• To send offers and tips — only if you ticked the box. You can untick it in My account at any time, and every marketing email has a one-click unsubscribe link.
• To understand, in totals only, how the games and sponsor products are doing — for example, how often a product appeared in a game. Sponsors see counts, never who.
• When the shop opens: to take and deliver orders.

We do not sell your personal data, and we do not use it for any purpose you have not been told about here. If we ever want to, we will ask first.

What other people can see

On the leaderboards: your display name (first name and one initial), your scores, and any invite bonus. That is all. Your email, date of birth, gender, pets and everything else are never shown to other players. A friend who joins through your link sees your display name.

Who we share it with

Only with companies that help us run PANPET, and only what they need:

• Supabase — our database and sign-in service. Stores the data described above.
• Cloudflare — hosts the website and the panpet.com domain.
• Our email delivery provider — sends account and prize emails to your address.
• Google Fonts — supplies the typeface; your browser asks Google for it, so Google sees your IP address.
• Shopee — prizes are Shopee vouchers. We buy the voucher and email it to you ourselves; we do not give Shopee your details.

These providers may only use your data to provide their service to us. We also share personal data where the law requires it, for example with the authorities.

Where it is kept

Our database is in Singapore. Some of the providers above run global networks and may handle data outside Singapore — for example while delivering the website or an email. Where that happens, we rely on their contractual commitments to protect it to a standard comparable to the PDPA.

How long we keep it

• While you use your account, we keep it.
• Unused accounts are deleted. If you do not sign in or play for 24 months, we email you, and 30 days later delete the account and everything in it. Signing in keeps it.
• Sign-ups never confirmed are deleted after 30 days.
• The detailed record of each game round is removed after 400 days (kept longer only for prize winners, as evidence behind a payment).
• Prize and order records are business records we must keep for 5 years, even if you delete your account — but without your name or contact details attached, apart from the prize email itself.

Young players

You must be 13 or older to have a PANPET account. Players aged 13 to 17 can play and appear on the boards, but cannot win prizes, which are for 18+. If you are a parent or guardian and think a child under 13 has an account, email us and we will delete it.

Your rights — and the buttons for them

• See your data: My account → Download my data gives you everything we hold about you, in one file.
• Correct it: My account → Edit my details. Your date of birth cannot be changed by you after sign-up, because it decides who can win — email us and we will correct it.
• Stop marketing: untick the box in My account, or use the unsubscribe link in any marketing email.
• Delete everything: My account → Delete my data. This removes your details, pets, plans, scores and invites, and closes your sign-in. Only the business records described above are kept.
• Withdraw consent to anything else, or ask a question: email us. Withdrawing may mean we can no longer run your account; we will tell you what changes before we act.

We answer requests within 30 days, and tell you if we need longer. If you are not happy with our answer, you can complain to Singapore's Personal Data Protection Commission (pdpc.gov.sg).

Keeping it safe

• Everything travels over encrypted connections (HTTPS).
• Database rules make sure each player can only read their own data.
• Only a small number of PANPET staff can see player data, only to run the service, and their changes are logged.

If a data breach is likely to cause you significant harm, we will tell you — and the PDPC — as soon as practicable, as the law requires. For younger players we will also encourage you to tell a parent or guardian.

Changes to this notice

If we change how we use personal data, we will update this page first, and email you if the change is significant. The date at the bottom shows when it last changed.

Last updated 24 September 2026.