Padu88 Privacy Policy — Malaysia Member Personal Data Protection

Padu88 ("we", "the platform", or "Padu88") operates as an online casino and Sports Betting platform built specifically for Malaysian players. We take our responsibilities seriously as a data controller under Malaysia's Personal Data Protection Act 2010 (PDPA).

This Privacy Policy ("Policy") applies to all individuals who:

• Accessing or browsing the Padu88 website at padu88.click
• Registering a member account at Padu88
• Making a deposit or withdrawal through the Padu88 platform
• Playing any game or placing a Sports Betting wager on Padu88
• Contacting the Padu88 customer support team
• Using any other services provided by Padu88

This policy does not apply to third-party websites, apps, or services that you may access via links on our website. Padu88 is not responsible for the privacy practices of such third parties and encourages you to read their privacy policies separately.

Padu88 only collects data that is genuinely necessary to operate the platform and deliver the best experience to you. We do not collect excessive data or data that is irrelevant to our operational purposes.

Data You Provide Directly:

• Registration Information: Your username, password (stored in hashed form — not human-readable), and your Malaysian phone number
• Profile Information (optional): Full name, email address, date of birth (for age verification)
• Identity Verification: MyKad or passport number, along with copies of the relevant documents when requested for identity verification prior to large withdrawals
• Financial Information: Details of the payment methods you use — Touch 'n Go, GrabPay, DuitNow, FPX, Boost, ShopeePay, Maybank2u, or CIMB Clicks. Padu88 does not store your full account number or e-wallet password
• Communications: Records of conversations with our CS team via Live Chat or email

Automatically Collected Data:

• Technical Data: IP address, browser type, operating system, and device information
• Usage Data: Pages visited, time spent browsing, buttons clicked, and navigation flow on the platform
• Gaming Data: A complete record of all games played, bets placed, winnings, losses, and bonus usage
• Transaction Data: Records of all deposits, withdrawals, and bonus credit transfers
• Cookie Data: Session and functional cookie information — explained further in Section 07

Padu88 uses the personal data we collect solely for legitimate, stated purposes. We do not use your data for any other purpose without first obtaining your renewed consent.

Primary Purposes of Data Processing:

• Account Management: Creating, maintaining, and managing your member account at Padu88
• Payment Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow and other methods, as well as withdrawals to your Malaysian bank account or e-wallet
• Gaming Services Provision: Enabling you to play slots, Live Casino, and place Sports Betting wagers on the Padu88 platform
• Bonus & Promotions Management: Calculating bonus eligibility, crediting welcome bonuses and ongoing promotions, and tracking wagering progress
• Customer Support: Helping you resolve issues related to your account, payments, or gameplay
• Identity Verification: Verifying that you meet the age eligibility requirement (18+) and satisfy anti-money laundering (AML) obligations
• Fraud Prevention: Detecting and preventing fraudulent activity, bonus abuse, multiple account creation, and other unlawful conduct
• Legal Compliance: Fulfilling legal obligations under the Malaysia PDPA and other applicable laws

Additional Purposes (with your consent):

• Sending promotional information, special bonus offers, and Padu88 platform news via SMS or email
• Conducting customer satisfaction surveys
• Improving your user experience based on your usage patterns

Padu88 does not sell, rent, or trade members' personal data to any third party. However, there are limited situations where we need to share certain data with trusted third parties to keep the platform running properly.

Third Parties That May Receive Your Data:

• Payment Service Provider: Payment gateways that process your transactions — including providers supporting Touch 'n Go, GrabPay, DuitNow, FPX, Boost, ShopeePay, Maybank2u, and CIMB Clicks. Payment data shared is limited to the minimum necessary to process transactions only.
• Game Provider: Gaming companies such as Pragmatic Play and Evolution Gaming may process your game session data as part of delivering their games. This data is governed by data protection agreements between Padu88 and the respective providers
• Technical Infrastructure Services: Cloud and hosting service providers that store Padu88 data — all bound by strict confidentiality agreements
• Fraud Prevention Services: Technical tools that help Padu88 detect fraudulent activity and duplicate accounts

Legally Required Disclosures:

Padu88 may be required to disclose your personal data to the relevant authorities in Malaysia when mandated by law, including in cases of criminal investigation, court orders, or anti-money laundering (AML) compliance requirements. In such circumstances, Padu88 will disclose only the minimum information necessary and will endeavour to notify you in advance where permitted by law.

The security of your personal and financial data is Padu88's highest technical priority. Our engineering team implements and maintains multiple layers of security that work together to protect your data from unauthorised access, theft, or damage.

Technical Security Layers:

• 256-bit SSL/TLS Encryption: All traffic between your browser and Padu88's servers is fully encrypted. This means that even if someone were to intercept the communication, they would not be able to read its contents.
• Data Encryption at Rest: Sensitive data stored in our databases is encrypted using the latest industry standards — not only during transmission, but also at rest
• Layered Access Control: Only Padu88 staff with a legitimate operational need may access member data, and all such access is logged and audited on a regular basis
• Secure Server Infrastructure: Padu88's servers are operated in data centres with strict physical and cyber security controls, including layered firewalls and intrusion detection systems
• 24/7 Monitoring: Padu88's systems are continuously monitored for suspicious activity, intrusion attempts, and anomalies in data access patterns
• Regular Penetration Testing: Padu88 conducts regular independent security testing to identify and address vulnerabilities before they can be exploited

Your Security Responsibilities: While Padu88 takes all reasonable steps to protect your data on our end, you also play an important role in keeping your account secure. Use a unique, strong password, never share your login credentials with anyone, log out after every session especially on shared devices, and contact Padu88 CS immediately if you suspect any suspicious activity on your account.

Padu88 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required under applicable Malaysian law.

Retention Periods by Data Category:

• Active Account Data: For the duration of your active account with Padu88, plus a further 5 years after account closure for legal compliance and audit requirements
• Financial Transaction Records: Minimum 7 years from the date of transaction, as required under Malaysian financial and anti-money laundering (AML) laws
• Game Records: Minimum 5 years for dispute resolution and audit purposes
• CS Communication Records: 2 years from the date of the conversation, for quality control and training purposes
• Identity Verification Data (documents): Up to 5 years after account closure, or until any related investigation is concluded, whichever is later
• Cookie & Technical Log Data: Between 30 days and 13 months depending on the cookie type — detailed in Section 07

Data Deletion on Request: When you request deletion of your personal data, Padu88 will delete or anonymise your data from active systems within 30 days, subject to the legal retention obligations stated above. Data that must be retained by law cannot be deleted before the mandatory retention period expires; however, it will be segregated from active systems and access to it will be strictly limited.

Padu88 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain the security of your login session, and understand how users interact with our platform so we can continue to improve it.

Types of Cookies We Use:

• Essential Cookies (Required): Required for core platform operations — including login session management, security verification, and the deposit cart function. Without these cookies, the platform cannot function properly. Retention period: until end of session or 30 days
• Functional Cookies: Saving your preferences such as language, display settings, and account configurations so you don't have to reconfigure them each time. Retention period: up to 6 months
• Performance & Analytics Cookies: Helps us understand how users interact with the platform — which pages are visited most, time spent, and where users encounter difficulties. This data is collected in aggregate and is not linked to your individual identity. Retention period: up to 13 months
• Fraud Prevention Cookies: Helps us identify devices and detect unauthorised access attempts or duplicate account activity. Retention period: up to 13 months

Managing Cookies: You can manage or delete cookies through your web browser settings. However, disabling essential cookies may affect how the platform works — you may be unable to log in or access certain features. Functional and analytics cookies can be turned off without impacting the platform's core functionality.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several legally protected rights regarding the personal data held by Padu88. We fully respect these rights and are committed to making it straightforward for you to exercise them.

The Padu88 platform is intended solely for individuals aged 18 and above. Padu88 does not knowingly collect, process, or store the personal data of any individual under the age of 18.

Padu88 conducts age verification during the registration process and periodically where required. If we discover that personal data belonging to an individual under the age of 18 has been collected without our knowledge, we will take the following steps immediately:

• Closing the relevant account immediately
• Deleting all personal data of the individual concerned from our active systems
• Returning any outstanding financial balance to the payment method used, where applicable
• Cancellation of any winnings or bonuses that may have accumulated in the account

Parents and guardians concerned about their children's use of online platforms are encouraged to use parental control tools available at the device level and through their internet service providers to restrict access to gambling websites.

Padu88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform improvements. All changes will be published on this page with a clear updated date.

How We Notify You of Major Changes:

• An in-account pop-up notification the next time you log in
• An email notification sent to your registered email address, where applicable
• A prominent announcement on the Padu88 website homepage

For minor changes that do not materially affect your rights — such as spelling corrections, language clarifications, or updates to contact information — we may not send a dedicated notice, but the "Last Updated" date at the top of this page will always reflect the most current version.

If you disagree with any changes to this Privacy Policy, you have the right to close your account by contacting our customer support team. All eligible data will be processed for deletion in accordance with the procedures described in Section 06.

If you have any questions, concerns, or requests regarding this Privacy Policy or how Padu88 handles your personal data, our team is here to help. We take all privacy inquiries seriously and are committed to responding in a transparent and helpful manner.

For formal data rights requests under the PDPA, please submit via email with the following details: your Padu88 username, the type of request (access / correction / deletion / other), and a brief description of your request. We may require identity verification before processing certain requests.