padu88 Privacy Policy

1. Who We Are

padu88 operates the online gaming platform accessible at padu88.win, serving players primarily in Malaysia. padu88 operates under an international gaming authority licence and is committed to handling personal data responsibly, lawfully, and in accordance with applicable data protection regulations. This Privacy Policy applies to all users of the Platform, including registered account holders, visitors to the website, and applicants for account registration.

References to "padu88", "we", "us", or "our" in this Policy refer to the Platform operator. References to "you" or "your" refer to any individual whose personal data is processed in connection with the Platform.

2. Data We Collect

2.1 Information You Provide Directly

When you register an account, complete KYC verification, or contact support, padu88 may collect:

• Full legal name and date of birth;
• Malaysian identity card number (MyKad) or passport number for KYC purposes;
• Email address and Malaysian mobile phone number;
• Residential address;
• Payment method details (bank account numbers, e-wallet identifiers) — stored in tokenised form, not as raw sensitive data;
• Support correspondence, complaint records, and chat logs.

2.2 Information Collected Automatically

When you access or use the Platform, padu88 automatically collects certain technical and behavioural data, including:

• IP address and approximate geolocation;
• Device type, operating system, browser type and version;
• Session data including login timestamps, pages visited, and features used;
• Betting and gaming activity — game selections, stake amounts, outcomes, and session duration;
• Cookies and similar tracking data as described in Section 9.

2.3 Information from Third Parties

padu88 may receive personal data from third parties in limited circumstances, including identity verification service providers conducting KYC checks, payment processors confirming transaction status, and fraud prevention services flagging suspicious activity patterns.

3. How We Use Your Data

padu88 uses your personal data for the following purposes:

• Account creation and management — verifying your identity, maintaining your account, and processing requests;
• Transaction processing — facilitating deposits, wagers, withdrawals, and bonus crediting in MYR;
• KYC and regulatory compliance — meeting the identity verification and anti-money laundering (AML) obligations imposed by our licence;
• Fraud prevention and security — detecting and preventing fraudulent activity, unauthorised access, and abuse of the Platform;
• Responsible gaming monitoring — identifying patterns that may indicate problem gambling and applying protective measures where appropriate;
• Customer support — responding to enquiries, resolving disputes, and handling complaints;
• Platform improvement — analysing aggregated, anonymised usage data to improve the Platform's performance and user experience;
• Legal and regulatory obligations — retaining records as required by our licence conditions and applicable law.

padu88 does not use your personal data for automated decision-making that produces legal or similarly significant effects without providing a mechanism for human review.

4. Legal Basis for Processing

Where data protection law requires padu88 to identify a legal basis for processing personal data, the applicable bases are as follows:

• Contractual necessity — processing required to perform the contract between padu88 and the User (account operation, transaction processing, customer support);
• Legal obligation — processing required to comply with our licensing conditions, AML obligations, and applicable regulations;
• Legitimate interests — processing for fraud prevention, platform security, and anonymous analytics, where such interests are not overridden by the User's rights;
• Consent — where padu88 relies on consent (e.g., marketing communications), you may withdraw consent at any time by contacting support.

5. Data Sharing & Disclosure

padu88 does not sell or rent personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary:

• KYC and identity verification providers — to verify your identity and age in compliance with our licence obligations;
• Payment processors and financial institutions — to process deposits and withdrawals to Malaysian bank accounts and e-wallets (Touch 'n Go, Boost, Maybank, CIMB, Public Bank, etc.);
• Fraud prevention and security services — to protect the Platform and users from fraudulent activity;
• Regulatory authorities — where required by our gaming licence conditions, court order, or applicable law;
• IT infrastructure and cloud hosting providers — who process data on our behalf under strict data processing agreements.

All third-party service providers engaged by padu88 are contractually obligated to handle personal data securely and solely for the purposes for which it was shared.

6. International Data Transfers

As an internationally licensed platform, padu88 may store or process personal data on servers located outside Malaysia. Where such transfers occur, padu88 ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent mechanisms — to protect your personal data to a standard consistent with this Privacy Policy and applicable data protection law.

Your data is not transferred to jurisdictions that do not offer an adequate level of data protection without appropriate safeguards being in place.

7. Data Retention

padu88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention periods:

• Account and identity data — retained for the duration of the account and for a minimum of 5 years following account closure, in compliance with AML record-keeping requirements;
• Transaction and gaming records — retained for a minimum of 5 years from the date of the transaction;
• Support and communications records — retained for 3 years from the date of the interaction;
• Technical and log data — retained for up to 12 months for security and fraud investigation purposes.

Following expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes.

8. Security Measures

padu88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, or destruction. These include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and our servers;
• AES-256 encryption for sensitive data stored at rest;
• Role-based access controls limiting data access to authorised personnel with a documented operational need;
• Multi-factor authentication for administrative access to data systems;
• Regular security audits and penetration testing conducted by independent third parties;
• Incident response procedures with defined timelines for notification in the event of a data breach.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, padu88 will notify affected users within 72 hours of becoming aware of the breach, or as required by applicable law.

9. Cookies & Tracking Technologies

9.1 What We Use

padu88 uses cookies, web beacons, and similar tracking technologies on the Platform. These fall into the following categories:

• Strictly necessary cookies — required for the Platform to function, including session management, login state, and security tokens. Cannot be disabled.
• Analytics cookies — used to collect anonymous, aggregated data about how users navigate the Platform, enabling us to improve performance and identify issues. These do not identify individual users.
• Preference cookies — used to remember your settings and display preferences for subsequent sessions.

9.2 Marketing Cookies

padu88 does not deploy third-party marketing or advertising cookies without explicit user consent. If consent is provided, it may be withdrawn at any time. You may manage cookie preferences at any time through your browser settings. Note that disabling necessary cookies may affect the functionality of the Platform.

10. Your Rights

Subject to applicable law and our regulatory obligations, you have the following rights in respect of your personal data held by padu88:

• Right of access — to request a copy of the personal data padu88 holds about you;
• Right to rectification — to request correction of inaccurate or incomplete personal data;
• Right to erasure — to request deletion of your personal data, subject to retention obligations;
• Right to restrict processing — to request that padu88 limit its use of your data in certain circumstances;
• Right to data portability — to receive your data in a structured, machine-readable format where processing is based on consent or contract;
• Right to object — to object to processing based on legitimate interests, including profiling;
• Right to withdraw consent — where processing is based on your consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact padu88 Customer Support. We will respond to verifiable requests within 30 days. Identity verification may be required before processing rights requests.

11. Minors

The padu88 Platform is strictly for individuals aged 21 and above. padu88 does not knowingly collect or process personal data relating to persons under 21 years of age. If we become aware that personal data has been collected from a minor, that account will be immediately suspended and all associated data deleted, subject to any mandatory regulatory reporting obligations. If you believe a minor has registered an account on padu88.win, please contact support immediately.

12. Changes to This Policy

padu88 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered users via email or an in-platform notification at least 7 days before taking effect. The "Last updated" date at the top of this page will reflect the date of the most recent revision. Your continued use of the Platform following the effective date of any revision constitutes acceptance of the updated Policy. If you do not accept the revised Policy, you should contact support to close your account before the revision takes effect.

13. Contact & Complaints

For any privacy-related enquiries, to exercise your data rights, or to raise a complaint about how padu88 has handled your personal data, please contact our Customer Support team via live chat on the Platform or by email. Our contact email is displayed in the footer of padu88.win as plain text: [email protected]

padu88 will acknowledge privacy complaints within 48 hours and provide a substantive response within 14 business days. If you are not satisfied with our response, you may escalate your complaint to the relevant data protection authority in your jurisdiction or the regulatory authority under whose licence padu88 operates.