Padu88 Privacy Policy

This Privacy Policy (hereinafter "the Policy") is published by Padu88, the operator of the online gaming and sports betting platform accessible at https://padu88.cam (the "Platform"). This Policy describes in full how Padu88 collects, processes, stores, shares, and safeguards the personal data of individuals who interact with the Platform, including registered players, prospective players who browse the Platform without completing registration, and any other individuals whose data Padu88 processes in connection with its operations.

Padu88 is committed to responsible data stewardship. We recognise that trust is fundamental to our relationship with every player — whether you are based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or anywhere else across Malaysia. Protecting your personal information is as important to us as securing your funds.

By registering an account, accessing the Platform, or using any of Padu88's services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data in accordance with the terms described herein.

For the purposes of this Privacy Policy, the following terms shall carry the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, identification number, location data, online identifiers, or any factors specific to that person's physical, economic, or social identity.
• "Processing" means any operation performed on Personal Data, whether by automated means or otherwise — including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Subject" means any natural person whose Personal Data is processed by Padu88 — primarily registered players and Platform visitors.
• "Controller" means Padu88, the entity that determines the purposes and means of processing Personal Data.
• "Processor" means any third-party entity that processes Personal Data on behalf of Padu88, under contractual instruction and subject to appropriate data protection safeguards.
• "Cookies" means small text files placed on a user's device by the Platform for the purpose of session management, analytics, and functionality enhancement.
• "KYC Documents" means identity and address verification documents submitted by a Player pursuant to Know Your Customer obligations, including government-issued identification, proof of address, and payment method verification.

Padu88 collects Personal Data across several categories, depending on your level of interaction with the Platform:

Padu88 collects Personal Data through the following channels:

Direct Collection from You

The majority of Personal Data we hold is provided directly by you during account registration, KYC submission, payment transactions, customer support interactions, or when you voluntarily update your account profile. This includes your name, contact details, date of birth, and copies of identity documents.

Automated Technical Collection

When you access and navigate the Padu88 Platform, certain technical and behavioural data is collected automatically through server logs, session tracking technologies, and cookies. This includes your IP address, device identifiers, browser information, and an anonymised record of the pages and features you interact with.

Third-Party Sources

In some circumstances, Padu88 may receive Personal Data from third-party sources to supplement information you have provided directly. These sources include:

• Payment processors and financial institutions — to facilitate and verify transactions made via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency networks.
• Third-party KYC and identity verification services — where automated document verification or database cross-referencing is employed as part of our anti-fraud and compliance procedures.
• Fraud detection and anti-money-laundering screening services — which may cross-reference provided data against sanctions lists, politically exposed persons databases, and adverse media sources.

Padu88 processes Personal Data for the following purposes, each of which is supported by a legitimate legal basis as described in Section 6:

• Account Registration and Management: To create, authenticate, and maintain your Padu88 player account, including processing your registration information and verifying your identity.
• KYC Compliance and Age Verification: To verify that you meet the minimum age requirement of 21 years and to fulfil the identity verification obligations imposed by our international licensing framework.
• Payment Processing: To process deposits and withdrawals via your chosen Malaysian payment method and to maintain accurate financial records of all transactions.
• Platform Delivery and Customer Support: To provide you with access to our games, sports betting services, promotions, and bonuses, and to respond to your customer support enquiries.
• Security and Fraud Prevention: To monitor accounts and transactions for signs of fraudulent activity, money laundering, multiple account usage, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Legal and Regulatory Compliance: To fulfil our obligations under anti-money-laundering regulations, our international gaming licence conditions, and any applicable legal requirements.
• Responsible Gambling: To monitor behavioural patterns that may indicate problem gambling, to enforce self-exclusion requests, and to deliver responsible gambling interventions where appropriate.
• Service Improvement and Analytics: To analyse aggregated Platform usage data for the purpose of improving features, performance, and the overall player experience.
• Marketing Communications: Where you have provided consent, to send you relevant promotional offers, bonus notifications, and Platform updates. You may withdraw marketing consent at any time through your account settings.

Padu88 processes Personal Data only where a valid legal basis exists. The primary legal bases we rely upon are as follows:

• Contractual Necessity: Processing required to perform our contractual obligations to you as a registered player — including account management, payment processing, game delivery, and customer support.
• Legal Obligation: Processing necessary to comply with applicable legal requirements — including anti-money-laundering regulations, age verification obligations, and licensing compliance mandates.
• Legitimate Interests: Processing carried out in pursuit of Padu88's legitimate business interests — including fraud detection, security monitoring, responsible gambling programme delivery, and Platform analytics — provided that such interests do not override your fundamental privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in relation to direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Padu88 does not sell or rent your Personal Data to any third party. We share Personal Data only in the following circumstances:

Service Providers and Processors

We engage third-party service providers who process Personal Data on our behalf, under strict contractual data processing agreements, for purposes including payment processing, KYC verification, fraud screening, platform analytics, customer support tooling, and cloud infrastructure. All processors are vetted for data security compliance before engagement.

Payment Partners

Transaction-related data is shared with the relevant payment processor or financial institution to facilitate your deposit or withdrawal — including FPX network providers, DuitNow infrastructure, Touch 'n Go eWallet systems, Boost, GrabPay, and the respective banking partners at Maybank, CIMB, Public Bank, and Hong Leong Bank. Only the minimum data necessary to process the transaction is shared.

Regulatory and Legal Disclosure

Padu88 may disclose Personal Data to competent governmental, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or in fulfilment of our licensing obligations. Such disclosures are made only to the extent required and, where legally permissible, we will notify you of any such requirement.

Corporate Transactions

In the event of a merger, acquisition, asset sale, or other corporate restructuring involving Padu88, Personal Data held by Padu88 may be transferred to the successor entity as part of that transaction, subject to equivalent privacy protections.

Padu88 operates under an international licensing framework and engages service providers located in various jurisdictions globally. As a result, your Personal Data may be transferred to and stored in countries outside of Malaysia. Padu88 ensures that any such transfers are conducted in accordance with applicable data protection standards.

Where Personal Data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that applicable under our licensing framework, Padu88 implements appropriate safeguards including:

• Standard contractual clauses incorporated into data processing agreements with relevant service providers.
• Binding corporate rules where applicable within group entities.
• Specific technical and organisational measures to protect data in transit and at rest.

You may request further information about the safeguards applicable to international transfers of your Personal Data by contacting us through the details provided in Section 15.

Padu88 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and licensing obligations. The following general retention principles apply:

• Active Account Data: Personal Data associated with an active Padu88 account is retained for the full duration of your account's existence and for a minimum period after account closure as required by our licensing framework (typically five years) for anti-money-laundering audit purposes.
• KYC Documents: Identity and address verification documents are retained for a minimum of five (5) years following account closure or the last transaction date, in compliance with anti-money-laundering record-keeping obligations.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years following the date of the relevant transaction.
• Customer Support Records: Support interaction records are retained for a period of three (3) years following the date of the interaction, or longer where required in connection with an ongoing dispute or legal proceeding.
• Marketing Consent Records: Records of marketing consent and withdrawal of consent are retained for as long as necessary to demonstrate compliance with consent obligations.

Upon expiry of applicable retention periods, Personal Data is securely deleted or anonymised in accordance with Padu88's data destruction procedures.

Padu88 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you access the Platform. They do not contain executable code and cannot harm your device.

Types of Cookies We Use

• Essential Cookies: Strictly necessary for the Platform to function correctly — including session authentication cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled without preventing Platform access.
• Functional Cookies: Used to remember your preferences and settings — such as your preferred language, display settings, and previously entered information — to improve your experience across sessions.
• Analytics Cookies: Used to collect anonymised data about how users interact with the Platform — including pages visited, time on page, and navigation paths — to help us understand usage patterns and improve Platform performance.
• Security and Fraud Detection Cookies: Used to identify and flag suspicious device behaviour, unusual access patterns, and potential fraud signals, in support of our security monitoring operations.

Subject to applicable laws and our legitimate operational and legal obligations, you hold the following rights in respect of your Personal Data held by Padu88. To exercise any of these rights, please contact us using the details provided in Section 15.

Padu88 will respond to verified data rights requests within thirty (30) calendar days of receipt. Complex requests may require up to ninety (90) days, in which case we will notify you of the extended timeframe. Requests are processed free of charge unless they are manifestly unfounded, excessive, or repetitive.

The Padu88 Platform is strictly intended for use by individuals aged 21 years and above. Padu88 does not knowingly collect Personal Data from any person under the age of 21.

Age verification is a mandatory component of the Padu88 KYC process. Any account found to have been registered by a person under 21 years of age will be immediately closed and any data associated with that account will be securely deleted, except to the extent that retention is required for fraud prevention or legal reporting purposes.

If you are a parent or guardian and believe that a minor has submitted Personal Data to Padu88 without your knowledge, please contact us immediately via the details in Section 15. We will investigate and take appropriate action, including permanent account closure and data deletion, as a matter of priority.

Padu88 implements a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Key measures in place include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Padu88 Platform is encrypted using the same standard employed by major Malaysian banks and financial institutions.
• Access Controls: Strict role-based access controls are applied to all internal systems containing Personal Data. Only authorised personnel with a legitimate operational need can access specific data categories.
• Two-Factor Authentication (2FA): Account login is protected by optional two-factor authentication, and all internal administrative systems require multi-factor authentication for access.
• Regular Security Audits: The Platform undergoes periodic independent security assessments to identify and remediate vulnerabilities.
• Data Minimisation Practices: Personal Data is not duplicated unnecessarily, and access logs are maintained to track who accesses sensitive data and when.
• Incident Response Procedures: In the event of a personal data breach, Padu88 has documented incident response procedures, including notification obligations to affected individuals and relevant authorities where required.

While Padu88 takes reasonable and appropriate steps to protect your Personal Data, no electronic transmission or storage system can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your account credentials and for ensuring that you access the Platform only from trusted devices and secure network connections.

Padu88 reserves the right to update, modify, or replace this Privacy Policy at any time. Changes may be made to reflect developments in our data processing practices, changes in applicable laws or regulatory requirements, the introduction of new Platform features, or updates to our licensing framework.

All updates to this Policy will be published on this page, with the "Last Reviewed" date at the top of the document updated accordingly. Where changes are material — that is, where they substantially affect your rights or our processing practices — Padu88 will endeavour to provide advance notice via the Platform's notification system or by email to your registered address.

Your continued use of the Padu88 Platform following the publication of any amended Privacy Policy constitutes your acknowledgement of the updated Policy. If you disagree with any material change to this Policy, you should cease use of the Platform and request account closure as outlined in our Terms & Conditions.

If you have any questions, concerns, or requests in relation to this Privacy Policy or the processing of your Personal Data by Padu88, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly through the Padu88 Platform. This is the fastest way to reach our team for urgent matters.
• Email: [email protected] — for written data rights requests, privacy complaints, or detailed enquiries. Please use the subject line "Privacy Request" to ensure your message reaches our data protection team without delay.

Padu88 takes all privacy-related enquiries seriously. We will acknowledge receipt of your communication within two (2) business days and will provide a substantive response within thirty (30) calendar days of receipt, or a longer period where the complexity of the request requires additional time, as described in Section 11.

For data rights requests, please ensure you include your registered account username and the email address associated with your account, as identity verification will be required before any Personal Data is accessed, corrected, or deleted.