Padu888 Privacy Policy – Our Commitment to Protecting Your Data

1Personal Data We Collect

Padu888 collects several categories of personal data from users of our platform. This data is collected solely for legitimate purposes that are necessary to deliver our services to you in a safe, fair, and efficient manner. The following are the types of data we collect:

Data You Provide Directly

• Registration Information: Full name, date of birth, Malaysian identity card number (MyKad), gender, email address, mobile number, and residential address.
• Financial Information: Bank name, bank account number, and e-wallet details (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay) that you register for deposit and withdrawal purposes.
• Verification Documents: MyKad copy, bank statements, and other supporting documents requested during the KYC (Know Your Customer) process.
• Communications: The content of messages, enquiries, and complaints you send to the padu888 support team via live chat or email.

Automatically Collected Data

• Platform Usage Data: Game history (slots, live casino, table games, roulette, lottery, Sports Betting), betting records, deposits and withdrawals, and bonus redemption history.
• Device & Technical Data: IP address, web browser type, device operating system, screen resolution, login and logout timestamps, and session data.
• Location Data: Approximate location data based on your IP address, for security and legal compliance purposes.
• Cookie Data: Information collected through cookies, web beacons, and similar tracking technologies as described in Section 5.

2How We Use Your Personal Data

Every piece of personal data we collect at padu888 has a clear and legitimate purpose. Below is a summary table explaining the intended use of each data category:

In more detail, padu888 uses your personal data for the following purposes:

• Account Management: Creating and managing your padu888 account, including registration, login, profile information updates and password management.
• Transaction Processing: Processing all deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks, and other supported Malaysian payment methods, as well as processing all withdrawal requests.
• Platform Security: Detecting and preventing fraud, money laundering, account abuse, bot usage and any activity that violates padu888's Terms & Conditions.
• Service Communications: Sending transaction notifications, account security alerts, promotional updates (with your consent), and important account-related communications.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and enforcing the limits you have set through padu888's self-exclusion tools.
• Platform Improvements: Analysing aggregated, non-identifiable usage data to understand how players use padu888 and to make continuous improvements to the user experience.

3Data Sharing with Third Parties

Padu888 does not sell, rent, or commercialise your personal data to any third party for their own marketing purposes. However, there are limited situations where padu888 may need to share your data with certain parties in order to lawfully operate the platform:

• Payment Processors: Financial data required to process deposits and withdrawals is shared with licensed payment gateways that handle transactions via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay and FPX. All payment processors are bound by strict data protection agreements and comply with PCI-DSS standards.
• Game Providers: Game session information required for gameplay is shared with game software providers (such as Pragmatic Play, PG Soft, Evolution Gaming) to enable games to function. This data is limited strictly to the necessary technical information.
• Legal Authorities: padu888 will disclose personal data to Malaysian government authorities, regulators or law enforcement bodies when required to do so by law, court order or valid legal process.
• Fraud Prevention: In situations where there are serious indications of fraud or illegal activity, padu888 may share relevant information with accredited third-party fraud prevention service providers or with the relevant financial institutions.
• Technical Service Providers: Technology vendors and cloud service providers that support the padu888 platform infrastructure may have limited access to data for technical purposes. All such providers are bound by strict data protection agreements.

4Data Protection Measures

Padu888 invests seriously in security infrastructure to ensure every Malaysian player's personal data is protected at all times. The following are the layers of protection we have in place:

• 256-bit SSL Encryption: All data transmitted between your browser or app and padu888's servers is encrypted using 256-bit TLS/SSL protocols. This means that even if the data is intercepted in transit, it cannot be read by any unauthorised party.
• Data Encryption at Rest: Sensitive data stored in padu888's databases — including KYC and financial information — is encrypted using industry-standard encryption algorithms while at rest on our servers.
• Tiered Access Control: Access to padu888 user data is strictly controlled through a role-based access control (RBAC) system. Only staff with a legitimate business need who have undergone background checks are permitted to access user data. All access is logged and audited.
• 24/7 Security Monitoring: padu888's cybersecurity team continuously monitors all platform activity around the clock to detect anomalies, unauthorised access attempts, and signs of security threats. Countermeasures are deployed immediately upon detection.
• Regular Security Audits: padu888 undergoes regular security audits conducted by independent third-party cybersecurity firms. The findings are used to identify and address vulnerabilities before they can be exploited.
• Penetration Testing: The padu888 platform undergoes regular penetration testing to simulate real-world cyberattacks and assess the resilience of our security defences in a controlled environment.

5Cookies & Tracking Technologies

Padu888 uses cookies and similar tracking technologies to enhance the user experience, ensure the platform functions correctly, and understand how players interact with our platform. The following are the types of cookies we use:

You can manage cookie settings through your web browser's preferences. However, disabling certain cookies may affect the functionality and user experience of the padu888 platform. For more information on how to manage cookies in your browser, refer to your browser's help documentation.

6Your Rights Regarding Personal Data

As a padu888 user and data subject, you have rights in relation to your personal data. padu888 is committed to respecting and facilitating the exercise of these rights:

To submit any request relating to your data rights, contact the padu888 support team via 24/7 live chat or email us at support@padu888.click. We will process your request within the stipulated timeframe and provide a written response on the action taken.

7Data Retention Period

Padu888 does not retain your personal data longer than necessary for the purpose it was collected, or longer than required by applicable laws and regulations in Malaysia. The following are general guidelines on data retention periods:

• Active Account Data: Personal data associated with active accounts is retained for as long as your account remains active with padu888. This data is necessary for us to deliver our services to you.
• Post-Account Closure Data: After your account is closed, padu888 will retain certain personal data for the minimum period required under applicable Malaysian law — typically between 5 and 7 years — for legal compliance, dispute resolution, and fraud prevention purposes.
• Financial Transaction Records: Records of all financial transactions — including deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX, as well as withdrawals — are retained for the period required under Malaysian financial and anti-money laundering (AMLA) laws.
• KYC Records: Identity verification documents (KYC) are retained for the period required under applicable anti-money laundering and counter-terrorism financing (AML/CFT) laws.
• Security Logs: Security and platform activity logs are retained for the duration required for security investigations and compliance purposes, typically not exceeding 24 months.
• Communication Data: Customer support communication records are retained for the period required for dispute resolution and service quality improvement purposes.

Once the applicable retention period has expired, your personal data will be securely deleted or anonymised using methods that ensure the data cannot be recovered.

8Amendments to the Privacy Policy

Padu888 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements in how we protect your information. We are committed to keeping you informed of any significant changes.

When we make significant changes to this Privacy Policy, we will:

• Updating the "Effective Date" at the top of this document;
• Sending a notification to the email address you registered with padu888 (for material amendments); and
• Displaying a clear notice on the padu888 platform homepage for a reasonable period after the amendments take effect.

It is your responsibility to review this Privacy Policy from time to time. Your continued use of the padu888 platform following the publication of any amendments to this Privacy Policy will be deemed as your acceptance of those changes. If you do not agree with the amendments made, please discontinue use of the platform and contact us.