Privacy Policy padu44 – Data Protection Malaysian Members

Padu44 is an online betting platform operating in Malaysia, fully committed to protecting the privacy of every member who uses our services. This Privacy Policy ("Policy") describes our practices regarding the collection, use, disclosure, and protection of your personal information when you register for or use the padu44 platform — including our website, mobile app, and all other service channels.

We understand that your trust is the most valuable asset we hold. That is why we have never treated privacy as an afterthought. Since padu44 first launched, we have invested seriously in security infrastructure, internal policies, and staff training to ensure your data remains safe and handled with full integrity.

This policy is formulated in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and international best-practice data protection guidelines. Any enquiries regarding this policy may be sent directly to our Data Protection Officer (DPO) team.

Padu44 collects your personal information through two main methods: information you provide directly during registration and platform use, and information collected automatically while you use our services.

A. Information You Provide Directly:

• Full name as stated in your official identification document (MyKad or passport).
• Date of birth for age verification purposes.
• An active Malaysian-registered mobile phone number.
• A valid and active email address.
• Current residential address for KYC and legal compliance purposes.
• Copies of identification documents (MyKad, passport) for the identity verification process.
• Bank account or e-wallet details used for transactions.
• A selfie with your identification document if requested during the KYC process.

B. Information Collected Automatically:

• The IP address of your device when accessing the platform.
• Device type, operating system, and web browser version used.
• Login session data including time, geographic location, and session duration.
• Game history, bets, wins, and losses on the platform.
• Financial transaction history including deposits and withdrawals.
• Cookie data and related tracking technologies (see Section 6).

Every piece of data we collect has a clear and legitimate purpose. padu44 does not use your data for any purpose not stated in this Policy without first obtaining your consent.

• Identity Verification & KYC: To verify that you meet the minimum age requirement (18 years old) and to confirm your identity in compliance with applicable legal requirements.
• Transaction Processing: To process deposits, withdrawals, and all financial transactions securely and in a timely manner.
• Account Management: To create, maintain, and manage your account, including security settings, game limits, and personal preferences.
• Fraud Prevention: To identify and investigate suspicious activity, including attempts at money laundering or platform abuse.
• Service Communications: To send important notifications relating to your account, transactions, policy changes, and security information.
• Customer Support: To assist you in resolving any issues or enquiries submitted to our support team.
• Platform Enhancements: To analyse aggregated usage patterns in order to improve our services, platform design, and functionality.
• Promotions & Marketing: To send relevant promotional offers, subject to your marketing communication preferences (you may opt out at any time).
• Legal Compliance: To fulfil compliance, reporting, and cooperation obligations with relevant authorities as required under Malaysian law.

Padu44 does not sell, rent, or trade your personal information to any third party for their own commercial purposes. However, in the course of operating the platform, we may share your information with the following parties within a limited and specific scope:

• Payment Processors: Payment service providers (FPX, DuitNow, Touch 'n Go, GrabPay, and others) receive the necessary transaction information to securely process your deposits and withdrawals.
• KYC Verification Service Providers: Trusted third parties that assist in conducting identity checks and document verification in accordance with compliance requirements.
• Game Providers: Gaming software companies that provide casino content, sports betting, and live game content may receive the session data required for technical functionality.
• Legal Authorities: Government authorities, regulatory bodies, or law enforcement when required to do so by applicable Malaysian law.
• Professional Advisors: Lawyers, accountants, or auditors in specific contexts subject to strict professional confidentiality obligations.

All third parties that receive your data are required to handle it in accordance with security standards equal to or exceeding those of padu44. Legally binding data processing agreements are signed with all partners before any data sharing takes place.

The security of your data is padu44's highest priority. We implement multiple layers of technical and organisational protection to ensure your personal information is always safeguarded against unauthorised access, loss, or unintended disclosure.

• 256-bit SSL/TLS Encryption: All data transmitted between your device and padu44 servers is encrypted using industry-standard SSL/TLS protocols.
• Data-at-Rest Encryption: Sensitive information stored in our database — including passwords, bank details, and KYC documents — is encrypted using AES-256.
• Two-Factor Authentication (2FA): We provide and encourage the use of 2FA on all accounts to add an extra layer of security.
• 24/7 Security Monitoring: Our automated threat detection system monitors platform activity around the clock to identify and respond to any suspicious activity.
• Internal Access Controls: Only padu44 staff who require access to specific data to perform their duties are permitted to do so, in accordance with the principle of minimum access rights.
• Regular Security Audits: Security assessments and penetration testing are conducted regularly by independent security experts.
• Secure Data Centres: Your data is stored in ISO 27001-certified data centres with multi-layered physical and digital protection.

While we take all reasonable precautions, no system can guarantee 100% absolute security. You also play an important role in keeping your account safe — use a strong password, enable 2FA, and never share your login credentials with anyone.

Padu44 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use and their purposes:

• Essential Cookies (Required): Required for core platform functions such as login authentication, session security, and privacy settings. These cookies cannot be disabled as they are necessary for the platform to operate.
• Performance Cookies: To collect information about how you use the platform — most frequently visited pages, error messages received, and so on — to help us improve site performance.
• Functional Cookies: To save your preferences such as language selection, display settings, and your login information (if you choose to be remembered) for a smoother experience.
• Analytics Cookies: Used to analyse aggregated, non-personal usage patterns, helping us understand how members interact with the platform.

You may manage or disable cookies through your web browser settings at any time. However, disabling essential cookies may affect platform functionality and your gaming experience. Please refer to your browser documentation for specific instructions on managing cookies.

Under the Malaysia Personal Data Protection Act 2010 (PDPA) and our own policy, you have the following rights regarding your personal data that we hold:

To exercise any of the rights above, submit a written request to our Data Protection Officer team via email at [email protected] with the subject line "Personal Data Rights Request". We will respond within 14 business days. In certain cases, we may require additional identity verification before processing your request.

Padu44 retains your personal data only for as long as necessary for the purposes stated in this Policy or as required by applicable Malaysian law. The following are our general data retention guidelines:

• Active Account Data: Retained for the duration your account is active and for 7 years after account closure for legal and tax compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian accounting and tax legal requirements.
• KYC Documents: Retained for 7 years after the business relationship ends, in accordance with the Anti-Money Laundering Act (AMLA) requirements.
• Security & Audit Logs: Retained for 2 years for security investigation and dispute resolution purposes.
• Customer Support Communications: Retained for 3 years for reference and service improvement purposes.
• Marketing Data: Retained until you opt out of marketing communications or request deletion.

When data is no longer needed and there is no legal obligation to retain it, we will securely delete or anonymise it using approved procedures.

Padu44 is a platform exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we find that we have collected data from an individual under the age of 18 without valid age verification, we will immediately delete that data and close the associated account. All wins obtained during the period the account did not meet the age requirement are void and will not be paid out.

Parents and guardians who suspect a child under their care has accessed the padu44 platform are encouraged to contact us immediately at [email protected] so we can take appropriate action without delay.

Padu44 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any amendments made will take effect immediately upon publication of the updated version on this page.

For amendments involving material changes to how we process your personal data, we will endeavour to notify you through one of the following channels:

• A pop-up notification upon your next login to your account.
• An email to your registered address summarising the key changes.
• A prominent banner notice on our platform's home page.

The "Last Updated" date shown at the top of this page always reflects the date of the current version of this Policy. We encourage you to review this page periodically to stay informed about how we protect your personal information. Continued use of the padu44 platform after any amendments are published will be considered your acceptance of the updated terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO) through the following channels:

• DPO Email: [email protected] (with the subject line "Data Privacy Enquiry")
• Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the padu44 platform
• Response Time: We are committed to responding to all enquiries within 3 business days.

If you are not satisfied with how we handle your complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) or the relevant regulatory body under applicable Malaysian legislation.