Padu888 Privacy Policy – Malaysian Member Data Protection

Introduction

Padu888 ("we", "the Platform") takes our responsibility to protect the privacy of every member who entrusts us with their personal information seriously. This Privacy Policy outlines padu888's data protection practices in a comprehensive and transparent manner, and applies to all users of the padu888 platform — whether accessed via the website or the mobile app on Android and iOS.

As a platform operating in Malaysia and serving players nationwide, padu888 upholds responsible data protection principles and places members' interests at the heart of every data-handling decision. We believe privacy is a fundamental right, and our commitment to it goes beyond legal obligation – it is a value we hold with genuine conviction.

Data Collected by padu888

Padu888 only collects data that is strictly necessary to manage your account, process transactions, and enhance your experience on the platform. The following are the categories of data we collect:

Account Registration Data

When you register a padu888 account, we collect the following information:

• Full name as per official identification document
• An active Malaysian phone number
• A valid email address
• Date of birth (for age verification — padu888 is strictly for users aged 18 and above)
• Encrypted password (we do not store passwords in plain text)

Identity Verification (KYC) Data

To meet identity verification requirements for withdrawals and to comply with Anti-Money Laundering (AML) procedures, padu888 may request additional documents such as:

• A copy of your MyKad or Malaysian passport
• Proof of address (recent utility bill or bank statement)
• Proof of ownership of the payment method used

Transaction & Financial Data

Padu888 records all financial transactions in your account for accountability and security purposes, including:

• Deposit history – method, amount, and timestamp of each deposit
• Withdrawal history – method, amount, and timestamp of each withdrawal
• Betting and gaming history – game types, wager amounts, and outcomes
• Bonus and promotion usage history

Important note: padu888 does not store your full bank account or e-wallet number. Only the information required to process transactions and verification is retained, and it is encrypted to the highest security standards.

Technical and Usage Data

Like all online platforms, padu888 automatically collects certain technical data when you use the platform, including:

• Your device's IP address
• Device type, operating system, and web browser used
• Pages visited within the platform and time spent
• Activity log data for technical troubleshooting purposes
• General location data based on IP address (not precise GPS location)

Data Category	Example	Purpose of Collection
Identity	Name, MyKad, date of birth	Account verification, AML compliance
Contact	Phone, email	Account communications, notifications
Financial	Deposit & withdrawal history	Transaction processing, security
Games	Betting history and winnings	Account management, responsible gaming
Technical	IP address, device type	Security, fraud detection

How padu888 Uses Your Data

Padu888 only uses your personal data for legitimate, stated purposes. We do not use your data for purposes unrelated to the operation of the platform without your consent.

• Account Management: Creating and managing your padu888 account, processing registrations, verifying identity, and enabling secure login.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks), as well as handling withdrawals to your account.
• Security and Fraud Detection: Monitoring for suspicious activity, identifying unauthorised access attempts, and protecting your account from misuse.
• Customer Support: Assisting with enquiries, complaints, and requests submitted to the padu888 support team.
• Platform Improvements: Analysing usage data in aggregate (not at an individual level) to understand how members use the platform and to improve padu888's products and services.
• Service Communications: Sending important account-related notifications such as transaction confirmations, security alerts, and policy updates.
• Legal Compliance: Fulfilling applicable legal obligations, including anti-money laundering requirements and reporting to authorities as required by law.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of potential problem gambling and providing appropriate support to members who may need assistance.

Data Sharing & Disclosure

Padu888 strictly limits the sharing of members' personal data. Your data will not be disclosed to third parties except in the following limited circumstances:

Trusted Service Providers

Padu888 works with a carefully selected set of third-party service providers to carry out specific functions. These include payment gateway providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX for processing your financial transactions. These service providers receive only the minimum data necessary to perform their functions, and are bound by strict data protection agreements with padu888.

Legal Requirements

Padu888 may be required to disclose your personal data to the relevant authorities when mandated by Malaysian law or a valid court order. In such circumstances, padu888 will disclose only the minimum data required by that order and will notify you of the disclosure to the extent permitted by law.

Business Transfers

In the event of a merger, acquisition, or transfer of padu888's assets to another entity, member data may be transferred as part of that process. In such cases, padu888 will ensure that the receiving entity upholds data protection standards equivalent to or higher than those set out in this Privacy Policy, and members will be notified in advance.

Data Security at padu888

Padu888 continuously invests in security infrastructure to ensure members' personal and financial data remains protected at all times. Our key security measures include:

• 256-Bit SSL Encryption: All communications between your device and padu888's servers are encrypted using TLS 1.3 with AES-256 encryption, ensuring no data can be intercepted in transit.
• Two-Factor Authentication (2FA): padu888 offers two-factor authentication as an added layer of security when logging in to your account.
• 24/7 Security Monitoring: A continuous threat monitoring system detects and responds to any suspicious activity in real time.
• Tiered Access Controls: Access to member data within padu888's internal systems is governed by a minimum need-to-know principle – only staff who require it for their job function may access specific data.
• Regular Security Audits: padu888 conducts regular security audits and penetration testing to identify and address vulnerabilities before they can be exploited.
• PCI-DSS Standard: Payment data handling complies with the Payment Card Industry Data Security Standard (PCI-DSS) to safeguard members' financial information.

While padu888 takes all reasonable steps to protect your data, no security system is entirely immune to all threats. We encourage members to play their part in keeping their accounts secure by using strong passwords, not sharing login credentials, and promptly reporting any suspicious account activity to the padu888 support team.

Cookies and Tracking Technologies

Padu888 uses cookies and similar tracking technologies to enhance the user experience on the platform. Cookies are small text files stored in your web browser that allow the platform to remember your preferences and settings.

Types of Cookies Used

• Essential Cookies: Required for core platform functions such as maintaining your login session. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saving your preferences such as language, display settings, and game choices to deliver a more personalised experience.
• Analytics Cookies: Used in aggregate and anonymised form to understand how members use the platform, which pages are most visited, and where improvements can be made. This data is not linked to your individual identity.
• Security Cookies: Used to detect fraudulent activity and protect your account from unauthorised access.

You can manage cookie settings in your web browser. However, disabling essential cookies may affect the functionality of the padu888 platform. For details on managing cookies in your browser, please refer to your browser's help documentation.

Cross-Border Data Transfers

Padu888 operates primarily in Malaysia and prioritises storing member data within appropriate local jurisdictions. However, in some situations, data may be accessed or processed by systems or personnel located elsewhere, such as for technical support purposes or as part of data backup procedures.

When data needs to be transferred or accessed from outside Malaysia, padu888 ensures that protections equivalent to or exceeding those set out in this Privacy Policy are fully upheld. This includes the use of appropriate data transfer agreements and security assessments for every transfer that takes place.

Data Retention and Deletion Periods

Padu888 retains members' personal data for as long as necessary for the purpose it was collected, or as required by applicable law. The following are retention period guidelines for key data categories:

• Active Account Data: Data is retained for as long as your account remains active on padu888, and for a reasonable period after account closure for complaint management and audit purposes.
• Financial Transaction Records: Deposit, withdrawal, and betting records are retained for a minimum of 7 years to meet anti-money laundering compliance and accounting requirements.
• KYC Data: Identity verification documents are retained for the period required under applicable Malaysian law.
• Technical Log Data: Access logs and technical activity records are retained for a maximum of 12 months for security and troubleshooting purposes.
• Support Communication Data: Live chat session records and customer support emails are retained for 2 years for quality control and complaint resolution purposes.

When data is no longer required, padu888 will securely delete or anonymise it using industry-standard deletion methods, ensuring it cannot be recovered by any party.

Your Privacy Rights as a padu888 Member

As a padu888 member, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: If the data we hold about you is inaccurate or incomplete, you may request a correction.
• Right to Erasure: Under certain circumstances, you may request that we delete your personal data – subject to our legal obligations to retain specific records.
• Right to Restrict Processing: You may request that we restrict how we use your personal data in certain circumstances.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes.
• Right to Data Portability: You may request your personal data in a machine-readable format for transfer to another service provider.

To exercise any of the above rights, please contact padu888's privacy team by email at support@padu888.xyz stating the type of request, your full name, and account number. We will process your request within 14 business days and may require identity verification before proceeding with sensitive requests.

Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how padu888 handles your personal data, we welcome your feedback and are committed to addressing it seriously.

• Privacy Email: support@padu888.xyz – please include "Privacy Enquiry" in the subject line of your email
• Live Chat: Via the chat icon within the padu888 platform, available 24/7
• Response Time: We aim to respond to all privacy-related enquiries within 3 business days

Padu888 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or improvements to the way we protect your data. Any material amendments will be communicated to members via in-platform notifications or email at least 14 days before taking effect. Continued use of the padu888 platform after the effective date of any amendment constitutes acceptance of that amendment.