Padu3 Privacy Policy — Our Commitment to Protecting Your Personal Data in Malaysia

1 Introduction

Padu3 is a premium digital entertainment platform built specifically for Malaysian users. We understand that your trust is our most valuable asset — and that trust can only be built when you know exactly how your information is managed by us.

This Privacy Policy is drafted in accordance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia and internationally recognised data protection principles. It applies to all users who register an account, browse the padu3 website or use any services offered by our platform.

We are committed to keeping your privacy protected at all times. Every decision we make regarding the management of your personal data is made with care, prioritising your security and interests as a valued padu3 member.

2 Personal Data We Collect

Padu3 only collects data that is genuinely necessary to provide you with a safe, fair and quality service. We do not collect excessive or irrelevant information beyond the scope of our service purposes.

Categories of data we collect include:

• Registration information: Full name, mobile number, email address, date of birth, and encrypted password when you create a padu3 account.
• Identity verification documents (KYC): A copy of your identity card (MyKad), passport or other valid identification document to fulfil compliance requirements and prevent fraud.
• Financial information: Bank account details, e-wallet account numbers (Touch 'n Go, GrabPay), and deposit and withdrawal transaction records. We do not store credit or debit card numbers directly — all processing is handled through PCI-DSS certified payment gateways.
• Platform usage data: Login records, game history, wagering history and in-platform activity for security and service improvement purposes.
• Technical data: IP address, device type, operating system, browser type, and session data collected automatically when you browse or use the padu3 platform.
• Communications: The content of any enquiries, complaints, or feedback you submit to the padu3 support team via live chat, WhatsApp, Telegram, or email.

3 How We Use Your Data

Every piece of data we collect is used for a clear and lawful purpose. padu3 uses your information for the following purposes:

• Processing account registration, login, and identity verification securely and efficiently.
• Processing deposits, withdrawals, and all financial transactions in your padu3 account.
• Complying with KYC (Know Your Customer) and AML (Anti-Money Laundering) legal requirements set by the relevant authorities.
• Monitoring account activity to detect and prevent fraud, money laundering, and unauthorised access.
• Providing responsive customer support and resolving any issues you report.
• Sending transaction notifications, account security updates, and relevant promotional information (subject to your communication preferences).
• Analysing usage patterns in aggregate and anonymised form for product improvement and user experience purposes.
• Complying with legal obligations and regulations enforced in Malaysia.

4 Data Sharing With Third Parties

Padu3 does not sell, rent or trade your personal data to third parties. However, in certain limited situations, we may need to share your information with the following parties:

• Payment service providers: Certified payment gateways (such as FPX, DuitNow) receive only the transaction data necessary to process your payment.
• Game service providers: Our gaming platform partners (such as slot and live casino providers) may receive your player ID for game operation purposes — without any personally identifiable information.
• Legal authority: padu3 will disclose required information to Malaysian authorities such as the Royal Malaysia Police or financial institutions when mandated by a court order or applicable law.
• Audit and compliance: Independent audit bodies appointed to verify game fairness and regulatory compliance may access limited, anonymised data.

All third parties we work with are required to comply with data protection standards equivalent to our Privacy Policy and are not permitted to use your data for any purpose other than those specified.

5 Cookies & Tracking Technologies

Padu3 uses cookies and similar tracking technologies to enhance your browsing experience, maintain login session security and understand how users interact with our platform.

Types of cookies we use:

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies may affect the functionality of certain parts of the padu3 platform.

6 Data Security

Padu3 continuously invests in sophisticated cybersecurity infrastructure to ensure your personal data is always protected from both external and internal threats. Key security measures we have implemented include:

• 256-bit SSL/TLS encryption for all data communications between the server and your device.
• Password storage using the bcrypt hashing algorithm, which cannot be decrypted.
• 24/7 security monitoring by padu3's internal cybersecurity team.
• Regular penetration testing by certified independent security firms.
• Role-based access control (RBAC) ensuring padu3 staff can only access data required for their specific responsibilities.
• Two-Factor Authentication (2FA) available for all member accounts as an additional layer of security.
• Regular system vulnerability scanning and security patches applied without delay.

7 Data Retention Period

Padu3 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy or as required by applicable Malaysian law.

• Active account data: Retained for as long as your account remains active at padu3.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial legal requirements.
• KYC documents: Retained for the duration of the active account period and up to 5 years after account closure for AML compliance purposes.
• Support communication logs: Retained for 2 years for reference and service improvement purposes.
• Technical data and system logs: Retained for 90 days before being automatically deleted.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered.

8 Your Rights Regarding Personal Data

As a registered padu3 user in Malaysia, you have the following rights regarding your personal data, in accordance with the Personal Data Protection Act 2010 (PDPA):

• Right of Access: You may request a copy of all personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or outdated data at any time through your account settings or by contacting our support team.
• Right to Erasure: You may request deletion of your personal data, subject to our legal obligations to retain certain records.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict how we process your data.
• Right to Object: You can object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability: You may request a copy of your data in a machine-readable format for transfer to another platform.

To exercise any of the above rights, please contact the padu3 privacy team by email at [email protected]. We are committed to processing every request within 14 business days.

9 Child Protection

Padu3 takes child protection extremely seriously. The padu3 platform is for adult users aged 18 and above only. We do not knowingly collect or process personal data from individuals under the age of 18.

If we identify that personal data of a child has been collected without our knowledge, we will take immediate action to delete that data and close the account in question. Parents or guardians who believe their underage child has registered at padu3 are urged to contact us immediately at [email protected].

10 Cross-Border Data Transfers

In some cases, your personal data may be transferred to or processed in other countries — for example, when we use cloud servers or international technical service providers. When such transfers occur, padu3 ensures equivalent protection is applied through:

• Binding data processing agreements with foreign service providers requiring them to comply with Malaysia's PDPA standards.
• Use of internationally recognised standard contractual clauses for data transfers.
• Selection of ISO 27001 and SOC 2 Type II certified cloud providers for sensitive data storage.

11 Changes to This Privacy Policy

Padu3 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data management practices, new legal requirements or updated platform features. The latest effective date will always be displayed at the top of this page.

For any significant changes that affect your privacy rights, padu3 will provide clear notice via your registered email or through in-platform notifications at least 14 days before the changes take effect. Your continued use of the padu3 platform after such changes are published will be considered your acceptance of the updated Privacy Policy.

12 Contact Our Privacy Team

If you have any questions, concerns or requests relating to your privacy and personal data management at padu3, we are here to help. Feel free to reach us through the following channels:

• Privacy Email: [email protected] — for privacy inquiries and data access requests.
• Live Chat: Available 24/7 on the padu3 website — for general inquiries and immediate support.
• WhatsApp & Telegram: An always-on instant messaging channel for fast assistance.
• FAQ: Visit page FAQ us for instant answers to the most frequently asked privacy questions.

We aim to respond to all privacy enquiries within 2 business days. For formal requests relating to personal data rights under PDPA, please submit a written request via email along with a copy of your identity verification document.