Privacy Policy padu33 — Your Personal Data Protection

1 Introduction

Padu33 ("we", "Platform") understands that privacy is a fundamental right of every individual. As an online casino platform operating for Malaysian players, we take our responsibility to protect your personal data very seriously.

This Privacy Policy explains in detail the types of personal data we collect, the purposes of collection, how we store and protect it, and your rights as a data owner. This document is prepared to ensure every padu33 member from Malaysia can understand it clearly.

Padu33 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data security standards. We have never and will never sell, rent, or disclose your personal data to any third party for marketing purposes without your explicit consent.

2 Personal Data We Collect

To provide a secure, fast, and high-quality service, padu33 collects several categories of personal data from members. Below is a full breakdown of the data we collect and why it is needed:

3 How We Use Your Data

The personal data we collect is used transparently and only for legitimate purposes. padu33 will not use your data for any purpose not stated here without obtaining your consent first.

• Account management — registering new accounts, maintaining member profiles, and processing requests to update information.
• Payment processing — securely verifying and processing deposits and withdrawals via FPX, DuitNow, TNG eWallet, GrabPay, Boost, and USDT.
• Identity verification (KYC) — ensuring all members meet the minimum age requirement of 18 and preventing the use of false identities.
• Fraud prevention and AML — detecting and investigating suspicious activity that may involve money laundering or financial fraud.
• Experience personalization — providing personalized game recommendations, bonus offers, and promotions based on your preferences.
• VIP Program — calculating loyalty points, determining VIP tiers, and processing the exclusive benefits you are entitled to.
• Customer Support — helping you resolve any issues related to your account, payments, or games more quickly and accurately.
• Service communications — sending important notifications about your account, security updates, and terms changes via email or SMS.
• Legal compliance — fulfilling reporting obligations to the relevant authorities when required by Malaysian law.

4 Legal Basis for Data Processing

Every processing of personal data by padu33 rests on a solid legal basis under Malaysia's Personal Data Protection Act 2010 (PDPA). These bases are:

• Consent — you provide explicit consent during registration and acceptance of this Privacy Policy.
• Contract performance — data processing required to fulfill the service agreement between padu33 and you as a member.
• Legitimate interest — for fraud prevention, platform security, and service improvement purposes that benefit all members.
• Legal obligation — compliance with AML and KYC reporting requirements and directives from relevant authorities.

5 Data Sharing with Third Parties

Padu33 does not sell or rent your personal data. However, under certain limited and controlled circumstances, we may share your data with the following parties:

• Payment service providers — banks, e-wallet companies, and payment processors required to complete your financial transactions. They receive only the data necessary to process payments.
• Technical service providers — cloud computing companies, server infrastructure providers, and fraud detection software vendors that support the operation of the padu33 platform.
• Game providers — game software companies providing slots, Live Casino, and table games on our platform may receive game session data required for game operations.
• Statutory Authority — law enforcement agencies, courts, and regulatory authorities when required by Malaysian law.

All third parties with whom we share data are bound by strict confidentiality and data protection agreements. They are not permitted to use your data for any purpose other than those specified.

6 Data Security

Padu33 continuously invests in the latest cybersecurity infrastructure to keep your personal data safe at all times. The security measures we have implemented include:

• 256-bit SSL Encryption — all data transmitted between your device and padu33 servers is protected with military-grade encryption, the same standard used by leading financial institutions worldwide.
• Data encryption at rest — all sensitive data, including financial information and KYC documents, is stored in encrypted format on internationally certified secure servers.
• Two-factor authentication (2FA) — an additional security layer for account login to protect you from unauthorised access.
• 24/7 security monitoring — our cybersecurity team monitors the padu33 system around the clock to detect and respond to any threats immediately.
• Strict access control — only padu33 staff with specific authorisation may access members' personal data, and every access is logged and audited.
• Regular penetration testing — we conduct regular security testing involving independent security experts to identify and patch any system vulnerabilities.

7 Data Retention Period

Padu33 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or for as long as required by Malaysian law. The following are our data retention guidelines:

• Active account data — retained for the duration your account is active and for 5 years after account closure.
• Financial transaction records — retained for a minimum of 7 years in compliance with Malaysia's accounting and AML legal requirements.
• KYC Documents — retained for 5 years after the date of verification or account closure, whichever is later.
• Technical and security logs — retained for 12 months for security investigation and dispute resolution purposes.
• Customer support communication data — retained for 3 years to allow reference to communication history if required.

Upon expiry of the designated retention period, your data will be securely deleted or fully anonymised so that it can no longer be linked to your identity.

8 Your Rights as a Data Owner

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold:

9 Cookies and Tracking Technologies

Padu33 uses cookies and similar tracking technologies to enhance user experience and ensure the platform functions properly. The types of cookies we use are as follows:

• Essential Cookies — required for core platform operations including login session authentication and security. These cookies cannot be disabled.
• Performance Cookies — collecting information on how you use the platform (pages visited, time spent) to help us improve our services.
• Functional Cookies — remembering your preferences such as language, display settings, and game preferences so you don't have to reset them every time.
• Security Cookies — detecting unusual login patterns to help us identify and prevent unauthorized access to your account.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the padu33 platform.

10 Child Protection

Padu33 is a platform intended exclusively for individuals aged 18 and above. We do not knowingly collect any personal data from individuals under the age of 18.

Should we determine that we have collected data from a minor without knowledge or due to a verification error, we will immediately take the following actions:

• Closing the account in question immediately.
• Deleting all related personal data from our systems.
• Returning any eligible financial balance to the rightful party.

11 Privacy Policy Amendment

Padu33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in business practices, legal requirements, or data protection improvements.

When significant amendments are made, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending a notification to the email address registered to your account.
• Displaying a clear notice on the platform's main page for a minimum of 14 days.

Continued use of the padu33 platform after any amendments are announced is considered acceptance of the revised Privacy Policy terms. We encourage you to review this page periodically.

12 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how padu33 handles your personal data, please contact our Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the padu33 platform.
• Response Time: Within 2 business days for general enquiries; 21 business days for formal data rights requests.