padu33 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by padu33 ("padu33", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at padu33.one. This Policy applies to all personal data processed by padu33 in connection with the operation of the Platform, including casino games, sportsbook services, slots, jackpot games, VIP programme administration, and customer support.

By registering a padu33 account and using any part of the Platform, you acknowledge that you have read, understood, and agreed to the collection and processing of your personal data as described in this Policy. If you do not agree to the terms of this Policy, you must not create a padu33 account or use the Platform.

This Policy is to be read alongside padu33's Terms and Conditions, which are incorporated by reference. Where this Policy uses terms defined in the Terms and Conditions, those definitions apply here.

2. Data We Collect

padu33 collects personal data through several channels — directly from you when you register and use the Platform, automatically through Platform interaction, and in limited circumstances from third-party verification providers.

Category	Data Types	Collection Method
Identity Data	Full legal name, date of birth, government-issued ID details	Registration form; KYC verification
Contact Data	Email address, phone number, residential address (including city, state, postcode)	Registration form; account settings
Financial Data	Payment method type, masked account identifiers, transaction records (amounts, dates, types)	Deposit/withdrawal processes; payment processor callback
Technical Data	IP address, device type, browser type and version, operating system, session timestamps	Automatic — Platform access logs
Usage Data	Games played, bets placed, wagering amounts, win/loss records, session duration, feature interactions	Automatic — Platform activity logs
Communications Data	Live chat transcripts, support email content, dispute records	Customer support interactions

padu33 does not collect sensitive special-category personal data (such as health information, racial or ethnic origin, or political opinions) unless specifically required for responsible gaming assessments and with your explicit consent.

3. How We Use Your Personal Data

padu33 processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your padu33 member account, including authenticating your identity at login and processing account settings changes.
• Service Delivery: Providing access to casino games, sportsbook markets, slots, jackpot products, and live dealer tables; processing deposits, withdrawals, and bonus allocations.
• Identity Verification (KYC): Verifying your age (minimum 21), identity, and payment method ownership as required under international gaming authority obligations and anti-money laundering regulations.
• Responsible Gaming: Monitoring account activity to identify patterns consistent with problem gambling; applying self-imposed limits and exclusions; conducting enhanced monitoring for members who have activated responsible gaming tools.
• Fraud Prevention and Security: Detecting, preventing, and investigating fraudulent activity, account compromise, collusion, and other security incidents affecting the Platform or its members.
• Legal and Regulatory Compliance: Fulfilling padu33's obligations under applicable gaming authority licence conditions, anti-money laundering legislation, financial crime reporting requirements, and data protection regulations.
• Customer Support: Responding to enquiries, resolving complaints, processing dispute submissions, and providing technical assistance.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve game selection, interface design, payment infrastructure, and overall member experience.
• Marketing Communications: Where you have consented, sending promotional communications about padu33 offers, new games, VIP events, and platform updates. You may withdraw consent at any time through account settings.

4. Legal Basis for Processing

padu33 processes your personal data under the following legal bases:

• Contractual Necessity: Processing required to perform the contract constituted by the Terms and Conditions — account creation, service delivery, financial transactions, and customer support.
• Legal Obligation: Processing required for padu33 to comply with gaming authority licence conditions, anti-money laundering laws, age verification requirements, and financial crime reporting obligations.
• Legitimate Interests: Processing for fraud prevention, Platform security, responsible gaming monitoring, and aggregated analytics — where padu33's interests do not override your fundamental rights.
• Consent: Processing for direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

padu33 does not sell, rent, or trade your personal data. padu33 may share your data with the following categories of recipients in the circumstances described:

• Payment Processors: Touch 'n Go, Boost, GrabPay, DuitNow, FPX banking partners, and USDT processing infrastructure — solely for the processing of your financial transactions.
• Identity Verification Providers: Third-party KYC and age verification service providers engaged by padu33 to fulfil gaming authority age and identity verification obligations.
• Game Content Providers: Certified game studios and live dealer providers (e.g., Evolution Gaming, Pragmatic Play) may receive anonymised session identifiers required for game functionality. These providers do not receive your identity or contact data.
• Regulatory Authorities: Gaming licensing authorities, financial intelligence units, and law enforcement agencies, where padu33 is legally required or authorised to disclose data.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by padu33, subject to confidentiality obligations.

All third-party service providers engaged by padu33 are contractually required to process your data only for the specified purpose, maintain appropriate security standards, and not disclose it to further parties without padu33's authorisation.

6. Cookies and Tracking Technologies

padu33 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Required for core Platform functionality — session management, authentication state, security tokens. Cannot be disabled without affecting Platform operation.
• Functional Cookies: Remembering your preferences such as language, display settings, and game lobby filters across sessions.
• Analytics Cookies: First-party analytics to understand aggregate Platform usage patterns — page views, session lengths, navigation flows — using anonymised data only.

7. Data Security

padu33 implements a multi-layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and padu33 servers.
• AES-256 encryption for sensitive personal data stored in padu33 databases.
• PCI-DSS compliant payment processing — full payment card and e-wallet credentials are never stored on padu33 infrastructure.
• Two-factor authentication available for all member accounts.
• Role-based access controls limiting staff access to member data to those with a documented operational need.
• Regular independent security audits and penetration testing by accredited third-party security firms.

While padu33 takes all reasonable technical and organisational measures to secure your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your device and padu33 login credentials.

8. Data Retention Periods

padu33 retains personal data only as long as necessary for the purposes for which it was collected, or as required by applicable legal, regulatory, or accounting obligations. Specific retention guidelines include:

• Active account data is retained for the duration of the account relationship plus a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction records are retained for a minimum of seven (7) years from the date of the transaction.
• KYC verification documents are retained for the period required by the applicable gaming authority and anti-money laundering regulations — typically a minimum of five (5) years post-account closure.
• Customer support communications are retained for three (3) years from the date of the last interaction, or longer where related to an ongoing dispute or legal matter.
• Technical log data (IP addresses, session records) is retained for 12 months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

9. Your Data Protection Rights

Subject to applicable law and regulatory restrictions, padu33 members hold the following rights in respect of their personal data:

To exercise any of these rights, contact padu33 via 24/7 live chat or email support (details in the footer). padu33 will respond within 30 days of receiving a valid request. Identity verification may be required before processing sensitive data requests.

10. International Data Transfers

padu33 may transfer your personal data to servers and service providers located outside of Malaysia in connection with the operation of the Platform. Where such transfers occur, padu33 ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent transfer mechanisms — to ensure your data receives a standard of protection consistent with applicable data protection principles.

11. Minors

The padu33 Platform is strictly for adults aged 21 and above. padu33 does not knowingly collect personal data from anyone under the age of 21. Where padu33 becomes aware that personal data has been collected from a person under the minimum age, that account will be immediately closed, all associated data will be deleted (subject to legal retention requirements), and all balances and winnings will be forfeited.

12. Changes to This Privacy Policy

padu33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or Platform functionality. Where material changes are made, padu33 will provide advance notice via email to your registered address and/or via a notice on the Platform prior to the effective date of the changes. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the changes.

The version of this Policy published on the Platform at any given time is the current operative version. Prior versions are archived and available on request.

13. How to Contact Us

For any privacy-related enquiries, data subject rights requests, or concerns about how padu33 handles your personal data, please contact the padu33 Data Privacy team via:

• Live Chat: 24/7 live chat support, accessible from any page on the Platform (fastest response).
• Email: [email protected] — please use the subject line "Privacy Request" for data protection matters to ensure correct routing.

padu33 aims to acknowledge all privacy requests within 48 hours and to provide a full response within 30 calendar days of receipt of all necessary information.