padu44 Privacy Policy

This Privacy Policy ("Policy") describes how padu44 ("the Company", "we", "our", "us") processes personal data in connection with the padu44 online casino and sportsbook platform, accessible at padu44.app (the "Platform"). The Company is the data controller responsible for the personal data you provide when using the Platform.

This Policy should be read in conjunction with the padu44 Terms & Conditions, which govern your use of the Platform. By registering a padu44 account, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

padu44 operates under international gaming licensing. Our data handling practices are designed to comply with applicable data protection legislation and the data protection requirements of our gaming licence. Where local laws impose additional obligations on Malaysian users or users in other specific jurisdictions, we apply those obligations as a minimum standard.

padu44 collects the following categories of personal data in connection with the operation of the Platform:

We do not collect special categories of sensitive personal data (such as health, biometric, or racial data) except where voluntarily provided in the context of a responsible gaming assessment or as required by law.

padu44 collects your personal data through the following means:

• Directly from you: Data you provide during account registration, KYC verification, deposit and withdrawal requests, support contact, and participation in promotions.
• Automatically: Technical and usage data collected via cookies, server logs, and analytics tools as you interact with the Platform. This includes your IP address, device identifiers, and browsing behaviour within the Platform.
• From third-party service providers: Identity verification data from KYC providers; fraud signals and risk scores from fraud detection partners; payment confirmation data from payment processors (Touch 'n Go, Boost, Maybank, CIMB, Public Bank, GrabPay, and USDT payment processors).
• From game providers: Game outcome data, RNG certification records, and session data from third-party game software providers whose titles are offered on the Platform.

padu44 processes your personal data for the following purposes, each supported by a lawful basis for processing:

Where processing is based on consent — specifically direct marketing communications — you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

padu44 does not sell your personal data. We may share your data with the following categories of third parties only to the extent necessary for the stated purpose:

• Payment processors and e-wallet providers: Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, and cryptocurrency processing partners — to process deposits and withdrawals.
• KYC and identity verification providers: Third-party identity verification services used to confirm your age, identity, and address as part of our onboarding and ongoing compliance obligations.
• Fraud and risk management providers: Services that analyse transaction patterns and device data to detect fraud and protect account security.
• Game software providers: Third-party providers whose games are offered on the Platform may receive usage data relevant to their games for RTP auditing and technical support purposes.
• IT and cloud infrastructure providers: Hosting, storage, and security providers who process data on our behalf under contractual data processing agreements.
• Regulatory authorities and law enforcement: Where required by law, court order, or as necessary to cooperate with our gaming licence regulator or relevant Malaysian or international law enforcement authorities.
• Professional advisers: Legal, audit, and compliance advisers under obligations of professional confidentiality.

All third-party service providers who process personal data on behalf of padu44 are required to handle that data in accordance with applicable data protection standards and are subject to contractual obligations that restrict their use of your data to the specific service they provide.

As padu44 operates under an international gaming licence, some of the third-party service providers referenced in Section 5 may be located outside Malaysia and outside the European Economic Area. Where personal data is transferred to a country that does not offer a level of data protection equivalent to the jurisdiction in which padu44 is licensed, we implement appropriate safeguards — such as standard contractual clauses, binding corporate rules, or adequacy decisions — to ensure your data receives adequate protection.

By registering a padu44 account and using the Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Malaysia as described in this Policy.

padu44 retains your personal data for as long as your account is active and for a minimum period following account closure as required by our gaming licence and anti-money laundering obligations. The standard minimum retention period for account holder data following account closure is five (5) years.

Specific retention periods by data category:

• Identity and KYC documents: 5 years post-account closure minimum, or longer if required by applicable law.
• Financial transaction records: 5 years post-transaction, consistent with AML record-keeping requirements.
• Communications (support transcripts, complaints): 3 years from the date of the communication or resolution, whichever is later.
• Technical and usage logs: Up to 12 months for standard usage logs; longer where retained in connection with an active investigation or dispute.
• Marketing preferences: Until you withdraw consent or request deletion.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. We do not retain data in identifiable form beyond what is required.

padu44 uses cookies and similar browser-based technologies on the Platform for the following purposes:

• Essential / Functional Cookies: Required for the Platform to function correctly. These include session cookies that maintain your logged-in state, security cookies used for CSRF protection, and cookies that store your language and display preferences. These cookies cannot be disabled without impairing Platform functionality.
• Analytics Cookies: Used to understand aggregate user behaviour on the Platform — such as which game categories are most visited and how players navigate the lobby. Analytics data is processed in aggregated, anonymised form where possible.
• Fraud Detection Cookies: Device fingerprinting and session consistency checks used to identify anomalous login patterns and protect against account takeover attempts.

padu44 does not deploy third-party advertising cookies, social media tracking pixels, or retargeting technologies that share your browsing behaviour with advertising networks outside the Platform.

You may manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to log in and use the Platform. Disabling analytics cookies will not affect your access to games or account functions.

padu44 implements technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and padu44 servers.
• Encryption at rest for sensitive personal data and financial records stored on our servers.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access personal data.
• Multi-factor authentication for internal systems handling personal data.
• Regular penetration testing and vulnerability assessments by independent security firms.
• Incident response procedures to detect, contain, and notify of personal data breaches in accordance with applicable regulatory requirements.

While padu44 maintains robust security infrastructure, no system is entirely immune to risk. You should protect your account by using a strong, unique password, enabling two-factor authentication, and never sharing your login credentials with any third party. If you suspect your account has been compromised, contact padu44 support immediately.

Depending on the jurisdiction in which you are located and subject to applicable law, you may have the following rights in relation to your personal data held by padu44:

• Right of Access: Request a copy of the personal data padu44 holds about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to our legal obligation to retain certain data for AML and gaming licence record-keeping purposes. Where we are legally required to retain data, we will explain this to you.
• Right to Restriction of Processing: Request that we restrict processing of your data in certain circumstances, such as while a rectification request is pending.
• Right to Data Portability: Request a structured, machine-readable copy of personal data you have provided to us, where technically feasible.
• Right to Object: Object to processing based on legitimate interest grounds, including profiling for responsible gaming monitoring purposes.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, submit a written request to padu44 customer support. We will respond within 30 calendar days of receipt. We may ask you to verify your identity before processing your request. Where a request is refused, we will explain the reason and advise on any available avenue of redress.

The padu44 Platform is strictly intended for users aged 21 years and above. padu44 does not knowingly collect or process personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the relevant account.

If you are a parent or guardian and believe that a minor has accessed or registered on the padu44 Platform, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action.

padu44 may send you promotional communications — including email newsletters, SMS notifications, and in-platform messages — regarding new games, promotions, and VIP programme updates, where you have opted in to receive such communications during or after registration.

You may unsubscribe from marketing emails at any time using the unsubscribe link included in every marketing email, or by updating your communication preferences within your padu44 account settings. SMS marketing can be disabled from the same account preferences section.

Opting out of marketing communications does not affect the delivery of transactional communications that are necessary for the operation of your account — such as withdrawal confirmations, security alerts, KYC request notifications, and changes to these Terms or this Policy.

padu44 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, technology, legal requirements, or business operations. Where changes are material, we will provide notice through an in-platform notification or by email to your registered address at least seven (7) days before the changes take effect, except where immediate changes are required by law or regulatory directive.

The current version of this Policy will always be available at padu44.app/privacy-policy. The "Last updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the Platform following the effective date of any revision constitutes acceptance of the updated Policy.

For any questions, concerns, or requests relating to this Privacy Policy or padu44's handling of your personal data, please contact our Data Privacy team:

padu44 Data Privacy Team
Email: [email protected]
Platform: padu44.app
Response time: Within 30 calendar days of receipt

Please include "Privacy Request" and your registered username in your enquiry subject line to ensure your request is directed to the correct team promptly. We may ask you to verify your identity before processing any request that involves access to or deletion of your personal data.

The email address above is provided as plain text only. To protect yourself against phishing, always navigate directly to padu44.app rather than clicking links in unsolicited emails. padu44 will never ask for your password, full payment card details, or ID documents via email.