Privacy Policy padu33 —
Data Protection & Information Security

Padu33 is committed to protecting the privacy and security of the personal information of all members and visitors to our platform. This Privacy Policy clearly and transparently explains how we collect, use, store, protect and, in certain circumstances, disclose your personal information when you use the padu33.vu website and all related services, including our official mobile app.

By registering an account or continuing to use the padu33 platform, you consent to the practices described in this Privacy Policy. We encourage you to read this document carefully and to contact our support team if you have any questions or concerns.

This Privacy Policy is subject to the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA) and any other applicable laws or regulations in the jurisdictions where padu33 operates.

Padu33 collects your personal information through various channels — either directly when you register or use the platform, or automatically via tracking technologies as you browse our website. The following are the categories of information we collect:

The personal information we collect is used for the following purposes, and we will only use your data for the purposes stated at the time of collection or as permitted by law:

• Account Management — Creates and maintains your account, and handles registration and identity verification (KYC).
• Transaction Processing — Processes deposits, withdrawals, and all financial transactions securely and accurately.
• Service Provision — Enables you to access all games, promotions, and features on the padu33 platform.
• Communications — Sends important notifications regarding your account, security, promotions, and service updates.
• Security & Fraud Prevention — Detects and prevents fraudulent activity, money laundering, and security breaches.
• Legal Compliance — Fulfills compliance obligations related to AML (Anti-Money Laundering), KYC, and other regulatory requirements.
• Service Improvement — Analyzes usage patterns to enhance the user experience and platform performance.
• Responsible Gaming — Monitors gameplay patterns to identify early signs of problem gambling and offer appropriate assistance.

Padu33 does not sell your personal data. However, under certain limited circumstances, we may share your information with the following parties, solely for the stated purposes:

• Payment Service Providers — Financial institutions and e-wallet providers such as FPX, Touch 'n Go, GrabPay, and Boost that are required to process your transactions.
• Game Providers — Licensed game providers that supply gaming content on the padu33 platform, limited to information necessary for game functionality.
• Identity Verification Services — Third-party KYC service providers that assist us in securely verifying member identities.
• Statutory Authorities — Law enforcement agencies, regulatory bodies, or courts when we are legally obligated to do so by law or court order.
• Auditors & Legal Advisors — Independent audit firms or legal counsel involved in padu33's operations management and compliance, subject to strict confidentiality obligations.

All third-party service providers we engage are bound by data protection agreements requiring them to safeguard your information and use it only for the specified purposes. They are not permitted to use your data for their own purposes.

Padu33 implements multiple layers of technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL encryption for all data in transit between your device and our servers.
• Encryption of sensitive data stored in our database using the latest industry-standard encryption algorithms.
• Role-based access control (RBAC) — only authorised staff may access sensitive member data.
• 24/7 security monitoring and an active intrusion detection system (IDS).
• Regular security audits by independent third parties to identify and address any vulnerabilities.
• A comprehensive data incident response plan to ensure any security breaches are addressed promptly and members are notified in accordance with legal requirements.

The padu33 platform uses cookies and similar tracking technologies to enhance your experience, analyse platform performance and maintain the security of your session. The following are the types of cookies we use:

• Essential Cookies — Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance & Analytics Cookies — Helps us understand how visitors use our platform so we can continuously improve the user experience.
• Functional Cookies — Saves your preferences such as language, theme, and other settings so you do not need to reconfigure them each time you log in.
• Marketing Cookies — Used to display relevant promotions to you based on your interests and activity history on the platform.

You can manage or disable specific cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some areas of the padu33 platform.

Under Malaysia's PDPA and padu33's policy, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

Padu33 retains your personal data only for as long as necessary to fulfill the purpose of collection, or as required by applicable laws and regulations. The following are our general data retention guidelines:

• Active Account Data — Retained for as long as your account remains active and for a reasonable period following account closure.
• Financial Transaction Records — Retained for a minimum of 7 years from the transaction date as required by Malaysia's financial and tax laws.
• KYC Documents — Retained for the duration of the active account period and for at least 5 years after account closure in accordance with AML requirements.
• Communication Logs — Customer service interaction records are retained for 3 years for quality control and dispute resolution purposes.
• Analytics Data — Anonymized usage data is retained for long-term analysis to support platform improvements.

Once the retention period expires, your data will be securely deleted or anonymised in accordance with our data deletion procedures. Anonymised data — where your identity can no longer be identified — may be retained for analytical and statistical purposes without a time limit.

The padu33 platform may contain links to third-party websites or services in certain contexts. Our Privacy Policy does not apply to those external sites, and we are not responsible for their privacy practices or content.

We encourage you to read the privacy policy of every website you visit. The presence of a link on the padu33 platform does not imply our endorsement or validation of that website's privacy practices.

If you have any questions, concerns or complaints regarding how padu33 handles your personal data, our Data Protection Officer team is ready to assist you at any time.

You can reach us via live chat available 24 hours a day, 7 days a week on the padu33 platform, or by emailing our privacy team at the address listed at the bottom of this website. We are committed to responding within 7 business days for any privacy-related enquiries.

If you are unsatisfied with how we handle your privacy complaint, you have the right to refer the matter to the Department of Personal Data Protection Malaysia or the relevant enforcement authority in your jurisdiction.