Privacy Policy Padu3 — Personal Data Protection You

Padu3 is an online gaming platform operating in Malaysia, committed to protecting every member's privacy. We understand that your personal information is a trust placed in us, and we do not take that responsibility lightly.

This policy applies to all information we collect through the padu3.com website, the padu3 mobile app, and all our official communication channels including live chat, support email, and official social media. It does not cover third-party websites or services you may access via links within our platform.

Padu3 only collects data necessary to provide you with high-quality services. Below are the categories of data we collect and the purposes for collection:

We may also receive information about you from legitimate third-party sources such as identity verification agencies and payment service providers, solely for verification and fraud prevention purposes.

Padu3 uses your personal data only for lawful purposes directly related to the services we provide. We never use your data for purposes you have not consented to, except as required by law.

• Registering and managing your member account on the padu3 platform.
• Processing deposits, withdrawals, and all financial transactions securely.
• Conducting identity verification (KYC) as required by anti-money laundering (AML) regulations.
• Providing responsive and effective customer support.
• Sending important account-related information such as transaction confirmations and security notices.
• Monitoring gaming activity for responsible gaming purposes and fraud detection.
• Improving the platform, products, and user experience based on usage patterns.
• Fulfilling legal and regulatory obligations applicable to our operations.

Padu3 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. We only share your data in the following situations and only to the extent necessary:

• Payment Service Providers — to securely process your deposits and withdrawals through approved channels.
• Identity Verification Providers — to carry out mandatory KYC processes for fraud prevention and anti-money laundering compliance.
• Game Software Providers — the minimum technical information required to allow games to function correctly within our platform.
• Legal Authorities — when required by a court order, law enforcement directive, or other legal obligation.
• Professional Advisors — including lawyers, accountants, and auditors bound by strict professional confidentiality obligations.

All third parties with whom we share data are bound by strict data processing agreements and are required to protect your information to the same standards as padu3.

Padu3 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies — Required for core platform functions such as login session management and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies — Collects information on how visitors use our website to help us improve performance and user experience.
• Functional Cookies — Allows the platform to remember your preferences such as language, display settings, and game choices to deliver a more personalised experience.
• Analytics Cookies — Used to understand aggregated and anonymised usage patterns for the purpose of continuous platform improvement.

Padu3 only retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Retention periods vary by data category:

• Active account data is retained for the lifetime of your account and for 7 years after account closure, in accordance with Malaysia's financial and tax legal requirements.
• Financial transaction records are retained for a minimum of 7 years as required by the Anti-Money Laundering Act 2001.
• Customer support communication records are retained for 3 years for reference and service improvement purposes.
• Technical data and system logs are retained for 12 months for security and incident investigation purposes.

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by padu3:

Padu3 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

• 256-bit SSL encryption for all data transmitted between your device and our servers.
• Sensitive data stored in databases is encrypted using AES-256.
• Two-factor authentication (2FA) for all account and admin panel access.
• Continuous security monitoring 24 hours a day, 7 days a week by our cybersecurity team.
• Regular penetration testing conducted by independent security auditors.
• Role-based access controls ensure that staff only access data necessary for their assigned tasks.
• Clear incident response procedures to ensure any security breach is addressed promptly and effectively.

The padu3 platform may contain links or references to third-party websites or services, such as game providers. This Privacy Policy does not apply to those third-party sites or services.

Padu3 has no control over the content, privacy policies, or practices of third-party websites and is not responsible for any information you provide to them. We recommend reading the privacy policy of any third-party website before sharing personal information.

Padu3 services are strictly for individuals aged 21 and above. We do not knowingly collect personal data from minors. Should we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question.

Parents or guardians who have reason to believe that a child in their care has provided personal information to padu3 without their consent are encouraged to contact our support team immediately.

Padu3 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legislation, or service improvements. Any material changes will be communicated to you via:

• A clear notice on the padu3 homepage or within your account.
• A notification email will be sent to the email address registered to your account.
• Update the "Updated" date at the top of this document.

Your continued use of the padu3 platform after any amendments to this policy take effect constitutes your acceptance of those changes. We recommend reviewing this page periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly from the padu3 platform.
• Email: [email protected] — we aim to respond within 3 business days.

If you are not satisfied with how we have handled your complaint, you have the right to escalate it to the Department of Personal Data Protection Malaysia or the relevant regulatory authority.