Padbrokes Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Users

This Privacy Policy explains how Padbrokes — the operator of the online entertainment platform at padbrokes.net — collects, processes, stores and protects your personal information. It applies to all users who access or use the Padbrokes platform through any device or channel.

We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), which provides a comprehensive legal framework for personal data protection in Malaysia. Our adherence to the PDPA is more than a legal obligation — it is a core value of Padbrokes that puts user trust first.

By using the Padbrokes platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you are advised not to use our platform.

Padbrokes collects data necessary to provide a safe, lawful, and quality service. We do not collect data beyond what is required for platform operations.

We also collect data indirectly through cookie technology and analytics tools as you navigate our platform. This information is used in aggregate and is not used to directly identify individuals.

All data we collect is used for specific and legitimate purposes. Padbrokes does not use your data for any purpose outside the scope described here.

• Account management: Creates, verifies, and manages your user account on the Padbrokes platform.
• Transaction processing: Securely processes deposits, withdrawals, and all financial transactions using your chosen payment method.
• Identity verification (KYC): Meets legal compliance requirements related to anti-money laundering and age verification.
• Customer support: Provides relevant and contextual assistance when you contact the Padbrokes support team.
• Platform security: Detects and prevents fraud, unauthorized access, and suspicious activity.
• Service communications: Sends important notifications related to your account, transactions, and policy changes.
• Platform improvements: Analyzes usage patterns in aggregate to improve the user experience.
• Marketing communications: With your consent, to send information about relevant Padbrokes promotions and offers.

Under Malaysia's PDPA, Padbrokes processes your personal data on valid legal grounds. These grounds are:

• Contract performance: Processing required to provide the Padbrokes platform services you have agreed to through the Terms and Conditions.
• Legal obligation: Processing required to comply with Malaysia's legal obligations, including AML, KYC and financial reporting requirements.
• Legitimate interest: Processing for fraud detection, system security, and internal analysis to improve our services.
• Consent: Processing for marketing communications and preference purposes for which you have given explicit consent.

Padbrokes will always identify an appropriate legal basis before processing any new category of personal data or using existing data for a new purpose.

Padbrokes does not sell your personal data to any third party under any circumstances. Your data is only shared in the following limited and controlled situations:

• Payment processors: Data required to process your transactions is shared with payment service providers that have undergone rigorous security assessments.
• Game service providers: Minimum account information required to ensure games function properly.
• Technical service providers: Cloud computing infrastructure, email services and support tools that help us operate the platform.
• Legal authorities: When required by Malaysian law or a valid court order.
• Fraud investigators: In cases where fraud or criminal activity involving the Padbrokes platform is suspected.

All third parties receiving Padbrokes user data are bound by strict data confidentiality agreements and must adhere to data protection standards equivalent to those of Padbrokes.

Padbrokes continuously invests in security infrastructure to ensure your data is protected at every stage — whether in transit or at rest.

• Data encryption in transit: All communications between your device and Padbrokes servers are protected by 256-bit SSL/TLS encryption — the same security standard used by Malaysia's leading banks.
• Data encryption at rest: Sensitive data including financial information and passwords is stored in encrypted format using industry-recognised encryption algorithms.
• Access control: Access to user data within the Padbrokes organisation is strictly controlled on a need-to-know basis — only staff who require access to carry out their duties are permitted.
• Two-factor authentication: Padbrokes internal systems use multi-factor authentication for all access to databases containing user data.
• Real-time security monitoring: An automated monitoring system operates 24 hours a day to detect any anomalies or suspicious access attempts.
• Regular penetration testing: Padbrokes conducts regular security testing by independent security experts to identify and address vulnerabilities before they can be exploited.

While we take all reasonable precautions, no system can guarantee 100% security. In the event of a data breach affecting users, Padbrokes will notify affected users and the relevant authorities within the timeframe required by law.

Padbrokes does not retain your personal data longer than necessary. Retention periods are determined based on operational needs and legal obligations.

• Active account data: Retained for as long as your account remains active with Padbrokes.
• Financial transaction data: Retained for seven years from the transaction date to comply with Malaysian accounting and AML legal requirements.
• KYC records: Retained for five years after account closure or the date of the last transaction, whichever is later.
• Gaming activity and history: Retained for three years for dispute resolution and audit purposes.
• Technical logs: Retained for 90 days for security and troubleshooting purposes.

When data is no longer needed and there is no legal obligation to retain it, Padbrokes will securely delete or anonymise it using approved procedures.

The Padbrokes platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled without affecting platform functionality.
• Preference cookies: Saves your preferences such as language and display settings for a smoother return experience.
• Analytics cookies: Helps us understand how users interact with the platform in aggregate, enabling us to make meaningful improvements.
• Security cookies: Helps detect and prevent suspicious activity and ensures the security of your session.

You can manage cookies through your browser settings. Please note, however, that disabling certain cookies may affect the functionality of the Padbrokes platform.

Under Malaysia's PDPA, you have the following rights regarding the personal data held by Padbrokes. We are committed to respecting and facilitating the exercise of these rights.

If you have any questions, concerns or complaints regarding how Padbrokes handles your personal data, we encourage you to contact us directly.

Padbrokes has a dedicated Data Privacy Officer appointed specifically to handle privacy-related inquiries and complaints. This officer is qualified to clarify our policies, process user rights requests, and resolve any concerns you may have.

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Response Time: Within 21 business days for all privacy enquiries
• Operating Hours: 24 hours a day, 7 days a week for general support

If you are unsatisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Digital.