Privacy Policy padi77 — Personal Data Protection for Malaysian Players

This Privacy Policy explains how padi77 ("we", "Platform") collects, uses, stores, protects, and discloses personal data you provide when registering for and using padi77.best, including all associated subdomains and mobile applications.

Padi77 is committed to protecting the privacy of every player who trusts our platform. We understand that the security of your personal data — especially financial information and transactions related to your use of our betting platform — is a highly sensitive matter that must be handled with the utmost care. To that end, we have built a comprehensive data protection system that complies with Malaysia's Personal Data Protection Act 2010 (PDPA).

By using the padi77 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you are advised not to use the padi77 platform. For any enquiries regarding this Privacy Policy, you may reach us at support@padi77.best at any time.

Padi77 collects your personal data from a variety of sources depending on how you interact with our platform. Below are the categories of data we collect and their sources:

Padi77 uses collected personal data solely for the following legitimate and necessary purposes:

• Service provision: Creating and managing your account, processing MYR deposits and withdrawals, crediting winnings, and activating eligible bonuses and promotions
• Identity verification (KYC): Verifying your identity to meet Malaysian legal compliance requirements, including anti-money laundering (AML) obligations and the minimum age requirement of 18.
• Platform security: Detecting and preventing fraud, account abuse, multiple account ownership, and other unlawful activities that may harm other players or padi77.
• Customer support: Providing technical assistance, responding to enquiries, resolving disputes, and handling complaints related to the use of the padi77 platform
• Platform improvements: Analysing aggregated usage patterns (without identifying individuals) to improve the design, functionality, and user experience of padi77
• Important communications: Sending account-related notifications such as deposit confirmations, withdrawal approvals, security alerts, and changes to terms or policies.
• Responsible gambling: Monitor gameplay activity patterns to identify potential signs of problem gambling and offer appropriate support tools
• Marketing communications (with consent): Sending promotional offers, bonuses, and new game updates — only if you have opted in to receive such communications.

Padi77 does not use your personal data for purposes unrelated to the platform's services without first obtaining your explicit consent. If you wish to withdraw consent for any data use purpose that relies on your consent, you may do so through your account settings or by contacting the padi77 support team.

Padi77 does not sell, rent, or trade your personal data to any third party for marketing purposes. Your data may only be shared under the following limited circumstances:

• Technical service providers: Companies that help us operate the padi77 platform — such as cloud infrastructure providers, payment processing systems, and customer support platforms. All such providers are bound by strict confidentiality agreements and may only use your data for purposes specified by padi77.
• Legal compliance: When required by applicable Malaysian law, court order, or lawful directive from a regulatory authority — including the Financial Intelligence Unit (UFIU), Bank Negara Malaysia, or the Royal Malaysia Police in connection with financial crime investigations
• Fraud prevention: With recognised fraud prevention agencies and industry databases to detect and prevent payment fraud, money laundering, and other illicit activities.
• Business transfers: In the event that padi77 is involved in a merger, acquisition, or asset sale, player data may be transferred as part of that transaction. You will be notified by email or in-platform notification before your data is transferred and becomes subject to a different Privacy Policy.

Padi77 implements multiple layers of technical and organisational protection to keep your personal data secure at all times:

• Encryption in transit: All communications between your browser and padi77 servers are protected by TLS 1.3 (256-bit SSL) — the padlock icon in your browser's address bar confirms this secure connection.
• Stored data encryption: Sensitive data such as passwords is stored in a hashed format that cannot be decrypted. Payment information that must be retained is encrypted using industry-standard AES-256 encryption
• Access controls: A role-based access control (RBAC) system ensures that only staff who require access to specific data in order to perform their duties are authorised to do so. All access is monitored and logged for audit purposes.
• Secure infrastructure: padi77 servers are protected by enterprise-grade firewalls, intrusion detection systems (IDS), and regular security audits conducted by independent third parties.
• Two-factor authentication (2FA): padi77 offers and encourages the use of 2FA on all accounts as an added layer of protection against unauthorized access
• Staff training: All padi77 staff who access user data undergo regular data protection training to ensure best practices are upheld at all times

While padi77 takes all reasonable steps to protect your data, no system can guarantee 100% security at all times. In the event of a data breach affecting your information, padi77 will notify you via your registered email and take immediate action to contain the impact of the breach in accordance with applicable Malaysian legal requirements.

Padi77 uses cookies and similar tracking technologies to ensure the platform functions properly and to enhance your user experience. Cookies are small files stored on your device when you visit padi77. The following are the types of cookies we use:

You can manage or delete cookies through your web browser settings at any time. However, deleting or blocking essential cookies may affect the functionality of the padi77 platform — including the possibility of being unable to log in to your account. For optional cookies, you may withdraw consent through the privacy settings panel in your padi77 account.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold:

To exercise any of the rights above, contact the padi77 data protection team by email at support@padi77.best with the subject line "PDPA Rights Request". Include your registered phone number and the type of request you are making. padi77 will process your request within 14 business days from the date of receipt, at no charge.

Padi77 retains your personal data only for as long as necessary for the purpose it was collected, or as required by applicable Malaysian law, whichever is longer. The following outlines our data retention periods:

• Active account data: Retained for as long as your account remains active with padi77. You may request account closure at any time through customer support.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date in accordance with Malaysian financial and tax regulatory requirements — this includes records of deposits and withdrawals in MYR made via Touch 'n Go, GrabPay, DuitNow, FPX, and other methods
• KYC records: Retained for a minimum of 6 years after account closure in accordance with the requirements of Malaysia's Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001
• Gaming activity data: Retained for 3 years for dispute resolution and responsible gaming audit purposes
• Customer support records: Retained for 2 years from the date of the last interaction
• Analytics cookie data: Anonymized or deleted after 90 days

Once the applicable retention period has ended, your personal data will be securely deleted or anonymized in a manner that ensures it can no longer be linked to your identity. padi77 conducts periodic data retention reviews to ensure that data which is no longer needed is disposed of appropriately.

The padi77 platform is strictly for individuals aged 18 and above. padi77 does not knowingly collect or process personal data of anyone under 18. This is a firm policy with no exceptions.

All account registrations at padi77 require age verification through a KYC process that includes Malaysian IC number verification. The padi77 system is designed to detect and reject registrations from individuals who do not meet the minimum age requirement.

Parents and guardians concerned about possible use of the betting platform by minors in their care are welcome to contact the padi77 support team for further assistance. padi77 takes our social responsibility seriously in ensuring that the platform remains inaccessible to underage individuals.

Padi77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new Malaysian legal requirements, or relevant technological developments. The date of the most recent update is always shown at the top of this page.

When significant amendments are made — particularly those affecting your rights or how we use your data — padi77 will notify you via your registered email and/or a prominent in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the updates and make an informed decision about whether you wish to continue using the platform.

It is your responsibility to review this page periodically to stay informed of the latest version of the Privacy Policy. Your continued use of the padi77 platform after any amendments take effect constitutes your acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact the padi77 data protection team through the following channels:

• Email: support@padi77.best — for PDPA requests, please include the subject line "PDPA Rights Request" and your registered phone number
• Live Chat: Available on the padi77 platform — 24 hours a day, 7 days a week in Bahasa Melayu

Padi77 is committed to responding to all privacy-related enquiries within 3 business days. For formal PDPA rights requests, the processing period is 14 business days from the date a complete request is received. All privacy-related communications are handled in strict confidence by our trained data protection team.

If you are dissatisfied with padi77's response or handling of your privacy request, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP), the regulatory authority responsible under the PDPA 2010.