1. Introduction
This Privacy Policy (hereinafter "Policy") describes how Padubet ("we", "us", "our", "Padubet") collects, processes, stores, and shares personal data belonging to users ("User", "you", "your") of the online gaming platform accessible at https://padubet.cam and any associated mobile or sub-domain versions thereof (collectively, the "Platform").
Padubet operates the Platform under an international gaming licence issued by the Curaçao eGaming jurisdiction. In the course of providing the Platform, we process personal data in accordance with international data protection principles, including — but not limited to — the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, and integrity and confidentiality.
By registering an account on the Platform, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must not create or continue to hold a padubet account.
2. Definitions
For the purposes of this Policy, the following definitions apply:
- "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and device identifiers.
- "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
- "Data Controller" means Padubet, the entity that determines the purposes and means of Processing Personal Data collected through the Platform.
- "Data Processor" means a third party that processes Personal Data on behalf of Padubet under a data processing agreement.
- "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the Processing of Personal Data.
- "KYC" means Know Your Customer — the identity verification process required for regulatory compliance.
- "Cookies" means small text files stored on your device by the Platform to remember preferences and session information.
3. Personal Data We Collect
Padubet collects the following categories of Personal Data, depending on how you interact with the Platform:
3.1 Registration Data
When you create a padubet account, we collect: full legal name, date of birth, residential address, email address, and contact telephone number. This information is mandatory for account creation and is used for identity verification and account management purposes.
3.2 Identity Verification (KYC) Data
To comply with anti-money laundering (AML) obligations and our licensing requirements, we collect copies of identity documents (e.g., Malaysian MyKad, passport, driving licence), proof of address documents (e.g., utility bills, bank statements issued within 3 months), and in certain cases, documentation confirming the source of funds used for gambling activity.
3.3 Financial & Transaction Data
We collect transaction records including deposit amounts, withdrawal amounts, payment method identifiers (e.g., masked account numbers, e-wallet IDs), transaction timestamps, and currency denomination (MYR). We do not store full credit or debit card numbers on our servers; card processing is handled by PCI-DSS compliant third-party payment processors.
3.4 Gameplay & Betting Data
We record your wagering activity on the Platform, including bet history, game selections, session durations, win/loss records, and bonus usage. This data is used for account administration, dispute resolution, responsible gambling monitoring, and regulatory compliance.
3.5 Communications Data
When you contact our support team via live chat, email, or any other channel, we retain records of those communications, including their content, timestamps, and outcome, for quality assurance, training, and dispute resolution purposes.
3.6 Technical & Device Data
We automatically collect certain technical data when you access the Platform: IP address, browser type and version, operating system, device type, referring URLs, pages viewed, and session duration. This data is used for security monitoring, fraud detection, and Platform optimisation.
3.7 Responsible Gambling Data
If you set deposit limits, loss limits, session timers, or self-exclusion preferences, those settings and the date they were applied are recorded. This data is used to enforce your chosen protections and to support our responsible gambling programme.
4. How We Collect Your Data
We collect Personal Data through the following means:
- Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or interact with any Platform feature that requires you to submit information.
- Automatically: Through cookies, web beacons, pixel tags, log files, and similar tracking technologies when you access and use the Platform.
- From third parties: From payment service providers (e.g., DuitNow, Touch 'n Go eWallet, Boost, Maybank, CIMB, FPX processors) in connection with transaction verification; from identity verification service providers in connection with KYC; from fraud prevention and AML screening databases where required by our compliance obligations.
5. Lawful Basis for Processing
Padubet processes Personal Data only where a lawful basis exists. The following bases apply to the categories of processing described in this Policy:
| Processing Activity | Lawful Basis |
|---|---|
| Account registration and management | Contractual necessity — performance of the user agreement |
| KYC identity verification | Legal obligation — AML and licensing compliance |
| Payment processing and transaction records | Contractual necessity; legal obligation (financial record-keeping) |
| Fraud prevention and security monitoring | Legitimate interests of Padubet and protection of other users |
| Responsible gambling monitoring and enforcement | Legal obligation; legitimate interests; your vital interests |
| Marketing communications (where applicable) | Consent — you may withdraw consent at any time |
| Customer support communications | Contractual necessity; legitimate interests |
| Platform analytics and improvement | Legitimate interests of Padubet |
6. How We Use Your Personal Data
Padubet uses the Personal Data it collects for the following specific purposes:
- To create, operate, and administer your padubet account;
- To process deposits and withdrawals in MYR via your chosen payment method (DuitNow, Touch 'n Go eWallet, Boost, GrabPay, FPX, Maybank2u, CIMB Clicks, Public Bank, or cryptocurrency);
- To verify your identity and age (21+) as required by our licensing authority;
- To comply with anti-money laundering, counter-terrorism financing, and other applicable regulatory obligations;
- To detect, investigate, and prevent fraudulent activity, cheating, collusion, or any other breach of our Terms & Conditions;
- To monitor responsible gambling indicators and to enforce deposit limits, loss limits, and self-exclusion instructions;
- To provide customer support and respond to your enquiries;
- To send transactional communications (e.g., deposit confirmations, withdrawal notifications, account alerts);
- To send promotional communications where you have provided explicit consent to receive them;
- To analyse usage patterns and improve the performance, security, and usability of the Platform;
- To fulfil our obligations in connection with any dispute, legal claim, or regulatory inquiry.
7. Data Sharing & Disclosure
Padubet does not sell, rent, or trade your Personal Data to third parties. We may share your Personal Data only in the following limited circumstances:
- Payment Service Providers: We share transaction data with payment processors (including FPX operators, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency network validators) solely to the extent necessary to process your financial transactions.
- Identity Verification Services: We engage accredited third-party KYC and AML screening service providers to verify the identity of users and to screen against sanctions and PEP (Politically Exposed Persons) databases, as required by our licensing obligations.
- IT Infrastructure and Cloud Providers: Padubet uses reputable third-party cloud hosting and infrastructure providers to operate the Platform. These providers act as Data Processors under data processing agreements and are prohibited from using your data for their own purposes.
- Gaming Software Providers: Where game outcomes are provided by third-party gaming studios, limited technical session data may be transmitted to those studios solely for the purpose of delivering the game experience.
- Regulatory and Law Enforcement Authorities: We will disclose Personal Data to regulatory bodies, law enforcement agencies, or courts where we are legally required to do so, or where we believe in good faith that disclosure is necessary to prevent fraud, money laundering, or harm to persons.
- Business Transfers: In the event of a merger, acquisition, or sale of Padubet or its assets, your Personal Data may be transferred to the successor entity. We will provide notice of any such transfer before your data is subject to a different privacy policy.
8. International Data Transfers
As an internationally licensed operator, Padubet may transfer your Personal Data to countries outside of Malaysia. Where such transfers occur, we implement appropriate safeguards to ensure that your data receives a standard of protection consistent with applicable data protection principles. These safeguards include data processing agreements incorporating internationally recognised standard contractual clauses, and transfers only to recipients in jurisdictions offering an adequate level of data protection.
Malaysian users should note that the Personal Data Protection Act 2010 (PDPA) contains provisions relating to the transfer of personal data outside Malaysia. While Padubet operates under international licensing, we apply protections consistent with PDPA principles as a matter of policy.
9. Data Security
Padubet employs a comprehensive suite of technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
- Encryption of sensitive data fields (including KYC documents and financial identifiers) at rest in our databases;
- Role-based access controls ensuring that Padubet staff can only access Personal Data necessary for their specific function;
- Multi-factor authentication required for all administrative access to systems holding Personal Data;
- Regular independent penetration testing and vulnerability assessments conducted by third-party cybersecurity firms;
- Intrusion detection systems and 24/7 security monitoring;
- Documented incident response procedures to handle any suspected data breach promptly.
No system is entirely immune to security threats. In the unlikely event of a data breach affecting your rights or freedoms, we will notify affected users in accordance with our legal obligations.
10. Data Retention
We retain Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | AML / licensing compliance |
| KYC documents | 5 years from date of verification or account closure (whichever is later) | AML legal obligation |
| Transaction records | 7 years from transaction date | Financial record-keeping obligations |
| Betting and gameplay records | 5 years from the relevant session date | Dispute resolution; regulatory audit |
| Customer support communications | 3 years from date of last communication | Legitimate interests; dispute resolution |
| Technical and device logs | 12 months from collection | Security monitoring; fraud prevention |
| Marketing consent records | Until consent is withdrawn + 3 years thereafter | Accountability for consent |
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for analytical purposes.
11. Cookies & Tracking Technologies
Padubet uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us recognise you, remember your preferences, and understand how you use the Platform. The following categories of cookies are in use:
- Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. You cannot opt out of strictly necessary cookies while using the Platform.
- Functional Cookies: Remember your preferences, such as language settings and account display options. These improve your experience but are not essential.
- Analytics Cookies: Allow us to understand how users navigate the Platform, which pages are most visited, and where technical issues arise. This data is aggregated and does not identify you personally.
- Performance Cookies: Used to monitor the speed, stability, and responsiveness of the Platform across different devices and connection types, including mobile devices commonly used by players across Kuala Lumpur, Petaling Jaya, and Johor Bahru.
You may control non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of parts of the Platform. Strictly necessary cookies cannot be disabled without impairing core Platform operations.
12. Your Data Rights
Subject to applicable law and any overriding regulatory obligations, you have the following rights in respect of your Personal Data held by Padubet:
You may request a copy of all Personal Data we hold about you. We will respond within 30 days of receiving a valid request.
If any Personal Data we hold is inaccurate or incomplete, you have the right to request that it be corrected or updated promptly.
You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
You may request that we limit the processing of your Personal Data in certain circumstances, such as while a dispute over accuracy is being resolved.
Where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
You may object to the processing of your Personal Data where that processing is based on legitimate interests. You may also withdraw marketing consent at any time.
To exercise any of the above rights, please contact our Data Protection team via live chat at [email protected], clearly stating the right you wish to exercise and providing sufficient information to verify your identity. We will not process requests from unverified sources. There is no charge for exercising your data rights. We aim to respond to all requests within 30 calendar days; complex requests may require an extension of up to an additional 60 days, in which case we will notify you.
13. Children and Minors
The Platform is strictly intended for adults aged 21 years and above. Padubet does not knowingly collect Personal Data from persons under the age of 21. If you are a parent or guardian and you believe that a minor has registered on the Platform or provided personal information, please contact us immediately at [email protected]. We will take prompt steps to investigate and, if confirmed, to delete all associated data and close the account.
Parents and guardians are encouraged to use parental control software and internet filtering tools to prevent minors from accessing online gambling platforms. Please gamble responsibly. 21+ only.
14. Third-Party Links
The Platform may contain links to third-party websites, including those of payment service providers, game studios, or information resources. Padubet has no control over the privacy practices or content of those third-party sites and accepts no responsibility for them. We encourage you to review the privacy policies of any third-party sites you visit before submitting any personal information.
15. Amendments to This Policy
Padubet reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered users via email notification or a prominent notice on the Platform at least 7 days before the changes take effect, except where changes are required immediately by law or regulatory direction.
The version number and effective date displayed at the top of this Policy will be updated with each revision. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised terms, you should cease use of the Platform and request account closure.
16. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data by Padubet, please contact us through the following channels:
Live Chat: Available 24/7 directly on the Platform — fastest response channel
Email: [email protected]
Subject line for data requests: "Data Subject Request — [Your Username]"
Response time: Under 5 minutes via live chat · Under 24 hours via email for general queries · Up to 30 days for formal data subject requests
We take all privacy concerns seriously. Our support team will acknowledge your request promptly and escalate to our compliance team where appropriate. Where a concern cannot be resolved to your satisfaction through our internal process, you have the right to raise a complaint with the relevant supervisory authority in your jurisdiction.
This Privacy Policy was last reviewed and updated on 1 January 2026. Version 3.1. The current version is always published at https://padubet.cam/privacy-policy.