Personal Data Protection

Privacy Policy padangtoto – Our Commitment to Protecting Malaysia Players' Data

At padangtoto, your privacy is more than a legal obligation — it is the foundation of trust between us and every member. This Privacy Policy clearly and transparently explains how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last updated: 1 June 2026 256-bit SSL Compliant with PDPA 2010 Bahasa Melayu (ms-MY)
Our Privacy Principles

Padangtoto's Six Commitments to Your Data

These are the core principles that guide every decision we make regarding the privacy and data protection of Malaysia players.

Minimum Collection

Padangtoto only collects personal data that is strictly necessary to provide its services. We do not collect information that is irrelevant or excessive.

Advanced Technology Protection

All data is encrypted using 256-bit SSL technology. padangtoto servers are protected by industry-grade firewalls and monitored 24/7 to detect any security threats.

Control in Your Hands

You have the right to access, amend, or request deletion of your personal data at any time. padangtoto respects these rights and will respond within 14 business days.

No Data Sales

Padangtoto has never sold, and will never sell, your personal data to any third party for marketing or commercial purposes without your explicit consent.

PDPA 2010 Compliance

All data management practices at padangtoto are in full compliance with Malaysia's Personal Data Protection Act 2010 — the primary law governing data privacy in the country.

Clear Retention Periods

Your personal data is retained only for as long as necessary. Financial transaction records are kept for 7 years in accordance with Malaysian legal requirements, while other data is deleted once it is no longer needed.

1

Introduction – Why Your Privacy Matters to padangtoto

Padangtoto is an online entertainment platform operating at padangtoto.im, offering slots, jackpots, Live Casino, Sports Betting (including badminton, Malaysia Super League football, cricket, and esports), and a variety of other digital entertainment to players across Malaysia. As a responsible platform, we take the privacy and data security of every member seriously.

This Privacy Policy is drafted in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and sets out our data management practices in detail and with full transparency. We understand that your trust in padangtoto depends in large part on your confidence that your personal data is handled responsibly.

By registering for and using the padangtoto platform, you agree to the terms of this Privacy Policy. If you do not agree, please contact us for assistance or refrain from using our services.

Important Note: This Privacy Policy forms part of Terms & Conditions padangtoto. Reading both documents is recommended for a full understanding of your rights and responsibilities as a member.

2

Personal Data We Collect

Padangtoto collects personal data from you through several means — directly when you register or fill in a form, automatically as you use the platform, and in certain cases, from legitimate third-party sources. Below is a detailed breakdown of the types of data we collect:

Data Category Specific Examples How We Collect It
Identification Data Full name, MyKad/passport number, date of birth, gender Registration form
Contact Data Email address, phone number, residential address Registration & profile update form
Financial Data Touch 'n Go account details, DuitNow, GrabPay, FPX (Maybank2u/CIMB Clicks), deposit & withdrawal records in MYR Deposit & withdrawal transactions
Usage Data Betting history, games played, session duration, game preferences Automatic – platform system
Technical Data IP address, device type, operating system, web browser, general location data Automatic – server logs
Communication Data Live chat transcripts, support emails, feedback Interactions with customer support

padangtoto does not store credit or debit card numbers in full. Any sensitive payment data is processed directly through certified third-party payment gateways and is not stored on our servers.

3

Purpose of Data Collection & Processing

Padangtoto collects and processes your personal data for the following purposes only. We will not use your data for any other purpose without first obtaining your explicit consent:

  • Account Management: Creating and managing your padangtoto account, including identity verification and registration processing.
  • Transaction Processing: Processes deposits (via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX) and withdrawal of winnings in Malaysian Ringgit (MYR).
  • Service Provision: Enabling you to access and enjoy all padangtoto games and services, including slots, jackpots, live casino, badminton betting, e-sports, and more.
  • Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, or platform abuse.
  • Service Communications: Sending important notifications related to your account, transactions, promotions, and platform updates.
  • Legal Compliance: Fulfilling legal obligations under PDPA 2010, the Anti-Money Laundering Act 2001, and other applicable Malaysian laws.
  • Service Improvement: Analysing usage patterns in aggregate (not at an individual level) to improve the user experience and enhance the padangtoto platform.
  • Responsible Gaming: Monitoring player activity to identify those who may need support, and offering appropriate responsible gaming tools.
4

Data Sharing & Disclosure to Third Parties

Padangtoto does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, there are limited circumstances in which we may need to share your information:

  • Service Providers: We share necessary data with technical service providers, payment processors (including Touch 'n Go, DuitNow, and GrabPay operators), and gaming software providers. All parties are bound by strict confidentiality agreements.
  • Legal Authority: Where required by Malaysian law, a court order, or an official request from a law enforcement agency, padangtoto may disclose the necessary information.
  • Fraud Prevention: In cases of suspected fraud or illegal activity, we may share information with the relevant authorities for investigation purposes.
  • Business Transfer: In the event of a merger, acquisition, or sale of company assets, user data may be transferred as part of that transaction. You will be notified before your data becomes subject to a different privacy policy.

Our Commitment: Every third party that receives your data from padangtoto is required to uphold data protection standards at least equivalent to those set out in this Privacy Policy.

5

Data Security – padangtoto's Protection Measures

Padangtoto invests seriously in security infrastructure to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The key security measures we have in place include:

  • 256-bit SSL Encryption: All data transmitted between your device and padangtoto's servers is encrypted using the latest TLS/SSL protocols. You can identify a secure connection by the padlock icon in your browser's address bar.
  • Tiered Access Controls: Only padangtoto staff with specific authorisation may access user data, and only to the extent required for their role.
  • 24/7 Security Monitoring: Our systems are continuously monitored to detect any suspicious activity or unauthorised access attempts.
  • Regular Security Audits: padangtoto conducts regular internal and external security audits to ensure all systems meet the latest industry standards.
  • Two-Factor Authentication (2FA): Two-factor authentication is available on all padangtoto accounts as an additional layer of security.

While we take all reasonable steps to protect your data, no system is entirely risk-free. In the event of a data breach affecting your information, padangtoto will notify you within a reasonable timeframe in accordance with the requirements of PDPA 2010.

6

Cookies, Tracking Technologies & Analytics

Padangtoto uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The types of cookies used are as follows:

  • Essential Cookies (Required): These cookies are required for the platform's core functions, such as login, session management, and security. They cannot be disabled without affecting platform functionality.
  • Performance Cookies: Used to collect aggregated information on how users interact with the platform (e.g., most visited pages, load times) for improvement purposes.
  • Functional Cookies: Remembering your preferences such as language, display settings, and login information, enabling padangtoto to deliver a more personalised experience.
  • Analytics Cookies: Helping us understand aggregate usage patterns. Data collected is anonymised and cannot be linked to any individual.

You can manage cookie usage through your browser settings. However, disabling certain cookies may affect the functionality of the padangtoto platform. Further information on how to manage cookies is available in your browser's documentation.

7

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data held by padangtoto. We are committed to respecting and facilitating the exercise of these rights:

1
Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 14 working days.

2
Right to Rectification

If any of your data is inaccurate or out of date, you have the right to request prompt correction from padangtoto.

3
Right to Erasure

You may request the deletion of your personal data, subject to minimum legal retention requirements.

4
Right to Withdraw Consent

You may withdraw your consent to data processing for marketing purposes at any time without affecting your other rights.

5
Right to Object

You have the right to object to the processing of your data for specific purposes, such as direct marketing or automated profiling.

6
Right to Data Portability

You may request a copy of your personal data in a machine-readable format for transfer to another service provider.

To exercise any of the rights above, please submit a written request to support@padangtoto.im specifying the right you wish to exercise and your account details. padangtoto will respond within 14 business days.

8

Protection of Children's Data

Padangtoto is a platform exclusively for individuals aged 18 years and above only. We do not direct our services at underage children or minors, and we do not knowingly collect personal data from them.

Should we discover that personal data belonging to a child under 18 has been collected without our knowledge, we will immediately take the following steps:

  • Immediate closure of the account in question.
  • Deleting all personal data associated with the account.
  • Where applicable, contacting the relevant parent or legal guardian.

Parents and guardians who believe their child has registered for or used the padangtoto platform without authorisation are requested to contact us immediately at support@padangtoto.im.

9

Cross-Border International Data Transfers

In the course of its operations, padangtoto may need to transfer or process your personal data outside Malaysia, primarily for data storage at data centres and the use of software from international vendors.

Any transfer of personal data outside Malaysia is carried out in compliance with the requirements of PDPA 2010, including ensuring that the recipient country provides a level of data protection equivalent to or higher than that of Malaysia, or by obtaining your explicit consent beforehand.

padangtoto prioritises the use of data centres based in the Asia-Pacific region to ensure that Malaysian players' data is stored as close as possible to their geographical location, enabling low latency and greater regulatory compliance assurance.

10

Personal Data Retention Period

Padangtoto retains your personal data only for as long as necessary to fulfil the original purpose of collection or to meet relevant legal requirements. The following are our data retention guidelines:

Data Type Retention Period
Active account data (name, email, phone number) For as long as the account remains active + 2 years after closure
Financial transaction records (MYR) 7 years (PDPA & financial regulatory requirements)
Support communication records 3 years from the date of interaction
Technical & security logs 12 months
Analytics data (anonymised) Unlimited (no personal identification)
Identity verification documents 5 years after account closure
11

Amendments to This Privacy Policy

Padangtoto reserves the right to amend or update this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or new technologies we adopt. The latest version will always be available on this page.

When significant changes are made to this Privacy Policy — particularly changes that affect your rights or how we use your data — padangtoto will notify you via:

  • Notifications within the padangtoto platform.
  • Email sent to the address registered on your account.
  • A prominent notice on the padangtoto.im homepage.

The date of the most recent update will always be displayed at the top of this page. Your continued use of the padangtoto platform following any amendment coming into effect will be considered your acceptance of the latest version of the Privacy Policy.

12

Contact Our Data Protection Officer

For any questions, concerns, or requests regarding this Privacy Policy or the management of your personal data by padangtoto, please contact our Data Protection Officer through the following channels:

  • Email: privacy@padangtoto.im
  • General Support Email: support@padangtoto.im
  • Live Chat: Available 24/7 on the padangtoto.im platform

We are committed to responding to all privacy-related enquiries within 14 working days. For more complex complaints requiring in-depth investigation, we will keep you informed of the expected resolution timeline.

If you are not satisfied with our response, you have the right to lodge a complaint with Department of Personal Data Protection (JPDP) Malaysia, the regulatory body responsible for enforcing PDPA 2010 in Malaysia.

padangtoto is committed to remaining transparent, responsive, and accountable in all matters relating to the privacy and personal data protection of its members. Your trust is our most valued asset.

Your Data Is Safe with padangtoto

Register your padangtoto account with complete confidence. Your privacy is protected under Malaysia's PDPA 2010, and all MYR transactions via Touch 'n Go, DuitNow & GrabPay are fully secured.

Bahasa Melayu