padi Privacy Policy
This page describes what we collect when you use padi and how we keep that data protected. Our privacy commitment centres on transparency: we tell you exactly which data we gather, why we need it, and who has access to it. We do not sell your data to third parties.
We at padi operate under strict data-protection principles. Your account information, transaction history, and wager records are encrypted and stored on secure servers. We comply with international data-handling standards and local regulations in jurisdictions where we operate. When you open an account on padi, you trust us with personal information — our policy ensures that trust is honoured through explicit controls and regular security audits.
Our services are available only where local law permits. Users are responsible for verifying that access and use of padi comply with their own jurisdiction's laws. This privacy policy applies to all users of the padi platform, whether accessing via web, mobile app, or API integration.
What Data We Collect on padi
When you create an account on padi, we collect your email address, phone number, full name, date of birth, and residential address. We also ask for a government-issued ID number for identity verification. This data is essential for account security, legal compliance, and fraud prevention.
During your use of padi, we record all wagers placed, settlement outcomes, deposits, withdrawals, and account balance changes. We also log your login times, IP address, device type, and browser information. This transactional data helps us detect unusual activity (such as unauthorized access or money-laundering patterns) and troubleshoot technical issues. We retain transaction records for seven years as required by anti-money-laundering regulations.
Identity Verification on padi
We at padi are required by law to verify your identity before allowing withdrawals. When you request your first withdrawal, you upload a photo of your national ID and a selfie showing your face and ID together. Our system performs automated checks; if verification fails, we ask for manual review documentation (such as a utility bill or bank statement showing your name and address).
Your identity documents are encrypted and stored separately from your account login credentials. Only authorized compliance staff can access these files, and only for verification purposes. We do not share identity documents with third parties except when legally required (such as by law enforcement or financial regulators). After verification is complete, you may request deletion of your selfie; your ID data is retained for seven years for regulatory compliance.
Payment Data and Third-Party Processors
When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, or e-wallet, we do not store your wallet credentials. Instead, we redirect you to the payment provider's secure portal; you authorize the transfer there, and we receive only a transaction confirmation. For bank transfers via mobile banking, local payment, online payment, or e-wallet, we see your account name and reference number, but not your full banking credentials.
We at padi use third-party payment processors to handle fund transfers. These processors comply with Payment Card Industry Data Security Standard (PCI DSS) or equivalent banking standards. We share only the minimum data necessary with them (your name, account balance, transaction amount, date). Processors are contractually bound to use your data only for transaction settlement; they cannot use it for marketing or secondary purposes.
Cookies and Tracking on padi
We at padi use cookies to remember your login session, language preference, and account settings. These are functional cookies; they do not track you across other websites. We also use analytics cookies (via Google Analytics) to understand which pages you visit and which games are popular. This helps us improve padi's user experience.
You can disable cookies in your browser settings, but doing so may prevent padi from functioning properly (you would need to log in repeatedly). We do not use behavioral advertising cookies or sell browsing data to advertisers. Our analytics data is anonymized — we see aggregate trends, not individual user profiles.
How we protect your data on padi
- We encrypt all data in transit using TLS 1.2+ and at rest using AES-256.
- Access to personal data is restricted to authorized employees and contractors who sign confidentiality agreements.
- Our servers are located in data centres with 24/7 physical security and redundant power/cooling.
- We perform annual security audits and penetration testing by independent third parties.
- In the event of a data breach, we notify affected users within 48 hours and cooperate with regulatory authorities.
Your Rights and Data Retention on padi
We at padi give you the right to request a copy of all data we hold about you. Email our support team (details in the contact section below) with proof of identity, and we will provide a machine-readable export of your account information, transaction history, and communications within 30 days. You also have the right to request correction of inaccurate data or deletion of data we no longer need to keep.
We retain account data for as long as your account is active, plus seven years after closure (for regulatory compliance). Payment records and identity documents are kept for seven years. Marketing emails are kept until you unsubscribe. If you request account deletion before the seven-year window expires, we anonymize your personal data but retain transaction records as required by law. Your right to erasure is limited by our legal obligations to prevent fraud and money laundering.
Third Parties and Data Sharing on padi
We at padi share your data only in these circumstances: with payment processors (for deposits and withdrawals), with our hosting provider (for data storage), with our analytics provider (anonymized aggregates only), and with law enforcement or financial regulators (when legally compelled). We do not sell, rent, or trade your personal data to advertisers or data brokers.
Our data processors are located in multiple jurisdictions (including the European Union, Singapore, and the United States). This means your data may be stored and processed outside your home country. We contractually require all processors to comply with international data-protection standards. By using padi, you consent to this cross-border data transfer.
Contacting Us About Privacy on padi
If you have questions about how we handle your data on padi, or if you wish to exercise your rights (access, correction, deletion), contact our Data Protection Officer via email at the address listed on our contact page. We aim to respond to all inquiries within 14 business days. If you believe we have violated your privacy rights, you have the right to lodge a complaint with your local data-protection authority.
This privacy policy may be updated from time to time. We will notify you of material changes by email or by posting a notice on padi. Your continued use of padi after such notice constitutes acceptance of the updated policy. Last updated: May 2026.