Privacy Policy Paddy Power — Your Data Protection & Privacy

Paddy power collects various types of information to provide you with better, safer, and more relevant services. This information can be grouped into several categories:

Information You Voluntarily Provide

• Registration Information: Full name, date of birth, email address, mobile number, home address, and other identifying information required for verification purposes (KYC).
• Payment Information: Bank account details, credit card numbers, or digital wallet information used to process deposits and withdrawals. We do not store card numbers directly — payments are processed by certified third-party payment providers.
• Account Profile: Profile photo, security question answers, and other player preference information you choose to share.
• Communications: Emails, in-app messages, and customer support communications you send to us.

Automatically Collected Information

• Gaming Activity Information: Game records, bets placed, wins, losses, and transaction history for reporting and analysis purposes.
• Device & Access Information: Device type, operating system, IP address, browser type, and referral source for security and system maintenance purposes.
• Location Data: Geographic location determined via your IP address to ensure regional regulatory compliance and security purposes.

The information we collect is used for the following purposes:

1. Service Delivery: To create and manage your account, process deposits and withdrawals, and provide access to games on the platform.
2. Identity Verification & Security: To verify your age and identity (KYC process), and to prevent fraud, money laundering, and other unlawful activities.
3. Communications: To send notifications about your account, promotional updates, bonus details, policy changes, and other information relevant to our services.
4. Analytics & Improvements: To understand how users interact with the platform, analyze gaming trends, and improve platform features and security.
5. Legal Compliance: To comply with applicable laws, regulations, and court orders related to anti-money laundering, taxation, and user protection.
6. Personalized Marketing: To deliver personalized offers and promotions based on your activity and gaming preferences — you may opt out of marketing communications at any time.

We never sell or rent your personal information to third-party companies for their own marketing purposes.

The security of your personal information is our top priority. paddy power applies strict technical and organisational security measures to protect your data from unauthorised access, alteration, disclosure, or destruction.

Our Security Measures:

• 256-bit SSL Encryption: All communications between your device and paddy power servers are encrypted to prevent data interception in transit.
• Two-Factor Authentication (2FA): You can enable 2FA on your account for an extra layer of security that requires a verification code from a second device.
• Role-Based Access Control: Only staff with a legitimate business need are authorised to access your personal information.
• Regular Security Audits: Our systems are regularly audited by independent third parties to identify and address potential security vulnerabilities.
• Data Retention Period: Information is stored in secured data centers with strict physical and electronic security measures.

The paddy power platform uses cookies and other tracking technologies to enhance user experience, analyze site usage, and ensure security.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as login authentication and session security.
• Analytics Cookies: Helps us understand how users interact with the site for improvement and performance optimization purposes.
• Marketing Cookies: Used to serve more relevant ads and track the effectiveness of marketing campaigns.

You can manage cookies through your browser settings and choose to reject certain cookies. However, rejecting essential cookies may affect platform functionality.

Paddy power does not share your personal information with third parties except in certain circumstances required to deliver our services or comply with applicable laws.

When We Share Data:

• Payment Providers: To process financial transactions, we share payment details with certified payment providers that comply with international security standards.
• Technical Providers: Hosting providers, communication tool providers, and customer support providers that help us operate the platform.
• Legal Authorities: When required by law, court order, or a legitimate government investigation related to fraud prevention or illegal activity.
• Strategic Business Partners: For joint promotions or integrated services that you have voluntarily agreed to.

All third parties who receive your information are held accountable for protecting your privacy to the same or stricter standards as this policy.

You have certain rights regarding your personal data. Under Malaysia's data protection laws, you are entitled to:

1. Accessing Your Data: Request a copy of all personal information we hold about you.
2. Correcting Inaccurate Data: Request that we correct any inaccurate or incomplete information.
3. Requesting Deletion: Request that we delete your data under certain circumstances (provided it does not violate our legal obligations).
4. Restricting Processing: Request that we limit how we process your data under certain circumstances.
5. Opt Out of Marketing Communications: Unsubscribe from marketing emails, promotional SMS, and other communications at any time.
6. Withdrawing Consent: Request that we stop processing data based on consent you previously provided.

To exercise any of these rights, please contact our privacy team via support email or live chat. We will respond to your request within a reasonable timeframe, typically within 30 days.

We retain your personal information only for as long as necessary for the purposes for which it was collected, or as required by applicable law — whichever is longer.

General Retention Guidelines:

• Active Account Data: Retained for as long as your account is active and for the period required by law after account closure (typically 5–7 years for audit and tax compliance purposes).
• Transaction Records: Retained for a minimum of 7 years for audit, tax compliance, and dispute resolution purposes.
• Marketing Data: Retained until you opt out of marketing communications, after which it is deleted within 30 days.
• Cookies & Tracking Data: Typically stored for 12 months or until you clear cookies from your device.

Once the retention period expires, your information will be fully deleted or anonymized so it can no longer be associated with you.

If you have any questions, concerns, or complaints regarding this privacy policy or how we handle your data, please contact our privacy team through the following channels:

This privacy policy may be updated from time to time. Important changes will be announced via email or platform notifications. Continued use of paddy power after policy changes are made constitutes acceptance of those changes.