🔒 Paddy Power Malaysia Privacy Policy –  updated January 2026 🛡️ 256-bit SSL Encryption  protecting every transaction you make 👤 Your data is never sold  to any third party 💳 Secure deposits via Touch 'n Go & DuitNow  within 30 seconds 🔑 Two-Factor Authentication  available to all accounts 📧 24/7 Support in  Bahasa Melayu & English 🔒 Paddy Power Malaysia Privacy Policy –  updated January 2026 🛡️ 256-bit SSL Encryption  protecting every transaction you make 👤 Your data is never sold  to any third party 💳 Secure deposits via Touch 'n Go & DuitNow  within 30 seconds 🔑 Two-Factor Authentication  available to all accounts 📧 24/7 Support in  Bahasa Melayu & English
Updated: January 2026

Paddy Power Malaysia Privacy Policy – Our Commitment to Protecting Your Data

At Paddy Power Malaysia, your privacy is not merely a legal obligation — it is a responsibility we take seriously across every aspect of our operations. This page clearly explains what data we collect, why we need it, how we use it, and your rights in relation to that data.

Page Contents
  • Data We Collect
  • How We Use Your Data
  • Sharing of Data with Third Parties
  • Security & Data Storage
  • Cookies
  • Your Privacy Rights
  • Children's Data
  • Changes to This Policy

Paddy Power's Six Core Privacy Commitments to You

Before reading the full policy, here is a summary of the most important things you need to know about how Paddy Power Malaysia manages your data.

Bank-Level Encryption

All data you submit to us — including personal information and payment details — is protected by 256-bit SSL encryption, the same standard used by online banking in Malaysia.

No Data Sales

Paddy Power does not sell, rent, or trade your personal data to any third party for marketing purposes. Your data is used solely for the operation of your own account.

Control Is in Your Hands

You have the right to access, correct, transfer, or request the deletion of your personal data at any time. All requests are handled within 30 days by our privacy team.

Secure Data Storage

Your data is stored on servers protected by strict access controls. Only staff who require access to data in order to perform their duties are permitted — and they are bound by confidentiality agreements.

Manageable Cookies

We use cookies to enhance your experience on the platform. You can manage your cookie settings at any time through your browser preferences — without affecting the platform's core functionality.

Malaysia PDPA Compliance

Paddy Power Malaysia operates in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010. All our data collection and processing practices are designed to comply with applicable Malaysian data protection law.

Important Notice

By using the Paddy Power Malaysia, you agree to the data collection and usage practices described in this Privacy Policy. This Policy forms part of Terms & Conditions ours and should be read together with that document.

1Introduction & Scope of This Policy

This Privacy Policy ("Policy") describes how Paddy Power Malaysia ("we", "Platform") collects, uses, discloses, and protects your personal information when you use the paddypower-app.com website and all related services.

This Policy applies to all users of our platform — whether you are simply browsing our website without registering, an active registered member, or a former member whose account has been closed. The scope of this Policy covers all personal data we process in connection with the operation of our platform in Malaysia.

We operate in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010, the principal legislation governing the processing of personal data for commercial purposes in Malaysia. As a data controller, Paddy Power is responsible for ensuring that the personal data we hold is processed lawfully, fairly, and transparently.

If you have any questions about this Policy or how we handle your data, please contact us at support@paddypower-app.com. We are committed to responding to all privacy enquiries within 5 working days.

2Personal Data We Collect

Paddy Power only collects personal data that is strictly necessary to provide our services to you. Below are the categories of data we collect, along with their sources:

Data CategoriesSample DataSource
Identification DataFull name, date of birth, MyKad numberProvided by you during registration
Contact DataEmail address, Malaysian phone numberProvided by you during registration
Account DataUsername, login history, account settingsAutomatically generated
Financial DataDeposit/withdrawal records, payment methods (Touch 'n Go, DuitNow, FPX)Recorded at the time of transaction
Gaming DataBetting history, casino game records, wins/lossesRecorded automatically
Technical DataIP address, device type, browser, operating systemCollected automatically during use
Cookie DataWebsite preferences, login sessions, analytics dataCollected via browser cookies
Communications DataLive chat records, support emails, feedbackRecorded during support interactions

We do not collect sensitive data such as health information, biometric data, religious beliefs, or political views. Should there ever be a need to collect additional data beyond what is listed above, we will obtain your explicit consent beforehand.

3How We Use Your Personal Data

The personal data we collect is used solely for the following purposes. We do not use your data for any other purpose without first obtaining your consent:

  • Account management — to create, verify, and maintain your account on the platform Paddy Power
  • Transaction Processing — to process deposits, withdrawals, and all financial transactions you make via Touch 'n Go, DuitNow, GrabPay, FPX, Boost, or ShopeePay
  • Service provision — to give you access to all platform features, including slots, live casino, and Sports Betting
  • Identity verification — to meet KYC (Know Your Customer) and AML (Anti-Money Laundering) legal requirements
  • Service communications — to send important notices related to your account, including transaction confirmations and security notifications
  • Customer support — to help you resolve any issues or enquiries you raise with our support team
  • Security & fraud prevention — to detect and prevent fraudulent activity, money laundering, and other security threats
  • Responsible Gaming — to monitor gameplay patterns and, where necessary, take proactive steps to protect your wellbeing
  • Platform Improvements — to analyse usage patterns in aggregate (not at an individual level) in order to improve the overall user experience
  • Marketing — to send you relevant offers and promotions, only where you have opted in to receive marketing communications
Unsubscribe from Marketing Emails

If you no longer wish to receive promotional emails and offers from Paddy Power, you may unsubscribe at any time via the "Unsubscribe" link in any promotional email we send, or by updating your communication preferences in your account settings. This will not affect important transactional emails related to your account.

4Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act (PDPA) 2010, Paddy Power processes your personal data on a valid legal basis. Depending on the purpose of processing, the bases we rely on are:

  • Consent — for direct marketing and promotional communications, we rely on the consent you gave at registration or any subsequent updates to your communication preferences
  • Contract performance — processing that is necessary to provide the services you have signed up for, including transaction processing and account management
  • Legal obligation — processing required to comply with legal obligations such as KYC, AML, and financial reporting requirements
  • Legitimate interests — processing for fraud prevention, platform security, and service improvement where these interests do not override your rights

If you would like to know the specific legal basis that applies to any particular data processing activity, please contact us at support@paddypower-app.com.

5Sharing of Data with Third Parties

Paddy Power Malaysia does not sell, rent, or trade your personal data to third parties for their own marketing purposes. This is a commitment we uphold without exception.

However, in the course of our operations, there are specific situations where we need to share your data with selected third parties:

  • Payment service providers — Touch 'n Go, DuitNow, FPX, GrabPay, Boost, and ShopeePay require minimal transaction data to process your payments
  • Casino game providers — providers such as Pragmatic Play, NetEnt, and PG Soft may receive non-identifiable session IDs for technical gameplay purposes
  • Analytics services — aggregated and anonymised usage data is used for platform analytics
  • Security services — a cybersecurity provider that helps us detect and prevent fraud
  • Legal authorities — we will disclose data where required by a court order, legal obligation, or valid request from a Malaysian law enforcement agency

All third parties that receive your data are bound by strict data processing agreements. They are permitted to use your data only for the specific agreed purposes and must protect it to a standard at least equivalent to our own.

Third-Party Contract Protections
  • All third-party partners sign a data protection agreement before receiving any data
  • Third-party use of data is strictly limited to the specific stated purposes only
  • We periodically review the privacy compliance of all our partners
  • Agreements require partners to notify us within 72 hours in the event of any data breach

6International Data Transfers

In certain situations, your personal data may be processed or stored outside Malaysia — particularly when we use technology solution providers or game providers that operate on a global basis.

When international data transfers occur, Paddy Power ensuring that adequate protections are in place through:

  • Ensuring that the recipient country has data protection laws that are equivalent to or more stringent than our own
  • Using approved standard contractual clauses for international data transfers
  • Verifying that recipients comply with appropriate data protection principles

If you would like to know more about the specific protections we apply to international data transfers, please contact us at support@paddypower-app.com.

7Data Security Measures We Have in Place

Paddy Power Malaysia implements a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

256-bit SSL Encryption

All data in transit between your device and our servers is encrypted using TLS 1.3 with AES-256 encryption — the highest industry standard currently available.

Data-at-Rest Encryption

Sensitive data stored in our databases — including passwords and financial details — is encrypted using irreversible hashing algorithms.

Strict Access Controls

Access to members' personal data is restricted on a "need-to-know" basis — only staff who genuinely require access to that data in order to carry out their duties are permitted to do so.

24/7 Monitoring

Our automated monitoring system continuously watches for abnormal activity, unauthorised access attempts, and signs of data breaches — with real-time alerts sent directly to our security team.

While we implement comprehensive security measures, no online system can be guaranteed 100% secure. You also play an important role in keeping your account safe — protect the confidentiality of your password, enable two-factor authentication, and ensure the devices you use are free from malware. If you suspect any suspicious activity, contact us immediately.

8Data Retention Period

Paddy Power does not retain your personal data for longer than is necessary for the purpose for which it was collected, or longer than is required under Malaysian law.

Data CategoriesRetention PeriodReason
Active Account DataFor the duration of the active accountRequired for account operations
Transaction Records7 years after the transactionMalaysian financial legal requirements
KYC/Verification Data7 years after account closureAML and legal requirements
Game Records3 years after the date of playDispute resolution & audit
Communication Logs2 yearsComplaint resolution & improvement
Cookie DataUp to 13 monthsUser experience enhancement

Once the applicable retention period has elapsed, your data will be securely deleted or anonymised so that it can no longer be linked to you. If you request account deletion before the legal retention period has expired, we will restrict access to that data even where full deletion cannot be carried out until our legal obligations have been met.

9Cookies & Tracking Technologies

Platform Paddy Power Malaysia uses cookies and similar tracking technologies to enhance your experience and ensure certain platform features function correctly.

Types of cookies we use:

  • Essential Cookies — required for core platform functions such as login sessions and security. These cookies cannot be disabled without affecting platform functionality
  • Performance Cookies — collecting information on how you use the platform to help us improve site performance and speed
  • Functional Cookies — allows the platform to remember your preferences such as language and display settings
  • Analytics Cookies — helps us understand aggregate usage patterns for product improvement. This data cannot be used to identify any individual

You can manage or delete cookies through your browser settings at any time. However, disabling certain cookies may affect the full functionality of some platform features. Instructions for managing cookies can be found in your browser's settings menu (Chrome, Firefox, Safari, or Edge).

No Third-Party Cookies for Advertising

Paddy Power does not use third-party cookies for targeted advertising or to track your activity across other websites. Our cookies operate exclusively within the context of our own platform.

10Your Privacy Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding the personal data we hold about you. Paddy Power committed to respecting and facilitating the exercise of these rights:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide it in a readable format within 30 days.

Right to Rectification

If your data is inaccurate or incomplete, you have the right to request a correction. You may also update most profile information directly from your account settings.

Right to Erasure

You may request the deletion of your personal data under certain circumstances. This right is subject to our legal obligations to retain certain data for specified periods.

Right to Restrict Processing

In certain circumstances, you may request that we restrict the processing of your data — for example, while we verify its accuracy or assess your objection to processing.

Right to Data Portability

You may request the data you have provided to us in a structured, machine-readable format, for transfer to another service provider of your choice.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests in certain circumstances.

To exercise any of the rights above, please contact us at support@paddypower-app.com with the subject line "Privacy Rights Request" and specify the right you wish to exercise. We will respond within 30 days of receiving your request. In complex cases, this period may be extended by up to 60 days, with prior notice to you.

Identity verification may be required before we process your privacy rights request — this is to protect your data from unauthorised requests.

11Children's Data

Platform Paddy Power Malaysia is intended for individuals aged 18 and above only. We do not knowingly collect or process personal data of children under the age of 18.

If you are a parent or guardian and believe your underage child has registered on our platform without authorisation, please contact us immediately at support@paddypower-app.com. We will investigate and close the account, and remove all associated data promptly once the case has been verified.

We implement measures including date-of-birth verification at registration and ongoing monitoring to detect any accounts that may belong to underage individuals. Child protection is our top priority.

12Links to Other Sites

Platform Paddy Power Malaysia may contain links to third-party websites in certain contexts — for example, links to payment providers. This Privacy Policy does not apply to those third-party websites.

We encourage you to read the privacy policy of every website you visit, especially before submitting any personal information. Paddy Power is not responsible for the privacy practices of websites outside our control.

13Changes to This Privacy Policy

Paddy Power Malaysia reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or changes to the services we offer.

When material changes are made to this Policy, we will:

  • Updating the "Last Updated" date at the top of this page
  • Sending email notifications to all active members to inform them of material changes
  • Displaying a prominent notice on the platform's main page for at least 14 days before the changes take effect

Continued use of the platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes made, you may close your account before they take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we manage your personal data.

14Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Paddy Power Malaysia handles your personal data, we are here to listen and help.

  • Email (Privacy Enquiries): support@paddypower-app.com — include the subject line "Privacy Inquiry" for faster processing
  • Live Chat: Available 24/7 within the platform — for general enquiries and immediate support
  • Response time: We aim to respond to all privacy enquiries within 5 business days

If you are dissatisfied with how we have handled your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the statutory authority responsible for personal data protection in Malaysia.

Related Pages

FAQ – Paddy Power Malaysia Privacy Policy

Absolutely not. Paddy Power Malaysia does not sell, rent, or trade your personal data to third parties for their own marketing purposes. This is an unconditional commitment we stand by. Your data is shared with selected third parties only in very limited contexts — such as payment providers (Touch 'n Go, DuitNow, FPX) to process your transactions, or technical service providers who assist us in operating the platform. All such parties are bound by strict data protection agreements and may not use your data for any other purpose.

To request a copy of your personal data (known as a Data Subject Access Request), email support@paddypower-app.com with the subject line "Data Access Request" and include your full name and account ID number. We may ask for additional identity verification to ensure we are sending data to the right person — this is a security measure to protect you. Once your identity has been confirmed, we will provide a copy of your data in a readable format within 30 days of the request date. No charge applies for reasonable requests.

Yes, you may request the deletion of your personal data. However, this right is not absolute — certain data is required by Malaysian law to be retained even after a deletion request. For example, financial transaction records must be kept for 7 years to comply with financial regulations and AML requirements. KYC data must also be retained for a prescribed period. In such cases, we will delete all data that can be deleted and restrict access to any data that cannot, ensuring it is used solely for legal compliance purposes. Submit your request to support@paddypower-app.com with the subject line "Data Deletion Request".

When you close your account, your personal data is not deleted immediately. In accordance with Malaysian legal requirements and our operational obligations, we are required to retain transaction records for 7 years and KYC data for 7 years following account closure. This data is held in a locked, inactive state — it is not used for any marketing or active operational purpose. Gaming records are retained for 3 years for the purpose of resolving any disputes that may arise. Once the relevant retention period has expired, all data will be securely deleted or fully anonymised.

Paddy Power Malaysia may send you promotional emails if you have given consent to receive marketing communications — typically during the registration process. If you no longer wish to receive promotional emails, you can unsubscribe easily in one of two ways: first, click the "Unsubscribe" link at the bottom of any promotional email we send; second, log in to your account and update the "Communication Preferences" setting under Account Settings. Changes will take effect within 48 hours. Unsubscribing from promotional emails will not affect important transactional emails such as deposit confirmations, security notices, or account service emails.

Paddy Power Malaysia does not store the full details of your payment method — whether Touch 'n Go, DuitNow, FPX, GrabPay, Boost, or ShopeePay — on our own servers. Payment processing is handled directly by licensed and registered payment providers in Malaysia, using their own PCI DSS-compliant security infrastructure. We retain only tokens or transaction references that contain no sensitive information usable for new transactions. This means that even in an unforeseen scenario, your full payment method details are not at risk, because they simply do not exist within our systems.

Paddy Power Malaysia and Our Commitment to Player Privacy

In today's digital age, online privacy is an increasingly serious concern for Malaysians. We have all heard stories of data being sold, accounts being hacked, or phone numbers suddenly appearing on scam lists after signing up on a platform. At Paddy Power, we understand these concerns — and that is exactly why we take a different approach.

For us, privacy is not simply a box to tick on a compliance checklist. It is part of the trust you place in us when you register and deposit your money. That trust is something we do not take lightly.

When you deposit funds via Touch 'n Go or DuitNow to bet on an EPL match or spin your favourite slots, you are trusting us with sensitive financial information. When you register with your name and Malaysian phone number, you are trusting us to keep it safe. We take that responsibility seriously.

Here's why Paddy Power does not operate a business model that relies on third-party advertising requiring us to share user data. Our business model is straightforward — you use our services, we deliver the best possible experience, and we keep the platform safe and fair for everyone. There is no need to sell your data to advertisers or data brokers.

Compliance with Malaysia's Personal Data Protection Act (PDPA) 2010 is not merely a legal obligation for us — it is our minimum standard. We actively strive to go beyond what the law requires across many aspects of our privacy practices, because we believe Malaysian players deserve a higher level of protection than legislation alone mandates.

If you have any questions not addressed on this page, or would like to discuss how we handle your data in greater detail, do not hesitate to get in touch. Our support team is available in both Bahasa Melayu and English, 24 hours a day, 7 days a week.

Contact Our Privacy Team
  • Email: support@paddypower-app.com (subject: "Privacy Enquiry")
  • Live Chat: Available 24/7 directly within the platform after logging in
  • Response time: 5 working days for privacy enquiries
  • Support language: Bahasa Melayu & English

Your Privacy Is Protected. Ready to Start Playing?

Register a free account at Paddy Power Malaysia today — a secure, transparent platform that respects your privacy. Deposit easily via Touch 'n Go, DuitNow, or GrabPay in under 30 seconds.

Bahasa Melayu