Privacy Policy Pavilon88 – Our Commitment to Protecting Member Data

Pavilon88 understands that privacy is not merely a legal obligation — it is a fundamental right of every individual that must be genuinely respected and protected. As an online entertainment platform serving over 380,000 members across Malaysia, we recognise that members' trust in us depends not only on the quality of the games we offer, but also on how we handle their personal information.

This Privacy Policy explains in detail how Pavilon88 collects, uses, stores, protects, and occasionally shares our members' personal data. This document forms part of the agreement between you and Pavilon88, and should be read together with Terms & Conditions us.

By registering a Pavilon88 account or continuing to use our platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please do not proceed with registration or use of the Pavilon88 platform.

This Pavilon88 Privacy Policy applies to all services we provide, including the main Pavilon88 website, the online casino gaming platform, live Sports Betting, online poker, progressive jackpots, video slots, and all communication channels — including email, live chat, and WhatsApp — operated by Pavilon88.

Pavilon88 collects personal data through several channels — directly from you during registration and platform use, automatically through technologies built into our platform, and in certain cases from legitimate third-party sources. Below are the categories of data Pavilon88 collects, along with specific examples:

The financial data we collect is subject to stricter protection. Pavilon88 does not store credit or debit card numbers directly — all card transactions are processed through a PCI-DSS certified payment gateway. For deposits made via DuitNow, FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay, we retain only the transaction records needed for account reconciliation and payment verification — not your digital wallet login credentials.

Pavilon88 uses members' personal data only for legitimate, clearly stated purposes. We will not use your data for any purpose beyond what is described below without first obtaining your consent:

• Account Management — registering, verifying, managing, and maintaining your Pavilon88 account, including the required identity verification (KYC) process.
• Transaction Processing — processing deposits via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, and handling withdrawal of winnings in MYR (RM).
• Gaming Services Provision — delivering a personalised gaming experience that includes slots, Live Casino, poker, progressive jackpots, Sports Betting (badminton, cricket, football including Malaysia Super League and EPL) and more.
• Service Communications — sending important notifications relating to your account, transactions, changes to our terms, security alerts and relevant promotional information (where you have given consent).
• Security & Fraud Prevention — detecting and investigating suspicious activity, and preventing fraud, poker collusion, bot usage, and money laundering.
• Responsible Gaming — monitoring gameplay patterns to identify signs of problem gambling and providing appropriate support where needed.
• Legal Compliance — fulfilling legal and regulatory obligations under the Personal Data Protection Act 2010 (PDPA) and other applicable Malaysian laws.
• Platform Improvements — analyzing aggregate usage patterns (not individual behavior) to improve Pavilon88's products, design and user experience.

Pavilon88 applies the principle of purpose limitation — data collected for one purpose will not be used for another unrelated purpose without your consent. For example, your gaming history will not be used to make loan processing decisions or for any other financial services.

Pavilon88 does not sell, rent, or disclose members' personal data to third parties for marketing purposes. However, there are limited circumstances in which Pavilon88 needs to share data with certain parties to keep our services running properly and to comply with the law:

• Payment Service Providers — transaction information required to process your deposits and withdrawals in Ringgit Malaysia (RM) is shared with payment gateways such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost and ShopeePay solely for that purpose.
• Game Software Providers — game software providers partnering with Pavilon88 may receive the minimum technical data necessary to deliver the gaming experience. All providers are bound by strict confidentiality agreements with Pavilon88.
• Technology Service Providers — companies providing server infrastructure, cloud services, and analytics tools may process technical data on behalf of Pavilon88. They act as data processors bound by Pavilon88's instructions and are not permitted to use that data for their own purposes.
• Legal Authorities — Pavilon88 will disclose personal data to Malaysian authorities where required by law, court order, or in the context of a legitimate criminal investigation. This includes cooperation with Malaysia's Financial Intelligence Unit (FIU) in relation to anti-money laundering monitoring.

All third parties that receive data from Pavilon88 are subject to comprehensive data protection agreements. They may only use that data for the purposes specified in the relevant agreement and must comply with the security standards set by Pavilon88.

Pavilon88 continuously invests in robust security infrastructure to ensure every member's personal data is protected against unauthorised access, loss, theft, and misuse. The technical and organisational security measures we have in place include:

• Data Encryption in Transit — all communications between your browser or app and Pavilon88's servers are protected with TLS 1.3 using AES-256 encryption. This ensures your data remains unreadable even if communications are intercepted.
• Data Encryption at Rest — sensitive data stored in Pavilon88's databases — including passwords, identification numbers and financial information — is encrypted using strong cryptographic algorithms. Passwords are stored as one-way hashes that cannot be decrypted.
• Strict Access Controls — only Pavilon88 employees with a legitimate work-related need may access members' personal data. All access is monitored, logged, and reviewed on a regular basis. Our internal audit system allows us to detect and investigate any suspicious access.
• Regular Security Testing — Pavilon88 conducts regular penetration testing and vulnerability assessments to identify and address security weaknesses before they can be exploited.
• Certified Data Centres — Pavilon88 member data is stored in data centres with recognised physical and cybersecurity certifications, including physical access controls, intrusion detection systems and disaster recovery plans.
• Two-Factor Authentication — Pavilon88 offers two-factor authentication (2FA) for members who want to add an extra layer of security to their account.

In the event of a security incident involving members' personal data, Pavilon88 is committed to notifying affected members within the timeframe required under Malaysian law, and to taking all necessary remedial steps to limit the impact of the incident.

Pavilon88 retains members' personal data only for as long as necessary to fulfil the purpose for which it was collected, or to meet applicable legal and regulatory requirements. The following is a general guide to data retention periods at Pavilon88:

Once the designated retention period has elapsed, personal data will be securely deleted or anonymised so it can no longer be linked to any individual. The data deletion process follows approved procedures to ensure data cannot be recovered once removed.

Pavilon88 uses cookies and similar tracking technologies to keep the platform running smoothly, enhance the user experience, and understand how members use our platform. Cookies are small text files stored on your device when you visit the Pavilon88 website.

Pavilon88 uses three main categories of cookies:

You can manage your cookie preferences through your web browser settings. Most modern browsers allow you to view, delete, and block cookies from specific websites. Please note that disabling essential cookies may prevent you from logging in or accessing certain parts of the Pavilon88 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the privacy principles adopted by Pavilon88, you as a member have the following rights regarding your personal data. Pavilon88 is committed to making it easy for you to exercise these rights without any charge or unnecessary barriers:

To exercise any of the rights above, please contact the Pavilon88 privacy team by email at support@pavilon88.click, stating the right you wish to exercise and your account details. We will verify your identity before processing any privacy rights request to protect the security of your account.

Pavilon88 is a platform designed exclusively for adults aged 18 and above. We do not knowingly collect, store, or process any personal data from individuals under the age of 18.

All Pavilon88 account registrations require age verification. Members who provide a date of birth indicating they are under 18 will not be permitted to register. If we discover that we have inadvertently collected data from an underage individual, we will promptly take the following steps:

• Suspending the account immediately.
• Deleting all personal data associated with the underage individual.
• Returning any remaining fund balances to the rightful owner in accordance with established procedures.
• Reporting the incident to the relevant authorities where required by law.

Parents and guardians concerned about their children accessing online gambling platforms are advised to use parental control software available on their devices and home networks, and to ensure that Pavilon88 account credentials are kept out of reach of minors.

Pavilon88 may update this Privacy Policy from time to time to reflect changes in our privacy practices, updates to Malaysian law, or technological developments that affect how we handle data. Any changes will be acknowledged through an update to the "Last Updated" date shown at the top of this document.

For material changes — those that significantly affect your privacy rights or how we use your personal data — Pavilon88 will provide advance notice through:

• In-platform notifications on Pavilon88 displayed when you log in
• A notification email sent to your registered email address
• Announcement on the Pavilon88 homepage

We will provide at least 14 calendar days' notice before any material changes to this Privacy Policy take effect. Your continued use of the Pavilon88 platform after the effective date will be considered acceptance of the updated policy.

If you do not agree with the proposed changes, you have the right to close your Pavilon88 account before the changes take effect and to request deletion of your personal data in accordance with the procedure set out in the Your Privacy Rights section.

If you have any questions, concerns, or complaints about how Pavilon88 handles your personal data, or if you wish to exercise any of your privacy rights, please reach out to our team through the following channels:

When contacting us regarding a privacy request, please include the following information to help us process it promptly: the full name registered to your Pavilon88 account, your registered email address, the type of request (access, correction, deletion, etc.), and any relevant details that would help us handle your request accurately and efficiently.