Privacy Policy Pavilion888 – Personal Data Protection for Malaysian Online Casino Members

Pavilion888 ("we", "platform", "pavilion888") respects the privacy of every member and is committed to protecting the personal data you share with us. This Privacy Policy transparently explains how pavilion888 collects, stores, uses, and safeguards your personal information when you use our online casino and Sports Betting platform at pavilion888.xyz.

This policy is formulated in accordance with internationally recognised data protection principles and forms part of pavilion888's commitment to operating responsibly and transparently for the benefit of all members in Malaysia.

By registering an account or using any pavilion888 service, you are deemed to have read and agreed to this Privacy Policy. If you do not agree with any part of this policy, please do not use the pavilion888 platform.

Pavilion888 collects personal data in two main ways — information you provide directly, and data collected automatically while you use the platform.

Data you provide directly:

• During registration: Full name, Malaysian phone number, email address, date of birth, and your chosen password
• During identity verification (KYC): MyKad or passport copy, selfie for facial verification, and proof of residential address
• During financial transactions: E-wallet account details (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow details, or bank account numbers for FPX (Maybank2u, CIMB Clicks, and other banks)
• When contacting support: The content of your communications with the pavilion888 customer support team via Live Chat or email

Automatically collected data:

• IP address and general geographic location (state within Malaysia)
• Device type, operating system, and browser version used to access pavilion888
• Session logs — login times, session duration, pages visited within pavilion888
• Gaming and betting history — game types, bet amounts, winnings, and outcomes on pavilion888
• Cookie data and device identifiers to streamline your login experience

Pavilion888 does not collect sensitive data such as medical information, religious beliefs, or political views. Financial data held by pavilion888 is limited strictly to what is necessary for transaction processing and compliance with applicable financial regulations.

Pavilion888 uses members' personal data solely for legitimate purposes that are directly related to the provision of platform services. Here is how we use your data:

Pavilion888 will not use your data for any purpose beyond those stated above without first obtaining your renewed consent. You may withdraw consent for marketing communications at any time through your pavilion888 account settings.

Pavilion888 does not sell or rent members' personal data to any party for marketing or other commercial purposes. However, there are limited circumstances in which pavilion888 may need to share member data with trusted third parties:

• Payment service providers: Transaction details that must be shared with e-wallet providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, and DuitNow and FPX service providers to process your deposits and withdrawals. These providers are governed by their own privacy policies and are regulated by Bank Negara Malaysia.
• Game software providers: pavilion888 works with internationally licensed casino game providers. Limited game activity data must be shared for match processing and game result verification purposes.
• Security and verification service providers: Companies that assist pavilion888 in conducting KYC checks, fraud prevention, and AML (Anti-Money Laundering) compliance.
• Legal authorities: pavilion888 may be required to disclose member data to the relevant authorities if mandated by Malaysian law, a court order, or a legitimate law enforcement agency.

In the event that pavilion888 is involved in any merger, acquisition, or sale of corporate assets, member data may be transferred as part of those assets. In such circumstances, pavilion888 will provide advance notice to affected members and ensure the receiving entity upholds data protection standards at least equivalent to those set out in this Privacy Policy.

Pavilion888 implements comprehensive technical and organisational security measures to protect members' personal data against unauthorised access, disclosure, alteration, or destruction:

• Data encryption in transit: All communication between your browser and the pavilion888 platform is protected using TLS 1.3 with AES-256 encryption — the highest security standard currently available for web applications.
• Data encryption at rest: Sensitive data such as passwords and payment information is stored in encrypted form using irreversible hashing algorithms. pavilion888 staff cannot view your original password under any circumstances.
• Layered access controls: pavilion888's database system operates on a role-based access control model — only staff with the appropriate authorisation can access specific types of data. All access is recorded in audit logs that are reviewed on a regular basis.
• Two-factor authentication (2FA): pavilion888 offers two-factor authentication for member accounts — we strongly recommend all members enable this feature for an added layer of security.
• 24/7 monitoring: Pavilion888's security team continuously monitors systems to detect any suspicious activity or unauthorised access attempts. The intrusion detection system (IDS) is active at all times.
• Regular security testing: Pavilion888 conducts regular penetration testing and independent security audits to identify and address system vulnerabilities before they can be exploited.

Pavilion888 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit pavilion888.xyz.

Types of cookies used by pavilion888:

• Session cookies (required): Required to allow you to log in and remain logged in during an active session on pavilion888. These cookies are automatically deleted when you close your browser.
• Preference cookies: Saves your preferences such as language, preferred odds format, and display layout — making your experience smoother every time you return to pavilion888.
• Security cookies: Helps pavilion888 identify the devices you regularly use and detect login attempts from new or unrecognised devices or locations.
• Analytics cookies (anonymised): Usage data is collected in anonymised form — helping pavilion888 understand how members use the platform so we can continue to improve it.

You can manage or disable cookies through your browser settings. However, disabling essential cookies may affect certain features on pavilion888 — particularly the login process and session security. Pavilion888 does not use third-party cookies for marketing purposes without your consent.

Pavilion888 retains members' personal data only for as long as necessary to fulfil the original purpose for which it was collected, or for as long as required under applicable Malaysian law:

• Active account data: Retained for the duration of your pavilion888 membership and used to provide access to the platform and related services.
• Financial transaction records: Deposit, withdrawal, and other transaction history on pavilion888 is retained for a minimum of 7 years in line with applicable financial legislation and AML compliance requirements in Malaysia.
• Identity verification (KYC) records: Identity verification documents such as MyKad copies are retained for 5 years after account closure, or longer if required by regulatory directive.
• Customer support communication logs: Live Chat conversation records and emails with the pavilion888 team are retained for 2 years for reference and dispute resolution purposes.
• Data after account closure: When an account is voluntarily closed, personal data that is no longer required for legal obligations will be deleted or anonymised within 90 days of the closure date.

Once the designated retention period expires, pavilion888 will securely delete your data using methods that prevent recovery by any party. Data that has been fully anonymised and can no longer be linked to any individual may be retained indefinitely for statistical purposes and platform improvement.

As a pavilion888 member, you have the following rights regarding your personal data. pavilion888 is committed to processing all such requests within 7 business days:

• Right of access: You have the right to request a copy of the personal data pavilion888 holds about you, including your transaction history and gaming activity records on the platform.
• Right to rectification: If any information we hold about you is inaccurate or incomplete, you have the right to request a correction. Some details can be updated directly from your pavilion888 account settings.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data. Requests will be processed subject to pavilion888's legal obligations to retain certain data — such as financial records required under Malaysian law.
• Right to restrict processing: In certain circumstances, you may request that pavilion888 restrict the processing of your data — for example, while you are disputing the accuracy of your data or during an investigation related to a right to erasure request.
• Right to data portability: You have the right to request your personal data in a machine-readable format (such as JSON or CSV) for transfer to another platform if needed.
• Right to object: You have the right to object to the processing of your data for direct marketing purposes. You may opt out of receiving promotional communications from pavilion888 at any time via your account settings or by contacting us.

Pavilion888 operates on a technical infrastructure that may extend beyond Malaysia's borders in certain situations — for example, casino game processing by licensed international software providers, or backup data storage at secure data centres outside Malaysia.

When pavilion888 members' personal data needs to be transferred outside Malaysia, we take the following steps to ensure your data remains protected:

• Data transfers only take place to countries or entities with equivalent or stronger data protection laws
• All data recipients outside Malaysia are bound by contractually enforceable data protection agreements with pavilion888
• Technical security standards — including encryption in transit and at rest — are maintained regardless of where data is processed

Pavilion888 does not transfer members' personal data to countries without adequate data protection mechanisms unless it has first obtained explicit consent from the member concerned or ensured that appropriate safeguards are in place.

The pavilion888 platform is intended for individuals aged 18 and above only. pavilion888 does not knowingly collect or process personal data from individuals under the age of 18.

If we discover that personal data belonging to an individual under the age of 18 has been collected without our knowledge — whether due to false information provided during registration or any other reason — we will take the following action immediately:

• The account in question will be suspended and subsequently closed permanently
• All personal data belonging to the individual concerned will be deleted from pavilion888's systems as soon as reasonably practicable
• Any deposits previously made will be returned in accordance with the relevant procedures

Parents or guardians who suspect their underage child has accessed the pavilion888 platform are urged to contact our support team immediately at support@pavilion888.xyz so that appropriate action can be taken without delay.

The pavilion888 platform may contain links or references to third-party websites or services in certain contexts — for example, links to local Malaysian e-wallet providers such as the official Touch 'n Go or DuitNow websites for usage guidance.

Pavilion888's Privacy Policy does not apply to third-party websites or applications. When you click a link and leave the pavilion888 platform, the privacy policy of the website you visit will apply. Pavilion888 is not responsible for the privacy practices or content of third-party websites.

Pavilion888 reserves the right to update or amend this Privacy Policy at any time. Amendments may be necessary due to changes in Malaysian data protection laws, changes in how we operate the platform, or other operational reasons.

When this Privacy Policy is updated, we will:

• Publishing the latest version on this page with an updated "Last Updated" date
• Sending notifications to active members via email or in-platform notifications for material amendments
• Ensuring that previous versions of the policy remain accessible upon request for reference purposes

Continued use of the pavilion888 platform after the effective date of any amendment will be considered acceptance of the revised policy. If you do not agree with any changes, you have the right to close your pavilion888 account and request deletion of your data before the effective date.

If you have any questions, concerns, or requests regarding this Privacy Policy or how pavilion888 manages your personal data, please contact us through the following channels:

• Email: support@pavilion888.xyz (please mark the subject line as "Data Privacy Enquiry")
• Live Chat: Available 24/7 within the pavilion888 platform — click the chat icon to start a conversation with one of our agents
• Response time: Privacy-related enquiries will be responded to within 3 business days; formal data rights requests will be processed within 7 business days

Pavilion888's privacy team takes all enquiries seriously and ensures you receive a clear, helpful response. We welcome all feedback as it helps us continually improve our data protection practices for the benefit of all members in Malaysia.