Pavilion888 Privacy Policy — Protection of Your Personal Data

This Privacy Policy describes how pavilion888 — Malaysia's leading online entertainment platform — collects, uses, stores, and protects your personal data when you use our website at pavilion888.onl, our mobile app, or any related services we offer. By registering an account or continuing to use our platform, you are deemed to have read, understood, and agreed to all provisions of this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.

1. Information We Collect

Pavilion888 collects several categories of personal information necessary to deliver safe, fair and high-quality services to all our users in Malaysia. The information we collect includes:

Personal Identification Information:

• Full name as stated on official identification documents.
• National Registration Identity Card (NRIC) number or passport number for KYC verification purposes.
• Date of birth to verify that you meet the minimum age requirement of 18 years.
• Full current residential address.
• An active mobile number and a valid email address.
• Selfie and copy of identification document for advanced account verification.

Financial Information:

• Bank account details including bank name, account number and account holder name.
• Registered e-wallet details (Touch 'n Go eWallet, GrabPay, etc.).
• Deposit and withdrawal transaction records, including amounts, dates, and payment methods.
• Wagering activity history and win records for compliance purposes.

Technical Information:

• IP address and general location information based on IP.
• Device type, operating system, browser version and screen resolution.
• Session log data including pages visited, session duration, and actions taken.
• Cookie information and unique device identifiers.

2. How We Collect Data

Pavilion888 collects personal information through several transparent and responsible methods:

• Directly From You: When you complete a registration form, finish the KYC process, submit a deposit or withdrawal request, contact our support team, or fill in a user satisfaction survey.
• Automatically: Through cookies, tracking pixels, server logs and similar technologies activated when you browse our platform. This data helps us understand usage patterns and improve the user experience.
• From Trusted Third Parties: In certain cases, we may receive verification information from KYC service providers, payment processors, or fraud prevention bodies we partner with to ensure platform security.
• From Public Sources: Publicly available information may be used for identity verification or applicable legal compliance purposes.

3. Purpose of Data Use

Every piece of information we collect is used for legitimate and clearly defined purposes. The following table summarises the primary purposes for which your data is used:

We will not use your data for any purpose beyond those stated above without notifying you in advance and, where required, obtaining your fresh consent.

4. Information Sharing

Pavilion888 does not sell your personal data. However, under certain limited circumstances, we may share your information with the following parties:

• Payment Processors: Transaction information is shared with payment service providers such as banks, FPX, DuitNow and e-wallet operators solely for the purpose of processing your transactions.
• KYC Service Provider: Identity verification data is shared with accredited identity verification partners to fulfil KYC compliance requirements.
• Game Provider: Minimum required account information is shared with third-party game providers (such as Pragmatic Play, Evolution Gaming) solely for game session verification purposes.
• Relevant Authorities: We are required to disclose certain information to regulatory bodies, law enforcement authorities or courts when legally directed to do so.
• Cloud Services: Data is stored on cloud servers meeting international security standards (ISO 27001) under strict data processing agreements.

5. Cookies & Tracking Technologies

The pavilion888 platform uses cookies and similar tracking technologies to enhance your experience, ensure account security, and understand platform usage patterns. The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login session authentication, transaction security, and language preference settings. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how you use our platform — most frequently visited pages, page response times and any error messages. This data is used in aggregate for technical improvements.
• Functional Cookies: Allows the platform to remember your preferences such as display language, favourite betting settings and game table size, providing a more personalised experience.
• Analytics Cookies: We use internal analytics tools to understand website traffic and user behaviour for service improvement purposes. Analytics data does not contain personally identifiable information.

You can manage or delete cookies through your web browser settings. However, disabling essential cookies may affect certain platform functions. For guidance on managing cookies by browser type, please refer to your browser's official documentation.

6. Data Security

Pavilion888 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse or inadvertent disclosure:

• 256-bit SSL Encryption for all data transmitted between your browser and our servers.
• Two-factor authentication (2FA) available and encouraged for all user accounts.
• Real-time threat monitoring using intrusion detection systems (IDS) and intrusion prevention systems (IPS) that operate around the clock.
• Regular security audits by accredited independent cybersecurity firms to identify and patch any vulnerabilities.
• Data security training mandatory for all pavilion888 staff with access to user data.
• Data breach response procedures that has been tested and documented to ensure prompt action in the event of a security incident.

7. Your Rights

As a registered pavilion888 user in Malaysia, you have the following rights regarding your personal data, in accordance with the Personal Data Protection Act 2010 (PDPA):

To exercise any of the above rights, please contact our privacy team by email at [email protected]. We will process your request within 14 business days. In complex cases, this period may be extended to up to 30 days with prior notice to you.

8. International Data Transfers

As an online platform, some of your personal data may be transferred to, stored in, or processed in countries outside Malaysia — primarily in connection with cloud computing services, international game providers, and technical service providers.

Pavilion888 ensures that all international data transfers are protected by adequate safeguard mechanisms, including data processing agreements that comply with international standards, and that a level of protection equivalent to Malaysia's PDPA is maintained regardless of the physical server location.

• All of our cloud service providers hold ISO 27001 and SOC 2 Type II security certifications.
• Strict data processing agreements (DPA) are signed with all partners who handle our users' data.
• Data transferred outside Malaysia is subject to equivalent or higher protection measures.

9. Data Retention Period

Pavilion888 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy or as required by applicable law. The following are general guidelines for our retention periods:

• Active account data: For as long as your account remains active and has not been officially closed.
• Financial transaction records: A minimum of 7 years from the transaction date, in accordance with Malaysian legal requirements relating to financial records and AML.
• KYC Documents: 5 years after account closure or the date of last activity, whichever is later.
• Support communication logs: 3 years from the date of last interaction.
• Cookie and analytics data: Between 30 days and 24 months depending on the type of cookie.

Once the relevant retention period has ended, your data will be securely deleted or permanently anonymised so that it can no longer be associated with you.

10. Changes to This Privacy Policy

Pavilion888 reserves the right to update or modify this Privacy Policy from time to time in response to changes in legislation, technological developments or changes in our business practices. When material changes occur, we will:

• Displaying a prominent notice on the platform's home page for at least 14 days before the changes take effect.
• Sending a notification to the email address registered to your account.
• Updating the "Last Updated" date at the top of this document.
• For changes that require new consent, we will request your confirmation before the changes take effect on your account.

Continued use of the pavilion888 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

11. Contact Us

If you have any questions, concerns, or wish to exercise your personal data rights, pavilion888's Data Protection Officer (DPO) team is here to help:

• Privacy Email: [email protected]
• Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the platform
• Response Time: Within 14 business days for personal data-related requests
• Language of Communication: Bahasa Melayu, English, and Chinese

For general questions, you may also refer to the FAQ us. For information on responsible gaming practices, please visit the Responsible Gaming us.