pav888 Privacy Policy – How We Handle Your Personal Data

1. Introduction

pav888 ("pav888", "we", "us", "our") is the operator of the online gaming platform accessible at pav888.org and is the data controller responsible for personal data collected through the Platform. We are committed to protecting the privacy and security of all personal data that you provide to us or that we collect in the course of providing our services to you.

This Privacy Policy is intended to provide Malaysian players and all other users of the pav888 Platform with clear, accessible information about our data practices in plain English. Where technical or legal terms are unavoidable, we have provided explanations. If you have any questions about how pav888 handles your personal data that are not addressed in this Policy, please contact us using the details in Section 14.

pav888 does not sell personal data to third parties for marketing purposes. Your data is used exclusively for the legitimate purposes described in this Policy — to operate the Platform, comply with legal obligations, prevent fraud, and improve your gaming experience.

2. Data We Collect

2.1 Registration & Account Data

When you register a pav888 account, we collect the information you provide directly, including:

• Full name as it appears on your government-issued identity document
• Date of birth (used to verify 21+ age eligibility)
• Email address
• Malaysian mobile phone number
• Residential address
• Username and hashed password (passwords are never stored in plain text)

2.2 KYC & Identity Verification Data

To comply with our licensing obligations and anti-money laundering requirements, we collect identity verification documents including a copy of your MyKad, passport, or other government-issued photo ID, and in some cases a selfie photograph for liveness verification. These documents are processed through our secure KYC verification system and are not shared with any third party except our licensed KYC verification provider.

2.3 Financial & Transaction Data

We collect records of all deposits, withdrawals, bets placed, game outcomes, and bonus transactions associated with your account. We also collect payment channel identifiers (such as Touch 'n Go eWallet account details or bank account numbers) to the extent necessary to process your transactions. We do not store full payment card numbers.

2.4 Technical & Usage Data

We automatically collect certain technical data when you access the pav888 Platform, including IP address, device type, browser type and version, operating system, session timestamps, pages visited, features used, and game activity logs. This data is used for security monitoring, fraud detection, technical troubleshooting, and Platform improvement.

2.5 Communications Data

We retain records of communications between you and pav888, including live chat transcripts, support ticket exchanges, and email correspondence. These records are used for quality assurance, dispute resolution, and regulatory compliance purposes.

3. How We Use Your Data

The table below summarises the primary purposes for which pav888 uses your personal data:

pav888 does not use personal data for automated decision-making that produces legal or similarly significant effects on players, except where required by fraud prevention or AML systems — in which case you have the right to request human review of any automated decision affecting your account.

4. Legal Basis for Processing

pav888 processes your personal data on one or more of the following legal bases:

• Contract performance: Processing necessary to fulfil the pav888 user agreement, including account management, transaction processing, and customer support.
• Legal obligation: Processing required to comply with our licensing conditions, anti-money laundering regulations, age verification requirements, and other applicable law.
• Legitimate interests: Processing for fraud prevention, security monitoring, Platform improvement, and responsible gaming oversight — where these interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes such as marketing communications, where you have provided specific, informed consent. Consent may be withdrawn at any time from your account notification settings.

5. Data Sharing & Disclosure

pav888 does not sell your personal data to any third party. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• KYC verification providers: Licensed identity verification services used to process your identity documents for age and identity verification.
• Payment processors: Providers facilitating deposits and withdrawals via Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and cryptocurrency channels.
• Game providers: Software studios whose games are integrated into the pav888 Platform may receive anonymised session data necessary to deliver the game experience.
• Fraud prevention and AML services: Third-party tools used to detect and prevent fraudulent activity, money laundering, and other prohibited conduct.
• Regulatory and licensing authorities: Where required by our operating licence, pav888 may be obligated to provide certain player data to our licensing authority or to law enforcement agencies acting under lawful authority.
• IT infrastructure providers: Cloud hosting and technical services providers who process data solely on pav888's instructions and under binding data processing agreements.

All third-party processors engaged by pav888 are bound by contractual data protection obligations and are prohibited from using your data for any purpose beyond the specific service they provide to pav888.

6. Cookies & Tracking Technologies

pav888 uses cookies and similar tracking technologies on the Platform to enable core functionality, maintain your login session, remember your preferences, and gather anonymised analytics data. Cookies used by pav888 fall into the following categories:

• Essential cookies: Required for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, preferred lobby view, and responsible gaming limit settings.
• Analytics cookies: Anonymised data used to understand how players navigate the Platform, which features are used most, and where technical issues occur. This data is aggregated and cannot identify individual players.

You may manage cookie preferences through your browser settings. Disabling essential cookies will impair or prevent your use of the pav888 Platform.

7. Data Retention

pav888 retains personal data for as long as your account remains active and for a period thereafter as required by our licensing obligations and applicable law. As a general principle:

• Account and transaction data is retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC identity documents are retained for the duration of your account and for the statutory period thereafter.
• Communications records (live chat, email) are retained for three (3) years for dispute resolution and quality assurance purposes.
• Technical and usage data is retained in identifiable form for twelve (12) months, after which it is anonymised or deleted.

When data is no longer required for any lawful purpose, pav888 will delete or anonymise it in accordance with our data destruction procedures.

8. Data Security

pav888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and pav888's servers
• Encrypted storage of sensitive data fields including passwords (hashed with one-way algorithms) and identity documents
• Role-based access controls limiting internal access to personal data to staff with a legitimate operational need
• Continuous security monitoring and intrusion detection systems
• Regular security assessments and penetration testing
• Incident response procedures providing for prompt notification in the event of a data breach affecting your rights and freedoms

While pav888 takes data security seriously, no internet transmission or electronic storage system is completely impenetrable. You are responsible for keeping your account credentials secure and for notifying pav888 immediately if you suspect unauthorised access to your account.

9. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by pav888:

• Access: The right to request a copy of the personal data pav888 holds about you.
• Rectification: The right to request correction of inaccurate or incomplete personal data.
• Erasure: The right to request deletion of your personal data, subject to our legal retention obligations.
• Restriction: The right to request that we limit processing of your personal data in certain circumstances.
• Portability: The right to receive your personal data in a structured, machine-readable format where technically feasible.
• Objection: The right to object to processing based on legitimate interests, including processing for direct marketing.
• Withdraw consent: Where processing is based on consent, the right to withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact pav888 support via live chat or by email at [email protected]. We will respond to verified requests within thirty (30) days. We may need to verify your identity before processing rights requests to prevent fraudulent access to another person's data.

10. Children's Privacy

The pav888 Platform is strictly not intended for use by persons under the age of twenty-one (21). pav888 does not knowingly collect personal data from persons under 21. Age verification is conducted as part of the registration and KYC process. If pav888 becomes aware that an account belongs to a person under 21, the account will be immediately closed and any associated data will be handled in accordance with our legal obligations. If you believe that a minor has registered a pav888 account, please contact our support team immediately.

11. International Data Transfers

pav888 operates infrastructure across multiple jurisdictions. As a result, your personal data may be transferred to, stored in, or processed in countries outside Malaysia. Where such transfers occur, pav888 ensures that appropriate safeguards are in place to protect your data, including contractual clauses that impose data protection obligations on recipients equivalent to those applicable in the originating jurisdiction. By using the pav888 Platform, you consent to the transfer of your personal data to other countries for the purposes described in this Policy.

12. Third-Party Services

The pav888 Platform may include integrations with third-party game providers and payment processors. These third parties operate under their own privacy policies, which govern their handling of any data they receive in the course of providing services to pav888. pav888 is not responsible for the privacy practices of third-party game studios or payment channel operators beyond the contractual data protection obligations we impose on them as processors acting on our behalf. We encourage you to review the privacy policies of any third-party services you interact with.

13. Policy Changes

pav888 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform features. Where changes are material, we will provide notice via the Platform or by email to your registered address prior to the changes taking effect. The "Last updated" date at the top of this Policy indicates when the current version was published. Continued use of the pav888 Platform after the effective date of an updated Policy constitutes acceptance of the revised terms.

14. Contact Us

For any questions, concerns, or rights requests relating to this Privacy Policy or pav888's data practices, please contact our Data Protection team through the following channels:

• Live Chat: Available 24/7 from the pav888 Platform — the fastest way to reach our team.
• Email: [email protected] (plain text — not a clickable link)

We aim to acknowledge all privacy-related enquiries within two (2) business days and to resolve them within thirty (30) days of acknowledgment. For complex requests, we will notify you if additional time is required.