Privacy Policy Pavilon88 — Malaysia User Data Protection

Pavilon88 is an online entertainment platform operating under a registered entity in full compliance with Malaysian law. This Privacy Policy applies to all users who access the pavilon88 platform via the website, mobile app or any digital channel operated by pavilon88.

This policy covers all aspects of personal data management — from how information is collected during initial registration, how it is used during active platform use, through to how it is protected and ultimately deleted when no longer needed.

Pavilon88 collects personal information only to the extent necessary to provide users with a safe, legitimate and quality service. The following are the categories of data collected:

Personal data collected by pavilon88 is used solely for legitimate purposes related to the delivery of platform services. Specifically, your data is used to:

• Account Management: Securely creating, verifying and managing your user account, including KYC processes and two-factor authentication.
• Transaction Processing: Processing deposits, withdrawals and all financial transactions on the platform efficiently and securely.
• Platform Security: Detecting and preventing fraudulent activity, money laundering, hacking and any other security threats.
• Customer Support: Enabling our support team to resolve your complaints and enquiries quickly and effectively.
• Service Improvements: Analysing usage patterns to improve the interface, performance and content of the pavilon88 platform.
• Legal Compliance: Meeting the reporting and compliance obligations required under Malaysian law.
• Responsible Gaming: Monitoring gameplay patterns to identify users who may need support and early intervention.

Pavilon88 has never sold, rented, or traded users' personal data to any third party for commercial purposes. However, in the following limited situations, data sharing may occur:

• Payment Service Providers: Minimum required transaction data is shared with registered payment providers such as FPX and DuitNow processors to complete your transactions.
• Technical Service Providers: Hosting companies and cloud infrastructure providers contracted by pavilon88 may have limited access to technical data for system maintenance purposes.
• Legal Obligations: Pavilon88 will disclose the required information to Malaysian authorities when mandated by a court order or valid legal requirement.
• KYC Verification Providers: Identity documents submitted during KYC are sent to recognised third-party identity verification service providers in fully encrypted form.

All third parties that receive user data from pavilon88 are contractually bound to protect that data to the same or higher standards as pavilon88's own privacy policy.

Pavilon88 uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session security and cart management. These cookies cannot be disabled.
• Performance Cookies: Collecting anonymous information about how users interact with the platform to help us identify technical issues and improve performance.
• Functional Cookies: Storing user preferences such as language, time zone and display settings to deliver a more personalised experience.
• Analytics Cookies: Helping us understand usage patterns in aggregate (not individually) to improve platform content and navigation.

You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may affect the functionality of the pavilon88 platform.

User data security is an absolute priority for pavilon88. We continuously invest in the following infrastructure and security practices:

• 256-bit SSL Encryption: All data communications between your device and pavilon88's servers are encrypted using TLS 1.3 — the highest security standard available.
• Database Security: Data is stored in fully encrypted databases with strict role-based access controls.
• Two-Factor Authentication (2FA): Users are encouraged — and for transactions exceeding certain limits, required — to use 2FA for additional verification.
• 24/7 Security Monitoring: Intrusion detection and threat monitoring systems operate around the clock to identify and respond to threats promptly.
• Regular Security Audits: Pavilon88 conducts regular security audits by independent third parties to identify and address any vulnerabilities.
• Staff Training: All pavilon88 staff with access to user data undergo rigorous data security training and are bound by confidentiality agreements.

Pavilon88 retains users' personal data only for as long as it is needed for the stated purposes or as required by Malaysian law. Our general data retention policy is as follows:

• Active Account Data: Retained for the duration of the active account period plus 5 years after account closure, to comply with anti-money laundering legal obligations.
• Transaction Records: Retained for 7 years in accordance with Malaysia's accounting and financial legal requirements.
• KYC Documents: Retained for the period prescribed by applicable laws, typically 5–7 years after the business relationship ends.
• Security Logs: Retained for 12 months for threat analysis and incident investigation purposes.
• Marketing Data: Deleted within 30 days after you withdraw your marketing consent.

Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered.

Under the Personal Data Protection Act 2010 (PDPA) Malaysia, you have the following rights regarding your personal data at pavilon88:

To exercise any of the above rights, contact the pavilon88 data protection team via live chat or email at [email protected]. We will process your request within 30 business days.

Pavilon88 is a platform that for individuals aged 18 and above only. We do not intentionally collect, store or process personal data from individuals under the age of 18.

If we find that personal information belonging to a minor has been collected without valid parental or guardian consent, we will immediately take steps to delete that information from our records and terminate the associated account.

Pavilon88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operations, legal requirements or industry best practices in data protection. Each amendment will:

• Indicated with the latest amendment date at the top of this page.
• Users are notified via in-account notifications for material changes.
• Takes effect 14 days after notice is given, unless otherwise stated.

Your continued use of the pavilon88 platform after any amendment takes effect constitutes your acceptance of the updated policy.

Pavilon88 has appointed a Data Protection Officer (DPO) responsible for ensuring PDPA compliance and addressing privacy-related enquiries. You may contact us via:

• 24/7 Live Chat: The fastest channel — available directly on the pavilon88 platform.
• Data Protection Email: [email protected]
• General Support Email: [email protected]
• Help Centre: pavilon88 FAQ for instant answers to frequently asked questions.

All privacy-related enquiries will be responded to within 5 business days. For cases involving data access or deletion rights, please include your account number to expedite the process.