pav888 Privacy Policy

1. Who We Are

This Privacy Policy applies to pav888, the operator of the online gaming platform accessible at pav888.app ("Platform"). References to "pav888", "we", "us", or "our" in this document refer to that operator. References to "you", "your", or "Member" refer to any individual who accesses the Platform, registers an account, or otherwise interacts with pav888 services.

pav888 acts as the data controller in respect of personal data collected through the Platform. We are committed to handling your personal data lawfully, fairly, and transparently, in accordance with applicable data protection laws including the Malaysian Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards.

2. Data We Collect

2.1 Account & Identity Data

When you register for a pav888 account, we collect the following categories of personal data:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify minimum age eligibility of 21 years).
• Email address and mobile phone number.
• Home address, city, and postcode.
• Copies of identity documents submitted for KYC verification (e.g., MyKad, passport).
• Selfie photograph provided during identity verification.

2.2 Financial Data

To process deposits and withdrawals in MYR, pav888 collects:

• E-wallet account identifiers (e.g., Touch 'n Go eWallet, Boost, GrabPay registered phone numbers).
• Bank account details provided for FPX or direct transfer withdrawals (e.g., Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect account numbers).
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method used.

2.3 Gaming Activity Data

• Game session logs including game titles played, bet amounts, outcomes, and session duration.
• Sportsbook wagering history including events, markets, odds, and stake amounts.
• Bonus and promotion redemption records.
• Responsible gaming tool settings (deposit limits, self-exclusion status).

2.4 Technical & Device Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, browser type and version.
• Device fingerprint generated for fraud prevention purposes.
• Login timestamps and session duration.

2.5 Communications Data

• Content of live chat support conversations.
• Email correspondence with pav888 support or compliance teams.
• Records of marketing communications sent to you and your opt-in or opt-out status.

3. How We Collect Data

pav888 collects your personal data through the following means:

• Directly from you during account registration, KYC submission, deposit or withdrawal requests, support interactions, and voluntary participation in promotions or surveys.
• Automatically through your use of the Platform, via server logs, session tracking technology, and device identification tools.
• From third parties such as identity verification service providers, payment processors, fraud detection vendors, and where applicable, credit reference agencies.

4. Purposes of Processing

pav888 processes your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your pav888 account.
• Identity verification: Fulfilling KYC obligations and minimum age verification (21+).
• Payment processing: Executing MYR deposits and withdrawals via your chosen payment method.
• Game delivery: Providing access to slots, live casino, sportsbook, and other gaming products.
• Bonus administration: Tracking wagering requirements, awarding bonuses, and preventing bonus abuse.
• Fraud prevention and security: Detecting and preventing fraudulent transactions, account takeovers, and prohibited conduct.
• Anti-money laundering (AML) compliance: Monitoring transactions for suspicious activity and fulfilling reporting obligations.
• Responsible gaming: Applying deposit limits, cooling-off periods, and self-exclusion tools requested by you or required under our responsible gaming policy.
• Customer support: Responding to your enquiries, complaints, and account-related requests.
• Marketing communications: Sending promotional offers, newsletters, and event notifications where you have provided consent or where a legitimate interest applies.
• Legal compliance: Meeting obligations under applicable laws, regulations, and regulatory authority directions.
• Platform improvement: Analysing aggregate usage data to improve pav888 features, performance, and user experience.

5. Legal Basis for Processing

pav888 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the pav888 Terms and Conditions, including account maintenance and payment processing.
• Legal obligation: Processing required to comply with applicable law, including KYC, AML, and data retention requirements.
• Legitimate interests: Processing in pursuit of pav888's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing based on your explicit consent, including marketing communications. You may withdraw consent at any time by contacting pav888 support or updating your account notification preferences.

6. Sharing Your Data

pav888 does not sell your personal data to third parties. We share your data only with:

• KYC and identity verification providers for the purpose of verifying your identity and age before allowing real-money gaming.
• Payment service providers including e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay) and banking partners (Maybank, CIMB, Public Bank, Hong Leong) necessary to process MYR transactions.
• Game content providers to the extent necessary to deliver certified gaming products and resolve game disputes.
• Fraud prevention and AML screening vendors who assist in identifying and preventing financial crime.
• Legal and regulatory authorities where disclosure is required by law or by a competent authority's direction.
• Professional advisers including lawyers, auditors, and accountants acting under duties of confidentiality.

All third-party recipients are required to handle your data in accordance with applicable data protection law and are bound by appropriate data processing agreements where required.

7. International Data Transfers

Some of pav888's service providers and game content vendors operate servers or processing infrastructure outside Malaysia. Where personal data is transferred outside the jurisdiction of collection, pav888 ensures appropriate safeguards are in place, including contractual data protection clauses consistent with applicable transfer mechanisms. If you have questions about specific international transfers, please contact pav888 via the support channels set out in Section 14.

8. Data Retention

pav888 retains your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, subject to the following retention guidelines:

• Active account data: Retained for the duration of your pav888 membership and for a period of at least five (5) years following account closure, to meet AML record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Transaction records: Retained for a minimum of seven (7) years in accordance with financial record-keeping requirements.
• Support communications: Retained for three (3) years from the date of interaction.
• Marketing data: Retained until you withdraw consent or for two (2) years of inactivity, whichever is earlier.

After the applicable retention period, data is securely deleted or anonymised so that it can no longer be linked to you personally.

9. Cookies & Tracking Technologies

pav888 uses cookies and similar technologies to operate the Platform, remember your preferences, and maintain session security. The categories of cookies used are as follows:

• Strictly necessary cookies: Required for the Platform to function. They enable login sessions, security token validation, and load balancing. These cannot be disabled without affecting core Platform functionality.
• Functional cookies: Remember your preferences such as language, display settings, and recently played games to improve your pav888 experience across sessions.
• Analytics cookies: Used in aggregate, anonymised form to understand how Members navigate the Platform so that pav888 can improve page performance and game discovery features.
• Security and fraud prevention cookies: Assist in identifying and flagging abnormal browsing patterns, automated access attempts, and suspicious device behaviour.

You may manage cookie preferences through your browser settings. Note that disabling cookies may impair Platform functionality, including the ability to log in.

10. Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by pav888:

• Right of access: Request a copy of the personal data pav888 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to restriction: Request that pav888 restrict processing of your data in certain circumstances (e.g., where accuracy is disputed).
• Right to data portability: Receive a copy of your data in a structured, machine-readable format where processing is based on consent or contractual necessity.
• Right to object: Object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact pav888 Customer Support via live chat from your member dashboard or by email at [email protected]. pav888 will respond to verified requests within 30 days. Identity verification may be required before processing any data subject request.

11. Children's Privacy

pav888 does not knowingly collect personal data from individuals under the age of 21. The Platform is strictly for adults. If pav888 becomes aware that a person under 21 has provided personal data without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor has accessed pav888, please contact support immediately.

12. Security Measures

pav888 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:

• TLS 1.3 encryption for all data in transit between your device and pav888 servers.
• Encryption at rest for sensitive personal data including KYC documents and payment method details.
• Role-based access controls limiting internal data access to personnel with a legitimate operational need.
• Regular penetration testing and security audits of Platform infrastructure.
• Multi-factor authentication requirements for internal administrative access to Member data systems.
• Incident response procedures for detecting, containing, and notifying affected parties in the event of a data breach.

While pav888 takes all reasonable steps to protect your data, no internet transmission is 100% secure. You should also take steps to protect your own account — use a strong unique password, enable 2FA, and never share your pav888 login credentials with anyone.

13. Changes to This Policy

pav888 may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or regulatory guidance. When material changes are made, pav888 will notify Members via the Platform's notification system or by email to the registered account address. The revised Policy will be effective from the date stated at the top of this page. Continued use of the Platform following notification of changes constitutes acceptance of the revised Policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or pav888's data handling practices, please contact our data protection team via:

• Live chat: Available 24/7 from your pav888 member dashboard.
• Email: [email protected] (plain text — not a clickable link).

pav888 is committed to resolving all privacy-related enquiries promptly and transparently.