Privacy Policy PAV88 – Our Commitment to Protecting Your Data

PAV88 is the data controller responsible for processing the personal data of its platform users. We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and take reasonable and appropriate measures to ensure that users' personal data is handled lawfully and in line with sound privacy principles.

The primary purposes for which PAV88 collects data are to:

• Providing, operating, and continuously improving the PAV88 platform.
• Processing financial transactions, including deposits and withdrawals, via local Malaysian payment methods.
• Complying with applicable legal and regulatory obligations.
• Protecting the security of the platform and all its users.
• Providing effective customer support in both Bahasa Malaysia and English.

PAV88 does not collect more data than is necessary for the purposes outlined above. We adhere to the principle of data minimisation across all our data management practices.

PAV88 collects various types of data depending on how you interact with our platform. The table below summarises the main categories of data collected:

PAV88 collects data through three main channels: (1) information you provide directly during registration or platform use; (2) data generated automatically as you use the platform, such as technical and gameplay data; and (3) data from trusted third-party sources for identity verification purposes, where required.

PAV88 uses your personal data only for legitimate and reasonable purposes. Below is a detailed explanation of each purpose for which your data is used:

• Account Management: Identity and contact data is used to create and manage your PAV88 account, and to process registration, account verification, and password recovery requests.
• Transaction Processing: Financial data is used to process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as to handle withdrawals to the same payment methods. PAV88 does not store credit card numbers or bank account details directly – all transactions are processed through registered payment providers.
• Identity Verification (KYC): Identity data is used to fulfil Know Your Customer (KYC) requirements and comply with applicable anti-money laundering (AML) laws.
• Platform Security: Technical data and game history are used to detect suspicious activity, prevent fraud, protect user accounts from unauthorised access, and ensure game integrity.
• Customer Support: Contact data and communication data are used to help you resolve any issues or enquiries via live chat and email, in both Bahasa Melayu and English.
• Responsible Gaming: Gaming data is used to monitor play patterns and identify users who may benefit from responsible gaming support, in line with PAV88's commitment to player wellbeing.
• Legal Compliance: Personal data may be used to fulfil PAV88's legal obligations under applicable Malaysian law.
• Marketing Communications (with consent): If you have given your consent, your contact details may be used to send you relevant PAV88 promotional information. You may withdraw this consent at any time from your account settings.

PAV88 does not sell, rent, or trade your personal data. However, in certain circumstances, your data may be shared with the following parties:

• Payment Service Providers: Financial data is shared only with registered payment providers — such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX-supported banks (Maybank2u, CIMB Clicks, and others) — solely for the purpose of processing your transactions.
• Technical Service Providers: Technology partners that assist PAV88 in operating the platform — such as cloud service providers and fraud detection systems — may have limited access to data necessary for their functions. All such partners are bound by strict data confidentiality agreements.
• Game Providers: Minimum necessary information may be shared with third-party game providers to allow you to access and play their games on the PAV88 platform.
• Authority: PAV88 will disclose personal data to Malaysian authorities when required by law, court order, or valid legal process.
• In the Case of a Business Transaction: If PAV88 undergoes a merger, acquisition, or asset sale, user data may be transferred to the acquiring party, subject to an equivalent Privacy Policy.

PAV88 implements comprehensive technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Key security measures we employ include:

• SSL 256-bit Encryption: All communications between your browser and PAV88 servers are secured using TLS (Transport Layer Security) protocol with 256-bit encryption.
• Stored Data Encryption: Sensitive data stored in PAV88's databases is encrypted using AES-256, the encryption standard adopted by leading government and financial institutions.
• Access Controls: Only PAV88 staff with a legitimate business need are granted access to users' personal data. All access is logged and monitored.
• Two-Factor Authentication (2FA): PAV88 offers and recommends enabling 2FA on all user accounts for an added layer of protection.
• 24/7 Security Monitoring: PAV88's real-time threat detection system operates around the clock to identify and respond to any suspicious activity.
• Regular Security Audits: PAV88 conducts regular security assessments and penetration testing to identify and address any vulnerabilities before they can be exploited.

While PAV88 takes all reasonable steps to protect your data, no security system can be guaranteed to be 100% secure. We encourage you to take proactive measures as well — such as using a strong password, not sharing your login credentials, and notifying us immediately if you suspect any unauthorised activity on your account.

PAV88 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable Malaysian law. Retention periods vary by data category:

• Active Account Data: For as long as your PAV88 account remains active. This data is retained to ensure you have full access to the platform.
• Financial Transaction Data: A minimum of seven years from the date of transaction, in line with Malaysian financial and anti-money laundering legal requirements.
• Identity Data (KYC): For five years after account termination, in line with regulatory compliance requirements.
• Game History: Three years from the date of gameplay, retained for dispute resolution and responsible gaming purposes.
• Support Communication Logs: Two years from the date of communication, for support history reference and service improvement purposes.
• Technical Data & Logs: 90 days from the date of generation, unless required for an ongoing security investigation.

Once the retention period has ended and there is no legal requirement to keep the data, PAV88 will securely delete or anonymise your data using industry-standard procedures.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by PAV88:

To exercise any of the above rights, contact the PAV88 Privacy team by email at support@pav88.asia with the subject line "PDPA Privacy Rights Request", or reach us via live chat. Please include your full name and PAV88 account number to help expedite the process.

The PAV88 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit the PAV88 platform.

PAV88 uses three categories of cookies:

• Essential Cookies: These cookies are essential for the basic operation of the PAV88 platform — including login session management, CSRF security, and language preferences. Without them, the platform cannot function properly. Essential cookies cannot be disabled.
• Functional Cookies: These cookies remember your preferences and settings – such as your favourite roulette or baccarat table, usual chip size, and display settings. Functional cookies enhance your gaming experience without requiring you to reconfigure your preferences each time you log in.
• Analytics Cookies: These cookies collect aggregated information about how users interact with the PAV88 platform – such as the most frequently visited pages and time spent in each section. This data helps the PAV88 team understand user needs and make continuous improvements. Analytics cookies do not identify users individually.

You can manage your cookie settings through the PAV88 account panel or your browser settings. Please note that disabling certain cookies may affect the functionality of the PAV88 platform. PAV88 does not use third-party cookies for advertising or cross-site tracking.

The PAV88 platform may contain links to third-party websites or services in certain contexts. PAV88's Privacy Policy does not apply to any such third-party websites or services.

PAV88 is not responsible for the privacy practices or content of any third-party websites. We encourage you to read the Privacy Policy of each website you visit separately.

The PAV88 platform is strictly for users aged 18 and above. PAV88 does not knowingly collect or process personal data from individuals under the age of 18.

If PAV88 discovers that personal data belonging to a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered a PAV88 account, please notify our support team immediately via live chat or email.

PAV88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform improvements. When significant changes are made, PAV88 will:

• Updating the "Last Updated" date at the top of this page.
• Sending notifications to registered users via email or in-platform alerts for significant account changes.
• In cases of material changes that require renewed consent, PAV88 will seek your explicit agreement before the changes take effect for data already held.

It is your responsibility to review this Privacy Policy page periodically. Your continued use of the PAV88 platform after any changes to the Privacy Policy take effect constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding PAV88's Privacy Policy or the processing of your personal data, we encourage you to reach out to us. PAV88's privacy team is available to assist you in both Bahasa Melayu and English.

How to reach the PAV88 privacy team:

• Email: support@pav88.asia – please include the subject line "Privacy Policy Enquiry" for faster processing.
• Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the PAV88 platform.

PAV88 aims to respond to all privacy-related enquiries within three business days. For formal data access requests, please allow up to 21 business days as provided under Malaysia's PDPA.