Pavillion88 Privacy Policy — Data Protection & Privacy for Malaysian Casino Players

Privacy at pavillion88 is more than a line on a webpage — it is a genuine responsibility we take seriously. When you register an account, make a deposit via Touch 'n Go eWallet or DuitNow, or play at our live casino tables, you are entrusting us with your personal data. We do not take that trust lightly. We know Malaysian players want assurance that their information — from phone numbers to transaction details — is stored securely and never misused by any party. Pavillion88 operates in accordance with the principles of Malaysia's Personal Data Protection Act (PDPA) and international best practices in data security.

Pavillion88 collects only the data that is genuinely necessary to deliver the best possible service to you. We do not engage in excessive data collection or gather information that has no direct relevance to the operation of our platform.

• Device information — device type, operating system, phone model, screen resolution
• Browser information — browser type, version, language settings
• Platform usage data — pages visited, games played, session duration, clicks and interactions
• IP address — used for geographic verification and fraud detection
• Cookie data — to store user preferences and login sessions (see Section 5)

For certain withdrawal processes or where required by standard security procedures, pavillion88 may request identity verification (KYC) documents, including:

• Front and back copy of your Malaysian MyKad
• Screenshot or statement from an e-wallet (Touch 'n Go, GrabPay, DuitNow) or bank statement
• In certain cases, proof of address such as a utility bill or bank statement dated within the last 3 months

Pavillion88 does not collect data for purposes unrelated to the operation of our platform. Every category of data we collect has a clear and legitimate purpose. Below are the key reasons we need your data:

Data security at pavillion88 is not an add-on feature — it is central to how we build and operate our platform. We invest seriously in security infrastructure to ensure your personal and financial information remains protected at all times.

• All communications between your browser or app and pavillion88's servers are protected with 256-bit SSL/TLS encryption — the same standard used by Malaysia's leading banks, including Maybank and CIMB.
• Account passwords are stored in cryptographic hash (bcrypt) — meaning even pavillion88 staff cannot view your actual password.
• Sensitive data such as identification card numbers and financial information is stored in encrypted form using AES-256 encryption within our databases.

• Access to user data at pavillion88 is restricted to staff with a legitimate business need, based on the principle of least privilege access.
• All staff with access to sensitive data undergo background checks and regular data security training.
• Access logs to systems containing user data are continuously monitored to detect any unusual activity.

• Pavillion88's security systems are monitored 24/7 by a dedicated cybersecurity team to detect and respond to any threats in real time.
• Regular penetration testing is conducted by independent third parties to identify and patch any system vulnerabilities before they can be exploited.

Pavillion88 does not sell, rent, or transfer your personal data to advertisers, data brokers, or any third party for marketing purposes. However, there are limited situations where data sharing is necessary for the operation of our platform:

Pavillion88 works with trusted service providers to operate our platform. Data shared with these parties is limited strictly to what is necessary for them to carry out their functions:

• Payment processors — Transaction data is shared with Malaysian payment service providers (such as FPX and DuitNow platforms) solely for the purpose of processing your deposits and withdrawals. These providers are bound by their own privacy and security policies.
• Game providers — Evolution Gaming, Pragmatic Play Live, and other providers receive only the minimum session data required to run live casino games. The data shared does not include your financial information or full identity.
• Identity verification services — During the KYC process, verification documents may be reviewed by accredited KYC service providers who are bound by strict confidentiality agreements with pavillion88.
• Analytics services — Anonymised platform usage data (containing no personally identifiable information) is used to understand usage patterns and improve the pavillion88 platform.

• Pavillion88 may disclose user data if required by applicable Malaysian law, a valid court order, or a request from a competent authority.
• In such circumstances, we will disclose only the minimum data required and will notify you of the disclosure where permitted by law.

Like most modern websites, pavillion88 uses cookies and similar tracking technologies to enhance your experience on our platform. These allow us to recognise your login session, save your preferences, and ensure the platform functions correctly on your device.

• Session Cookies — Required to keep you logged in during your gaming session. This cookie is automatically deleted when you log out or close your browser.
• Preference Cookies — Saves your preferences such as language, last bet limit, and display settings for a more personalised experience.
• Security Cookies — Used to verify user identity, prevent cross-site request forgery (CSRF), and detect suspicious login attempts.
• Analytics Cookies — Anonymised usage data to help us understand how players interact with the pavillion88 platform and identify areas for improvement.

You can manage and delete cookies through your browser settings (Chrome, Safari, or any other browser). Please note, however, that disabling certain cookies — especially session cookies — may affect the functionality of the pavillion88 platform and prevent you from logging in or playing without interruption.

Pavillion88 does not retain your data indefinitely. We have a clear data retention policy based on operational needs and applicable legal requirements.

• Active account data — Retained for as long as your account remains active at pavillion88 and for a period of 5 years following account closure, in line with financial compliance requirements.
• Transaction history — Retained for a minimum of 7 years in accordance with applicable Malaysian accounting and anti-money laundering legislation.
• KYC Documents — Retained for 5 years after verification is complete or the account is closed, whichever is later, in accordance with compliance requirements.
• Session and usage logs — Retained for 12 months, then anonymised or deleted.
• Customer support communication data — Retained for 2 years from the date of last interaction.

You may request the deletion of your personal data by contacting the pavillion88 support team. Please note that some data may not be fully deletable due to legal or compliance requirements. In such cases, we will inform you of which data cannot be deleted and the reasons why.

As a pavillion88 platform user and an individual protected under Malaysia's Personal Data Protection Act (PDPA), you have several rights regarding your personal data. pavillion88 respects these rights and is committed to making them easy for you to exercise.

To exercise any of the rights above, please contact the pavillion88 support team by email at support@pavillion88.click. We will respond to your request within 14 business days.

Pavillion88 is an online casino platform exclusively for users aged 18 years and above. We do not knowingly collect, use, or store any personal data from individuals under the age of 18.

• The pavillion88 registration process requires date of birth verification, and users must confirm that they are 18 years of age or older.
• Should pavillion88 discover that data belonging to a minor has been collected inadvertently, that data will be deleted immediately and the associated account will be terminated.
• If you are a parent or guardian and believe your underage child has registered an account at pavillion88, please contact us immediately at support@pavillion88.click so we can take prompt action.

Pavillion88 reserves the right to update this Privacy Policy from time to time to reflect changes in our operations, the technologies we use, or applicable legal requirements. We are committed to notifying you of any material changes.

• When material changes are made to this Privacy Policy, you will be notified by email to the address registered in your account at least 7 days before the changes take effect.
• A notice of any changes will also be displayed on the pavillion88 platform homepage for a minimum of 14 days.
• The "Last Updated" date at the top of this document always reflects the date of the most recent version of this Privacy Policy.
• Continued use of the pavillion88 platform after changes take effect constitutes your acceptance of and agreement to the updated policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or how pavillion88 handles your personal data, we're here to help.