pavalion88 Privacy Policy

pavalion88 ("we", "us", "our", or "the Platform") operates the online gaming and sports betting website accessible at pavalion88.lat. This Privacy Policy governs the collection, use, disclosure, and protection of personal data provided by users ("you", "your") when accessing or using our services, including slots, live dealer casino games, sports betting, crash games, and related features offered to players in Malaysia and internationally permitted jurisdictions.

This policy applies to all pavalion88 products and services, including the website, any mobile-optimised interface, customer support channels, promotional communications, and payment processing activities. It should be read alongside our Terms & Conditions and Responsible Gaming Policy.

We collect personal data that you provide voluntarily and data generated through your use of the Platform. This includes:

Account Registration Data

• Full legal name as on your NRIC or passport
• Date of birth (to verify you are aged 21 or above)
• Email address and contact number
• Residential address (city, state, postcode — e.g. Kuala Lumpur, Petaling Jaya, Johor Bahru, Penang)
• Username and encrypted account password
• Preferred currency (Malaysian Ringgit, MYR)

Identity Verification (KYC) Data

• NRIC number or passport number
• Scanned copies of government-issued identification documents
• Proof of address documents (utility bills, bank statements)
• Selfie or liveness verification images where required by anti-money laundering procedures

Financial Data

• Bank account details required for FPX and DuitNow transactions
• e-Wallet identifiers for Touch 'n Go eWallet, Boost, and GrabPay transactions
• Cryptocurrency wallet addresses (USDT TRC20, Bitcoin) where applicable
• Deposit and withdrawal history, transaction amounts, and timestamps

Technical & Usage Data

• IP address, device type, operating system, and browser version
• Geolocation data (city-level, to support regulatory compliance)
• Session logs including pages visited, games played, bet history, and click-path data
• Cookies and local storage identifiers (see Section 8 on Cookies)

pavalion88 uses your personal data for the following purposes:

• Account Management: To create, maintain, and secure your pavalion88 account, process login requests, and communicate account-related updates.
• Payment Processing: To facilitate deposits and withdrawals via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and cryptocurrency channels.
• Identity Verification (KYC/AML): To comply with anti-money laundering obligations and verify that all players meet the minimum age requirement of 21 years.
• Service Delivery: To operate the gaming platform, personalise your experience, and ensure fair play across all products — slots, live casino, sportsbook, crash games, and more.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance through our 24/7 support channels.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and violations of our Terms & Conditions.
• Legal & Regulatory Compliance: To meet our obligations under applicable laws, including Malaysia's Personal Data Protection Act (PDPA) 2010 and international gaming regulations.
• Marketing & Promotions: To send you information about welcome bonuses, reload offers, and pavalion88 promotions — only if you have opted in to receive such communications.
• Platform Improvement: To analyse usage patterns, conduct A/B testing, and improve the overall performance and usability of the pavalion88 platform.

We process your personal data only where a valid legal basis exists. Depending on the nature of the processing activity, we rely on one or more of the following grounds:

• Contractual Necessity: Processing required to provide you with the services you have signed up for, including account creation, game access, and payment handling.
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML obligations, age verification, and tax reporting requirements.
• Legitimate Interests: Processing carried out in pavalion88's legitimate business interests — such as fraud detection, platform security, and service improvement — provided these interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, and informed consent — such as receiving marketing emails or push notifications. You may withdraw consent at any time without affecting prior processing.

pavalion88 does not sell or rent your personal data to any third party. We may share your data with carefully selected partners and service providers only to the extent necessary to operate our platform:

• Payment Service Providers: FPX, DuitNow, Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, and GrabPay — solely for the purpose of processing your financial transactions.
• Identity Verification Services: Third-party KYC and document verification providers who assist us in meeting our age and identity verification obligations.
• Game Software Providers: Licensed game studios and live casino operators whose products are featured on the pavalion88 platform. These providers receive anonymised session data for technical integration purposes.
• IT Infrastructure & Cloud Services: Hosting providers and cloud infrastructure partners who store and process data on our behalf under strict data processing agreements.
• Regulatory & Legal Authorities: Where required by law, court order, or regulatory instruction, we may disclose data to relevant authorities including Malaysian financial regulators or law enforcement agencies.
• Fraud Prevention Networks: Industry-wide fraud and problem gambling detection services that help us identify and protect against misuse of the platform.

All third-party service providers are contractually bound to handle your data in a manner consistent with this Privacy Policy and applicable data protection law. They may not use your data for their own independent marketing or commercial purposes.

pavalion88 retains your personal data for as long as your account remains active and for a minimum period thereafter as required by applicable law and regulatory obligations. Specifically:

• Active account data is retained for the duration of your account's existence plus a minimum of five (5) years following closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction records and financial history are retained for a minimum of seven (7) years to satisfy tax, audit, and regulatory reporting obligations.
• KYC and identity verification documents are retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Customer support communication records are retained for a minimum of three (3) years from the date of the last interaction.
• Marketing consent records are retained for the duration of your opt-in status plus one (1) year after withdrawal of consent.

Once the applicable retention period expires and there is no further legal basis for retaining your data, pavalion88 will securely delete or anonymise your personal information.

pavalion88 operates as an international online gaming platform. As a result, your personal data may be transferred to, stored in, and processed in countries outside Malaysia. When such transfers occur, we ensure that appropriate safeguards are in place — including contractual clauses and security standards equivalent to those required under the PDPA 2010 — to protect your data regardless of where it is processed.

We will not transfer your data to jurisdictions that do not provide an adequate level of protection without first obtaining your consent or establishing other appropriate transfer mechanisms.

pavalion88 uses cookies and similar technologies to operate the platform effectively. Cookies are small text files placed on your device when you visit the site. We use the following types:

• Essential Cookies: Required for the platform to function. These include session management cookies that keep you logged in and remember your game preferences. You cannot opt out of essential cookies without affecting your ability to use the site.
• Performance & Analytics Cookies: Help us understand how users interact with the pavalion88 platform — which pages are visited most, where users encounter issues, and how to improve the overall experience. Data collected is aggregated and anonymised.
• Preference Cookies: Store your chosen language, interface settings, and notification preferences so you do not have to reset them on every visit.

We do not use cross-site tracking cookies, third-party advertising cookies, or any technology designed to build a behavioural profile of you outside of the pavalion88 platform. You can manage or delete cookies via your browser settings at any time, though doing so may affect some platform functionality.

Under the PDPA 2010 and aligned international data protection principles, you have the following rights with respect to your personal data held by pavalion88:

• Right of Access: You may request a copy of the personal data we hold about you at any time.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that we correct it.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restrict Processing: You may ask us to limit the way we use your data in certain circumstances — for example, while a dispute is being investigated.
• Right to Object: You have the right to object to processing based on legitimate interests, including direct marketing activities.
• Right to Data Portability: Where technically feasible, you may request that we provide your data in a structured, machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact our Data Protection team at the email address shown in the footer of this page. We will respond within 14 business days. We may ask you to verify your identity before processing your request to protect you from unauthorised access to your data.

pavalion88 takes the security of your personal data seriously. We implement a layered security architecture including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encrypted database storage for sensitive fields including passwords, identification numbers, and financial details
• Two-factor authentication (2FA) options for account access
• Regular third-party penetration testing and security audits
• Strict internal access controls — staff only access personal data on a need-to-know basis
• Real-time monitoring for suspicious login attempts and account activity anomalies

Despite these measures, no internet-based platform can guarantee absolute security. In the unlikely event of a data breach that affects your rights and freedoms, we will notify you and relevant authorities as required by law, without undue delay.

pavalion88 is strictly an adult platform. We do not knowingly collect personal data from any person under the age of 21. Our registration process includes mandatory age verification, and we conduct KYC checks to confirm the identity and age of all players. If we discover that personal data has been collected from a person under 21, we will immediately close the account, delete the data, and withhold any associated funds in accordance with our Terms & Conditions.

If you are a parent or guardian and believe your child has created an account on pavalion88, please contact our support team immediately at the email address listed in the footer.

pavalion88 may use your gaming activity data — including session frequency, deposit patterns, and game history — to identify signs of problem gambling and fulfil our responsible gaming obligations. Where our systems flag potential at-risk behaviour, we may reach out to you with information about self-exclusion tools, deposit limit settings, or external support resources.

This use of your data is carried out in your best interests and in compliance with applicable responsible gaming standards. You can review your options at any time on our Responsible Gaming page. pavalion88 is committed to providing a safe, sustainable, and enjoyable gaming environment for all eligible players.

pavalion88 reserves the right to update this Privacy Policy at any time to reflect changes in our operations, legal obligations, or regulatory requirements. When material changes are made, we will notify registered users via the email address on file and display a prominent notice on the platform for a minimum of 30 days prior to the changes taking effect.

The "Last Updated" date at the top of this page will always reflect the most recent revision. Continued use of the pavalion88 platform after the effective date of any changes constitutes your acceptance of the revised policy. We encourage you to review this page periodically to stay informed.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way pavalion88 handles your personal data, please contact our Data Protection team: