Pavi88 Privacy Policy – Member Data Protection for Malaysia

1 Introduction – Who We Are and Why Your Privacy Matters

Pavi88 is an online entertainment platform providing Sports Betting, Live Casino, slots, roulette, lottery and related gaming services to eligible members in Malaysia. As a responsible platform operator, we recognise that member trust is the most valuable asset in our business — and that trust starts with transparent and responsible management of personal data.

When you register on pavi88, make a deposit via Touch 'n Go, GrabPay, DuitNow or FPX, or enjoy Malaysia Super League matches in our Sports Betting section, certain information about you is collected and processed to keep these services running properly. This Privacy Policy explains exactly what information is collected, how it is used, who it may be shared with and how it is protected.

Pavi88 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and all other applicable regulations. We take our legal compliance obligations seriously and have implemented internal policies and procedures to ensure that the handling of members' personal data meets or exceeds the requirements set out by law.

2 Personal Data We Collect

Pavi88 collects personal data from members through several channels – directly during registration and platform use, automatically through tracking technologies, and in some cases from legitimate third-party sources. Below is a complete table of the data categories we collect:

3 How pavi88 Uses Your Personal Data

Personal data collected by pavi88 is used solely for legitimate, clearly stated purposes. We do not use your data for any other purpose without first obtaining your consent. The following are the primary purposes for which data is used at pavi88:

• Platform Service Provision: Allows you to log in, access slots, baccarat, roulette, Malaysia Super League and EPL Sports Betting, and all other features on the pavi88 platform.
• Financial Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX, and handling withdrawals to your registered Malaysian bank account or e-wallet.
• Identity Verification (KYC): Meeting legal compliance requirements including age verification (21 and above) and anti-money laundering (AML) obligations.
• Account Security & Fraud Prevention: Detecting and preventing unauthorised access to accounts, identifying suspicious activity patterns and safeguarding member funds.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance to pavi88 members via 24/7 Live Chat.
• Service Communications: Sending important notifications about changes to terms, security updates, transaction status and relevant account information.
• Platform Improvement: Analysing usage patterns in aggregate (not at an individual level) to improve the design, performance and overall experience of the pavi88 platform.
• Marketing (With Consent): Sending information about pavi88 promotions, bonuses and special offers to members who have given their consent to receive marketing communications.

4 Data Sharing & Disclosure

Pavi88 does not sell, rent or disclose member personal data to third parties for marketing purposes. However, there are limited situations where data may be shared with specific parties for legitimate reasons:

• Payment Service Providers: Relevant transaction information is shared with payment gateway providers (Touch 'n Go, GrabPay, DuitNow, FPX providers, etc.) to process deposits and withdrawals. These providers are governed by their own privacy policies and strict security standards.
• Game Software Providers: The minimum technical data necessary is shared with game providers such as Evolution Gaming, Pragmatic Play and PG Soft to ensure proper game integration and to resolve any technical disputes.
• Legal Authorities: pavi88 is required to disclose data to the relevant Malaysian authorities when compelled to do so by a court order, applicable law, or a legitimate regulatory authority. This includes reports required under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• Auditors & Professional Consultants: In the context of compliance reviews, pavi88's financial auditors or legal advisors may require access to certain data. All such parties are bound by strict confidentiality agreements.

In all data-sharing situations described above, pavi88 ensures that only the minimum data necessary for the specific purpose is shared, and that the receiving parties are subject to adequate data protection obligations.

5 Data Security at pavi88

Pavi88 continuously invests in security infrastructure to protect members' personal data from unauthorised access, loss, alteration or improper disclosure. Key security measures we have implemented include:

• 256-bit SSL Encryption: All communications between your device and pavi88 servers are encrypted using 256-bit Transport Layer Security (TLS) — the same standard adopted by Malaysia's leading banking institutions, including Maybank and CIMB.
• Data-at-Rest Encryption: Sensitive data such as identity information and financial details stored in pavi88's databases is encrypted using modern encryption algorithms.
• Strict Access Controls: Access to member data within pavi88's internal systems is governed by the principle of least privilege — only staff who genuinely require access to that data to perform their duties are permitted to do so.
• 24/7 Security Monitoring: An automated monitoring system operates around the clock to detect any suspicious activity or unauthorised access attempts to pavi88's infrastructure.
• Vulnerability Management: pavi88 conducts regular penetration testing and vulnerability assessments by independent security experts to identify and address any weaknesses in our systems.
• Two-Factor Authentication: Members are encouraged to enable two-factor authentication (2FA) on their pavi88 account as an additional layer of security.

6 Cookies & Tracking Technologies

The pavi88 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security and understand how the platform is used overall. The following types of cookies are in use:

• Essential Cookies (Required): Required for core platform functionality – including login verification, session management, and security. These cookies cannot be disabled without affecting your ability to use the pavi88 platform.
• Performance Cookies: Collecting aggregated (non-personal) information about how pavi88 pages are used – which pages receive the most visits, platform response times and any technical errors that may occur. This data is used to improve platform performance.
• Functional Cookies: Saves your preferences such as interface language and display settings so you do not have to reconfigure them each time you log in to pavi88.
• Marketing Cookies (With Consent): Allows pavi88 to display relevant promotional information to you based on your platform activity. These cookies are only activated with your consent.

You can manage your cookie settings through your web browser settings at any time. However, disabling essential cookies may affect certain functions of the pavi88 platform. For more information on managing cookies in popular browsers, refer to your browser's help documentation (Chrome, Firefox, Safari or Edge).

7 International Data Transfers

In the context of pavi88's operations and partnerships with international service providers such as Evolution Gaming and Pragmatic Play, some technical data may be processed on servers located outside Malaysia. In such cases, pavi88 ensures that:

• Any cross-border data transfers are carried out in accordance with applicable legal requirements and using recognised data protection mechanisms.
• Overseas service providers that receive pavi88 member data are bound by data processing agreements that hold them to data protection standards equivalent to or higher than those required under Malaysian law.
• Sensitive personal identity and financial data is prioritised for storage within infrastructure located in Malaysia or in regions with adequate data protection agreements in place.

Pavi88 periodically reviews its data transfer arrangements to ensure ongoing compliance with legal requirements and industry best practices.

8 Your Rights as a pavi88 Member

Under Malaysia's Personal Data Protection Act 2010 and pavi88's own policies, you have the following rights regarding your personal data:

To exercise any of the above rights, contact the pavi88 support team via 24/7 Live Chat or email support@pavi88.best. We will verify your identity before processing any data-related request to protect the security of your account.

9 Protection of Children's Data

The pavi88 platform is strictly for individuals aged 21 and above. pavi88 does not knowingly collect or process personal data from individuals under the age of 21.

Should pavi88 discover that personal data belonging to an underage individual has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account. If you believe a minor or anyone under 21 has registered on pavi88, please contact us immediately at support@pavi88.best so that action can be taken without delay.

10 Data Retention Period

Pavi88 retains member personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable Malaysian law. pavi88's general data retention guidelines are as follows:

• Active Account Records: For as long as your pavi88 account remains active, plus a period of 5 years from the date of final account closure.
• Financial Transaction Records: A minimum of 7 years from the transaction date, in line with Malaysian accounting and anti-money laundering legal requirements.
• Support Communication Logs: 3 years from the date of last communication, for reference and dispute resolution purposes.
• Technical Data & Access Logs: 12 months for security and fraud detection purposes, after which it is fully deleted or anonymised.
• Marketing Data (With Consent): Until consent is withdrawn by the member.

Once the relevant retention period has expired, personal data will be securely deleted or permanently anonymised so that it can no longer be linked to any specific individual.

11 Links to Other Platforms

The pavi88 platform may contain links to third-party sites or services such as payment providers (Touch 'n Go, GrabPay, DuitNow, FPX) or game providers. Once you click these links and leave the pavi88 platform, this Privacy Policy no longer applies.

Pavi88 is not responsible for the privacy practices or content of third-party platforms. We encourage you to read the privacy policy of any third-party platform you visit, especially before providing them with any personal information. The presence of links to third-party platforms on pavi88 does not imply that we endorse or guarantee their privacy practices.

12 Privacy Policy Amendments

Pavi88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our platform practices, new legal requirements, or improvements in how we protect your data. Any changes will take effect once the updated version is published on this page.

For material amendments – changes that significantly affect how we use your personal data – pavi88 will endeavour to provide advance notice via in-platform notifications or email to your registered address before the changes take effect. The "Last Updated" date at the top of this document will always reflect the latest version of the policy in force.

Continued use of the pavi88 platform following any amendments to this Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you may close your pavi88 account by contacting our support team.

13 Contact Us About Your Privacy

If you have any questions, concerns or complaints about how pavi88 handles your personal data, or if you wish to exercise any of your privacy rights, please reach out to us through the following channels:

Our Malay-speaking pavi88 support team is ready to assist you and will ensure that every privacy-related enquiry is handled with the seriousness and professionalism it deserves.