Pavilion888 Privacy Policy – How We Protect the Personal Data of Malaysian Members

Pavilion888 ("Platform", "We") is fully committed to protecting the privacy and personal data of all members who use our services. This Privacy Policy explains in detail how pavilion888 collects, stores, uses, shares and safeguards your personal information when you access or use the pavilion888 platform available at pavilion888.click.

This document forms part of the overall agreement between you and pavilion888, and should be read together with Terms & Conditions and Responsible Gaming Policy us. By registering an account or using any pavilion888 service, you consent to the collection and use of your personal data as described in this document.

Pavilion888 fully complies with Malaysia's Personal Data Protection Act (PDPA) 2010 — the legislation governing how organisations in Malaysia may collect, store, use and disclose individuals' personal data. We take this responsibility seriously and continuously review our data management practices to ensure they remain aligned with the latest legal and technological developments.

Pavilion888 collects personal data in two main categories — data you provide directly to us, and data collected automatically through your use of our platform.

Pavilion888 collects your personal data through several channels. Understanding these collection methods helps you make more informed decisions about the information you share with us.

Pavilion888 uses collected personal data solely for legitimate, clearly stated purposes. We do not use your data for any other purpose without first obtaining your additional consent.

• Creating and managing your pavilion888 account, including identity verification and account security
• Processing your deposits and withdrawals in Malaysian Ringgit (RM) via supported Malaysian payment methods
• Conducting anti-money laundering (AML) and counter-terrorism financing (CFT) checks as required by Malaysian law
• Sending important account-related communications such as deposit confirmations, withdrawal notices, and security alerts
• Contacting you with promotional offers, bonuses, and the latest pavilion888 service updates — only if you have consented to receive marketing communications
• Detecting and preventing fraud, collusion, bot usage and other illicit activity on the pavilion888 platform
• Complying with all applicable legal requirements, regulations and court orders
• Analysing usage patterns to improve the design, performance, and overall user experience of the pavilion888 platform
• Providing effective customer support and resolving any complaints or disputes
• Implementing responsible gambling programmes including deposit limit monitoring and betting pattern tracking

Pavilion888 does not sell, rent or transfer members' personal data to third parties for their own marketing purposes. However, there are specific circumstances in which we may need to share your personal data with carefully selected parties:

Beyond the service providers mentioned above, pavilion888 may disclose your personal data to third parties only in the following circumstances:

• Legal compliance: When required by a court order, directions from Malaysian authorities (including the Royal Malaysia Police, Bank Negara Malaysia, and the Companies Commission of Malaysia), or any other applicable legal obligation;
• Fraud prevention: To fraud prevention agencies or other financial institutions where there is substantive evidence of fraud or money laundering involving your pavilion888 account;
• Group sharing: To companies within the pavilion888 business group for internal operational and risk management purposes, subject to the same privacy protections;
• Business transfers: Should pavilion888 undergo restructuring, a merger, or an acquisition, user data may be transferred to the successor entity, which will be bound by this privacy policy or an equivalent one.

In all instances of data sharing, pavilion888 ensures that only the minimum necessary data is shared and that recipients are bound by appropriate confidentiality and data protection obligations.

Pavilion888 stores members' personal data on secure servers with multi-layered redundancy to ensure continuous availability and protection against data loss. All our data storage facilities are equipped with strict physical and digital security controls.

The technical security measures we use to protect your personal data include:

• Transit encryption: All data transmitted between your device and pavilion888's servers is protected by TLS 1.3 with a 256-bit SSL certificate;
• Encryption at rest: Sensitive data such as financial information and identification documents is stored in encrypted form in our database;
• Multi-layered access controls: Only authorised pavilion888 staff who require data access to carry out their permitted duties are allowed to access members' personal data;
• Continuous monitoring: pavilion888's information security systems are monitored around the clock to detect any unauthorised access or suspicious activity;
• Regular security audits: We conduct regular security assessments and penetration testing to identify and address vulnerabilities before they can be exploited.

Regarding data retention, pavilion888 retains members' personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required under Malaysian law. For closed accounts, we typically retain transaction and identity records for 7 years to fulfil anti-money laundering and applicable tax legal requirements, after which the data will be permanently deleted or anonymised.

Pavilion888 uses cookies and similar tracking technologies to keep the platform running properly, improve the user experience, and understand how members interact with our platform. Cookies are small text files stored on your device when you visit pavilion888.

The types of cookies used by pavilion888 are as follows:

• Strictly Necessary Cookies: Required for the pavilion888 platform to function — including login session cookies, security cookies, and cookies that store your language preferences. These cookies cannot be disabled without affecting the platform's core functionality;
• Performance Cookies: Helping pavilion888 understand which pages are visited and where users encounter issues — enabling us to continually improve the platform experience. This data is collected in aggregate and does not identify you individually;
• Functionality Cookies: Saving your preferences such as display settings and favourite game selections so you don't have to reconfigure them every time you log in to pavilion888;
• Analytics Cookies: Used to analyse overall traffic patterns and platform usage on pavilion888, helping us understand which games are most popular and which areas need improvement.

You can manage your cookie settings through your web browser. However, if you disable essential cookies, the functionality of the pavilion888 platform may be affected and you may be unable to log in or complete transactions correctly. For guidance on managing cookies in your browser, please refer to your browser's help documentation.

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding the personal data we hold about you. Pavilion888 respects and facilitates the exercise of all these rights:

To submit any request relating to the rights above, please contact the pavilion888 data protection team by email at support@pavilion888.click by clearly stating your request along with your pavilion888 account number for identity verification. We will respond to every request within 14 days work.

Pavilion888 maintains a strict zero-tolerance policy against the use of the platform by underage individuals. The pavilion888 platform is intended for individuals aged 18 years and above only, in line with Malaysian law and industry standards.

Parents or guardians who suspect that a minor in their care has registered a pavilion888 account are urged to contact our support team immediately via live chat or email at support@pavilion888.click. We will investigate the matter promptly and take appropriate action, including account closure and the return of any related deposits. Preventing underage gambling is pavilion888's highest priority and forms part of our commitment to responsible gaming.

Pavilion888 reserves the right to amend and update this Privacy Policy from time to time to reflect changes in our data management practices, new legal requirements, or platform service improvements. All amendments take effect upon being published on this page with an updated "Last Updated" date.

• For significant amendments that affect how we collect or use your personal data, pavilion888 will notify you via your registered email address at least 14 days before changes take effect;
• For minor amendments such as language corrections or clarifications that do not alter the substance of the policy, an email notification may not be sent, but the updated date will be revised;
• Continued use of the pavilion888 platform after the effective date of any amendments constitutes acceptance of the revised policy;
• If you do not agree with the amendments made, you have the right to close your account before the changes take effect — please contact our customer support team for assistance.

We encourage you to review this Privacy Policy page periodically so you remain informed about how pavilion888 protects your personal information.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how pavilion888 handles your personal data, please do not hesitate to reach out to us through the following channels:

• Data Protection Email: support@pavilion888.click — state "Privacy Enquiry" in your email subject line;
• Live Chat: Available 24 hours a day, 7 days a week within the pavilion888 platform — the fastest way to get a response;
• WhatsApp: The number is available under the Contact Us section on the pavilion888 platform.

Pavilion888 is committed to responding to all privacy-related enquiries within 5 business days. If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (PDPA) under the jurisdiction of PDPA 2010.