1 Introduction & Scope of This Policy
Pavilion88 ("we", "Platform") is committed to protecting the privacy of every individual who uses our services. This Privacy Policy outlines our practices regarding the collection, use, disclosure, and protection of personal information provided by users ("you") when using the pavilion88 platform.
This policy applies to all users who access the pavilion88 website, use our mobile app, register an account, make financial transactions, or interact with any service we offer. By continuing to use our platform after changes to this Privacy Policy are published, you are deemed to have accepted the updated terms.
We have written this policy in plain language because we believe every player deserves to know exactly what happens to their personal information — not just lengthy, tedious legal clauses.
2 Information We Collect
2.1 Information You Provide Directly
When registering and using the pavilion88 platform, you will provide us with various types of information. We require this information to manage your account, process transactions, and comply with applicable legal requirements.
| Information Category | Sample Data | Primary Purpose |
|---|---|---|
| Identification Information | Full name, MyKad number, date of birth | Identity verification (KYC), legal compliance |
| Contact Information | Phone number, email address | Account communications, transaction notifications |
| Financial Information | Bank account number, bank name | Deposit and withdrawal processing |
| Security Information | Password (encrypted), 2FA data | Account protection |
2.2 Information Collected Automatically
When you browse or use the pavilion88 platform, our systems automatically record certain technical information required to keep the platform running smoothly and securely:
- IP address and geographic location (state/city level only);
- Device type, operating system, and browser version;
- Session data including login and logout times;
- Transaction history and in-platform gaming activity;
- Cookie data to manage login sessions and display preferences.
3 How We Use Your Information
The information we collect is used exclusively for purposes related to the provision and improvement of pavilion88 services. We do not sell, rent, or trade your personal information to third parties for commercial purposes.
Specifically, we use your information to:
- Account Management: To create, verify, and manage your account at pavilion88;
- Transaction Processing: To process deposits, withdrawals, and any financial transactions you make via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and ShopeePay;
- Platform Security: To detect and prevent fraud, unauthorised account access, and suspicious activity;
- KYC & Legal Compliance: To fulfil the identity verification and reporting requirements mandated by the relevant authorities;
- Customer Support: To handle your enquiries, complaints, and support requests via live chat and email;
- Service Communications: To send transaction notifications, security alerts, and important policy updates;
- Platform Improvements: To analyse aggregated usage patterns in order to improve the user experience;
- Promotions (with consent): To inform you of pavilion88 promotional offers and bonuses, where you have consented to receive marketing communications.
4 Information Sharing & Disclosure
Pavilion88 understands that your trust depends on how we manage the information you share. We will only share your personal information in very limited situations and for legitimate reasons.
4.1 Third-Party Service Providers
We work with carefully selected service partners to support platform operations, including licensed payment processors, certified cloud service providers, and identity verification system providers. All partners are bound by strict confidentiality agreements and are only permitted to use your information for specified purposes.
4.2 Legal Requirements
We may be required to disclose certain information when mandated by law or directed by a legitimate authority, including in investigations into financial crime, fraud, or money laundering. Such disclosures are made solely to fulfil our legal obligations.
4.3 What We Will Not Do
- To sell your personal information to advertisers or data brokers;
- Share your information with competing gaming platforms;
- To disclose your gaming history to any party without your consent;
- To use your phone number for SMS marketing without explicit consent.
5 Security & Data Protection
5.1 Security Infrastructure
Pavilion88 invests seriously in digital security infrastructure to protect every piece of information entrusted to us. All data transmitted between your device and pavilion88 servers is protected by 256-bit SSL/TLS encryption — the same standard used by leading banks in Malaysia.
Your password is never stored in plain text — it is stored using a secure one-way hashing algorithm, meaning even pavilion88's internal team cannot read your actual password.
5.2 Access Controls
Access to user personal data within our internal systems is strictly restricted on a need-to-know basis. Only authorised staff who have undergone background checks may access sensitive data, and every instance of access is logged for audit purposes.
5.3 Threat Detection
Our system uses 24/7 real-time monitoring to detect suspicious login activity, unauthorized access attempts, and anomalies in transaction patterns. If we detect any intrusion attempt involving your account, we will notify you immediately and take automatic protective action.
6 Data Retention Period
Pavilion88 retains your personal information only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable law. The following are our general data retention guidelines:
- Active Account Data: Retained for the duration of your active account and for 7 years after account closure for financial compliance purposes;
- Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial reporting legal requirements;
- Security Logs: Retained for 12 months for security incident investigation purposes;
- Support Communication Data: Retained for 2 years following case resolution;
- Session Cookie Data: Automatically deleted when you log out or your session expires.
Once the retention period expires, your data will be securely deleted or anonymised using procedures that ensure it cannot be recovered.
7 Your Rights as a User
As a pavilion88 user, you have clear rights regarding your personal information. We respect these rights and will make it straightforward for you to exercise them without having to go through a complicated process.
Right of Access
You have the right to request a copy of all personal information we hold about you at any time.
Right to Rectification
If any of your information is inaccurate or outdated, you have the right to request an immediate correction.
Right to Erasure
You may request the deletion of your personal data, subject to applicable legal retention obligations.
Right to Object
You have the right to object to the processing of your data for direct marketing purposes at any time.
Right to Data Portability
You may request your data in a structured, machine-readable format for transfer to another platform.
Right to Restriction of Processing
In certain circumstances, you may request that we restrict how we process your data while an issue is being resolved.
8 Privacy Policy Updates
Pavilion88 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or added platform features. Any material changes will be communicated to users via in-platform notifications or email at least 7 days before taking effect.
We encourage you to review this page periodically. The "Updated" date at the top of this page indicates when this Privacy Policy was last modified.