Privacy Policy

Effective Date: 1 January 2026

1. Introduction

SECTION 1.1 – 1.4

1.1   PVL88 is an online gambling platform offering sports betting, live casino, slot games, and related entertainment services to eligible players. In the course of operating the Platform, PVL88 processes personal data belonging to its registered users and, to a limited extent, visitors to its website.

1.2   PVL88 is committed to handling personal data responsibly, transparently, and in accordance with applicable international data protection principles. We recognise that our Malaysian players — whether accessing PVL88 from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or elsewhere — have a legitimate expectation of privacy and data security.

1.3   This Privacy Policy should be read in conjunction with PVL88's Terms & Conditions, which contain additional provisions relevant to account management and data consent.

1.4   This policy is written in English. In the event of any conflict between an English version and a translated version, the English version shall prevail.

2. Definitions

SECTION 2.1

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person ("Data Subject").
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
• "Data Controller" means PVL88, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party that processes personal data on behalf of PVL88 under a contractual arrangement.
• "KYC" means Know Your Customer — the process of verifying a player's identity and age prior to processing withdrawals.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data.
• "Cookie" means a small text file placed on a user's device by a website to store session or preference information.

3. Personal Data We Collect

SECTION 3.1 – 3.3

3.1   Registration and Account Data: When you register an account on PVL88, we collect your full name, date of birth, email address, chosen username, and contact telephone number. This information is necessary to create and maintain your account.

3.2   Identity Verification (KYC) Data: Prior to processing any withdrawal, we collect copies of government-issued identification documents. For Malaysian players, this typically includes a Malaysian IC (MyKad), driver's licence, or passport. We also collect proof of address documents such as utility bills or bank statements.

3.3   The following table summarises the categories of personal data we collect and the primary purpose of each:

4. How We Collect Personal Data

SECTION 4.1 – 4.4

4.1   Directly from you: The majority of the personal data we hold is provided by you during registration, account verification, deposit and withdrawal transactions, and communications with our support team.

4.2   Automatically during Platform use: When you access PVL88, our systems automatically collect technical data including your IP address, device type, browser version, and session activity logs. This data is collected through server logs and cookies.

4.3   From payment processors: When you make a deposit or withdrawal via Touch 'n Go eWallet, GrabPay, Boost, DuitNow, FPX, or cryptocurrency channels, our payment processor partners provide us with transaction reference data necessary to reconcile payments against your account.

4.4   From third-party verification services: In certain circumstances, PVL88 may use third-party identity verification services to assist with KYC compliance. These services may cross-reference your submitted documents against publicly available records.

5. Data Processing & Use

SECTION 5.1 – 5.7

5.1   PVL88 processes personal data for the following specific purposes:

• Account creation and management: To register, maintain, and administer your PVL88 player account;
• Identity and age verification: To verify that you are at least 21 years of age and to confirm your identity as required by our KYC obligations;
• Payment processing: To process deposits and withdrawals in MYR and cryptocurrency, and to detect and prevent fraudulent payment activity;
• Anti-money laundering (AML) compliance: To monitor transactions for patterns consistent with money laundering or other financial crimes, as required under our international licensing obligations;
• Customer support: To respond to support queries, resolve disputes, and maintain records of player communications;
• Platform security: To detect, investigate, and prevent fraud, cheating, collusion, and technical abuse of the Platform;
• Responsible gambling monitoring: To identify patterns of gambling behaviour that may indicate harm and to enforce player-requested limits and exclusions;
• Service improvement: To analyse aggregate platform usage data for the purposes of improving our games, interface, and betting markets;
• Marketing communications: To send promotional offers and updates to players who have provided explicit consent to receive such communications.

5.2   PVL88 does not use personal data for automated decision-making that produces significant legal effects on players, with the exception of fraud detection systems — which are subject to human review in all cases where an account action is taken.

6. Legal Basis for Processing

SECTION 6.1

PVL88 processes personal data on the following legal bases:

• Contractual necessity: Processing required to create and maintain your account, process payments, and deliver the gambling services you have requested;
• Legal obligation: Processing required to meet our KYC, AML, and regulatory compliance obligations under our international operating licence;
• Legitimate interests: Processing conducted for fraud prevention, platform security, and service improvement purposes, where these interests are not overridden by your fundamental rights;
• Consent: Processing for marketing communications and optional analytics, where you have provided clear and explicit consent and retain the right to withdraw it at any time.

7. Data Sharing & Disclosure

SECTION 7.1 – 7.5

7.1   PVL88 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes under any circumstances.

7.2   We may share personal data with the following categories of third-party recipients only to the extent necessary for the stated purpose:

• Payment processors: Including the operators of Touch 'n Go eWallet, GrabPay, Boost, DuitNow, FPX, and blockchain network validators for cryptocurrency transactions — solely for the purpose of processing your deposits and withdrawals;
• KYC and identity verification service providers: To assist with document verification and age confirmation;
• IT infrastructure and cloud service providers: Who host and maintain the Platform's technical infrastructure under data processing agreements that restrict their use of your data;
• Fraud prevention and AML compliance services: To meet our obligations under our international licence;
• Regulatory and law enforcement authorities: Where required to do so by applicable law, court order, or regulatory requirement.

7.3   All third parties who receive personal data from PVL88 are required to process that data solely for the purposes for which it was shared and in accordance with data protection standards consistent with this policy.

7.4   PVL88 does not transfer personal data to third parties located in jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards.

7.5   In the event of a merger, acquisition, or restructuring of PVL88's business, personal data may be transferred to a successor entity, subject to equivalent privacy protections continuing to apply.

8. Data Retention

SECTION 8.1 – 8.3

8.1   PVL88 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to applicable legal and regulatory retention requirements.

8.2   As a general principle, account data and transaction records are retained for a minimum period following account closure as required by our licensing obligations and applicable anti-money laundering regulations. KYC documents are retained for the period required under our regulatory framework.

8.3   Where a player requests erasure of their data and no overriding legal obligation requires retention, PVL88 will action the erasure request within 30 calendar days of verification. Data held for AML or fraud investigation purposes may be retained for longer periods where legally required.

9. Cookies & Tracking Technologies

SECTION 9.1 – 9.4

9.1   PVL88 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit pvl88.cam.

9.2   We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function correctly, including authentication session management. These cannot be disabled.
• Functional Cookies: Store your preferences such as language settings and display options to personalise your experience.
• Analytics Cookies: Used to collect aggregate data about how players use the Platform, enabling us to improve the user experience. These are only placed with your consent.
• Security Cookies: Used to detect and prevent fraudulent activity and unauthorised account access.

9.3   You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair the functionality of the Platform.

9.4   PVL88 does not use third-party advertising cookies or tracking pixels that share your data with advertising networks.

10. Data Security

SECTION 10.1 – 10.4

10.1   PVL88 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption for all data in transit, encrypted storage for sensitive personal data at rest, and access controls limiting internal data access to authorised personnel only.

10.2   Our systems are monitored continuously for suspicious activity. Anomalous login attempts, unusual transaction patterns, and potential fraud indicators trigger automated alerts and human review.

10.3   In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, PVL88 will notify affected individuals without undue delay and in accordance with our regulatory obligations.

10.4   Players are responsible for maintaining the security of their own account credentials. PVL88 will never ask for your password via email, live chat, or any other channel. If you believe your account has been compromised, contact support immediately.

11. Your Data Rights

SECTION 11.1 – 11.3

11.1   Subject to applicable law, you have the following rights with respect to your personal data held by PVL88:

• Right of Access: You may request a copy of the personal data PVL88 holds about you;
• Right to Rectification: You may request correction of inaccurate or incomplete data;
• Right to Erasure: You may request deletion of your data, subject to our legal retention obligations;
• Right to Restriction of Processing: You may request that we limit how we use your data in certain circumstances;
• Right to Data Portability: You may request your data in a structured, machine-readable format where technically feasible;
• Right to Object: You may object to processing based on legitimate interests, including direct marketing;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11.2   To exercise any of these rights, please contact our Data Protection team via the support channels listed in Section 15. We will verify your identity before actioning any request and will respond within 30 calendar days.

11.3   PVL88 will not discriminate against players who exercise their data rights — exercising any right under this section will not result in restricted access to Platform services, except where the exercise of that right (for example, account closure or data deletion) necessarily affects service delivery.

12. Minors & Age Verification

SECTION 12.1 – 12.2

12.1   PVL88 is strictly an adults-only platform. We do not knowingly collect or process personal data from individuals under the age of 21. Age verification is a mandatory step in our KYC process and is enforced for all players before real-money deposits or withdrawals are permitted.

12.2   If PVL88 becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted without delay and the associated account will be immediately closed. Any deposits received from underage players will be returned where possible in accordance with our Terms & Conditions.

13. International Data Transfers

SECTION 13.1 – 13.2

13.1   PVL88 operates under international licensing, and some of the third-party service providers we engage — including cloud hosting and KYC verification providers — may process data outside of Malaysia. Where this occurs, PVL88 ensures that appropriate safeguards are in place to protect your personal data to a standard consistent with this policy.

13.2   By using the PVL88 Platform, you acknowledge that your personal data may be transferred to, stored in, and processed in jurisdictions outside Malaysia. PVL88 takes reasonable steps to ensure that any cross-border data transfer is conducted securely and in accordance with applicable data protection requirements.

14. Policy Amendments

SECTION 14.1 – 14.2

14.1   PVL88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. Material changes will be communicated to registered players by email or via a prominent notice on the Platform.

14.2   The effective date of the current version of this policy is stated at the top of this page. Continued use of the Platform after the effective date of any revised policy constitutes acceptance of the updated terms. Players are encouraged to review this policy periodically.

15. Contact & Complaints

SECTION 15.1 – 15.2

15.1   If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a concern about how PVL88 handles your personal data, please contact us via:

15.2   If you believe PVL88 has not adequately addressed your data privacy concern, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. PVL88 will cooperate fully with any such inquiry.