pvl88 Privacy Policy

1 Who We Are

pvl88 ("we", "us", "our") operates the online gaming platform accessible at pvl88.app and its associated subdomains. pvl88 is the data controller responsible for the personal data of registered players and visitors collected through the platform. This Privacy Policy applies to all personal data collected, processed, or held by pvl88 in connection with the operation of its platform and services, including sports betting, live casino, slot games, and Toto 4D products offered to players in Malaysia and other accessible jurisdictions.

By accessing pvl88.app, registering a pvl88 account, or using any pvl88 service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2 Personal Data We Collect

pvl88 collects the following categories of personal data from players and platform visitors:

pvl88 does not collect or process sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data, except where required for identity verification by applicable law.

3 How We Collect Your Data

pvl88 collects personal data through the following channels:

• Direct submission: Data you provide when registering a pvl88 account, completing identity verification, making deposits or withdrawals, contacting support, or responding to promotions.
• Automated collection: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar technologies when you access pvl88.app or use the platform.
• Third-party sources: Data received from payment processors (e.g., DuitNow, FPX, Touch 'n Go), identity verification service providers, fraud prevention agencies, and gaming licensing authorities where required for regulatory compliance.
• Publicly available sources: In limited circumstances, data from public registers or databases where required for AML/KYC compliance screening.

4 How We Use Your Personal Data

pvl88 processes your personal data for the following purposes:

• Creating and managing your pvl88 account, including identity and age verification (21+ requirement).
• Processing deposits, withdrawals, and all financial transactions conducted through the platform.
• Delivering sports betting, live casino, slot games, and Toto 4D services you access via your pvl88 account.
• Complying with anti-money laundering (AML), counter-terrorist financing (CTF), and Know Your Customer (KYC) obligations under applicable gaming licensing and financial regulations.
• Preventing, detecting, and investigating fraud, collusion, match-fixing, and other prohibited conduct.
• Providing customer support, responding to complaints, and resolving disputes.
• Enforcing pvl88's Terms & Conditions and this Privacy Policy.
• Sending transactional communications — deposit confirmations, withdrawal notifications, bet settlements, and security alerts.
• Sending marketing communications where you have consented to receive them.
• Improving the pvl88 platform through usage analytics, A/B testing, and performance monitoring.
• Implementing and monitoring responsible gaming tools including deposit limits, session controls, and self-exclusion.

5 Legal Basis for Processing

pvl88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — operating your account, processing bets, and executing payments.
• Legal obligation: Processing required to comply with AML/CTF legislation, gaming licensing requirements, and other applicable laws.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time.

6 Data Sharing & Disclosure

pvl88 does not sell your personal data. We share personal data only in the following circumstances and only to the extent necessary:

• Payment processors: Financial data shared with e-wallet operators (Touch 'n Go, Boost, GrabPay) and FPX/DuitNow banking partners to execute deposit and withdrawal transactions.
• Identity verification providers: Identity and verification data shared with licensed KYC/AML service providers to fulfil regulatory obligations.
• Gaming platform providers: Account and game-play data shared with licensed game studios and live casino operators whose products are integrated into the pvl88 platform, strictly for game delivery purposes.
• Regulatory authorities: Data disclosed to gaming licensing authorities, financial intelligence units, or law enforcement agencies where required by applicable law.
• Fraud and security services: Technical and identity data shared with fraud detection and cybersecurity service providers to protect pvl88 and its players.
• Professional advisers: Data shared with legal counsel, auditors, and compliance consultants under strict confidentiality obligations where necessary for pvl88's legal or regulatory obligations.

7 International Data Transfers

pvl88's primary data infrastructure is operated in accordance with its gaming licensing jurisdiction. Where personal data is transferred to processors or sub-processors located outside Malaysia, pvl88 ensures that adequate safeguards are in place — including data processing agreements incorporating standard contractual clauses or equivalent protections — to maintain a standard of data protection equivalent to that required under Malaysian law and the applicable gaming licensing framework.

8 Data Retention

pvl88 retains personal data for the following periods:

• Account data: Retained for the duration of your active pvl88 account plus a minimum of five (5) years following account closure, as required by AML/KYC regulations and gaming licensing obligations.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of the transaction in compliance with applicable financial record-keeping requirements.
• Support communications: Retained for three (3) years from the date of the communication or resolution of the relevant matter, whichever is later.
• Technical and usage data: Retained for up to twenty-four (24) months for analytics and platform improvement purposes, subject to anonymisation where possible.
• Marketing consent records: Retained until consent is withdrawn and for a period of twelve (12) months thereafter as evidence of the consent record.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with pvl88's data disposal procedures.

9 Cookies & Tracking Technologies

pvl88 uses cookies and similar technologies (web beacons, pixels, local storage) on pvl88.app for the following purposes:

• Essential cookies: Required for the platform to function — maintaining your login session, remembering security preferences, and ensuring page features work correctly. These cannot be disabled without impairing platform functionality.
• Analytical cookies: Used to understand how players navigate pvl88 — pages visited, features used, and session duration — to improve platform design and performance. Data is aggregated and anonymised where possible.
• Functional cookies: Used to remember your preferences (e.g., display settings, last-visited game category) to personalise your pvl88 experience.

You may manage non-essential cookie preferences through your browser settings. Disabling essential cookies will impair your ability to use the pvl88 platform, including pvl88 Login functionality.

10 Your Data Rights

As a pvl88 player or platform visitor, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data pvl88 holds about you.
• Right to rectification: You may request correction of personal data that is inaccurate or incomplete.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to pvl88's legal and regulatory retention obligations.
• Right to restrict processing: You may request that pvl88 restrict processing of your data in certain circumstances (e.g., where accuracy is disputed).
• Right to object: You may object to processing of your data based on legitimate interests, including profiling for marketing purposes.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact pvl88 at the details provided in Section 15. pvl88 will respond to valid requests within 21 calendar days. Identity verification may be required before any data request is fulfilled.

11 Children & Underage Users

pvl88 is strictly for users aged 21 and above. pvl88 does not knowingly collect personal data from individuals under the age of 21. If pvl88 becomes aware that personal data has been collected from an individual who is under 21 years of age, that data will be immediately deleted and the associated account permanently closed. If you believe a minor has accessed pvl88 or submitted personal data, please contact pvl88 support immediately.

12 Security Measures

pvl88 implements a layered security architecture to protect your personal data, including:

• AES-256 encryption for data at rest across all pvl88 database infrastructure.
• TLS 1.3 encryption for all data in transit between your device and pvl88 servers.
• Role-based access controls limiting internal staff access to personal data to the minimum necessary for their function.
• Multi-factor authentication for all pvl88 administrative system access.
• Continuous monitoring for intrusion attempts, anomalous access patterns, and data exfiltration activity.
• Regular third-party penetration testing and security audits.

Notwithstanding these measures, no internet-based transmission or storage system is completely secure. pvl88 cannot guarantee absolute security of your data and recommends that you maintain strong, unique passwords for your pvl88 account and enable two-factor authentication.

13 Marketing Communications

pvl88 may send you marketing communications — including promotional offers, bonus notifications, and platform news — where you have provided explicit consent at registration or at a later point. You may withdraw marketing consent at any time by contacting pvl88 support or by following the unsubscribe instructions in any marketing email. Withdrawal of marketing consent does not affect delivery of transactional communications necessary for the operation of your account.

14 Changes to This Privacy Policy

pvl88 may update this Privacy Policy from time to time to reflect changes in data practices, regulatory requirements, or platform features. Where changes are material, pvl88 will notify registered players via in-account notification or registered email at least seven (7) days before the revised policy takes effect. The effective date of the current version is stated at the top of this document. Continued use of the pvl88 platform following the effective date of any revised Privacy Policy constitutes acceptance of the revised terms.

15 Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how pvl88 handles your personal data, please contact the pvl88 Data Protection team:

pvl88 commits to acknowledging privacy-related enquiries within 5 business days and providing a substantive response or requesting further information within 21 calendar days of receipt.

This Privacy Policy is to be read alongside the pvl88 Terms & Conditions and Responsible Gaming policy, both of which form part of your agreement with pvl88.