Privacy Policy

PV888 ("we", "us", "our", "the Operator") is committed to protecting the privacy and personal data of every individual who accesses or uses the PV888 online gaming and sports betting platform available at pv888.cam and any associated mobile applications or digital services (collectively, the "Platform").

This Privacy Policy ("Policy") sets out in clear, plain English how PV888 collects, processes, uses, stores, shares, and protects personal data provided by or relating to Users ("you", "your") of the Platform. It also explains the rights you hold in respect of your personal data and how you may exercise those rights.

This Policy applies to all personal data processed in connection with the operation of the Platform, including data collected during account registration, during the use of casino games and sports betting services, during payment transactions processed via Malaysian payment methods (including Touch 'n Go eWallet, DuitNow, FPX, Maybank2u, CIMB Clicks, Boost, GrabPay, Public Bank, and Hong Leong Connect), and through customer support interactions.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which form part of the overall agreement between you and PV888.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information that relates to an identified or identifiable natural person, including but not limited to name, date of birth, email address, residential address, identification number, payment details, and device identifiers.
• "Processing" — Any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, restriction, erasure, or destruction.
• "Data Controller" — The Operator, who determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — A third-party service provider that processes Personal Data on behalf of the Operator, strictly in accordance with the Operator's documented instructions.
• "User" / "Player" — Any individual who has registered an Account on the Platform or who visits the Platform without registering.
• "Consent" — A freely given, specific, informed, and unambiguous indication of agreement by the User to the processing of their Personal Data for a stated purpose.
• "Cookies" — Small text files placed on your device by the Platform to enable certain functional and analytical capabilities, as further described in Section 8 of this Policy.
• "KYC" — Know Your Customer — the identity and address verification process conducted prior to the processing of withdrawal requests and, where required, prior to the release of bonus funds.

PV888 collects and processes the following categories of Personal Data in connection with the operation of the Platform:

PV888 collects Personal Data through the following means:

PV888 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between you and PV888 — i.e., to operate your Account, process deposits and withdrawals, deliver gaming services, and provide customer support.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) laws, KYC requirements, fraud prevention obligations, and regulatory reporting duties.
• Legitimate Interests: Processing is in the legitimate interests of PV888 (and does not override your fundamental rights), including the prevention of fraud and bonus abuse, improvement of Platform functionality, network and information security, and responsible gambling monitoring.
• Consent: Where we rely on your consent as the legal basis — primarily for marketing communications and certain optional cookies — you have the right to withdraw your consent at any time without affecting the lawfulness of prior processing.

PV888 uses the Personal Data we hold about you for the following specific purposes:

1. Account Management: To create, maintain, verify, and administer your Account, including enabling you to log in, update your account details, and manage your preferences.
2. KYC Verification: To verify your identity and residential address in compliance with our AML obligations, prior to processing withdrawals or releasing bonus funds.
3. Payment Processing: To process deposits and withdrawals via your chosen Malaysian payment method, to maintain accurate financial records, and to investigate payment disputes.
4. Service Delivery: To provide access to casino games, live dealer tables, sports betting markets (including Liga Super Malaysia, EPL, and UFC), and other Platform features.
5. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-account creation, and other conduct prohibited by our Terms & Conditions.
6. Responsible Gambling: To monitor gameplay patterns and account activity for signs of problem gambling behaviour, and to administer self-exclusion, deposit limits, and other responsible gambling tools you have requested.
7. Customer Support: To respond to your enquiries, resolve complaints, and manage your support interactions efficiently.
8. Platform Improvement: To analyse Platform usage patterns and technical performance data for the purpose of improving user experience, fixing bugs, and developing new features.
9. Legal Compliance: To comply with applicable laws and regulations, to respond to lawful requests from regulatory authorities, and to defend legal claims where necessary.
10. Marketing Communications (with consent only): To send you promotional offers, bonus notifications, and platform updates where you have explicitly opted in to receive such communications. You may unsubscribe at any time.

PV888 does not sell, rent, or trade your Personal Data to any third party. We share your data only where necessary, with the following categories of recipients, and strictly on a need-to-know basis:

PV888 uses cookies and similar tracking technologies on the Platform for the purposes described in this section. Cookies are small text files stored on your device by your browser when you visit the Platform.

PV888 retains your Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulatory obligation. The following general retention periods apply:

• Account Data and Transaction Records: Retained for a minimum of 5 years from the date of account closure or the last transaction, as required by anti-money laundering regulations.
• KYC Documents: Retained for a minimum of 5 years from the date of document submission or account closure, in accordance with AML compliance requirements.
• Customer Support Communications: Retained for 3 years from the date of the last communication, for quality assurance and dispute resolution purposes.
• Technical and Log Data: Retained for a maximum of 12 months, after which it is anonymised or deleted.
• Marketing Consent Records: Retained for the duration of your marketing subscription and for 3 years after unsubscription, as proof of consent management compliance.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised aggregated data (such as statistical gameplay data) may be retained indefinitely for internal analytical purposes.

PV888 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or application and our servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Two-Factor Authentication (2FA): PV888 supports and encourages 2FA for all Account holders as an additional layer of protection against unauthorised account access.
• Access Controls: Access to Personal Data within our organisation is restricted on a strict need-to-know basis. Only personnel with a legitimate operational reason may access identifiable user data, and all such access is logged and auditable.
• Encrypted Storage: Sensitive data fields, including payment credentials and KYC document images, are stored in encrypted form at rest on our servers.
• 24/7 Security Monitoring: Our infrastructure is subject to continuous monitoring by automated intrusion detection systems and our internal security team, with escalation protocols in place for any identified security incidents.
• Regular Security Assessments: We conduct periodic third-party security audits and penetration testing to identify and remediate vulnerabilities in our infrastructure and applications.

Subject to applicable law and certain exceptions, you have the following rights in respect of your Personal Data held by PV888. To exercise any of these rights, please contact our Data Protection team via the contact details set out in Section 15.

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, together with information about how it is processed. We will respond to access requests within 30 days of receipt.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update certain profile information directly through your Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. This right is subject to our legal retention obligations — we cannot delete data we are legally required to retain.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict the processing of your Personal Data — for example, while a dispute regarding accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contractual necessity, and processing is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your Personal Data where it is based on PV888's legitimate interests, including for profiling purposes. You may object to marketing communications at any time by unsubscribing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

The PV888 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. Account registration by anyone under 21 is prohibited under our Terms & Conditions and constitutes a material breach thereof.

If PV888 becomes aware that Personal Data has been collected from an individual who is under 21, we will promptly take steps to delete that data, close the associated Account, and return any deposited funds that can be verified as belonging to the individual's legal guardian or parent.

If you are a parent or guardian and believe that your child has accessed the Platform and provided Personal Data without your consent, please contact our support team immediately via live chat or email at [email protected].

We strongly encourage parents and guardians of minors to install reputable parental control software to prevent access to online gambling services. PV888 also supports national responsible gambling helplines and self-exclusion registries as described in our Responsible Gambling page.

PV888's primary server infrastructure is hosted in secure data centres. In connection with the delivery of certain Platform services — including identity verification, fraud detection, and game content delivery — your Personal Data may be transferred to and processed by service providers operating in jurisdictions outside of Malaysia.

Where such international transfers take place, PV888 ensures that appropriate safeguards are in place to protect your Personal Data, including:

• Contractual clauses that require the recipient to handle your data to standards equivalent to those set out in this Policy;
• Transfers only to recipients in jurisdictions that maintain adequate data protection standards as assessed by the Operator;
• Encryption of data in transit and at rest to minimise exposure during transfer.

By using the Platform, you acknowledge that your Personal Data may be transferred internationally in accordance with this section. If you have questions about the specific safeguards in place for any particular international transfer, you may contact our Data Protection team as described in Section 15.

PV888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. Where changes are material, we will notify registered Users via the email address on their Account and/or by displaying a prominent notice on the Platform, with a minimum of 14 days' notice prior to the effective date.

The updated Policy will always be accessible at pv888.cam/privacy-policy. The "Effective Date" displayed at the top of this Policy indicates the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, you may contact the PV888 Data Protection team through the following channels:

• Live Chat: Available 24/7 directly through the Platform. Queries are typically acknowledged within 2 minutes and substantive responses provided within 24 hours.
• Email: [email protected] — Email responses within 12 hours for general queries; formal data rights requests responded to within 30 days of receipt.

When submitting a formal data rights request (e.g., right of access, rectification, or erasure), please include your full name, registered Account email address, a clear description of your request, and any supporting information that may help us locate your Account efficiently. We may be required to verify your identity before actioning certain requests.