Data Protection & Privacy

Privacy Policy

pvl888 is committed to protecting the personal data of every player who uses our platform. This Privacy Policy explains in clear terms what information we collect, why we collect it, how it is used, and the rights you hold over your own data. Please read this document carefully before using the pvl888 platform.

Effective Date: 1 January 2026  ·  Last Updated: 1 January 2026
Your Key Rights
Right to access your data
Right to correct inaccurate data
Right to request erasure
Right to restrict processing
Right to data portability
Right to object to processing
Section 01

Introduction

pvl888 ("we", "us", "our", or "the Platform") operates the online gaming and sports betting platform accessible at pvl888.cam. We are committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles.

This Privacy Policy ("Policy") sets out in full the manner in which pvl888 collects, processes, stores, shares, and protects personal information provided by or gathered about individuals who access or use the Platform ("you", "Player", or "User"). It also describes the rights you hold in relation to your personal data and the mechanisms available to you for exercising those rights.

This Policy applies to all users of the pvl888 platform, including registered account holders, individuals who browse the Platform without registering, and any person whose personal data is processed in connection with the provision of pvl888's services. It applies regardless of the device or method used to access the Platform.

Scope Notice: This Policy covers data processed directly by pvl888. Third-party websites or services linked to from our platform — if any — operate under their own independent privacy policies, for which pvl888 accepts no responsibility. We do not link to third-party external services on our current platform.

By registering an account on pvl888 or continuing to use the Platform after being presented with this Policy, you acknowledge that you have read and understood its contents and consent to the processing of your personal data as described herein, to the extent that consent is the applicable legal basis for such processing.

Section 02

Data Controller

For the purposes of this Privacy Policy, pvl888 acts as the data controller in respect of personal data collected from users of the Platform. As data controller, pvl888 determines the purposes for which personal data is processed and the means by which such processing takes place.

Where pvl888 engages third-party service providers to process personal data on its behalf (for example, payment processors or identity verification providers), such parties act as data processors operating under contractual obligations consistent with the principles set out in this Policy.

All enquiries relating to data protection and privacy at pvl888 may be directed to our support team using the contact details set out in Section 16of this Policy. For formal data subject requests, players are encouraged to submit their enquiry in writing by email.

Section 03

Definitions

The following definitions apply throughout this Privacy Policy:

Term Meaning
"Personal Data" Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers.
"Processing" Any operation performed on personal data, including collection, recording, storage, use, transmission, disclosure, and deletion.
"Data Subject" The natural person to whom personal data relates — in the context of this Policy, primarily pvl888 account holders and Platform users.
"Consent" A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a defined purpose.
"KYC Data" Identity verification documentation, including copies of government-issued identification (MyKad, passport), proof of address, and payment method ownership evidence.
"Cookies" Small data files stored on a user's device that enable the Platform to recognise returning users, maintain session states, and gather usage analytics.
"Third-Party Processors" External organisations engaged by pvl888 to perform specific data processing functions, such as payment processing, identity verification, and fraud detection.
Section 04

Personal Data We Collect

pvl888 collects personal data in a number of categories, each of which is necessary for the purposes described in Section 7. We operate on the principle of data minimisation — we collect only what is reasonably required to provide our services, comply with our legal obligations, and protect the legitimate interests of our players and our business.

4.1 Identity and Registration Data

Collected at the time of account registration and during KYC verification:

  • Full legal name as shown on government-issued identity document
  • Date of birth (for age verification — players must be 21 or above)
  • MyKad number, passport number, or equivalent national identity document reference
  • Residential address (street address, city, postcode, state — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
  • Nationality and country of residence
  • Copies of supporting documents submitted for KYC verification

4.2 Contact and Account Data

  • Email address (used for account communications and security alerts)
  • Mobile phone number (used for two-factor authentication where enabled)
  • Chosen username
  • Account password (stored in encrypted, hashed form — never in plain text)

4.3 Financial and Payment Data

  • Payment method details used for deposits and withdrawals, including e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), bank account numbers (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency wallet addresses (BTC, USDT)
  • Transaction history: deposit amounts, withdrawal amounts, dates, and processing status
  • Bank account name and verification information submitted for withdrawal processing

4.4 Gaming Activity Data

  • Wagering history, game session records, bet sizes, and outcomes
  • Sports betting selections, stake amounts, and settlement records
  • Bonus claims, wagering progress, and promotional activity
  • Account balance history and loyalty programme tier status

4.5 Technical and Device Data

  • IP address and approximate geolocation derived therefrom
  • Device type, operating system, and browser version
  • Session timestamps, login history, and logout records
  • Cookies and similar tracking data (see Section 9)

4.6 Communications Data

  • Contents of live chat conversations with pvl888 support agents
  • Email correspondence submitted to [email protected]
  • Feedback, complaints, and dispute records

Special Category Data: pvl888 does not intentionally collect sensitive personal data (such as health, racial or ethnic origin, religious beliefs, or biometric data) as part of its standard service delivery. Should any such data be incidentally disclosed (for example, in a support communication), it will be handled with heightened care and deleted as soon as it is no longer necessary.

Section 05

How We Collect Personal Data

pvl888 collects personal data through the following means:

5.1 Directly From You

The majority of personal data pvl888 holds is provided directly by you during the account registration process, KYC submission, deposit and withdrawal requests, and communications with our support team. You control what information you provide, subject to the minimum requirements necessary for account creation and identity verification.

5.2 Automatically During Platform Use

When you access or use the Platform, technical data including your IP address, device identifiers, browser type, session timestamps, and usage patterns are collected automatically via server logs, cookies, and similar technologies. This data is used for security monitoring, fraud prevention, performance analytics, and the delivery of a consistent user experience.

5.3 From Third-Party Service Providers

pvl888 may receive identity verification results from licensed KYC and anti-money laundering (AML) service providers that process documentary evidence on our behalf. Similarly, payment processors may share transaction confirmation data with pvl888 for the purpose of crediting player accounts and reconciling withdrawals.

No Data Purchasing: pvl888 does not purchase, rent, or obtain personal data lists from third-party marketing brokers or data aggregators. All personal data we hold relates to individuals who have directly engaged with our Platform.

Section 06

Legal Basis for Data Processing

pvl888 processes personal data only where a valid legal basis exists for doing so. The principal legal bases applicable to our processing activities are:

Legal Basis Examples of Processing Activities
Contractual Necessity Processing required to create and maintain your account, process deposits and withdrawals, deliver gaming services, and fulfil our obligations under the Terms and Conditions.
Legal Obligation KYC identity verification, AML transaction monitoring, retention of financial records, and disclosure to regulatory or law enforcement authorities where legally mandated.
Legitimate Interests Fraud prevention, security monitoring, abuse detection, platform analytics, and improving the quality of our products and services — where such interests are not overridden by your rights.
Consent Non-essential cookies and optional marketing communications (where offered). Consent may be withdrawn at any time by contacting support.
Section 07

How We Use Your Personal Data

pvl888 uses the personal data it holds for the following purposes:

  • Account Management: Creating, maintaining, and administering your registered player account, including processing login requests and account security functions.
  • Identity Verification (KYC): Verifying your identity and age (21+) in accordance with responsible gambling and anti-money laundering obligations prior to processing withdrawal requests.
  • Payment Processing: Facilitating deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, BTC, and USDT; and processing withdrawal requests to your verified payment method.
  • Service Delivery: Providing access to casino games, sports betting markets, live dealer content, and associated platform features.
  • Customer Support: Responding to enquiries, processing complaints, investigating disputes, and providing assistance in English, Bahasa Melayu, and Mandarin.
  • Fraud Prevention and Security: Monitoring transactions and account activity for indicators of fraud, money laundering, collusion, multi-accounting, or other prohibited conduct.
  • Legal Compliance: Maintaining records required by applicable law, responding to lawful regulatory requests, and cooperating with authorised investigations.
  • Platform Improvement: Analysing aggregated, anonymised usage data to identify technical issues, improve navigation and performance, and develop new features.
  • Responsible Gambling: Monitoring account activity for indicators of problematic gambling behaviour; facilitating self-exclusion, deposit limit, and session time control requests.
  • Promotional Administration: Tracking bonus eligibility, wagering requirement progress, and VIP tier status in connection with active promotional offers.
Section 08

Data Sharing and Disclosure

pvl888 does not sell, rent, trade, or otherwise disclose personal data to unafiliated third parties for commercial marketing or advertising purposes. Personal data may be shared in the following limited circumstances:

8.1 Authorised Third-Party Processors

pvl888 engages third-party service providers to perform specific functions on its behalf. These providers are contractually bound to process personal data only on pvl888's documented instructions and in accordance with applicable data protection obligations. Categories of authorised processors include:

  • Payment processors and e-wallet operators (including those facilitating Touch 'n Go, Boost, GrabPay, DuitNow, FPX, and banking transactions)
  • Identity verification and KYC service providers
  • Anti-fraud and AML screening platforms
  • Customer support platform providers
  • Platform hosting and cloud infrastructure providers

8.2 Legal and Regulatory Disclosure

pvl888 may disclose personal data to government authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or where such disclosure is necessary to protect the rights, property, or safety of pvl888, its players, or the general public.

8.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving pvl888, personal data may be transferred to the relevant successor entity as part of that transaction, subject to equivalent privacy protections being maintained.

No Sale of Data: pvl888 explicitly confirms that it does not and will not sell, lease, or commercially exploit personal data to any third party for their independent marketing or profiling purposes.

Section 09

Cookies and Tracking Technologies

pvl888 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your session state, and to gather anonymised usage analytics. The following categories of cookies are used:

Cookie Type Purpose Basis
Strictly Necessary Maintaining your login session, preventing cross-site request forgery, and ensuring the core functionality of the Platform. Contractual / Legitimate Interest
Functional Remembering your language preference, display settings, and other personalisation options. Consent
Analytical Collecting anonymised data on page visits, session duration, and navigation patterns to improve platform performance and usability. Consent / Legitimate Interest
Security Assisting in the detection of automated bots, suspicious login attempts, and account takeover activity. Legitimate Interest

Most web browsers allow you to control cookie acceptance through browser settings. Disabling strictly necessary cookies may impair the functionality of the Platform, including your ability to log in and maintain an active session. Disabling analytical or functional cookies will not prevent you from using the Platform.

Section 10

Data Retention

pvl888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or accounting obligations. The following general retention periods apply:

Data Category Retention Period
Account registration and identity (KYC) data For the duration of the account and minimum of 5 years following account closure
Financial transaction records Minimum 7 years following the date of the transaction, for accounting and AML compliance purposes
Gaming activity and wagering history 5 years following account closure or last activity, whichever is later
Customer support communications 3 years from the date of the interaction
Technical and device logs 90 days, unless retained for longer in connection with an active security investigation
Self-exclusion records Retained indefinitely to prevent re-registration during any applicable exclusion period

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

Section 11

Data Security

pvl888 implements a comprehensive suite of technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

  • SSL/TLS Encryption: All data transmitted between your device and the pvl888 Platform is encrypted using industry-standard SSL/TLS protocols.
  • Password Security: Account passwords are stored using strong cryptographic hashing algorithms. Passwords are never stored in plain text and are never accessible to pvl888 staff.
  • Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts for an additional layer of login security.
  • Access Controls: Personal data is accessible internally only on a strict need-to-know basis. Staff with data access are subject to confidentiality obligations and receive regular data protection training.
  • Infrastructure Security: pvl888's platform infrastructure is hosted in secured environments with firewalls, intrusion detection systems, and regular security audits.
  • Payment Data: Payment method details are processed by PCI-DS compliant payment processors. pvl888 does not store full card numbers or CVV data on its own servers.

Notwithstanding the foregoing, no data transmission or storage system can be guaranteed to be completely secure. In the unlikely event of a data breach that poses a significant risk to your rights, pvl888 will notify affected individuals and any applicable regulatory authorities in accordance with our legal obligations.

Section 12

Your Rights as a Data Subject

Subject to applicable data protection law, you hold the following rights in respect of your personal data held by pvl888. To exercise any of these rights, please contact us using the details in Section 16.

12.1 Right of Access

You have the right to request a copy of the personal data pvl888 holds about you, together with information about the purposes for which it is being processed. We will respond to verified access requests within 30 calendar days.

12.2 Right to Rectification

You have the right to request the correction of inaccurate or incomplete personal data held about you. Many account details (such as contact information) can be updated directly through your account settings panel. For identity document corrections, a formal written request and updated KYC documentation are required.

12.3 Right to Erasure ("Right to Be Forgotten")

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to exceptions, including where retention is required for legal compliance (for example, financial record-keeping obligations under applicable law). pvl888 will assess erasure requests on a case-by-case basis and respond within 30 days.

12.4 Right to Restrict Processing

You may request that pvl888 restrict its processing of your personal data in certain circumstances — for example, while a dispute regarding the accuracy of the data is resolved, or where you have objected to processing on the basis of legitimate interests.

12.5 Right to Data Portability

Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format for the purpose of transfering it to another service provider.

12.6 Right to Object

You may object to the processing of your personal data where pvl888 relies on legitimate interests as the legal basis. pvl888 will cease such processing unless compelling legitimate grounds for continued processing exist that override your interests, rights, and freedoms.

12.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal. Withdrawal of consent for essential processing activities may necessitate account closure.

Identity Verification for Rights Requests: To protect your data, pvl888 will require sufficient proof of identity before processing any data subject rights request. This is to ensure that personal data is not disclosed to or altered by unauthorised parties.

Section 13

Children's Privacy

The pvl888 platform is strictly intended for individuals aged21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process.

If pvl888 becomes aware that personal data has been collected from a person under the age of 21 without appropriate verification, that account will be immediately suspended, all transactions will be reviewed, and the personal data will be deleted to the extent permitted by law. Where applicable, deposited funds will be returned through the original payment method.

If you believe that a minor has registered an account on pvl888 or that their personal data has been collected inadvertently, please contact our support team immediately so that appropriate action can be taken.

Section 14

International Data Transfers

pvl888's primary operations are directed at users in Malaysia. In the course of providing its services, personal data may be transferred to, processed in, or accessed from countries outside Malaysia, including countries where data protection laws may differ from those in Malaysia.

Where personal data is transferred to third-party processors located outside Malaysia, pvl888 takes reasonable steps to ensure that adequate safeguards are in place to protect such data, including: selecting processors that operate under recognised data protection frameworks; incorporating data processing agreements with appropriate contractual protections; and confirming that receiving parties maintain security standards consistent with those described in this Policy.

By using the pvl888 Platform, you acknowledge that your personal data may be transferred and processed in accordance with this section.

Section 15

Amendments to This Policy

pvl888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational structure. When material changes are made, we will provide notice through a prominent on-screen announcement or by email to your registered address, with a minimum notice period of seven (7) days before changes take effect, except where immediate amendment is required by law.

The "Last Updated" date shown at the top of this Policy reflects the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy.

If you disagree with any material amendment to this Policy, you should cease using the Platform and contact our support team to request account closure.

Section 16

Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or wish to raise a concern about how pvl888 handles your personal data, please contact us through one of the following channels:

  • Live Chat: Available 24 hours a day, 7 days a week via the pvl888 website. Our recommended channel for general privacy enquiries — average response time under 5 minutes. Agents are available in English, Bahasa Melayu, and Mandarin.
  • Email: [email protected] — formal written data subject requests, complaints, or detailed privacy enquiries. We aim to respond within 48 business hours and to fully resolve data subject requests within 30 calendar days.

When submitting a data subject rights request, please include: your registered account username or email address; a description of your request; and sufficient information to verify your identity. pvl888 will acknowledge receipt of your request within 5 business days.

Regulatory Recourse: If you are unsatisfied with pvl888's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. pvl888 encourages players to first attempt resolution through our internal complaint process before escalating externally.

How pvl888 Protects Your Privacy

Six concrete commitments that underpin our approach to data privacy — not promises on paper, but practices built into how we operate.

Encryption at Every Layer

All data transmitted between your device and pvl888 is protected by SSL/TLS encryption. Account passwords are stored using strong cryptographic hashing — never in readable form, never accessible to our staff.

No Sale of Your Data

pvl888 does not sell, rent, or trade your personal information to third-party marketers or data brokers — under any circumstances. Your data is used solely to operate, secure, and improve our platform for your benefit.

Data Minimisation

We collect only the personal data genuinely required to operate our services, verify your identity, process your payments, and comply with our legal obligations. We do not collect data speculatively or for undefined future uses.

Your Rights, Respected

You hold meaningful rights over your data — access, rectification, erasure, portability, and objection. pvl888 provides a clear channel for exercising these rights and commits to responding within 30 calendar days.

Defined Retention Periods

Personal data is retained only as long as necessary — whether for service delivery, legal compliance, or dispute resolution. Once the retention period expires, data is securely deleted or fully anonymised.

Privacy Support in Your Language

Our privacy and data support team handles enquiries in English, Bahasa Melayu, and Mandarin — reflecting Malaysia's multilingual reality and ensuring every player can engage with their data rights effectively.

We Are Transparent, Open, and Here to Help

If you have questions about this Privacy Policy, want to exercise a data right, or simply want to understand how pvl888 uses your information, our support team is available 24/7 in English, Bahasa Melayu, and Mandarin.

For players aged 21 and above only. Play responsibly. pvl888 is committed to protecting your personal data and your right to privacy.

21+ Only