Privacy Policy pvz2 – Our Commitment to Data Protection Malaysian Members

This Privacy Policy ("Policy") is published by pvz2, an online casino platform operating in Malaysia. It explains how pvz2 collects, uses, stores, protects and discloses personal information you provide when using the website, mobile app and all services offered under the pvz2 platform.

Pvz2 is committed to protecting your privacy in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. We believe Malaysian players deserve to know exactly how their data is handled — not vague, generic statements, but clear, transparent and straightforward explanations.

By registering an account on pvz2, accessing our platform, or using any of our services, you consent to the collection and processing of your personal data as described in this Policy. If you do not agree with any part of this Policy, please contact the pvz2 support team or discontinue use of the platform. This Policy applies to all pvz2 users in Malaysia without exception.

Pvz2 collects several categories of personal data from members at various stages of platform use. Below is a detailed breakdown of the data collected and how it is sourced:

Data you provide directly to pvz2:

• Identity Information: Full name, Malaysian MyKad or passport number, date of birth and gender — required for identity verification (KYC) and age eligibility checks
• Contact Information: An active Malaysian mobile number, email address and residential address — used for account communications and OTP verification
• Financial Information: E-wallet details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay), DuitNow account numbers, or FPX information via Maybank2u and CIMB Clicks — used solely to process deposits and withdrawals
• Password: Stored in hashed format, unreadable by pvz2 staff — never stored as plain text

Data collected automatically when you use pvz2:

• Technical Data: IP address, device type, operating system, web browser type and language settings
• Usage Data: Pages visited, time spent in each section, game round records, betting history, and winnings records on pvz2
• Transaction Data: Deposit history, withdrawal history, amounts and dates of all financial transactions on the platform
• Log Data: Login timestamps, IP address at the time of login, and session activity

Pvz2 uses your personal data only for legitimate, specific and clearly stated purposes. Below is a full list of data processing purposes at pvz2 and the legal basis for each:

• Account Management: Creating and managing your pvz2 account, verifying your identity at login, processing password change requests, and resolving account access issues
• Payment Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, and processing winnings withdrawals to the same payment methods — this is a contractual necessity that cannot be opted out of if you wish to use pvz2's financial services
• Anti-Money Laundering (AML) Compliance: Transaction monitoring, KYC verification, and reporting to the relevant Malaysian authorities when required by law — these are pvz2's legal obligations
• Gaming Services Provision: Ensuring games run correctly, maintaining round history for verification and dispute resolution purposes, and calculating and crediting legitimate winnings
• Customer Support: Responding to enquiries, resolving technical issues, and handling complaints — pvz2's support team requires access to relevant account data in order to provide effective assistance
• Security & Fraud Detection: Identifying and preventing duplicate accounts, payment fraud, bot activity and other suspicious behaviour
• Platform Improvements: Analysing aggregated and anonymised usage patterns to improve the interface, platform performance and overall pvz2 user experience
• Marketing Communications: Sending notifications about new bonuses, promotions, and platform updates — only where you have given explicit consent to receive such communications

Pvz2 does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes. This is a core principle we have never compromised on. However, in the context of legitimate business operations, pvz2 may share certain data with the following parties within very limited scope:

• Payment Gateway Providers: Required transaction information is shared with licensed payment service providers — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and the relevant FPX banks — solely for the purpose of processing your deposits and withdrawals. All of these payment providers are bound by strict confidentiality agreements with pvz2.
• Certification & Audit Body: Limited technical information required for RNG system audits and game fairness certification — with no personally identifiable member information included.
• Malaysian Authorities: pvz2 will disclose information as required under Malaysian law upon receipt of a lawful order from authorities such as PDRM, SPRM, or a Malaysian court. pvz2 will notify the member of any such disclosure unless prohibited from doing so by a court order.
• Technical Service Providers: Companies providing technical infrastructure services such as server hosting, email services and analytics tools — all bound by strict data processing agreements and permitted to access only the minimum data required for their specific tasks.

The security of your data is an absolute priority for pvz2. We implement multiple layers of security to ensure your personal and financial information is fully protected at every stage — from the moment you type your password to the completion of a financial transaction.

Technical security measures implemented by pvz2:

• 256-bit SSL Encryption: All communication between your device and pvz2 servers is protected by Transport Layer Security (TLS) 1.3 encryption using 256-bit keys — the same security standard used by leading banks in Malaysia.
• Data-at-Rest Encryption: All personal and financial data stored in pvz2's databases is encrypted using AES-256 — meaning that even if someone were to gain physical access to the servers, the data would be unreadable without the appropriate encryption key.
• Two-Factor Authentication (2FA): pvz2 offers and encourages the use of 2FA for all accounts. With 2FA enabled, account access requires an additional OTP code on top of your password, providing an extra layer of protection.
• 24/7 Security Monitoring: pvz2's automated monitoring system continuously detects suspicious activity, unusual login attempts, and abnormal transaction patterns around the clock.
• Hashed Passwords: Your pvz2 account password is never stored in plain text. pvz2 uses the bcrypt algorithm with a unique salt for every password — ensuring your password cannot be recovered even by pvz2 staff themselves.
• Environment Segregation: pvz2's production, testing, and development environments are fully isolated from one another to prevent any unintended access to live data during development or testing processes.

That said, pvz2 wishes to remind you that no security system in the world can be guaranteed 100% foolproof. You also play an important role in protecting your account — use a strong, unique password, enable 2FA, and never share your login credentials with anyone.

Pvz2 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the pvz2 website. The following are the types of cookies used by pvz2:

You can manage cookie settings through your web browser — most browsers allow you to view, delete, or block cookies from specific websites. However, disabling essential cookies may affect the functionality of the pvz2 platform. For more information on managing cookies in popular browsers, refer to your browser's help documentation.

As a pvz2 Malaysia member, you have specific rights regarding your personal data, protected under Malaysia's Personal Data Protection Act 2010 (PDPA). pvz2 respects and facilitates the exercise of these rights:

Pvz2 strictly prohibits individuals under the age of 18 from registering or using the platform in any capacity. pvz2 does not knowingly collect any personal data from individuals under the age of 18. All new accounts undergo a strict age verification process upon registration.

Should pvz2 discover that personal data has been collected from an individual under the age of 18 — whether through inaccurate information provided during registration or by any other means — we will take immediate action to delete that data, close the associated account, and refer the case to the relevant authorities if necessary.

In the course of operating the pvz2 platform, your personal data may need to be transferred to or processed outside Malaysia in certain situations — for example, when using international technical infrastructure services or when cooperating with international certification bodies for game fairness audits.

Whenever any cross-border data transfer occurs, pvz2 ensures that:

• The recipient country or jurisdiction maintains data protection standards equivalent to or exceeding those set out by Malaysia's PDPA
• Adequate contractual agreements are in place binding data recipients to the required security and privacy standards
• Data transfers are kept to the minimum necessary — only data that is strictly required for the specific purpose is transferred
• Recognised protection mechanisms such as Standard Contractual Clauses (SCC) or equivalent safeguards are applied

Pvz2 will not transfer a member's full identity data to any international party without a legal requirement or your explicit consent.

Pvz2 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements or the addition of new services on the platform. Any changes take effect immediately upon publication on the pvz2 website, unless a different effective date is explicitly stated.

For material changes — that is, changes that significantly affect how we use or protect your data — pvz2 will notify members via their registered email at least 14 days before the effective date. This gives you sufficient time to review the changes and make an informed decision about your continued use of the pvz2 platform.

If you have any questions, concerns or requests regarding this Privacy Policy or how pvz2 handles your personal data, please contact the pvz2 privacy team through the following channels:

• Privacy Email: [email protected] — please mark the email subject as "Privacy Enquiry" for faster handling
• 24/7 Live Chat: Available at all times via the chat icon at the bottom-right corner of the pvz2 platform
• Response Time: Privacy enquiries submitted by email are responded to within 2 business days; via live chat, within under 3 minutes
• Support Language: Bahasa Melayu and English

This pvz2 Privacy Policy forms part of the comprehensive legal framework governing use of the platform, together with Terms & Conditions and policies Responsible Gaming. All these documents are read together and form the complete agreement between you and pvz2.

This policy is governed by the laws of Malaysia, in particular the Personal Data Protection Act 2010 and other relevant legislation. Any disputes arising from this policy shall be resolved through the jurisdiction of the appropriate Malaysian courts.