Privacy Policy —
How Dewa88 Protects Your Data

Introduction

This Privacy Policy ("Policy") is issued by Dewa88 ("dewa88", "we", "us", or "our"), the operator of the online gaming platform accessible at dewa88.cam. This Policy applies to all personal data collected from individuals who visit, register on, or otherwise interact with the dewa88 Platform, including Malaysian players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and elsewhere.

Dewa88 is committed to handling your personal data responsibly and in accordance with applicable data protection laws. This Policy is designed to give you full transparency over how your information is collected, processed, stored, and shared — and to clearly articulate the controls and rights available to you.

By registering an account or continuing to use the dewa88 Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, please discontinue use of the Platform and, if you have an account, contact our support team to arrange account closure.

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:

Data We Collect

Dewa88 collects Personal Data through several means: directly from you when you register or interact with the Platform, automatically as you use the Platform, and from third-party sources where permitted by law. The categories of data we collect are set out below.

How We Use Your Data

Dewa88 processes your Personal Data for specific, defined purposes. We do not use your data beyond the purposes listed below without first obtaining your consent or establishing a separate lawful basis for processing.

• Account Management: To create, operate, and maintain your dewa88 account, verify your identity, process your deposits and withdrawals in MYR, and communicate account-related notifications to you.
• Platform Service Delivery: To provide access to casino games, sports betting markets (including Liga Super Malaysia, EPL, and UFC), live dealer tables, and all other features of the dewa88 Platform.
• KYC & Regulatory Compliance: To verify your age (21+), identity, and source of funds in accordance with applicable anti-money laundering (AML) obligations and international gaming licence requirements.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other forms of prohibited conduct on the Platform.
• Payment Processing: To facilitate deposits and withdrawals via your chosen Malaysian payment method, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and USDT TRC20.
• Responsible Gambling: To administer your self-imposed responsible gambling controls (deposit limits, cooling-off periods, self-exclusion), monitor for indicators of problem gambling behaviour, and fulfil our duty of care obligations.
• Customer Support: To respond to your queries, resolve disputes, and maintain records of communications for quality assurance and compliance purposes.
• Platform Improvement: To analyse aggregated usage data and improve the dewa88 Platform's performance, user interface, and game selection.
• Legal Obligations: To comply with applicable laws, regulations, court orders, and requests from competent regulatory or law enforcement authorities.

Legal Basis for Processing

Dewa88 processes your Personal Data only where a valid legal basis exists under applicable data protection law. The legal bases we rely upon are as follows:

• Contractual Necessity: Processing your identity, contact, financial, and usage data is necessary to fulfil our obligations to you under the Terms & Conditions, including account management, payment processing, and game service delivery.
• Legal Obligation: Certain processing activities — including KYC identity verification, transaction monitoring for AML purposes, and retention of financial records — are required by applicable law and our operating licence.
• Legitimate Interests: Dewa88 may process certain Technical Data and Usage Data based on our legitimate interests in operating a secure, functional, and fraud-resistant platform. We ensure that such processing does not unduly override your rights and interests.
• Consent: Where we send you promotional communications or process data for purposes not strictly necessary for the delivery of our services, we will obtain your explicit consent and provide a clear mechanism to withdraw it at any time.

Data Sharing & Third Parties

Dewa88 does not sell, rent, or trade your Personal Data to third parties for their marketing purposes. We share your data only in the following circumstances and with the following categories of recipients:

• Payment Processors: We share necessary financial and identity data with licensed payment service providers — including those facilitating transactions via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and affiliated banking networks — solely to process your deposits and withdrawals.
• KYC & Identity Verification Providers: We work with licensed third-party identity verification services to process your government-issued ID and confirm your eligibility to use the Platform. These providers operate under strict contractual data processing agreements.
• Game Software Providers: Certain usage and session data may be shared with the licensed game studios whose titles you play on dewa88, for the purposes of game operation, fairness auditing, and jackpot administration.
• Technology & Infrastructure Providers: We engage vetted cloud hosting, security, and IT service providers who process data on our behalf under binding data processing agreements.
• Regulatory & Law Enforcement Authorities: Where required by law, court order, or our gaming licence, dewa88 will disclose your Personal Data to the relevant authority. We will notify you of such disclosure to the extent permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of dewa88's business, your Personal Data may be transferred as part of that transaction, subject to equivalent data protection obligations being imposed on the receiving entity.

Data Retention

Dewa88 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, and to resolve any disputes or enforce our agreements. The following general retention guidelines apply:

• Account Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in compliance with our AML record-keeping obligations.
• KYC Documentation: Retained for a minimum of five (5) years from the date of submission or from the date of the last transaction on the account, whichever is later.
• Transaction & Financial Records: Retained for a minimum of five (5) years from the date of each transaction.
• Communication Records: Support communications are retained for a minimum of two (2) years from the date of the last interaction.
• Technical & Usage Data: Retained in identifiable form for up to twenty-four (24) months, after which it may be aggregated or anonymised for analytical purposes.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised. You may request early deletion of your data subject to the limitations described in Section 10 (Your Rights) and any overriding legal obligations.

Data Security

Dewa88 implements a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the dewa88 Platform is encrypted using industry-standard TLS protocols.
• Encrypted Data Storage: Sensitive data at rest — including identity documents, financial records, and authentication credentials — is encrypted using AES-256 encryption.
• Access Controls: Access to personal data within dewa88's systems is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Intrusion Detection & DDoS Protection: Our infrastructure is protected by enterprise-grade intrusion detection systems and DDoS mitigation services to maintain platform availability and data integrity.
• Regular Security Audits: Dewa88 conducts regular internal and third-party security assessments to identify and remediate vulnerabilities.
• Incident Response: Dewa88 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and interests, we will notify affected Members as required by applicable law.

Cookies & Tracking Technologies

Dewa88 uses cookies and similar tracking technologies to operate and improve the Platform, maintain your session, and analyse usage patterns. The categories of cookies we use are described below:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your logged-in state and security tokens. They cannot be disabled without impeding Platform functionality.
• Functional Cookies: Remember your preferences, such as language settings and display preferences, to improve your experience across sessions.
• Analytical Cookies: Collect aggregated and anonymised data about how Members use the Platform — including pages visited, features accessed, and session duration — to help us understand usage patterns and improve the Platform.
• Security Cookies: Support fraud prevention and security measures, including detection of unusual login activity and prevention of cross-site request forgery attacks.

You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the dewa88 Platform. Persistent cookies are stored for a defined period after your session ends; session cookies expire automatically when you close your browser.

Your Data Rights

Subject to applicable data protection law and any overriding legal obligations (including KYC and AML record-keeping requirements), you hold the following rights in relation to your Personal Data held by dewa88. To exercise any of these rights, please contact our support team at [email protected].

Dewa88 will respond to verified data rights requests within 30 days of receipt. Where a request is complex or numerous, we may extend this period by a further 60 days and will notify you accordingly. There is no fee for exercising your rights unless a request is manifestly unfounded or excessive.

Minors & Age Restriction

The dewa88 Platform is strictly intended for adults aged 21 years and above. Dewa88 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory component of the KYC process, and accounts discovered to be held by individuals under 21 will be immediately suspended.

If you believe that dewa88 may have inadvertently collected Personal Data from a minor, please contact us immediately at [email protected]. We will investigate the matter and, where confirmed, securely delete all Personal Data associated with the minor's account without undue delay.

International Data Transfers

As an internationally operated platform serving Malaysian players, dewa88 may transfer your Personal Data to, and store it in, countries outside Malaysia. Where such transfers occur, dewa88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Malaysian data protection law, including:

• Transfers to service providers in jurisdictions recognised as offering adequate data protection;
• Use of standard contractual clauses or equivalent data transfer mechanisms that impose appropriate data protection obligations on the recipient entity;
• Where transfers are made to payment processors operating within Malaysia's banking and e-payment infrastructure (such as DuitNow, FPX, Maybank, CIMB, and Touch 'n Go eWallet), data handling is governed by their respective privacy policies and applicable Bank Negara Malaysia guidelines.

Changes to This Privacy Policy

Dewa88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. When material changes are made, we will:

• Update the "Last Updated" date displayed at the top of this page;
• Post a prominent notice on the dewa88 homepage or within the Platform;
• Where the change materially affects your rights or our processing of Sensitive Data, notify you by email to your registered address prior to the change taking effect.

Your continued use of the dewa88 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the updated Policy, you should stop using the Platform and contact support to close your account.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by dewa88, please contact us through any of the following channels:

• Live Chat: Available 24/7 from within your dewa88 account dashboard. This is the fastest channel for urgent data requests — typical first response under 2 minutes.
• Email: [email protected] — for written data rights requests, please include your full name, registered email address, and a description of your request. Average response time: under 2 hours.

All data rights requests will be acknowledged within 2 business days. We may request additional information to verify your identity before processing your request, to ensure that your data is not disclosed to an unauthorised party.

For questions specifically about our responsible gambling tools or self-exclusion, please visit our Responsible Gambling page or mention it in your support request — responsible gambling matters are always handled with priority.