Dewa99 Privacy Policy – Member Data Protection

Welcome to the dewa99 Privacy Policy page. This document outlines the privacy practices of the dewa99 platform regarding how we collect, use, disclose, and protect your personal information when you use our official website at dewa99.vin and the dewa99 mobile app.

This privacy policy applies to all visitors to our website, all registered members, and any individual who interacts with the dewa99 platform through any official channel. By registering as a dewa99 member or continuing to use this platform, you hereby agree to the terms set out in this privacy policy.

Dewa99 is committed to ensuring your privacy is always protected. We understand the importance of your personal data and take this responsibility seriously. All processing of personal information by dewa99 is carried out in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices.

Dewa99 collects several categories of personal information when you use our platform. This is divided into information you provide directly and information collected automatically during platform use.

Information You Provide Directly:

• Full name as shown on your identification document.
• Date of birth for age verification purposes (18 years and above).
• An active Malaysian mobile phone number.
• A valid and active email address.
• Bank account details including bank name, account number, and account holder name.
• Identity documents (MyKad, passport) for the KYC process when required.
• Credit or debit card information for applicable payment methods.

Information Collected Automatically:

• IP address and device information (device type, operating system, model).
• Type and version of web browser used.
• Access log details including date, time, and pages visited.
• Cookie data and session identifiers for login session management purposes.
• Transaction history and game activity on the dewa99 platform.
• General location data based on IP address (country and region only).

Personal information collected by dewa99 is used solely for legitimate purposes directly related to the platform's operations. We do not use your data for undisclosed purposes or for anything unrelated to the services you use. The primary purposes for data use are as follows:

Dewa99 takes a highly cautious approach to sharing members' personal information. We do not sell your personal data to any third party. However, there are certain situations where sharing information is necessary to keep the platform running smoothly and securely:

• Payment Providers: Required transaction information is shared with authorised payment gateway providers (such as FPX, DuitNow, and e-wallet providers) solely to process your deposits and withdrawals.
• KYC Service Providers: Identity verification documents may be shared with verified third-party KYC service providers for identity verification purposes only.
• Statutory Authorities: Dewa99 may be required to disclose certain information to government authorities, law enforcement, or courts when mandated by Malaysian law.
• Technical Service Providers: Technology service providers (hosting, cybersecurity, analytics) involved in platform operations may have limited access to data required to carry out their services, subject to strict confidentiality agreements.

The dewa99 platform uses cookies and similar tracking technologies to enhance the user experience, ensure session security, and understand how members interact with our platform. The following are the types of cookies we use:

You can manage your cookie settings through your web browser at any time. Please note, however, that disabling certain cookies — particularly session cookies and security cookies — may affect the functionality of the dewa99 platform and your login experience.

Dewa99 continuously invests in the latest security infrastructure to protect the personal data of all members. The technical and organisational security measures we implement include:

• 256-bit SSL/TLS Encryption — All communications between your device and dewa99 servers are encrypted using the highest-grade encryption protocols.
• Database Encryption — Sensitive data such as banking information and KYC documents are encrypted at rest using the AES-256 algorithm.
• Two-Factor Authentication (2FA) — An additional security layer for account login, available and encouraged for all dewa99 members.
• 24/7 Continuous Monitoring — A threat detection system operates around the clock to identify and respond to any unauthorised access attempts.
• Role-Based Access Control — Internal access to member data is restricted to staff who require the information to perform their duties only.
• Regular Security Audits — dewa99 conducts regular security assessments and penetration testing by independent cybersecurity experts.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have certain rights regarding your personal information held by dewa99. These rights include:

• Right to Access: You have the right to request a copy of the personal information we hold about you. Access requests will be processed within 21 business days.
• Right to Rectification: If the personal information we hold about you is inaccurate or outdated, you have the right to request a correction at no additional charge.
• Right to Withdraw Consent: You may withdraw consent for certain data processing (particularly marketing communications) at any time via your account settings or by contacting our support team.
• Right to Request Erasure: You may request the deletion of your account and personal data, subject to record-keeping obligations required by law.
• Right to Object: You have the right to object to the processing of your personal data for specific purposes, including direct marketing.

To exercise any of the above rights, please contact the dewa99 customer support team through the official channels available on the platform. We will endeavour to process your request promptly and within the applicable time limits.

Dewa99 retains members' personal information only for as long as necessary to fulfil the purpose of data collection or as required by applicable Malaysian law. Our data retention period guidelines are as follows:

• Financial Transaction Records: Retained for a minimum of 7 years in accordance with anti-money laundering (AMLA) legal requirements and Malaysian financial regulations.
• KYC Documents: Retained for the duration of the active account plus 5 years after account closure.
• Account Activity Log: Retained for 2 years from the date of activity for security and dispute resolution purposes.
• Support Communication Data: Retained for 3 years after the last interaction for quality control and reference purposes.
• General Account Information: Retained for the duration of the active account and deleted within 90 days after a valid account closure request is processed.

Upon expiry of the retention period, your personal data will be securely deleted or anonymised in accordance with the data deletion procedures established by dewa99.

The dewa99 platform may contain links to third-party websites or services in certain contexts. Please note that dewa99 has no control over the privacy practices of those third-party websites and is not responsible for their content or privacy policies.

We encourage you to review the privacy policy of every third-party website or service you visit, especially before providing any personal information to them. This dewa99 privacy policy applies only to information collected through the dewa99 platform.

Dewa99 reserves the right to update or amend this privacy policy at any time to reflect changes in operational practices, legal requirements, or platform improvements. Any changes made will take effect immediately upon being posted on the platform.

For material changes — that is, changes that significantly affect your privacy rights — dewa99 will provide advance notice of at least 7 days before the changes take effect via:

• In-platform pop-up notifications upon login.
• Email to the address registered in your account.
• A clear notice on the dewa99 website's home page.

Continued use of the dewa99 platform after any changes take effect will be considered your acceptance of the updated privacy policy. If you do not agree with the changes, please stop using the platform and contact our support team to process the closure of your account.

If you have any questions, concerns, or complaints regarding this privacy policy or how dewa99 handles your personal information, we encourage you to contact our customer support team. We are always ready to assist and will endeavour to respond to every enquiry in a timely manner.

You may also refer to the FAQ us for answers to frequently asked questions about privacy and account security. For issues related to responsible gaming, please visit the Responsible Gaming page.