Privacy Policy Dewi138 — Member Personal Data Protection

1 Information We Collect

Dewi138 collects your personal data through several different methods. We only collect information that is genuinely necessary to provide a safe, seamless, and responsible service to all members.

Account Registration Information

• Full name as stated on your official identification document.
• Date of birth for age verification purposes (18 years and above).
• Your active email address and mobile number.
• Username and password chosen by you.
• Your full current residential address.

Financial Information

• Malaysian bank account details (bank name, account number) for deposit and withdrawal processing.
• History of deposit and withdrawal transactions on the platform.
• Payment methods used, including digital wallets such as Touch 'n Go eWallet or GrabPay.

Identity Verification Documents (KYC)

• A copy of MyKad, passport, or equivalent official identification document.
• Bank statement or other supporting documents when required for the KYC process.
• A selfie or facial photo for identity verification purposes when required.

Technical & Usage Data

• Your IP address, browser type, and device information.
• Activity log data including login times, games played, and betting records.
• Cookies and similar tracking technologies to enhance the user experience.

2 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. We do not use your data for any other purpose without your consent. Here are the key ways we use the information provided:

• Account management: Creating and maintaining your account, processing secure logins, and enabling you to use all platform features seamlessly.
• Financial processing: Verifying and processing all your deposits and withdrawals accurately and promptly to your registered bank account.
• Legal compliance: Fulfilling compliance obligations including KYC procedures, anti-money laundering (AML) prevention, and regulatory reporting requirements.
• Platform security: Detecting and preventing fraud, unauthorised access, collusion, and any suspicious activity on the platform.
• Responsible gaming: Monitoring gaming patterns to identify members who may need assistance and offering appropriate responsible gaming tools.
• Service improvement: Analysing how the platform is used to continuously improve user experience, technical performance, and game offerings.
• Service communications: Sending important account-related notifications, relevant promotions, and platform updates via email or SMS.

3 Summary of Data Types and Collection Purposes

The table below provides a clear overview of each data category we collect and its specific purpose:

4 Data Sharing with Third Parties

Dewi138 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, there are limited situations where we may need to share some of your data with other parties:

• Payment providers: Required transaction information is shared with the payment processors we use (FPX, digital wallets) solely to process your financial transactions.
• Game providers: Username and account ID are shared with game software providers integrated with the dewi138 platform to enable you to play.
• Authority: We will disclose data when required by law, court order, or a lawful directive from the relevant authorities.
• Security audit: Independent cybersecurity firms involved in auditing our systems are bound by strict confidentiality agreements.

Every third party that receives data from dewi138 is required to comply with data protection standards no less stringent than our own policy. We have zero tolerance for any unauthorised use of our members' data by service partners.

5 Data Security Measures

Dewi138 continuously invests in security infrastructure to ensure your data remains protected at all times. Key security measures we have implemented include:

• 256-bit SSL Encryption: All data transmitted between your device and dewi138 servers is encrypted using the latest TLS/SSL protocols that cannot be easily compromised.
• Stored data encryption: Sensitive data such as bank details and KYC information is stored in encrypted format on secure servers with restricted access.
• Two-factor authentication (2FA): You can enable 2FA on your account for an additional layer of security during login.
• Continuous monitoring: Our security system monitors account activity 24/7 and will send you an alert if any unusual activity is detected.
• Regular security audits: Our platform undergoes regular independent security audits conducted by internationally accredited cybersecurity firms.
• Internal access controls: dewi138 staff only have access to data necessary for their specific duties, with all access logged and monitored.

6 Your Rights as a Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and our own policies, you have the following rights regarding your personal data held by Dewi138:

• Right of Access You have the right to request a copy of all personal data we hold about you at any time.
• Right to Rectification If any of your information is inaccurate or outdated, you have the right to request immediate correction.
• Right to Erasure You may request the deletion of your personal data, subject to legal retention requirements and AML compliance.
• Right to Object You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability You may request your data in a machine-readable format for transfer to another service provider.
• Right to Restriction of Processing You may request that we restrict how we use your data in certain situations provided for by law.

To exercise any of the above rights, contact the dewi138 support team via Live Chat. Your request will be processed within 14 business days.

7 Cookie Policy

Dewi138 uses cookies to enhance your experience on our platform. Cookies are small text files stored in your browser when you visit our website. The following are the types of cookies we use:

• Essential cookies: Required for the platform to function properly — including login session verification and security preferences. These cookies cannot be disabled.
• User preference cookies: Saving your language settings, display theme, and other personal preferences so you do not need to reset them each time.
• Analytics cookies: Helping us understand how the platform is used in aggregate and anonymised form for continuous improvement purposes.

You can manage or disable non-essential cookies through your browser settings. However, disabling essential cookies may affect your ability to use certain platform features.

8 Data Retention Period and Policy Changes

Dewi138 retains your personal data for as long as your account is active and for the period required by law following account closure. Specifically:

• Financial transaction data and KYC records are retained for a minimum of 7 years in accordance with Malaysia's AML compliance requirements.
• Game activity logs are retained for 3 years for dispute resolution and audit purposes.
• Basic account information is retained for 2 years after account closure before being securely deleted.
• Marketing and communication data is deleted immediately upon withdrawal of consent.

Dewi138 reserves the right to update this Privacy Policy from time to time. Any significant changes will be communicated to you via your registered email or in-platform notification at least 14 days before the changes take effect. Continued use of the platform after that date constitutes your acceptance of the updated policy.