Dewa39 Privacy Policy – Your Personal Data Protection

Dewa39 cares about the privacy of every individual who uses our platform. This Privacy Policy is written clearly and in plain language because we believe every user has the right to know exactly how their information is managed. This is not merely a legal document — it is our promise to you.

As an online casino platform serving users in Malaysia, dewa39 is bound by the Personal Data Protection Act 2010 (PDPA) and international data security standards. We ensure that every step of data collection, storage, and use is carried out responsibly, securely, and transparently.

By registering an account or continuing to use the dewa39 platform, you consent to the terms set out in this Privacy Policy. If you do not agree, you may stop using our services and contact the support team to close your account and request deletion of your personal data.

Dewa39 collects several categories of personal information to enable us to provide a safe, fair, and high-quality service. We only collect data that is genuinely necessary and do not gather information beyond what is required for platform operations.

All information you provide during registration, the KYC verification process, or when contacting customer support is collected and stored securely. We do not collect sensitive information such as passwords in plain text — passwords are always stored in an irreversible hashed format.

The personal data we collect is used solely for purposes related to the operation of the dewa39 platform and the delivery of the best service to you. The following are the specific purposes for which your data is used:

• Account Management: Creating, verifying and maintaining your account; enabling secure login and profile management.
• Transaction Processing: Processing deposits, withdrawals and all financial transactions made through our platform accurately and securely.
• Legal Compliance: Meeting KYC, AML (Anti-Money Laundering) and reporting obligations to relevant authorities in accordance with Malaysian law.
• Platform Security: Detecting and preventing fraud, unauthorised access, bot usage and any activity that violates dewa39's Terms and Conditions.
• Service Improvement: Analysing usage patterns in aggregate (without identifying individuals) to improve user experience, platform performance and the range of games offered.
• Service Communications: Sending important notifications regarding your account, transactions, security updates and policy changes that affect you.
• Responsible Gaming: Monitoring gameplay patterns to identify early signs of problem gambling and provide proactive support to members who need it.
• Marketing (with consent): Sending information about promotions, bonuses and exclusive offers — only if you have given explicit consent to receive them.

Dewa39 does not share, sell, or disclose members' personal data to third parties except in the limited circumstances described below. In all cases of data sharing, we ensure that the receiving party is bound by confidentiality and data protection obligations equal to or higher than our own standards.

• Payment Service Providers: Required transaction information is shared with licensed payment processors such as FPX, DuitNow, Touch 'n Go and cryptocurrency service providers solely for the purpose of processing your transactions.
• Game Providers: Minimum technical data required to ensure smooth gameplay is shared with our third-party game software providers, who have undergone rigorous security vetting.
• Authority: dewa39 will disclose information to legal authorities, regulatory bodies, or law enforcement agencies when required by court order or applicable law.
• Identity Verification Service: During the KYC process, your identification documents are verified through a licensed identity verification service provider that complies with international data security standards.
• Professional Advisors: In certain circumstances such as audit requirements or legal advice, selected information may be shared with law firms or accountants bound by professional confidentiality obligations.

In all situations above, the amount of data shared is limited to the minimum required (data minimization principle). We do not disclose more than is strictly necessary for the stated purpose.

Protecting your personal data from unauthorised access, leaks or misuse is dewa39's absolute priority. We continuously invest in the latest security technologies and procedures to ensure our platform remains secure at all times.

The technical security measures we implement include:

• Data-in-Transit Encryption: All communications between your device and dewa39 servers are encrypted using TLS 1.3 protocol with 256-bit SSL certificates.
• Data-at-Rest Encryption: Data stored in our databases is encrypted using AES-256 encryption, ensuring it cannot be read even in the event of unauthorized physical access.
• Two-Factor Authentication (2FA): An additional authentication layer is available for all member accounts to prevent unauthorised access even if a password is compromised.
• 24/7 Security Monitoring: Automated monitoring systems operate around the clock to detect anomalies, intrusion attempts, and suspicious activity.
• Strict Access Control: Only specifically authorised staff may access user data, and all access is recorded in an immutable audit log.
• Regular Security Testing: dewa39 conducts regular penetration testing and security audits by independent third parties.

Dewa39 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us remember your preferences and ensure the platform operates at its best.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session security, and navigation. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Storing your chosen settings such as display language, time zone and interface preferences to ensure a consistent experience.
• Analytics Cookies: Collecting information about how you use our platform in aggregate and anonymised format to help us understand usage patterns and improve our services.
• Security Cookies: Helping to identify and prevent fraudulent activity, including detecting suspicious login attempts and protecting your account.

You can control and manage cookie settings through your internet browser preferences. However, disabling certain cookies may affect the functionality and experience of the dewa39 platform. For more information on managing cookies in your browser, please refer to your browser's help documentation.

As a dewa39 member, you hold the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA) and our internal policies:

• Right of Access: You have the right to obtain a copy of the personal data we hold about you. Requests can be submitted through our support team and will be processed within 14 business days.
• Right to Rectification: If your personal data is inaccurate or outdated, you have the right to request a correction. We encourage you to update your account profile regularly.
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data. Such requests are subject to our legal obligations to retain certain records.
• Right to Object to Processing: You have the right to object to the use of your data for direct marketing purposes at any time, and we will honor that choice immediately.
• Right to Withdraw Consent: You may withdraw consent previously given for specific data processing at any time, without affecting the lawfulness of processing carried out before that withdrawal.
• Right to Data Portability: You may request your personal data in a machine-readable format for transfer to another service provider, subject to technical compatibility.

To exercise any of the above rights, please contact the dewa39 support team via Live Chat or email at [email protected]. All requests will be handled seriously and responded to within a reasonable timeframe. We may need to verify your identity before processing certain requests to protect your account security.

Dewa39 retains your personal data only for as long as necessary to fulfill the original purpose of collection, or as required by applicable laws and regulatory obligations. Once the retention period expires, data will be securely deleted or anonymized.

• Active Account Data: Retained for the duration your dewa39 account remains active and updated on an ongoing basis.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date in accordance with Malaysia's financial and tax legislation.
• KYC Documents: Retained for a minimum of 5 years after the business relationship ends, in accordance with AML legal requirements.
• Support Communication Logs: Retained for 3 years for reference and dispute resolution purposes.
• Technical Log Data: Security and access logs are retained for 12 months, after which they are automatically deleted.
• After Account Closure: Your personal data will be deleted or anonymized within 90 days of an account closure request, except for data required to be retained by law.

All data deletion is carried out using secure erasure methods that ensure data cannot be recovered. dewa39 conducts regular reviews of stored data to ensure no data is retained beyond the required retention period.

Dewa39 reserves the right to amend, update, or improve this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or enhancements in how we protect your data. We are committed to maintaining full transparency in communicating any such changes to you.

• Material changes to this Privacy Policy will be communicated via in-account notifications or email at least 14 days before taking effect.
• The "Last Updated" date at the top of this page will always be refreshed whenever changes are made.
• Continued use of the dewa39 platform after changes take effect constitutes your acceptance of the updated Privacy Policy.
• Previous versions of the Privacy Policy can be requested from our support team for reference purposes.

If you have any questions, concerns or requests regarding this Privacy Policy or how dewa39 handles your personal data, our team is ready to assist. We take every enquiry seriously and are committed to providing accurate and meaningful responses.

• Live Chat: The fastest way to get help — available 24/7 via the chat icon in the corner of the platform.
• Email: [email protected] — privacy and personal data requests are targeted to be answered within 48 business hours.
• FAQ Page: Visit FAQ page us for answers to common questions about privacy and account security.

For formal requests relating to personal data rights such as access, correction, or deletion, please clearly state the type of request and include the required identity verification information so we can process your request safely and accurately.