Privacy Policy dewa19 – How We Protect the Personal Data of Malaysian Members

dewa19 is an online casino gaming platform operating exclusively for Malaysian players. We understand that our members' trust is the most valuable asset we hold – and that trust is built on transparency in how we handle your personal information.

Privacy is more than just a word in a formal document for dewa19. It is a working culture embedded in every operational decision we make – from how we design our technical systems to the training we provide every member of our team. We believe that every Malaysian player who entrusts us with their personal information deserves the best protection and responsible data management.

This Privacy Policy is written in Bahasa Melayu and is intended solely for readers in Malaysia. We have made every effort to avoid overly technical legal language so that every member can clearly understand their rights and how we handle their data. If you have any questions after reading this document, the support team at dewa19 available to assist 24 hours a day via live chat in Bahasa Melayu.

dewa19 only collects data that is strictly necessary to deliver our services safely and effectively. We do not gather excessive or irrelevant information. The following are the types of data we collect:

We do not collect sensitive information such as medical details, religious beliefs, or political views. All financial data you provide during the deposit process — including e-wallet and banking account details — is processed directly through secure payment channels and is not stored within dewa19's systems.

Member personal data dewa19 is collected through several different methods. We want you to know exactly where your information comes from so there are no surprises or confusion:

• During Registration: When you complete the Dewa19 registration form, you directly provide your full name, Malaysian phone number, email address, and date of birth. This is data you submit voluntarily and with full awareness.
• During Identity Verification: If Dewa19 requires further identity verification, you may need to upload a copy of your MyKad or other supporting documents. These documents are stored in a secure server environment and accessed only by our compliance team.
• During Financial Transactions: Every deposit and withdrawal record — including the amount, timestamp, and payment method used (such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX) — is automatically retained as a transaction record required for financial compliance.
• Automatically During Use: When you browse the Dewa19 website, our systems automatically log your IP address, browser type, device used, pages visited, and the duration of each session. This helps us maintain security and continuously improve the user experience.
• Via Cookies: dewa19 uses cookie technology to enhance the user experience. Further details about cookies are explained in Section 7 of this document.
• Via Support Communications: When you contact the Dewa19 customer support team via live chat or email, those conversations are recorded for quality control purposes, team training, and as a record should any dispute arise at a later date.

dewa19 uses members' personal data only for legitimate, clearly stated purposes. We will not use your data for any other purpose without notifying you in advance and obtaining your consent where required. The primary purposes for which we use your data are as follows:

• Account Management: Creating, verifying, and maintaining your Dewa19 member account, including the login process, password resets, and identity verification.
• Transaction Processing: Processing all deposits (via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX, and others) and withdrawal requests securely and efficiently.
• Legal Compliance: Fulfilling our legal obligations under applicable Malaysian law, including the requirements of the Anti-Money Laundering Act (AMLA) and PDPA 2010.
• Security & Fraud Prevention: Detecting, investigating, and preventing any fraudulent activity, money laundering, account abuse, or other security threats against the dewa19 platform and its members.
• Customer Support: Enables the dewa19 customer support team to assist you with any enquiries, technical issues, or disputes using complete and accurate information.
• Service Improvement: Analysing usage patterns on an aggregate basis (without identifying any specific individual) to understand the features players enjoy most and to continuously improve the quality of the dewa19 platform.
• Account-Related Communications: Sends important account notifications such as transaction confirmations, security alerts, and policy updates that affect dewa19 services.
• Responsible Gaming: Monitoring gameplay patterns to identify members who may need responsible gaming support and reaching out to them with helpful information.

dewa19 does not sell, rent, or trade members' personal data to any third party for commercial or marketing purposes. This is our absolute commitment to every Malaysian member who trusts our platform.

However, there are limited situations where we need to share certain data with specific parties in order to operate our services. Such disclosures occur only under the following circumstances:

• Technical Service Providers: Companies that help us operate dewa19's technical infrastructure — such as cloud service providers and payment processing companies — may need to access certain data to perform their functions. All such providers are bound by strict confidentiality agreements.
• Game Providers: Game providers such as Pragmatic Play and Evolution Gaming, which supply games to the Dewa19 platform, receive only the minimum data required to enable a gaming session to function. They do not receive members' full personal information.
• Legal Requirements: dewa19 may be required to disclose member data to the relevant Malaysian authorities when mandated by law — such as requests from the police, courts, or the Department of the Director General of Personal Data Protection — without requiring member consent in such circumstances.
• Protection of dewa19's Rights: In the event of legal disputes, fraud, or serious security threats, dewa19 reserves the right to disclose relevant data to lawyers, auditors, or authorities to protect the rights and interests of the platform and its other members.

In all of the above situations, dewa19 discloses only the minimum data necessary for the relevant purpose and ensures that any party receiving the data is bound by confidentiality obligations equivalent to the standards we uphold ourselves.

dewa19 continuously invests in the latest security technologies and procedures to protect our members' personal data. The following are the key technical and organisational measures we have in place:

• 256-bit SSL Encryption: All communications between your browser and dewa19's servers are encrypted using TLS protocol with 256-bit keys — the same standard used by Maybank2u and CIMB Clicks.
• Hashed Password Storage: dewa19 member account passwords are never stored in plain text. We use strong one-way hashing algorithms with randomised "salts", meaning that even if our data were compromised, passwords cannot be decrypted.
• Role-Based Access Control: Dewa19 staff are granted access only to the data necessary to perform their specific duties. No individual staff member has unrestricted access to all member data without a multi-level approval process.
• Multi-Layer Firewall: Dewa19's servers are protected by a firewall system that blocks unauthorised access, along with an intrusion detection system that monitors traffic 24 hours a day.
• Regular Security Audits: Dewa19 conducts regular penetration testing and security audits by independent experts to identify and address any vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): dewa19 offers a two-factor authentication option for members who wish to add an extra layer of security to their account. We strongly encourage all members to enable this feature.

Website dewa19 uses cookies — small text files stored on your device by your web browser — to enhance your user experience and enable certain features to function properly. The following are the types of cookies used by Dewa19:

• Essential Cookies (Required): These cookies are required for the core functionality of the dewa19 platform, such as maintaining your login session as you browse the site, managing your account balance during a gaming session, and protecting against CSRF attacks. These cookies cannot be disabled — without them, the platform will not function properly.
• Preference Cookies: These cookies remember your preferences — such as your display language, last-used betting chip size, and other interface settings — so you don't have to reconfigure them each time you visit Dewa19.
• Analytical Cookies: Dewa19 uses aggregated data (not individual personal data) from analytics cookies to understand how players use our platform — which pages are most popular, what the average session length is, and where users most commonly drop off. This data helps us make informed, evidence-based decisions to improve the experience for all players.
• Security Cookies: These cookies help us identify and prevent fraudulent activity by detecting suspicious access patterns and verifying that your current session is legitimate and not the result of a cyberattack.

You can control and manage cookies through your browser settings. However, disabling essential cookies may prevent you from accessing or using certain features of the platform. dewa19 entirely.

Under Malaysia's Personal Data Protection Act (PDPA) 2010 and our internal policies dewa19, as a member, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

To submit any request relating to the rights above, please contact our data protection team dewa19 via email at [email protected] with the subject line "Personal Data Rights Request". Please include your full name and account number to help us process your request promptly. We will respond within 14 business days of receiving your request.

dewa19 retains members' personal data only for as long as necessary for the original purpose of collection, or for as long as required by Malaysian law, whichever is longer.

• Active Account Data: For the duration your Dewa19 account remains active, plus the mandatory retention period following account closure.
• Financial Transaction Records: A minimum of 7 years from the transaction date, in accordance with Malaysia's Anti-Money Laundering Act requirements.
• Support Communication Records: 3 years from the date of last communication, for reference and dispute resolution purposes.
• Security & Access Logs: 12 months, for security investigation and fraud prevention purposes.
• Marketing Data: Until you withdraw your consent, or for 3 years from the date consent was given if there has been no interaction during that period.

Once the retention period expires or when the data is no longer needed, dewa19 will securely delete or anonymise such data using industry-approved data deletion procedures.

In operating the platform dewa19, some members' personal data may be processed or stored on servers located outside Malaysia — for example, by international cloud service providers we use for our technical infrastructure.

When your data is transferred outside of Malaysia, dewa19 ensure that:

• Such transfers are carried out using recognised protective mechanisms — such as data processing agreements containing standard contractual clauses, or transfers to countries recognised as providing an adequate level of data protection.
• All parties that receive data are contractually bound to protect it to a standard equal to or exceeding the requirements of Malaysia's PDPA 2010.
• Data transfers only take place when strictly necessary to deliver the services you use.

Platform dewa19 is strictly for individuals aged 18 and above. We do not knowingly collect any personal data from anyone under the age of 18.

Should we discover that we have collected data from someone under the age of 18 without appropriate age verification, we will immediately take steps to delete that data and close the account in question. If you believe a child has registered an account on Dewa19 using inaccurate information, please contact us immediately via live chat or our support email.

dewa19 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this page
• Sending notifications to members via email or in-platform Dewa19 notifications
• For particularly significant changes, we may ask you to review and actively agree to the new version of the Privacy Policy before continuing to use the platform

We encourage you to review this Privacy Policy page periodically to ensure you are always up to date on how we protect your data. Your continued use of the platform dewa19 after any amendment takes effect signifies your acceptance of those changes.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way dewa19 manage your personal data, we encourage you to reach out to us directly. We are committed to handling every enquiry seriously and professionally.

If you are not satisfied with our response to your privacy complaint, you have the right to lodge a complaint with the Department of the Director General of Personal Data Protection, Ministry of Communications Malaysia, which is the PDPA regulatory authority in Malaysia.