Privacy Policy

This Privacy Policy (hereinafter "Policy") sets out the basis on which Dewa99 (hereinafter "Dewa99", "we", "us", "our") collects, processes, stores, and discloses personal data obtained from users (hereinafter "User", "you", "your") of the online gaming and sports betting platform operated at https://dewa99.cam (hereinafter the "Platform").

Dewa99 is committed to protecting the privacy and security of all personal data it holds in connection with the provision of its services to registered players across Malaysia, including users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond.

This Policy should be read in conjunction with our Terms and Conditions, which govern the contractual relationship between Dewa99 and its registered users. By accessing the Platform or registering an account, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

Dewa99 is the Data Controller responsible for the Personal Data collected and processed through the Platform. As Data Controller, Dewa99 determines the purposes for which your Personal Data is used and the means by which it is processed.

Dewa99 maintains appropriate technical and organisational measures to protect Personal Data against unauthorised access, alteration, disclosure, or destruction, and ensures that all Data Processors engaged on its behalf operate under contractual obligations that meet equivalent standards of data protection.

Where required by applicable data protection law, Dewa99 maintains records of its data processing activities and makes these available to competent supervisory authorities upon lawful request.

Dewa99 collects the following categories of Personal Data in the course of providing its services:

4.1 Registration & Identity Data

4.2 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amount, date, time, and payment method used (e.g., Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, FPX, USDT TRC20);
• Bank account details or e-wallet identifiers submitted for withdrawal processing;
• Win/loss history, wagering activity, and account balance records;
• Any source-of-funds documentation submitted in connection with enhanced due diligence.

4.3 Technical & Usage Data

• IP address, browser type and version, operating system, device type and identifier;
• Pages visited, session duration, click-through patterns, and game interaction logs;
• Geolocation data (approximate, based on IP address) to enforce geographic access restrictions;
• Cookie and tracking technology data as described in Section 9.

4.4 Communications Data

• Records of live chat conversations, email correspondence, and support ticket submissions with Dewa99 customer support;
• Responses to surveys, feedback submissions, and promotional engagement records.

Dewa99 collects Personal Data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or respond to a promotion;
• Automatically through the Platform — via cookies, web beacons, server logs, and similar tracking technologies that record your interactions with the Platform when you visit or use it;
• From third-party service providers — including KYC identity verification vendors, payment processors, fraud detection services, and responsible gambling monitoring systems, where these providers share data with Dewa99 as part of the delivery of contracted services;
• From publicly available sources — where Dewa99 has a legitimate regulatory or compliance reason to verify information provided by a User against publicly accessible records.

Dewa99 processes your Personal Data on the following legal bases:

• Contractual necessity: Processing of identity, contact, financial, and transaction data is necessary to fulfil our contractual obligations to you as a registered user under our Terms and Conditions, including operating your account, processing deposits and withdrawals, and delivering gaming services;
• Legal obligation: Processing of KYC documentation, transaction records, and certain communications data is required to comply with applicable anti-money laundering (AML), counter-terrorism financing (CTF), and data retention regulations;
• Legitimate interests: Processing of technical, usage, and communications data for platform security, fraud prevention, responsible gambling monitoring, and service improvement purposes, where such interests are not overridden by your fundamental rights and freedoms;
• Consent: Processing of your Personal Data for direct marketing communications and the use of non-essential cookies, where your explicit consent has been obtained and you retain the right to withdraw that consent at any time.

Dewa99 uses the Personal Data it collects for the following purposes:

1. Account Management: Creating, maintaining, and securing your registered account; processing login, password reset, and two-factor authentication requests;
2. Service Delivery: Enabling access to casino games, the sportsbook, live casino tables, and all other Platform features; processing bets, calculating winnings, and maintaining accurate account balances;
3. Payment Processing: Facilitating deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, USDT TRC20, Visa, and Mastercard;
4. Identity Verification (KYC): Verifying your identity and age in compliance with applicable regulatory requirements, and confirming the legitimacy of payment methods used;
5. Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, and other forms of abuse on the Platform;
6. Responsible Gambling: Monitoring account activity for indicators of problem gambling behaviour; administering self-exclusion requests, deposit limits, and other responsible gambling tools;
7. Customer Support: Responding to enquiries, resolving account issues, and managing dispute resolution processes;
8. Legal Compliance: Meeting obligations under applicable laws and regulations, including AML/CTF requirements, data protection laws, and any court orders or regulatory directives;
9. Platform Improvement: Analysing aggregated usage data to identify technical issues, optimise performance, and develop new features;
10. Marketing Communications: Sending promotional emails, bonus notifications, and relevant offers to Users who have provided their consent for such communications and have not subsequently opted out.

Dewa99 does not sell, rent, or trade your Personal Data. We may share your data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment Service Providers: Financial institutions and e-wallet operators (including providers supporting Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks) to process deposits and withdrawals on your behalf;
• KYC & Identity Verification Vendors: Regulated third-party providers engaged to verify the authenticity of identity documents submitted during the account verification process;
• Fraud Detection & Security Services: Technology providers that assist Dewa99 in identifying and preventing fraudulent activity, account abuse, and money laundering;
• Responsible Gambling Monitoring Services: Providers that assist Dewa99 in identifying behavioural indicators associated with problem gambling and administering self-exclusion registries;
• IT Infrastructure & Cloud Service Providers: Providers of server infrastructure, database management, and related technology services used to host and operate the Platform;
• Legal & Regulatory Authorities: Competent government agencies, law enforcement bodies, courts, and regulatory authorities where disclosure is required by applicable law, court order, or regulatory directive.

All third parties engaged by Dewa99 as Data Processors are bound by written data processing agreements that require them to process Personal Data only as instructed by Dewa99 and to maintain security standards equivalent to those applied by Dewa99 itself.

The Dewa99 Platform uses cookies and similar tracking technologies to operate correctly, enhance your experience, and gather usage analytics. The following categories of cookies are used:

You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform, though some features dependent on preference cookies may not function as intended. Please note that essential and security cookies cannot be disabled as they are integral to the secure operation of the Platform.

Dewa99 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your registered account, plus a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by applicable financial regulations;
• KYC documents: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is the later;
• Customer support communications: Retained for up to three (3) years from the date of the communication, unless a longer retention period is required in connection with an active dispute or legal proceeding;
• Technical and usage logs: Retained for up to twelve (12) months, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised in accordance with Dewa99's internal data disposal procedures.

Dewa99 operates a platform serving users across Malaysia and, in the course of delivering its services, may transfer Personal Data to third-party service providers whose servers or operational centres are located outside of Malaysia. Such transfers may include data sent to KYC verification vendors, payment processing infrastructure, or cloud hosting providers operating in other jurisdictions.

Where Personal Data is transferred internationally, Dewa99 ensures that adequate safeguards are in place to protect the data to a standard equivalent to that required under applicable data protection law. These safeguards may include contractual clauses, approved data transfer mechanisms, or the use of service providers operating in jurisdictions recognised as offering equivalent data protection standards.

Subject to applicable data protection law and certain exceptions (including where processing is necessary for legal compliance), you have the following rights in relation to your Personal Data held by Dewa99:

To exercise any of the above rights, please contact the Dewa99 compliance team using the contact details set out in Section 16. Dewa99 will respond to all valid data subject requests within 30 calendar days of receipt, or within such extended period as permitted by applicable law where the request is complex or involves a large volume of data.

Please note that certain rights may be subject to limitations where processing is required to fulfil Dewa99's legal obligations, including AML/CTF compliance and record-keeping requirements.

The Dewa99 Platform is strictly intended for individuals aged 21 years and above. Dewa99 does not knowingly collect Personal Data from any person under the age of 21. Age verification is performed as part of the registration process, and additional KYC verification may be required before withdrawal privileges are granted.

If Dewa99 becomes aware that Personal Data has been collected from a person who is under 21 years of age — whether through a failure of the age verification process or through the provision of false age information — the affected account will be immediately suspended, all associated balances will be held pending a compliance review, and the Personal Data collected will be deleted in accordance with applicable data protection obligations.

If you have reason to believe that a person under the age of 21 has accessed the Platform or submitted personal data, please contact Dewa99 support immediately so that appropriate action can be taken.

Dewa99 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the Dewa99 Platform is encrypted using 256-bit SSL encryption;
• Access Controls: Access to Personal Data held by Dewa99 is restricted to authorised personnel only, on a strict need-to-know basis, enforced through role-based access control systems;
• Password Security: Account passwords are stored as salted cryptographic hashes and are never stored in plain text. Two-factor authentication (2FA) is available on all accounts;
• Intrusion Detection & Prevention: The Platform is protected by firewall systems and continuous intrusion detection monitoring to identify and respond to security threats in real time;
• Regular Security Assessments: Dewa99 conducts periodic third-party security audits and vulnerability assessments to identify and remediate potential weaknesses in its technical infrastructure;
• Incident Response: Dewa99 maintains a documented data breach incident response procedure. In the event of a confirmed data breach that poses a risk to affected Users, Dewa99 will notify the relevant Users and, where applicable, competent supervisory authorities within the timeframes required by applicable law.

Dewa99 reserves the right to amend, update, or replace any portion of this Privacy Policy at any time in response to changes in applicable law, regulatory requirements, or our data processing practices. When material changes are made, Dewa99 will:

• Update the "Last Updated" date at the top of this page;
• Where practicable, send a notification to the registered email address of active account holders summarising the nature of the material changes;
• In cases of significant changes to how we use your data, seek fresh consent from affected Users where required by applicable law.

Continued use of the Platform following publication of an updated Privacy Policy constitutes acceptance of the revised terms. Users are encouraged to review this page periodically to remain informed of any changes.

For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your Personal Data by Dewa99, please contact our compliance team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Dewa99 Platform. For immediate data access or account-level enquiries.
• Email: [email protected] — for formal written data subject access requests, rectification requests, deletion requests, or complaints. Responses provided within 30 calendar days of receipt.

When submitting a data-related request by email, please include your full registered name, the email address associated with your Dewa99 account, and a clear description of your request. Dewa99 may need to verify your identity before actioning any data subject request.

For matters relating to your account's terms of use, please refer to our Terms and Conditions. For responsible gambling resources and self-exclusion tools, please visit our Responsible Gambling page.