Privacy Policy

This Privacy Policy ("Policy") describes how dewa89 ("the Platform", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes personal data relating to individuals ("Users", "Players", "you", "your") who access or use the online gaming services available at dewa89.lat.

dewa89 is committed to protecting the privacy and personal data of all users of the Platform. We recognise that players in Malaysia — including those accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across the country — entrust us with sensitive personal and financial information, and we take that responsibility seriously.

This Policy applies to all personal data processing activities undertaken by dewa89 in connection with the Platform, including data collected through the website, account registration, payment processing, customer support interactions, and marketing communications where applicable.

By registering an account or using any feature of the Platform, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.

For the purposes of this Policy, the following terms carry the meanings set out below:

dewa89 collects personal data in several distinct categories depending on the nature of your interaction with the Platform. The following describes each category and the specific data points it encompasses.

3.1 Account Registration Data

When you register an account on dewa89, we collect the information you provide directly, including:

• Full legal name as it appears on government-issued identification
• Email address and mobile telephone number
• Date of birth (used for age verification — 21+ requirement)
• Country and city of residence
• Username and encrypted password
• Currency preference (Malaysian Ringgit / MYR by default)

3.2 KYC & Identity Verification Data

As part of our regulatory obligations, we collect the following identity verification documents when you initiate your first withdrawal or when we determine verification is required:

• Scanned or photographed copy of government-issued photo identification (Malaysian NRIC / MyKad, Passport, or Driver's Licence)
• Proof of residential address (utility bill, bank statement, or official correspondence dated within three months)
• Selfie photograph with identity document
• Payment method verification evidence (e-wallet screenshot, bank statement showing account registration in your name)

3.3 Financial & Transaction Data

We process financial data in connection with your use of our deposit and withdrawal facilities, including:

• Transaction amounts, dates, and reference numbers
• Payment method identifiers (e-wallet registered name/number, FPX bank code, cryptocurrency wallet addresses — partial where applicable)
• Deposit and withdrawal history
• Balance information and wagering activity records

dewa89 does not store full bank account numbers, card numbers, or e-wallet passwords. Payment authentication is handled by the relevant payment service provider (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency networks).

3.4 Gaming Activity Data

We record data about your gaming and wagering activity on the Platform, including game session timestamps, bet amounts, game outcomes, sports betting selections, bonus usage, and wagering requirement progress. This data is used for account management, dispute resolution, bonus auditing, and responsible gambling monitoring purposes.

3.5 Technical & Device Data

We automatically collect certain technical information when you access the Platform, including:

• IP address and approximate geographic location derived from IP data
• Device type, operating system, and browser version
• Session timestamps and session duration
• Referring URL and navigation path through the Platform
• Error logs and performance diagnostics

3.6 Communications Data

When you contact our customer support team via live chat or email, we retain records of those communications — including the content of your messages, timestamps, and our responses — for quality assurance, compliance, and dispute resolution purposes.

dewa89 collects personal data through the following means:

• Direct collection: Information you provide when registering, completing KYC verification, depositing funds, contacting support, updating account settings, or responding to surveys.
• Automated technical collection: Data gathered automatically as you use the Platform, including session logs, device identifiers, and IP address data.
• Cookie-based collection: Data gathered through cookies and similar technologies placed on your device when you visit the Platform. See Section 8 for full details.
• Third-party sources: In limited circumstances, we may receive data from payment service providers, identity verification agencies, fraud detection services, and licensing regulatory bodies to supplement our own records. We only receive data from third parties where there is a legitimate basis for doing so.

dewa89 processes personal data for the following specific purposes:

dewa89 processes personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between dewa89 and you — including account creation, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC verification, AML reporting, and data retention requirements under our operating licence.
• Legitimate interests: Processing carried out for our legitimate business interests where these are not overridden by your interests or rights — including fraud detection, platform security, and aggregated analytics for product improvement.
• Consent: Where we have obtained your explicit, informed consent for a specific processing purpose — including direct marketing communications. Consent-based processing may be withdrawn at any time without affecting prior processing.

dewa89 does not sell your personal data. We share personal data only with the following categories of recipients and only to the extent necessary for the stated purpose:

7.1 Payment Service Providers

We share transaction-relevant data with payment processors operating the methods you select — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX (Maybank, CIMB, Public Bank, Hong Leong Bank), 7-Eleven CLiQQ, and cryptocurrency network operators. These providers act as independent data controllers for their own services and operate under their own published privacy policies.

7.2 Identity Verification & Fraud Detection Services

We share identity data with authorised third-party KYC and AML compliance service providers for the purpose of verifying your identity and detecting fraudulent activity. These providers process data solely under our instruction and are contractually bound to maintain appropriate data security standards.

7.3 Game Content Providers

We share session-level gaming data with our licensed game content providers to enable game delivery, ensure fair play, and process game results. Game providers do not receive your name, contact details, or payment information unless specifically required by the game architecture.

7.4 Regulatory & Law Enforcement Bodies

We may disclose personal data to our licensing authority, relevant regulatory bodies, and law enforcement agencies where we are legally required to do so, or where disclosure is necessary to prevent or report criminal activity including money laundering, fraud, or underage gambling.

7.5 Professional Advisers

We may share data with our legal advisers, accountants, and auditors on a need-to-know basis and subject to professional confidentiality obligations.

dewa89 uses cookies and similar technologies to enable core Platform functionality, maintain your login session, and gather aggregated usage analytics. The following categories of cookies are in use:

You may control cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from using the Platform. dewa89 does not currently use cross-site advertising or behavioural retargeting cookies.

dewa89 retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law and our regulatory licensing obligations.

• Active account data: Retained throughout the period your account remains open and active.
• KYC and identity verification records: Retained for a minimum of five (5) years following account closure, as required by applicable AML regulatory frameworks.
• Transaction and financial records: Retained for a minimum of five (5) years following the transaction date for compliance and audit purposes.
• Gaming activity logs: Retained for a minimum of three (3) years from the date of the relevant session for dispute resolution and regulatory compliance purposes.
• Customer support communications: Retained for up to three (3) years from the date of the interaction, unless a longer period is required for an ongoing dispute or regulatory matter.
• Marketing consent records: Retained for the duration of your consent, and for a reasonable period following withdrawal of consent as evidence of the consent being granted.

Following expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification.

dewa89 implements a multi-layered approach to data security designed to protect your personal information against unauthorised access, loss, misuse, alteration, and destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encryption at rest for sensitive personal and financial data stored on our infrastructure
• Two-factor authentication (2FA) available to all registered Players for account access security
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Real-time intrusion detection and anomaly monitoring on Platform infrastructure
• Regular third-party security audits and penetration testing of Platform systems
• Segregated data architecture separating player funds data from operational systems

While we employ comprehensive security measures, no data transmission over the internet or storage system can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your account credentials. If you believe your account has been accessed without authorisation, please contact our support team immediately at [email protected].

As a data subject, you hold the following rights with respect to your personal data held by dewa89. These rights may be exercised by contacting our support team through the channels listed in Section 16.

We will respond to data rights requests within thirty (30) days of receipt. We may ask you to provide identity verification before processing a rights request. Rights requests should be submitted to [email protected] with the subject line "Data Rights Request".

dewa89 may transfer personal data to, and process personal data in, countries outside of Malaysia in connection with our Platform operations — including to server infrastructure providers, KYC service providers, game content providers, and our licensing regulatory authority.

Where personal data is transferred internationally, we ensure that appropriate safeguards are in place to protect your data in a manner consistent with applicable data protection standards. Safeguards may include:

• Contractual data processing agreements incorporating standard data protection clauses with all third-party processors
• Transfers to jurisdictions that maintain an adequate level of data protection as assessed by applicable frameworks
• Technical security measures ensuring that data is protected throughout the transfer process

Details of specific international transfer arrangements applicable to your data are available on request by contacting our support team.

The Platform integrates with a number of third-party services to deliver our gaming and payment infrastructure. These include:

• Payment providers: Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected banks (Maybank, CIMB, Public Bank, Hong Leong Bank), 7-Eleven CLiQQ, and cryptocurrency networks. These services operate under their own published privacy policies and terms of service.
• Game providers: Licensed casino game studios and software providers who supply slot games, live dealer content, and sports data feeds to the Platform.
• KYC and identity verification providers: Third-party services used to verify identity documents and assess compliance risk.
• Platform infrastructure providers: Cloud hosting, CDN, and database services that underpin the technical operation of the Platform.

dewa89 is not responsible for the privacy practices of third-party service providers operating independently of our data processing instructions. We encourage you to review the privacy policies of any third-party service you use in connection with your activity on the Platform.

The Platform is strictly intended for individuals aged 21 years and above. dewa89 does not knowingly collect, process, or retain personal data from any individual under the age of 21.

If we become aware that personal data has been collected from a person under the minimum age requirement, we will take immediate steps to delete that data and close the associated account. All deposits held on an underage account will be handled in accordance with our Terms & Conditions and applicable regulatory requirements.

Parents and guardians who become aware that a minor has accessed the Platform or provided personal data to us should contact our support team immediately at [email protected] so that we can take appropriate action.

dewa89 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or Platform functionality.

Where changes are material — such as those affecting the categories of data we collect, the purposes for which we use it, or your rights as a data subject — we will notify registered Players via email to their registered address and/or through a prominent notice on the Platform prior to the updated Policy taking effect.

The "Last Updated" date displayed at the top of this page and in the page hero reflects when the current version of this Policy was last revised. We recommend that all players review this Policy periodically. Continued use of the Platform following publication of an updated Policy constitutes acceptance of the revised terms.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, have a concern about how we handle your personal information, or wish to submit a data protection complaint, please contact our support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week through the Platform interface. Suitable for general privacy enquiries and immediate account-related concerns.
• Email — Privacy Enquiries: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate. We aim to respond to privacy-related correspondence within 5 business days.

For responsible gambling concerns and self-exclusion requests, please also see our Responsible Gambling page. For a full understanding of your contractual obligations as a Platform user, please review our Terms & Conditions.

For general questions about Platform features, deposits, and promotions, our FAQ page covers the most common player enquiries.