Privacy Policy dewa99 —
Protection of Your Personal Data

Dewa99 is an online gaming platform operating under the domain dewa99.bio, providing a wide range of gaming entertainment to users across Malaysia. We understand that your trust is our most valuable asset, and that trust begins with responsible and transparent personal data management.

This Privacy Policy is provided to clearly and honestly explain how dewa99 collects, processes, stores and protects your personal information when you register, use or browse our platform. This document also outlines your rights as a data owner and how to exercise those rights.

By registering an account or continuing to use dewa99 services, you consent to the collection and use of your personal data as described in this Privacy Policy. If you do not agree with any part of this policy, you have the right to discontinue use of our platform or contact us for further discussion.

Dewa99 collects various types of personal data to enable us to provide a secure, personalised and high-quality service to every member. The data we collect can be grouped into several main categories:

We may also receive your personal data from legitimate third-party sources such as our payment partners, identity verification service providers and fraud prevention agencies, solely for the purpose of ensuring platform security and integrity.

Personal data collected by dewa99 is used solely for legitimate purposes directly related to the provision of our online gaming platform services. We do not use your data for unrelated purposes without obtaining your consent first.

• Processing account registration and verifying member identity through the established KYC process.
• Processing financial transactions including deposits, withdrawals and bonus payments securely and accurately.
• Providing responsive and effective customer support whenever you need assistance.
• Sending important notifications related to accounts, promotions and service updates via email or SMS.
• Detecting and preventing fraud, money laundering and other illegal activities that may affect the platform.
• Fulfilling the legal and regulatory obligations imposed on dewa99 as an online gaming platform operator.
• Analyzing platform usage patterns for the continuous improvement of the user experience.
• Implementing responsible gaming programs and identifying members who may need support.

We practise the principle of data minimisation — meaning we only collect data that is strictly necessary for the stated purposes, and nothing beyond that. Data that has served its purpose will be deleted or anonymised in accordance with our data retention policy.

Dewa99 understands how sensitive your personal data is. We will not sell, rent or disclose your personal information to third parties except in the following limited and legitimate situations:

• Payment Service Providers — our payment processing partners such as DuitNow, FPX, TNG eWallet, Boost, and GrabPay receive the data necessary to process your financial transactions.
• Technical Service Providers — companies providing infrastructure, hosting, and technical services to dewa99 may have limited access to data for operational purposes only.
• Legal Authorities — we will disclose personal data to the relevant authorities when required by Malaysian law or a valid court order.
• Fraud Prevention Agency — in cases of suspected fraud or illegal activity, relevant data may be shared with the responsible agencies for investigation purposes.

All third parties with whom we share data are required to uphold data security and confidentiality standards equal to or exceeding those we apply ourselves. Comprehensive data protection agreements are signed with every partner before any data sharing takes place.

The security of member personal data is dewa99's highest priority. We continuously invest in the latest security technologies and procedures to ensure your data is protected at all times, whether in transit or at rest.

• 256-bit SSL encryption for all communications between clients and the dewa99 server.
• Passwords are stored using a one-way hashing algorithm that cannot be decrypted by anyone, including dewa99 internal staff.
• Two-factor authentication (2FA) is available to all members as an additional security layer.
• Real-time monitoring of account activity to detect any unauthorized access attempts.
• Regular security audits by independent third parties to identify and address system vulnerabilities.
• Strict role-based access controls for internal staff — only authorised personnel may access specific data.
• A comprehensive incident response plan to ensure any security breach is addressed promptly and effectively.

While we take all reasonable steps to protect your data, no security system can be guaranteed to be completely foolproof. We encourage members to also play an active role in securing their accounts by using strong passwords, enabling 2FA, and not sharing their login credentials with anyone.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a dewa99 member have certain rights regarding your personal data. We fully respect and facilitate the exercise of these rights.

• Right of Access — you have the right to know what personal data we hold about you and to obtain a copy of it.
• Right to Rectification — if any of your personal data is inaccurate or outdated, you have the right to request a correction.
• Right to Erasure — in certain situations, you may request the deletion of your personal data from our systems.
• Right to Restrict Processing — you may request that we restrict how we process your data under certain circumstances.
• Right to Object — you have the right to object to the use of your data for direct marketing purposes at any time.
• Right to Data Portability — you may request your personal data in a machine-readable format for transfer to another platform.

To exercise any of the above rights, please contact the dewa99 customer support team via live chat or our official email. We will process your request within 14 business days and will notify you if additional time is required due to specific circumstances.

Dewa99 uses cookies and similar tracking technologies to enhance the user experience, maintain session security and analyse platform performance. The following are the types of cookies we use:

• Essential Cookies — required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies — collects information on how you use the platform to help us identify areas for improvement.
• Functional Cookies — remembers your preferences such as language, region, and other settings to deliver a more personalised experience.
• Analytical Cookies — used by our first-party analytics tools to understand usage patterns and improve platform design.

You can manage your cookie preferences through your web browser settings at any time. However, disabling certain cookies may affect the functionality or performance of the dewa99 platform while you browse or play.

Dewa99 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable Malaysian law.

• Active account data is retained for the entire duration that your account remains active on the dewa99 platform.
• Financial transaction records are retained for a minimum of 7 years after the transaction occurs, in line with Malaysia's financial legal requirements.
• Customer support communication data is retained for 3 years after the session ends.
• Technical and security log data is retained for 12 months for ongoing security monitoring purposes.
• After account closure, personal data that is not legally required to be retained will be anonymized or deleted within 90 days.

The dewa99 platform is integrated with several third-party services to deliver a complete gaming experience, including game software providers, payment processors and technical infrastructure providers. It is important that you understand the limits of our responsibility in this context.

Every third-party provider integrated with dewa99 has its own privacy policy governing how it handles the data it receives. While we select partners who maintain high privacy standards, dewa99 is not responsible for the privacy practices of those third parties.

• Live Casino and slot game providers may collect your game session data for their own technical operational purposes.
• Payment partners will process your transaction data in accordance with their own privacy policies and security standards.
• The analytics services we use only receive anonymized data that cannot be individually identified.

We encourage you to read the privacy policies of key third-party providers relevant to the services you use through the dewa99 platform. If you have concerns about how any third party handles your data, please contact our support team for further guidance.

Dewa99 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, the latest technology, new legal requirements or other operational reasons. We are committed to informing you of any material changes that affect how we handle your personal data.

• Material changes to this Privacy Policy will be communicated to members via email or in-platform notification at least 14 days before taking effect.
• Updated versions of this Privacy Policy will be published on the official dewa99 website with a clearly stated effective date.
• Continued use of the dewa99 platform after the effective date of any amendment constitutes your acceptance of the updated policy.
• If you disagree with any amendments made, you have the right to close your account before the effective date of the relevant amendment.

For any inquiries, concerns, or requests regarding this Privacy Policy, please contact the dewa99 Data Protection Officer through our official support channels. Our experienced team is ready to help you understand your privacy rights and ensure your personal data is handled in the way you expect.