Dewi11 Privacy Policy – Personal Data Protection for Malaysian Players

1Introduction & Scope of This Privacy Policy

Dewi11 ("we", "the platform", or "dewi11") is committed to protecting the privacy and security of the personal data of all users and members of our platform. This Privacy Policy explains how we collect, process, store, disclose, and protect your personal information when you use the dewi11 platform at dewi11.cash and all related services.

This policy applies to everyone who interacts with the dewi11 platform — whether you are browsing our website without an account, in the process of registering, or an active member playing slots, betting on EPL or Liga Super Malaysia football, playing at the live casino tables, or using any other services we offer.

By using the dewi11 platform or registering as a member, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the dewi11 platform and contact us to close your account if applicable.

2Personal Data We Collect

Dewi11 collects various types of information depending on how you interact with our platform. We only collect data that is genuinely necessary for the stated purposes and do not collect excessive or irrelevant information.

2.1 Data You Provide Directly

• Registration information: Full name, Malaysian phone number, password (stored in encrypted form).
• Identity verification (KYC) information: Identity card number (MyKad) or passport number, date of birth, copy of a valid identification document.
• Payment information: eWallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), bank account numbers for DuitNow or FPX (Maybank2u, CIMB Clicks) — stored in encrypted form and never retained as plain text.
• Communication information: The content of messages you send to our support team via live chat or email.

2.2 Automatically Collected Data

• Technical data: IP address, web browser type, device operating system, screen resolution, preferred language.
• Usage data: Pages visited, session duration, games played, bets placed, transaction history.
• Location data: General location data derived from your IP address for verification and security purposes — we do not track your precise GPS location.
• Device data: Unique device identifier, mobile operating system information when accessing via mobile device.

2.3 Data from Third-Party Sources

In certain situations, dewi11 may receive information about you from legitimate third-party sources — for example, from identity verification service providers for KYC purposes, or from payment providers to verify transactions. Such data is used solely for the stated purposes and is subject to this privacy policy.

3How Dewi11 Uses Your Personal Data

All data collected by dewi11 is used solely for legitimate purposes directly related to the provision of our platform services. We do not use your data for any purpose unrelated to platform operations or the legitimate interests of our members.

3.1 Platform Service Provision

• Creating and managing your dewi11 member account.
• Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and other payment methods.
• Processing withdrawal of winnings to your preferred payment method.
• Provides access to all dewi11 games and services — slots, live casino, football betting, virtual sports, and more.
• Providing effective customer support whenever you need assistance.

3.2 Security & Legal Compliance

• Identity and age verification (KYC) to ensure only individuals aged 18 and above can use the platform.
• Prevention of fraud, money laundering, and other illicit activities.
• Compliance with legal and regulatory obligations applicable to the platform's operations.
• Detecting and investigating suspicious activity that may compromise the security of your account or the dewi11 platform.

3.3 Platform Improvements & User Experience

• Analysing usage patterns to improve the design and functionality of the dewi11 platform.
• Personalising your experience — such as recommending slots you may enjoy based on your gaming history.
• Testing new features prior to official launch.

3.4 Marketing Communications (With Your Consent)

Dewi11 may use your contact information to send you details about relevant promotions, bonuses, and the latest offers — however only if you have given your consent to receive such communications. You may withdraw this consent at any time through your account settings or by contacting our support team.

4Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), dewi11 processes your personal data on the following legal bases, depending on the purpose of processing:

• Contract fulfilment: Processing necessary to deliver the services you have registered for — including handling deposits and withdrawals, managing your account, and providing access to games.
• Legal obligation: Processing required to comply with applicable laws, including KYC requirements and anti-money laundering reporting obligations.
• Legitimate interests: Processing necessary for the legitimate interests of dewi11 or our members, such as fraud prevention, platform security, and service quality improvement — provided this does not override your fundamental rights.
• Consent: For marketing communications and certain optional data uses, we rely on your explicit consent. This consent may be withdrawn at any time.

5Data Sharing & Disclosure to Third Parties

Dewi11 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. This is an absolute commitment with no exceptions.

However, in the course of operating the platform, dewi11 may share certain data with the following categories of third parties for limited and legitimate purposes:

5.1 Operational Service Providers

• Payment provider: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX-linked banks require transaction information to process your deposits and withdrawals. This data is shared only to the extent necessary for the transaction in question.
• Game provider: Evolution Gaming, Pragmatic Play, SA Gaming, Ezugi, and other providers receive limited account information necessary to deliver their games on the dewi11 platform.
• KYC verification provider: Third-party identity verification services that assist us in verifying your identification documents in accordance with legal requirements.
• Technology infrastructure provider: Cloud and hosting service providers that store and process data for the dewi11 platform — all of whom are bound by strict data processing agreements.

5.2 Legal Requirements & Enforcement

Dewi11 may disclose your personal data to government authorities, law enforcement agencies, or regulatory bodies where we are required to do so by law, court order, or valid legal process. In such circumstances, we will notify you of the request where permitted by law.

6Data Security — How dewi11 Protects Your Information

Dewi11 employs comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or accidental deletion.

6.1 Technical Security Measures

• AES-256 Encryption: All personal data stored in dewi11's systems — including identity information, payment details, and transaction history — is encrypted using AES-256, the encryption standard adopted by leading banking and financial institutions worldwide.
• SSL/TLS: All communications between your browser and the dewi11 platform are protected by SSL/TLS encryption — meaning no third party can intercept or read data transmitted between you and our platform.
• Encrypted password: Your account password is never stored in plain text — it is processed through a secure, one-way hashing function that cannot be reversed.
• Environment separation: Production and development environments are fully separated to prevent data exposure risks during testing or the development of new features.
• Continuous monitoring: dewi11's systems are monitored 24/7 to detect suspicious activity, intrusion attempts, or any security anomalies requiring an immediate response.

6.2 Organisational Measures

• Access to members' personal data is restricted to dewi11 employees who genuinely require it to carry out their responsibilities (the "least privilege" principle).
• All dewi11 employees who handle personal data undergo regular data protection training and are bound by strict confidentiality agreements.
• Dewi11 conducts regular security assessments and system audits to identify and address vulnerabilities before they can be exploited.

7Cookies & Tracking Technologies

The dewi11 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, enhance the user experience, and help us understand how the platform is being used.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the dewi11 platform to function and cannot be disabled. They include login session cookies, security tokens, and cookies that store your language preferences. Without these cookies, the platform will not work correctly.
• Performance & Analytics Cookies: We use analytics cookies to gather information about how visitors use the dewi11 platform — including the most frequently visited pages, time spent on the platform, and points where users exit. This information is used in aggregated form to improve the platform.
• Functional Cookies: These cookies allow the platform to remember your preferences — such as your preferred currency, display settings, and game preferences — so you do not need to reconfigure them each time you visit.
• Marketing Cookies: Where you have given your consent, marketing cookies are used to show you more relevant dewi11 advertisements and promotions. You may opt out of marketing cookies at any time without affecting the core functionality of the platform.

7.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers — Chrome, Safari, Firefox, and Edge — allow you to view, manage, and delete cookies from the browser's privacy settings. Please note that disabling certain cookies may affect the functionality and user experience of the dewi11 platform.

8Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 and the dewi11 Privacy Policy, you have the following rights regarding the personal data we hold about you. We are committed to respecting and facilitating the exercise of these rights.

9Data Retention Period

Dewi11 does not retain your personal data for longer than is necessary for the purposes set out in this policy or as required by applicable law.

9.1 Standard Retention Period

• Active account data: Retained for the duration your account remains active and for a reasonable period thereafter to facilitate the resolution of any outstanding issues or disputes.
• Financial transaction records: Retained for a minimum period of 7 years from the transaction date, in line with Malaysia's accounting and anti-money laundering legal requirements.
• KYC records: Retained for a minimum period of 5 years after the business relationship ends, in accordance with identity verification legal requirements.
• Security and audit logs: Retained for a period of 2–3 years for security purposes and potential fraud investigation.
• Support communication records: Retained for a period of 2 years for reference and service quality improvement purposes.
• Analytics and usage data: Retained in anonymised form for a longer period for trend analysis and platform improvement purposes.

9.2 Data Deletion Upon Request

If you request deletion of your personal data (see your rights in Section 8), dewi11 will process that request within a reasonable timeframe. Please note that we may be unable to delete certain data where a legal obligation to retain it exists (such as financial transaction records) or where the data is required to resolve an outstanding dispute.

10International Data Transfers

In the course of operating the dewi11 platform, your personal data may be transferred to and processed in countries outside Malaysia — for example, when using cloud services or technology infrastructure with servers located abroad, or when sharing data with international game providers such as Evolution Gaming or Pragmatic Play.

Whenever international data transfers occur, dewi11 ensures that the receiving parties provide an adequate level of protection through the following mechanisms:

• Data Processing Agreements with data protection terms equivalent to or exceeding Malaysia's PDPA requirements.
• Transfers to countries recognised as having adequate data protection standards.
• Use of standard contractual clauses approved by the relevant regulatory authority.

11Minors and Underage User Protection

The dewi11 platform is is not directed at children or any individual under the age of 18. We do not knowingly collect personal data from minors.

All dewi11 registration processes require age verification, and we use age-checking mechanisms to identify and prevent underage individuals from registering or using the platform. If we discover that personal data belonging to someone under the age of 18 has been collected without appropriate consent, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian who believes your child may have registered a dewi11 account without your knowledge, please contact us immediately at support@dewi11.cash and we will respond promptly.

12Privacy Policy Amendments

Dewi11 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, evolving legal requirements, or improvements to the way we protect your data. Any changes will be published on this page with a new "Updated" date.

• For material changes that may significantly affect your privacy rights, dewi11 will provide more prominent notice — such as a notice on the platform's main page or an email to registered members.
• Continued use of the dewi11 platform after any changes are published will be considered acceptance of the updated terms.
• If you do not agree with the changes to this policy, you have the right to close your account and request the deletion of your data.