Dewi138 Privacy Policy – Malaysia Personal Data Protection

Introduction & Scope of This Policy

Dewi138 ("we", "platform") operates as an online betting platform providing services to users in Malaysia. In the course of these operations, we collect and process your personal data. This Privacy Policy explains in detail how we manage that data.

This Privacy Policy applies to all personal data we collect through: the dewi138 website, any dewi138 mobile applications where available, communications via email, live chat or Telegram, and any other means by which you interact with our platform.

By registering a dewi138 account and using our platform, you confirm that you have read and understood this Privacy Policy, and that you consent to the collection and processing of your personal data as described in this document.

Dewi138 is the data controller responsible for the personal data you provide to us. Any privacy-related enquiries may be directed to: support@dewi138.top.

Data We Collect & How We Collect It

Dewi138 collects your personal data through three main channels:

1. Data You Provide Directly:

• During account registration: full name, Malaysian phone number, email address, date of birth and password
• For identity verification: a copy of your MyKad or other valid Malaysian identification document
• When setting up a payment method: Malaysian bank account number, registered e-wallet number (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay)
• During customer support interactions: correspondence records, chat and email

2. Automatically Collected Data:

• IP address and general location information (state/city in Malaysia)
• Device type, operating system, and web browser used
• Login and logout records, access times and session durations
• Detailed game history: bets placed, games played, wins and losses
• Records of all financial transactions: deposits, withdrawals, bonuses claimed, and bonuses applied

3. Data from Approved Third Parties:

• Payment verification information from providers such as FPX, GrabPay, Touch 'n Go eWallet, and others to confirm successful transactions
• Identity verification information from licensed eKYC services where required

How Your Personal Data Is Used

Dewi138 uses the personal data collected solely for the following purposes:

• Account Management: Creating and managing your dewi138 account, verifying your identity, processing your registration, and managing your account preferences
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX Maybank2u or CIMB Clicks, and processing withdrawal requests to your Malaysian account
• Service Delivery: Giving you access to play slots, Live Casino, lottery, and Sports Betting games on the dewi138 platform
• Security & Fraud Prevention: Detecting suspicious activity, preventing money laundering, verifying the minimum age of 21, and protecting the integrity of the platform
• Legal Compliance: Meeting legal obligations under PDPA 2010, anti-money laundering laws, and applicable financial audit requirements
• Service Communications: Sending important account notifications, transaction confirmations, security alerts, and policy updates
• Marketing (with your consent): Sending promotional information, bonus offers and new game updates from dewi138 – only where you have given consent to receive marketing communications
• Platform Improvements: Analysing usage patterns in aggregate (not at an individual level) to improve the user experience, interface design, and game selection on dewi138

Dewi138 will not use your data for any purpose beyond those stated above without first obtaining fresh consent from you.

Disclosure of Data to Third Parties

Dewi138 does not sell, rent or disclose your personal data to third parties for their own marketing or commercial purposes. However, in the course of our operations, there are certain situations where your personal data may need to be shared:

Approved Service Providers (Data Processors):

• Approved payment processing providers (FPX, Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay) – only the information needed to complete your transaction
• Licensed identity verification (eKYC) service providers in Malaysia, where further verification is required
• Game providers (such as Pragmatic Play and PG Soft) – minimum data required to record game outcomes and verify legitimate winnings
• Technical service providers (server hosting, cybersecurity systems) bound by strict confidentiality agreements

Legally Required Disclosures:

• To Malaysian authorities (police, courts, regulators) when required by a valid warrant, court order or legal obligation
• To relevant anti-money laundering bodies where reporting obligations arise under applicable Malaysian law

All third parties who receive your data are bound by data protection agreements requiring them to handle your information to the same or higher security standards that dewi138 upholds.

Data Security & Storage

Dewi138 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, use, disclosure, alteration or destruction:

• Encryption: All data is encrypted in transit (SSL/TLS 256-bit) and at rest using the latest encryption standards
• Access Control: Access to member personal data within dewi138 is strictly limited on a need-to-know basis
• Continuous Monitoring: Intrusion detection systems (IDS) and security threat monitoring operate around the clock, 24 hours a day
• Security Audit: Independent security audits are conducted periodically by qualified third parties to identify and address system vulnerabilities
• Data Backup: Your data is regularly backed up to a secure, separate location to ensure service continuity

Your personal data is stored on servers housed in industry-grade data centres. dewi138 ensures that any cross-border data transfers (where applicable) comply with Malaysia's PDPA requirements and are safeguarded by appropriate protection mechanisms.

Data Retention Period: Active account data is retained for the duration the account remains active. Upon account closure, data is kept for 7 years for legal compliance and financial audit purposes. After this period, data is securely deleted or fully anonymised.

Your Rights Under PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights, which you may exercise at any time by contacting dewi138 at support@dewi138.top:

• Right of Access: You have the right to obtain a copy of the personal data we hold about you and information on how it is being used
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate, incomplete, or out of date
• Right to Withdraw Consent: You may withdraw your marketing consent at any time without affecting your core dewi138 service
• Right to Object to Processing: In certain circumstances, you have the right to object to the processing of your data for specific purposes
• Right to Erasure: You may request the deletion of your personal data after your account is closed, subject to mandatory retention obligations under applicable law
• Right to Data Portability: You have the right to receive the personal data you have provided to us in a machine-readable format, where this is technically feasible

Dewi138 will process all data subject rights requests within 30 business days. For complex cases, we will notify you within 30 days and resolve the request within no more than 60 days. We do not charge any fee for reasonable and non-excessive requests.

Cookie Policy & Tracking Technologies

Dewi138 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of the dewi138 platform. For more information on managing cookies in your browser, refer to the "Help" section of the browser you are using.

Marketing Communications & How to Unsubscribe

Dewi138 sends marketing communications — including promotional information, bonus offers, new game announcements, and periodic newsletters — to members who have consented to receive such communications during registration or at a later date.

You may opt out of marketing communications at any time through any of the following methods:

• Click the "Unsubscribe" link found at the bottom of every marketing email we send
• Update your communication preferences under "Account Settings" on the dewi138 platform
• Contact the dewi138 customer support team via live chat or email at support@dewi138.top, stating that you wish to opt out of marketing communications

Unsubscribe requests will be processed within 5 business days. Please note that even after you unsubscribe from marketing communications, dewi138 will still send essential transactional emails such as deposit confirmations, withdrawal notifications and account security notices, as these form part of our core service.

Children's Privacy

All dewi138 services are exclusively for individuals aged 21 and above. dewi138 does not knowingly collect any personal data from individuals under the age of 21.

If dewi138 finds that we have collected personal data from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe we may hold data belonging to a minor, please contact us immediately at support@dewi138.top.

Dewi138 applies a rigorous age verification process during registration and reserves the right to request additional age verification at any time if there is any doubt about a member's age.

Changes to This Privacy Policy

Dewi138 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or improvements to dewi138's services. The "Last Updated" date at the top of this page will always reflect the date of the current version.

When material changes are made to this Privacy Policy, dewi138 will:

• Sending a notice to your registered email address at least 14 days before the changes take effect
• Displaying a prominent notice on the dewi138 platform homepage throughout the notice period
• Seek your fresh consent where the changes involve data processing that requires consent

Continued use of the dewi138 platform after a change takes effect will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request deletion of your data before the changes come into effect.

For enquiries about this Privacy Policy or your privacy rights, contact us at support@dewi138.top or via 24/7 live chat on the dewi138 platform.