Dewabet Privacy Policy

Introduction

Dewabet ("we", "us", "our", or "the Platform") operates the online casino and sports betting platform accessible at dewabet.buzz. We are committed to protecting the privacy and personal data of all individuals who interact with our platform, including registered account holders, visitors to our website, and individuals who contact our customer support team.

This Privacy Policy ("Policy") describes how Dewabet collects, uses, stores, shares, and protects personal data in connection with the operation of our gaming platform. It applies to all users of the Dewabet platform, regardless of whether they access the service via a desktop browser or a mobile device.

By creating a Dewabet account, making a deposit, or otherwise using our services, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. This Policy should be read in conjunction with the Dewabet Terms & Conditions.

Definitions

For the purposes of this Privacy Policy, the following terms are defined as follows:

• "Personal Data" means any information relating to an identified or identifiable natural person — including but not limited to a name, identification number (such as a MyKad number), location data, email address, phone number, financial account details, or online identifier.
• "Data Subject" means the individual to whom the Personal Data relates — in the context of this Policy, primarily a registered Dewabet user or website visitor.
• "Processing" means any operation performed on Personal Data, whether or not by automated means — including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. Dewabet acts as the Data Controller in respect of the personal data of its registered users.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller under contractual obligation — for example, a payment service provider processing your deposit transaction.
• "Cookies" means small text files stored on your device by a web browser when you visit the Dewabet platform, used to remember preferences and enable analytical and functional features.
• "KYC" means Know Your Customer — the identity verification procedures applied by Dewabet to confirm the identity and age of account holders.

Personal Data We Collect

Dewabet collects personal data from you in order to provide, maintain, and improve our gaming services, to comply with our legal and regulatory obligations, and to communicate with you regarding your account. The categories of personal data we collect are set out in the table below.

We do not collect special categories of sensitive personal data (such as health data, biometric data, or data revealing racial or ethnic origin) unless explicitly required for regulatory compliance and with your prior informed consent.

How We Collect Your Data

Dewabet collects personal data through the following channels:

• Direct provision by you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or complete any form on the Dewabet platform, you provide us with personal data directly.
• Automated technical collection: When you access the Dewabet platform, certain technical data is collected automatically by our servers and analytics infrastructure — including your IP address, browser type, device identifiers, and interaction logs. This collection occurs regardless of whether you are logged into an account.
• Payment service providers: When you transact via Malaysian payment channels including Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, or cryptocurrency networks, transaction confirmation data is passed to Dewabet by the relevant payment processor to enable us to credit your account and maintain accurate financial records.
• Third-party identity verification services: Where Dewabet engages third-party KYC or anti-fraud services to verify the identity of account holders, those services may return verification results or flagged data points to Dewabet for our internal review.
• Cookies and tracking technologies: As described in Section 8 of this Policy, cookies and similar technologies are used to collect data about how you interact with the Dewabet platform, which pages you visit, and how long you spend on them.

Purposes of Data Processing

Dewabet processes your personal data for the following specific purposes:

1. Account creation and management: To register your Dewabet account, maintain your account profile, process changes to your account settings, and manage your relationship with the Platform.
2. Transaction processing: To process deposits made via Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, or cryptocurrency; and to process withdrawal requests to your nominated payment method.
3. Identity and age verification (KYC): To verify that you are at least 21 years of age and that the identity you have provided at registration is genuine, in accordance with our responsible gambling obligations and anti-fraud requirements.
4. Fraud prevention and platform security: To detect, investigate, and prevent fraudulent transactions, account abuse, multi-accounting, money laundering, and other prohibited conduct as defined in our Terms and Conditions.
5. Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide account assistance through live chat and email.
6. Responsible gambling monitoring: To monitor gaming behaviour patterns and identify indicators of problem gambling, so that appropriate tools (deposit limits, self-exclusion) can be offered in a timely manner.
7. Legal and regulatory compliance: To meet our obligations under applicable financial crime prevention, anti-money laundering, and gaming regulatory frameworks.
8. Service improvement and analytics: To understand how users interact with the Dewabet platform, identify technical issues, and improve the overall gaming experience through data-driven product development.
9. Marketing communications (where consent has been given): To send you promotional offers, bonus notifications, and platform updates, where you have specifically opted in to receive such communications.

Legal Bases for Processing

Dewabet processes your personal data under one or more of the following legal bases, depending on the specific purpose for which the data is used:

• Contractual necessity: Processing that is necessary to perform the contract between you and Dewabet — including account registration, deposit and withdrawal processing, game access, and customer support services.
• Legal obligation: Processing that is required for Dewabet to comply with applicable legal and regulatory requirements, including anti-money laundering obligations, age verification requirements, and financial record-keeping obligations.
• Legitimate interests: Processing carried out in the legitimate interests of Dewabet — including fraud prevention, platform security, internal analytics, and service improvement — where those interests are not overridden by your own privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — principally the sending of optional marketing communications. You may withdraw this consent at any time without affecting the lawfulness of prior processing or your right to continue using the Platform.

Data Sharing & Disclosure

Dewabet does not sell your personal data to any third party for commercial purposes. However, in the course of operating the Platform and fulfilling our legal obligations, we may share your personal data with the following categories of recipient:

• Payment service providers: We share the minimum necessary financial data with payment processors — including the operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected banks (Maybank, CIMB, Public Bank, Hong Leong Bank), and cryptocurrency network infrastructure — in order to execute your deposit and withdrawal instructions.
• Identity verification and anti-fraud services: Where we engage third-party KYC or fraud detection providers, we may share identity and transaction data with those providers under strict data processing agreements that prohibit further disclosure.
• Technology infrastructure providers: We use third-party cloud hosting, database, and software-as-a-service providers to run the Dewabet platform. These providers process data on our behalf and are contractually bound to protect it in accordance with applicable data protection standards.
• Regulatory authorities and law enforcement: We may disclose personal data to relevant regulatory authorities, financial intelligence units, or law enforcement agencies where we are required to do so by law, court order, or regulatory directive — including obligations to report suspicious transactions under applicable financial crime prevention frameworks.
• Professional advisers: Our legal counsel, auditors, and compliance advisers may access personal data where strictly necessary to provide their professional services, subject to obligations of confidentiality.

Cookies & Tracking Technologies

The Dewabet platform uses cookies and similar tracking technologies to operate core platform functions, remember your preferences, and improve your experience on the site. By continuing to use the Dewabet platform after being presented with our cookie notice, you consent to the use of cookies as described in this section.

The types of cookies used by Dewabet are as follows:

• Strictly necessary cookies: These cookies are essential to the operation of the Platform — for example, maintaining your logged-in session, storing your account language preference, and enabling secure financial transactions. These cookies cannot be disabled without impairing core platform functionality.
• Functional cookies: These cookies remember your platform preferences — such as preferred game view, last visited game category, or notification settings — to provide a more personalised experience on subsequent visits.
• Analytical cookies: We use anonymised analytics cookies to understand how users navigate the Dewabet platform, which pages are visited most frequently, and where users encounter issues. This information is used in aggregate to improve the platform.
• Session cookies: Temporary cookies that are deleted when you close your browser. Used to maintain the continuity of your current session on the Platform.

You may manage cookie preferences through your browser settings. Most modern browsers allow you to view, delete, and block cookies from specific websites. However, disabling strictly necessary cookies will impair your ability to use the Dewabet platform, including logging in and processing transactions.

Data Retention

Dewabet retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The general retention principles applied by Dewabet are as follows:

• Active account data: Personal data associated with an active Dewabet account is retained for the duration of the account relationship and for a defined period following account closure, to satisfy financial record-keeping and regulatory compliance obligations.
• Transaction records: Financial transaction records — including deposit and withdrawal histories — are retained for a minimum period in accordance with applicable financial compliance requirements.
• KYC documents: Identity verification documents submitted during the KYC process are retained for the period required by applicable anti-money laundering regulations, typically a minimum of five years from the date of submission.
• Customer support communications: Live chat transcripts and email correspondence are retained for a period sufficient to support dispute resolution and quality monitoring purposes.
• Marketing data: Where you have consented to receive marketing communications, the record of your consent and associated marketing data is retained until you withdraw consent or request deletion, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

Data Security

Dewabet has implemented a range of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, alteration, disclosure, and destruction. These measures include:

• Encryption in transit: All data exchanged between your device and the Dewabet platform is encrypted using TLS (Transport Layer Security) with AES-256 encryption — the same standard used by major financial institutions.
• Encryption at rest: Sensitive data fields stored in our databases — including payment account identifiers and identity document references — are encrypted at the storage layer.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Dewabet staff members are granted only the minimum level of data access required to perform their role, and all access is logged and audited.
• Penetration testing and security audits: Dewabet commissions regular independent security assessments to identify and remediate vulnerabilities in our platform infrastructure.
• Incident response: In the event of a personal data breach that poses a risk to the rights and freedoms of affected users, Dewabet will take immediate containment action and notify affected individuals as required by applicable data protection obligations.

While Dewabet takes all reasonable measures to protect your data, no system is completely impenetrable. You are also responsible for maintaining the security of your own account credentials. We strongly recommend using a unique, strong password for your Dewabet account and enabling any additional authentication measures offered by the Platform.

Your Data Rights

As a registered Dewabet user and Data Subject, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us via the details in Section 15.

All data rights requests will be acknowledged within 5 business days and fulfilled within 30 calendar days of receipt. In cases of complexity or high volume, we may extend this period by a further 30 days, in which case we will notify you in writing. There is no fee for exercising your data rights, except where requests are manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may be applied.

Please note that certain data rights are subject to exemptions where Dewabet has overriding legal obligations — for example, financial transaction records that must be retained for regulatory compliance cannot be deleted on request alone.

Children & Minors

The Dewabet platform is strictly for individuals aged 21 and above. We do not knowingly collect personal data from individuals below this age threshold. Our registration process includes date-of-birth collection, and KYC verification is used to confirm that account holders meet the minimum age requirement.

If Dewabet becomes aware — through any means — that personal data has been collected from an individual who is under 21 years of age, we will take immediate action to close the associated account, void all wagers placed, and permanently delete the minor's personal data from our systems.

Third-Party Links & External Content

The Dewabet platform is designed as a self-contained service. While the Platform may reference third-party organisations in the context of responsible gambling support resources (such as BeGambleAware or GamCare), the Platform does not embed third-party social media widgets, advertising networks, or data-collection iframes that would allow third parties to independently collect your personal data through Dewabet.

Where you independently navigate to an external website from any reference on the Dewabet platform, Dewabet is not responsible for the privacy practices of that external website. We recommend that you review the privacy policy of any external site before providing personal information to it.

Amendments to This Policy

Dewabet reserves the right to update and amend this Privacy Policy at any time. Where material changes are made to the Policy — for example, changes to the types of data collected, the purposes for which it is used, or the third parties with whom it is shared — we will provide notice to registered users via a prominent notification on the Platform and, where appropriate, by email.

The "Last Updated" date displayed at the top of this page reflects the date of the most recent revision. Continued use of the Dewabet platform after the publication of an amended Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to remain informed about how Dewabet handles your personal data.

Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Dewabet, please contact our Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week. Please identify your enquiry as a data protection or privacy matter at the start of your chat session.
• Email: [email protected] — include the subject line "Privacy Request" and your registered Dewabet username. We acknowledge all privacy-related emails within 5 business days.

For data rights requests (access, rectification, erasure, etc.) submitted by email, please include your full name as registered on your Dewabet account, your account username, and a clear description of the right you wish to exercise and the specific data it relates to. We may request additional verification before processing certain requests to protect against fraudulent data access attempts.