Dewi11 Privacy Policy – Our Commitment Protecting Every Malaysian Player's Data

Dewi11 is an online casino platform operating under the domain dewi11.express, providing online gaming services to users in Malaysia. As the platform operator, we act as the data controller for all personal information collected through your use of our platform.

We are committed to protecting your privacy in accordance with internationally recognised data protection principles, including the requirement to collect only necessary data, store it securely, and give you meaningful control as a data subject.

This policy explains:

• The types of personal data we collect from you during your use of the platform.
• How and why your data is used by Dewi11.
• Who, if anyone, your data may be shared with under certain circumstances.
• The security measures we take to protect your data.
• Your rights as a data subject and how to exercise them.

Dewi11 collects your personal data from several different sources when you use our platform:

Data you provide directly:

• Registration information — full name, username, password (stored in hashed form), email address, mobile phone number.
• Identity verification information — national identification number (MyKad), date of birth, copies of identity documents requested during account verification.
• Financial information — e-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) or bank details (for payment and withdrawal purposes only — we do not store full credit/debit card numbers).
• Communication information — records of correspondence with our support team, including live chat logs and emails.

Automatically collected data:

• Technical data — IP address, web browser type, operating system, device name, screen resolution.
• Usage data — pages visited, time spent on each page, games played, login and logout records.
• Transaction data — deposit history, withdrawal history, betting history, and winnings across all games.
• Cookie data — session cookies, preference cookies, and analytics identifiers (see Section 6 for full details).

Every piece of data we collect has a clear and legitimate purpose. Dewi11 uses your personal data for the following purposes:

• Account management — creating and managing your account, verifying your identity at login, processing withdrawal requests, and resolving account-related issues.
• Service provision — enables you to play casino games, make deposits via Touch 'n Go, GrabPay, DuitNow, or FPX, and access all features on the Dewi11 platform.
• Security & fraud prevention — detect and investigate suspicious activity, prevent unauthorised access, and protect your account from misuse.
• Legal compliance — fulfilling legal obligations, including anti-money laundering (AML) and know your customer (KYC) requirements.
• Service communications — sends important notices regarding your account, terms updates, transaction confirmations, and customer support responses.
• Platform improvements — analyses aggregated usage patterns to improve platform performance, user experience, and the games library.
• Marketing (with consent) — sends promotional information, bonus offers, and the latest news about Dewi11 — only if you have given your consent to receive them.

The legal bases for processing your data include the performance of a contract (the service agreement between you and Dewi11), compliance with legal obligations, Dewi11's legitimate interests (security and fraud prevention), and your consent for optional marketing communications.

Dewi11 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. This is our absolute commitment.

However, there are limited situations in which Dewi11 may share your data with specific parties:

• Payment service providers — Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, and other banks must receive the transaction information required to process your deposits and withdrawals. Data is shared only to the extent necessary to complete the relevant transaction.
• Game software providers — our licensed game providers receive anonymised player identifiers required to operate game sessions. They do not receive your full name, phone number, or financial information.
• Authorities and regulatory bodies — Dewi11 will disclose the necessary data if required by a valid court order, law enforcement investigation, or regulatory compliance obligation. In such cases, we will notify you where permitted to do so by law.
• Professional advisors — lawyers, accountants, or auditors bound by professional confidentiality obligations may access relevant data in their advisory capacity to Dewi11.

All third parties that receive your data are required to protect it to security standards equal to or exceeding those we apply ourselves. We assess the privacy practices of every third party before sharing any data with them.

Protecting your data is not merely a legal obligation for dewi11 — it is an operational priority we take seriously. The following are the technical and organisational measures we have put in place:

• 256-bit SSL Encryption — all communications between your browser and Dewi11's servers are encrypted using TLS protocol with 256-bit keys. This ensures that no third party can intercept or read data transmitted during your session.
• Encryption of stored data — your account password is never stored in plain text — it is stored using a non-reversible cryptographic hash function. Sensitive financial information is encrypted within our database.
• Two-factor authentication (2FA) — we encourage all users to enable 2FA in their account settings. With 2FA, logging in from a new device requires an additional verification code sent to your phone number.
• 24/7 security monitoring — our automated monitoring system detects suspicious login patterns, unauthorised access attempts, and transaction anomalies in real time.
• Internal access controls — only Dewi11 staff with a legitimate business need are permitted to access users' personal data, and all such access is controlled, logged, and reviewed on a regular basis.
• Regular security assessments — the Dewi11 platform undergoes regular penetration testing and vulnerability assessments by independent security experts to identify and address any weaknesses before they can be exploited.

While we take all reasonable precautions, no security system can guarantee absolute 100% protection. We encourage you to play an active role in securing your account by using a strong password, enabling 2FA, and never sharing your login credentials with anyone.

The Dewi11 platform uses cookies and similar tracking technologies to enhance your experience and keep the platform running smoothly. The types of cookies we use are as follows:

• Required session cookies — these cookies are essential for the platform to function. They store your login status, language preference, and current game session information. Without them, the platform will not work. These cookies cannot be disabled.
• Preference cookies — these cookies remember your preferences, such as display settings, the last game table you visited, and your preferred game categories. They can be disabled, though doing so may affect your experience.
• Analytics cookies — we use aggregated, anonymised (non-personal) analytics data to understand how players use our platform — which pages are most popular, where players encounter difficulties, and the platform's overall performance. This data helps us make meaningful improvements.
• Security cookies — these cookies help our systems detect suspicious activity, prevent CSRF (cross-site request forgery) attacks, and protect your account from unauthorised access.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies will affect the overall functionality of the Dewi11 platform. Please refer to your browser's documentation for instructions on how to manage cookies.

Dewi11 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Our data retention guidelines are as follows:

• Active account data — retained for as long as your account is active and for 12 months after it becomes inactive, at which point a review is carried out.
• Financial transaction records — retained for a minimum of 7 years in accordance with financial reporting and anti-money laundering (AML) compliance requirements. This is a legal obligation that cannot be waived.
• Support communication logs — live chat conversation records and emails with the support team are retained for 2 years for service quality purposes and reference in the event of a dispute.
• Session cookie data — expires when you close your browser or after a set period of inactivity.
• Aggregated analytics data — aggregated and anonymised data may be retained indefinitely as it no longer contains information that can identify an individual.

Once a retention period expires, or upon your request for data deletion (subject to applicable legal obligations), your data will be securely deleted from all our systems using industry-standard erasure methods. To submit a data deletion request, contact us at support@dewi11.express.

As a Dewi11 platform user, you hold the following rights regarding the personal data we hold about you. We are committed to respecting and facilitating the exercise of these rights:

• Access Rights — you have the right to request a copy of the personal data we hold about you. We will provide it in a readable format within 30 days of receiving your request.
• Right to rectification — if any data we hold about you is inaccurate or out of date, you have the right to request a correction. Basic information can be updated directly through your account settings.
• Right to erasure — you may request that we delete your personal data, subject to applicable legal retention obligations (such as financial records). Such requests will be processed within 30 days.
• Right to withdraw consent — for processing based on your consent (such as marketing communications), you may withdraw that consent at any time through your account settings or by contacting our team.
• Right to data portability — you may request that we provide your personal data in a structured, machine-readable format (such as CSV or JSON) for transfer to another service.
• Right to object — you may object to the processing of your data for direct marketing purposes at any time. Your objection will take effect immediately.

To exercise any of the rights above, please contact us by email at support@dewi11.express with the subject line "Personal Data Rights Request". We may need to verify your identity before processing the request to ensure the security of your data.

The Dewi11 platform is not suitable and not intended for use by individuals under the age of 18. Our online casino services are strictly for adults only.

We do not knowingly collect any personal data from children. If we discover that a minor has registered an account or used our platform without authorisation, we will:

• Closing the account immediately without prior notice.
• Delete all relevant personal data from our systems.
• Refunding any real-money deposits made, subject to an appropriate verification process.

If you are a parent or guardian and discover that your child has accessed or registered an account on dewi11, please contact our support team immediately at support@dewi11.express. We will handle the matter with the highest priority and appropriate sensitivity.

While we take all reasonable security measures, Dewi11 has a comprehensive response plan in place should an unexpected data breach occur:

• Real-time detection — our monitoring system is designed to detect any abnormal access or activity in real time, 24 hours a day.
• Investigation and containment — as soon as a breach is detected or suspected, our security team acts immediately to investigate, contain, and neutralise the threat.
• User notice — if a breach specifically affects your personal data and poses a high risk, Dewi11 will notify you within 72 hours after the breach is confirmed, via the email address registered to your account.
• Information provided — the breach notification will include details on the type of data involved, the steps taken to address the breach, and the measures you can take to protect yourself.
• Remedial action — depending on the nature of the breach, we may ask you to change your password, enable 2FA, or take other additional security measures.

If you suspect your account has been accessed without authorisation or notice any unusual activity, please contact our support team immediately via live chat or email at support@dewi11.express. We will respond promptly.

The Dewi11 platform may contain links to third-party websites or services in certain contexts, such as information about payment providers or sporting bodies related to our Sports Betting offerings. Please be aware that:

• Dewi11 has no control over the privacy practices of third-party websites you access through links on our platform.
• This Privacy Policy does not apply to those third-party websites or services.
• We are not responsible for the content, privacy policies, or security practices of any third-party websites.

We encourage you to read the privacy policy of every website you visit, including payment providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, and any online banking service you use for deposits and withdrawals on Dewi11.

Dewi11 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to the security technologies we use.

When material changes are made to this policy, we will notify you via:

• A prominent in-platform notice upon your next login.
• Email the address registered to your Dewi11 account.
• Update the "Last Updated" date at the top of this page.

We encourage you to review this page periodically, especially after receiving an amendment notice. Your continued use of the Dewi11 platform following the publication of any amendments constitutes your acceptance of the revised policy. If you do not agree with any amendments, you have the right to close your account and withdraw your real money balance.

If you have any questions, concerns, or requests regarding this Privacy Policy or how Dewi11 handles your personal data, please reach out to us through the following channels:

• Email — support@dewi11.express (use "Data Privacy Inquiry" as the subject line for priority handling).
• Live chat — available 24 hours a day on the Dewi11 platform, with an average response time of under 5 minutes.
• WhatsApp — available to Platinum and Diamond VIP members through their dedicated account managers.

Our team responds to all privacy-related enquiries within 48 business hours. For more complex requests such as data deletion or data portability, the response period may take up to 30 days in accordance with legal requirements.