Privacy Policy

This Privacy Policy describes how dewa98 ("we", "us", "our") collects, uses, protects, and discloses personal information when you use our online gaming platform at https://dewa98.cam and any related services, mobile-optimized sites, or software (collectively, the "Platform").

By creating an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you must not use the Platform.

This policy should be read in conjunction with our Terms and Conditions, which govern your use of the Platform. Where terms are capitalized but not defined in this policy, they carry the meaning assigned in the Terms and Conditions.

dewa98 is the data controller responsible for your personal information collected through the Platform. We determine the purposes and means of processing your personal data in accordance with this Privacy Policy and applicable data protection laws.

For privacy-related inquiries, data access requests, or to exercise any of your rights under this policy, please contact us at:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Access Request"
• Response Time: We aim to respond to all privacy requests within 7 business days

We collect several categories of personal information to provide, maintain, and improve the Platform:

3.1 Information You Provide Directly

• Account Registration Data: Full legal name, date of birth, gender, residential address (city, province), email address, and mobile phone number.
• Identity Verification (KYC) Data: Government-issued identity documents (Indonesian KTP, passport, or driver's license), proof of address documents (utility bills, bank statements), and selfie verification photographs.
• Payment Information: Bank account numbers (BCA, BRI, BNI, Mandiri, etc.), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay), and payment card details (Visa, Mastercard). Note: Full credit card numbers are never stored by dewa98—they are processed directly by PCI-DSS compliant payment processors.
• Communication Data: Messages, questions, or feedback you send to our customer support team via live chat, email, or contact forms.
• Responsible Gaming Data: Deposit limits, loss limits, time-out periods, and self-exclusion requests you configure in your account settings.

3.2 Information Collected Automatically

• Device Information: IP address, device type (smartphone, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version.
• Usage Data: Pages visited, games played, bet history, transaction history, login timestamps, session duration, referring URLs.
• Location Data: Approximate geographic location derived from your IP address (city/province level, not precise GPS coordinates).
• Cookies and Tracking Technologies: See Section 9 (Cookies & Tracking) for details on how we use cookies and similar technologies.

3.3 Information from Third Parties

• Payment Processors: Transaction confirmation, payment success/failure status, fraud risk scores.
• Game Providers: Game session data, bet outcomes, jackpot wins (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, etc.).
• Identity Verification Services: Verification status and fraud detection signals from KYC service providers.

We process your personal information for the following purposes:

1. Account Management: To create and maintain your player account, authenticate your identity when you log in, and manage your profile settings.
2. Transaction Processing: To process deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, Visa, and Mastercard.
3. Identity Verification (KYC/AML): To verify your identity, confirm you are at least 21 years of age, prevent fraud, and comply with anti-money-laundering regulations. This is a legal requirement under our international gaming license.
4. Game Delivery: To provide access to casino games (slots, live dealer, table games), sports betting (football, basketball, badminton, MotoGP, e-sports), lottery, and togel draws.
5. Bonus Administration: To determine eligibility for promotions, track wagering requirements, and credit bonus funds to your account.
6. Customer Support: To respond to your inquiries, troubleshoot technical issues, and provide 24/7 Indonesian-speaking support via live chat and email.
7. Responsible Gaming: To enforce deposit limits, loss limits, and self-exclusion requests, and to identify potential problem gambling behavior for intervention.
8. Fraud Prevention & Security: To detect and prevent unauthorized access, payment fraud, bonus abuse, collusion, and other prohibited conduct as defined in our Terms and Conditions.
9. Platform Improvement: To analyze usage patterns, optimize game selection, improve site performance, and develop new features based on player behavior.
10. Marketing Communications: To send promotional offers, bonus notifications, and platform updates via email or SMS (only if you have opted in; you may unsubscribe at any time).
11. Legal Compliance: To comply with applicable laws, respond to legal requests from authorities, and enforce our Terms and Conditions.

Under international data protection laws, we must have a lawful basis for processing your personal data. We rely on the following legal grounds:

We do not sell your personal information to third parties. However, we share your data with trusted service providers and partners in the following limited circumstances:

6.1 Service Providers

• Payment Processors: To process deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallets (OVO, DANA, GoPay, ShopeePay). These providers are bound by strict confidentiality obligations.
• KYC/AML Verification Services: To verify your identity documents and screen against fraud databases and sanctions lists.
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft, and other studios receive only the data necessary to deliver game content and settle bets.
• Cloud Hosting Providers: We use enterprise-grade cloud infrastructure to store data securely. All hosting providers sign Data Processing Agreements guaranteeing data protection.
• Customer Support Tools: Live chat and ticketing systems used to deliver 24/7 support to Indonesian players.

6.2 Legal and Regulatory Authorities

We may disclose your information to law enforcement, regulatory bodies, or courts when:

• Required by law or legal process (e.g., court orders, subpoenas).
• Necessary to comply with our gaming license obligations or anti-money-laundering reporting requirements.
• Required to protect the rights, property, or safety of dewa98, our players, or the public.
• Necessary to investigate suspected fraud, cheating, or violations of our Terms and Conditions.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity. You will be notified via email of any such change in ownership, and you will have the opportunity to delete your account if you do not wish your data to transfer.

Some of our service providers and partners are located outside Indonesia, including cloud hosting providers in Singapore and the European Union, and game studios in Malta, the United Kingdom, and the Philippines. This means your personal data may be transferred to, stored in, or processed in countries with data protection laws different from those in Indonesia.

When we transfer your data internationally, we ensure adequate protection through:

• Standard Contractual Clauses: European Commission-approved model clauses that bind our service providers to strict data protection obligations.
• Adequacy Decisions: Transfers to countries recognized as providing adequate data protection (e.g., European Union member states, United Kingdom, Singapore).
• Vendor Certifications: Our providers comply with recognized international standards such as ISO 27001 (information security) and PCI-DSS (payment card security).

dewa98 employs industry-standard technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

Technical Safeguards

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit TLS (Transport Layer Security). Data at rest is encrypted using AES-256 encryption.
• Firewalls and Intrusion Detection: Our servers are protected by enterprise-grade firewalls and real-time intrusion detection systems that monitor for suspicious activity 24/7.
• Access Controls: Personal data is accessible only to authorized employees and contractors who require it to perform their job functions. Access is logged and audited regularly.
• Two-Factor Authentication (2FA): Available for player accounts and mandatory for all dewa98 staff accounts with access to sensitive data.
• Regular Security Audits: Our security infrastructure is audited quarterly by independent cybersecurity firms.

Organizational Safeguards

• Employee Training: All staff undergo annual data protection and security awareness training.
• Confidentiality Agreements: Employees and contractors sign strict confidentiality agreements prohibiting unauthorized disclosure of player data.
• Incident Response Plan: We maintain a documented data breach response plan. In the event of a data breach affecting your information, we will notify you within 72 hours as required by law.

dewa98 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver personalized content.

What Are Cookies?

Cookies are small text files stored on your device by your web browser. They allow the Platform to recognize your device and remember your preferences, login session, and other settings.

Types of Cookies We Use

Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may prevent you from using certain features of the Platform (e.g., logging in, placing bets).

• Google Chrome: Settings > Privacy and Security > Cookies and other site data
• Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
• Safari (iOS/macOS): Settings > Safari > Privacy & Security
• Microsoft Edge: Settings > Cookies and site permissions

You have the following rights regarding your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Rights Request":

1. Right of Access: You may request a copy of the personal data we hold about you. We will provide this in a structured, commonly used, machine-readable format (e.g., PDF or CSV file).
2. Right to Rectification: If any of your personal data is inaccurate or incomplete, you may request that we correct or update it. Most profile information can be updated directly in your account settings.
3. Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data. This right is subject to legal limitations—we must retain certain data for 7 years under anti-money-laundering regulations, and we may retain data necessary to resolve disputes or enforce our Terms.
4. Right to Restrict Processing: You may ask us to temporarily suspend processing of your data in certain circumstances (e.g., while we verify the accuracy of contested data).
5. Right to Data Portability: You may request that we transfer your data to another service provider in a portable format where technically feasible.
6. Right to Object: You may object to processing of your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests by providing specific reasons.
7. Right to Withdraw Consent: If processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time. This does not affect the lawfulness of processing before consent was withdrawn.
8. Right to Lodge a Complaint: If you believe we have violated your privacy rights, you may file a complaint with our support team or with the data protection authority in the jurisdiction where our license is held.

Response Time: We will respond to all privacy rights requests within 30 days. If additional time is required, we will notify you and provide a reason for the delay.

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law:

After the retention period expires, personal data is securely deleted or anonymized such that it can no longer be associated with you.

The dewa98 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect or process personal information from individuals under the age of 21.

If we discover that we have inadvertently collected data from a person under 21 years of age, we will take immediate action to:

• Delete all personal information and close the account permanently.
• Return any deposited funds to the verified source of payment (e.g., parent or guardian's bank account).
• Block the associated identity documents, email addresses, and device identifiers to prevent re-registration.

If you believe a minor has created an account on dewa98, please report it immediately to [email protected] with the subject line "Underage User Report". All reports are treated with the highest priority and investigated within 24 hours.

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform features. When material changes are made, we will:

• Update the "Effective Date" at the top of this page.
• Notify you via email to your registered email address.
• Display a prominent notice on the Platform upon your next login.
• Provide a reasonable notice period (typically 30 days) before the updated policy takes effect.

We encourage you to review this Privacy Policy periodically, especially before providing any new personal information. Your continued use of the Platform after the effective date of an updated policy constitutes your acceptance of the changes.

If you do not agree with an updated Privacy Policy, you may close your account by contacting support. We will process your account closure and data deletion request in accordance with Section 10 (Your Privacy Rights) and Section 11 (Data Retention).

For questions, concerns, or requests related to this Privacy Policy or your personal data, please contact our Data Protection team:

• Email: [email protected]
• Subject Line: "Privacy Inquiry", "Data Access Request", or "Privacy Rights Request"
• Live Chat: Available 24/7 via the chat widget on the Platform (select "Privacy & Data Protection" from the topic menu)
• Response Time: Privacy requests are prioritized and typically receive a response within 7 business days

Our Indonesian-speaking support team is available around the clock to assist with privacy-related questions and to help you exercise your data rights.