Privacy Policy

01 Introduction

Welcome to Dewa808. This Privacy Policy ("Policy") sets out how Dewa808 ("Company", "we", "us", "our") collects, processes, stores, shares, and protects personal data that you provide to us or that we collect in connection with your use of the Dewa808 online gaming platform, accessible at https://dewa808.cam ("Platform").

Dewa808 is committed to protecting the privacy and personal data of all users in accordance with applicable data protection laws and internationally recognised best practices. We take our obligations as a data controller seriously and apply appropriate technical and organisational safeguards to ensure your information remains secure at all times.

By registering an account, accessing the Platform, or using any of our services, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference into this document.

                Your Privacy at a Glance: We collect only the data we genuinely need to operate the Platform, verify your identity, process your transactions, and comply with our legal obligations. We do not sell or rent your personal data to third parties for marketing purposes. You retain the right to access, correct, and request deletion of your personal data at any time.
              

02 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

"Personal Data" — any information that relates to an identified or identifiable natural person, including name, identification number, email address, phone number, financial details, IP address, and device identifiers.
"Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, or deletion.
"Data Controller" — the entity that determines the purposes and means of processing personal data. Dewa808 acts as the Data Controller in respect of all personal data collected through the Platform.
"Data Processor" — a third party that processes personal data on behalf of the Data Controller under written instruction, such as payment processors or KYC verification providers.
"Sensitive Data" — personal data revealing racial or ethnic origin, political opinions, religious beliefs, health data, biometric data, or financial account details, which is subject to additional safeguards.
"Cookies" — small text files placed on your device by the Platform to enable functionality, analytics, and session management.
"KYC" — Know Your Customer; the identity verification process required to confirm a player's age, identity, and residential address before processing withdrawals or as otherwise required by the Company.
"Player" / "User" / "You" — any individual who accesses or uses the Platform, whether registered or not.

03 Data We Collect

Dewa808 collects personal data across several categories, depending on how you interact with the Platform:

3.1 Identity & Registration Data

When you register an account, we collect your full legal name, date of birth, gender, nationality, residential address (including city, state, and postcode), email address, phone number, and a username of your choosing. If you are based in Malaysia, we may also collect your MyKad (NRIC) number or passport number for KYC verification purposes.

3.2 Financial Data

To process deposits and withdrawals in Malaysian Ringgit (MYR), we collect details relating to your chosen payment method. This may include bank account numbers (last four digits for verification), e-wallet account identifiers associated with Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and RHB. We do not store full card or bank account numbers on our servers — these are handled directly by our certified payment processing partners.

3.3 Transaction & Gaming Activity Data

We record all deposits, withdrawals, wagers, game selections, bet amounts, game outcomes, bonus claims, and promotional interactions associated with your account. This data is used for account management, fraud detection, dispute resolution, and regulatory compliance.

3.4 Technical & Device Data

We automatically collect technical information when you access the Platform, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, session duration, pages visited, and click interactions. This data helps us optimise the Platform experience and identify security threats.

3.5 Communication Data

When you contact our support team via live chat or email, we retain records of those communications — including transcripts, timestamps, and any attachments — for the purposes of quality assurance, dispute resolution, and regulatory record-keeping.

3.6 Responsible Gambling Data

If you activate responsible gambling tools such as deposit limits, self-exclusion, or cooling-off periods, we record those preferences and apply them to your account. This data is treated with additional care and is not used for marketing or profiling purposes.

04 How We Collect Data

We collect personal data through the following channels:

Direct submission — information you provide when registering, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
Automated collection — technical and behavioural data collected automatically as you browse and use the Platform, via cookies, web beacons, server logs, and analytics tools.
Third-party sources — identity verification data from KYC providers, fraud signals from anti-fraud services, and transaction verification data from payment processors. We only accept data from third parties where we have confirmed they have the legal basis to share it with us.

05 Data Processing & Use

Dewa808 processes your personal data for the following specific purposes:

Purpose	Data Used	Legal Basis
Account registration and management	Identity, contact, and login data	Contract performance
KYC identity and age verification	Identity documents, NRIC/passport, selfie	Legal obligation
Processing deposits and withdrawals in MYR	Financial and payment data	Contract performance
Fraud detection and prevention	Technical, financial, and gaming activity data	Legitimate interest
Anti-money laundering compliance	Identity, transaction, and source-of-funds data	Legal obligation
Customer support and dispute resolution	Communication and account data	Contract performance / legitimate interest
Responsible gambling management	Gaming activity, limit settings, self-exclusion status	Legal obligation / legitimate interest
Platform analytics and improvement	Technical and behavioural data	Legitimate interest
Promotional communications (opt-in only)	Contact and preferences data	Consent
Legal and regulatory compliance	Any data required by applicable authority	Legal obligation

06 Legal Basis for Processing

Dewa808 processes personal data only where a valid legal basis exists. The primary legal bases we rely on are:

Contract performance: Processing necessary to fulfil our obligations to you under the Terms and Conditions — including account management, payment processing, and service delivery.
Legal obligation: Processing required to comply with applicable laws — including KYC/AML obligations, age verification requirements, and responses to lawful regulatory requests.
Legitimate interests: Processing carried out for our legitimate business interests, provided those interests are not overridden by your rights — including fraud prevention, platform security, and analytics.
Consent: Where we rely on consent — such as for optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

07 Data Sharing

Dewa808 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. We may share your data with trusted third parties only in the following circumstances and only to the extent necessary for the stated purpose:

Payment processors: To process MYR deposits and withdrawals via Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, and other accepted payment channels.
KYC and identity verification providers: To verify your age, identity, and residential address in compliance with our regulatory obligations.
Fraud detection and risk management services: To identify potentially fraudulent account activity, protect genuine players, and maintain the integrity of the Platform.
Game content providers: Certain game providers may receive anonymised session data to support game performance, RTP auditing, and technical troubleshooting. No personally identifiable information is shared with game providers.
Regulatory authorities and law enforcement: Where required by applicable law, court order, or regulatory directive, we will disclose personal data to the relevant authority. We will notify you of such disclosures where legally permitted to do so.
Professional advisers: Our legal counsel, auditors, and compliance consultants may access personal data as necessary to perform their professional services, under strict confidentiality obligations.

                Third-Party Data Processors: All third-party Data Processors engaged by Dewa808 are bound by written data processing agreements that require them to process your data only on our documented instructions, implement appropriate security measures, and prohibit sub-processing without our prior written authorisation.
              

08 Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following indicative retention periods apply:

Data Category	Retention Period	Reason
Account registration and identity data	Duration of account + 5 years post-closure	AML / regulatory compliance
KYC documents	Duration of account + 5 years post-closure	Legal obligation
Transaction and financial records	7 years from date of transaction	Tax, AML, audit requirements
Gaming activity logs	3 years from date of activity	Dispute resolution, responsible gambling
Support communication records	2 years from last interaction	Quality assurance, dispute resolution
Technical and device logs	12 months from collection	Security, fraud detection
Marketing consent records	Until consent is withdrawn + 1 year	Proof of consent

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle procedures.

09 Data Security

Dewa808 employs a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
Encryption at rest for sensitive data fields stored in our databases;
Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
Regular penetration testing and vulnerability assessments of the Platform infrastructure;
24/7 security monitoring and intrusion detection systems;
Multi-factor authentication requirements for all staff accessing systems containing personal data;
Regular staff training on data protection obligations and security best practices.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Dewa808 will notify affected individuals and any applicable regulatory authority in accordance with our breach response procedures and applicable legal timeframes.

                Your Responsibility: While we apply robust security measures on our end, you are responsible for maintaining the confidentiality of your account login credentials. Never share your password with anyone. Dewa808 staff will never ask you for your account password via any channel.
              

10 Cookies & Tracking

The Dewa808 Platform uses cookies and similar tracking technologies to provide core functionality, remember your preferences, analyse Platform usage, and support security operations. By continuing to use the Platform after being presented with our cookie notice, you consent to our use of cookies as described in this section.

10.1 Types of Cookies We Use

Cookie Type	Purpose	Can Be Disabled?
Strictly Necessary	Session management, authentication, security tokens, Platform functionality	No — required for the Platform to function
Functional / Preference	Remembering language settings, UI preferences, and notification choices	Yes — disabling may affect usability
Analytics	Aggregated usage statistics to help us understand how players interact with the Platform	Yes — opt out via cookie settings
Security / Fraud Detection	Device fingerprinting and behavioural signals used to detect suspicious activity	No — essential for platform security

10.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored on your device. Please note that disabling certain cookies may impair the functionality of the Platform, including your ability to remain logged in during a session.

11 Your Rights

As an individual whose personal data is processed by Dewa808, you hold the following rights with respect to your information. To exercise any of these rights, please contact our support team via live chat or at the email address provided in the Contact section of this Policy.

Right to Access Request a copy of the personal data we hold about you, and information about how it is being processed.

Right to Rectification Request correction of inaccurate or incomplete personal data held in your account profile.

Right to Erasure Request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to our legal retention obligations.

Right to Restriction Request that we limit the processing of your personal data in certain circumstances, such as when you contest its accuracy.

Right to Portability Request that we provide your personal data in a structured, commonly used, machine-readable format so that you may transfer it to another service provider.

Right to Object Object to processing of your personal data where we rely on legitimate interests as our legal basis, including for direct marketing purposes.

Right to Withdraw Consent Withdraw any consent you have previously given for specific processing activities — such as marketing communications — at any time without penalty.

Right to Complain Lodge a complaint with the relevant data protection authority if you believe your rights under applicable data protection law have been violated.

Dewa808 will respond to all valid rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further sixty (60) days, and we will notify you of any such extension within the initial thirty-day period.

                Please Note: Certain rights are subject to limitations. For example, we cannot delete data that we are legally required to retain for AML, tax, or regulatory purposes. Where we decline to fulfil a request, we will explain our reasons in writing.
              

12 Minors & Age Policy

The Dewa808 Platform is strictly restricted to individuals who are at least 21 years of age. We do not knowingly collect personal data from individuals under the age of 21. All registration processes include a date-of-birth field, and accounts are subject to age verification as part of our KYC process.

If we discover or reasonably suspect that an account has been opened by an individual under 21 years of age, we will immediately suspend the account, initiate an investigation, and — where confirmed — permanently terminate the account. Any funds deposited by an underage individual will be returned via the original payment method after applicable regulatory notification, in accordance with our legal obligations.

If you believe a minor has accessed or registered on the Platform, please notify us immediately via our support team. We take underage access extremely seriously and will act promptly on any credible report.

                For Parents and Guardians: We strongly recommend that parents and guardians use parental control software and tools to prevent minors from accessing online gaming platforms. The Platform should never be accessible on shared devices without appropriate access controls in place. For players aged 21 and above only.
              

13 International Data Transfers

In the course of operating the Platform and engaging third-party service providers, your personal data may be transferred to and processed in jurisdictions outside Malaysia. Where such transfers occur, Dewa808 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under applicable Malaysian data protection obligations.

Safeguards for international transfers may include contractual clauses between Dewa808 and the receiving entity that impose equivalent data protection standards, or transfers to jurisdictions that provide an adequate level of data protection as recognised by applicable authority.

You may request further information about the specific safeguards we apply to international data transfers by contacting our support team at the contact details provided in Section 15 of this Policy.

14 Policy Amendments

Dewa808 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. When material changes are made, we will notify registered users by email and/or through a prominent notice on the Platform at least seven (7) days before the revised Policy takes effect, except where immediate changes are required by law.

The "Last Updated" date at the top of this Policy will be revised each time a new version is published. We encourage you to review this Policy periodically to stay informed about how we handle your personal data. Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the changes.

15 Contact & Complaints

If you have any questions, requests, or concerns about this Privacy Policy or the way Dewa808 handles your personal data, please contact us through the channels below. We are committed to resolving all privacy-related queries promptly and transparently.

Live Chat Support

Available 24 hours a day, 7 days a week — accessible directly through the Platform interface. Recommended for urgent account and privacy queries.

Privacy Enquiries Email

[email protected]
(Plain text only — not a clickable link)

We aim to acknowledge all written privacy requests within three (3) business days and to resolve substantive matters within thirty (30) calendar days. Where a complaint cannot be resolved to your satisfaction, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.