Privacy Policy Dewi11 — Our Commitment to Protecting Your Data

At Dewi11, we understand that your personal information is a trust you place in us. This Privacy Policy explains in detail how we collect, use, store, and protect your personal information when you use our online casino platform at dewi11.pw.

This policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices. By registering and using the Dewi11 platform, you agree to the terms set out in this Privacy Policy.

This Privacy Policy applies to all users and registered members of the Dewi11 platform, including those accessing the platform via a web browser on mobile devices or personal computers. It covers all services provided by Dewi11, including casino games, Live Casino, Slot Games, Bingo, Fish Shooting Games, and all related promotions.

As a data controller, dewi11 is responsible for ensuring that all personal information collected is processed lawfully, fairly, and transparently. We only collect information that is strictly necessary to provide our services and meet our legal obligations.

• This policy is to be read together with Terms and Conditions Dewi11.
• Any third-party services integrated with the dewi11 platform may have their own separate privacy policies.
• This policy may be updated from time to time; the latest update date will be displayed at the top of this page.

Dewi11 collects your personal information through various means — directly from you, automatically through platform use, and occasionally from legitimate third-party sources. The following are the categories of information we collect:

All information we collect is used for specific, lawful purposes. dewi11 will not use your data beyond the scope stated below without obtaining your consent first:

• Account Management: Create, verify, and maintain your member account, including a secure Login process.
• Service Delivery: Process deposits, withdrawals, and all financial transactions accurately and efficiently.
• Legal Compliance (KYC/AML): Fulfil identity verification and anti-money laundering obligations as required by the relevant authorities.
• Platform Security: Detect and prevent fraud, account misuse, unauthorised access, and other suspicious activity.
• Customer Support: Handle your inquiries, complaints, and support requests more effectively.
• Personalise Your Experience: Personalise game recommendations and promotions based on your preferences and playing habits.
• Service Communications: Send important notices relating to your account, changes to terms, security updates, and promotions you have subscribed to.
• Analytics & Improvement: Analyse usage patterns to improve platform performance, user interface, and overall service quality.

All data processing is carried out on a valid legal basis — whether for the performance of a contract, compliance with legal obligations, dewi11's legitimate interests, or based on the consent you have provided.

Dewi11 does not sell or trade your personal information. However, in certain situations, we may share your information with the following parties for legitimate reasons:

• Payment Service Providers: Required financial information is shared with payment gateway providers such as FPX, TNG eWallet, and GrabPay to process your transactions. All such providers are bound by strict confidentiality agreements.
• Game Software Providers: Some minimum technical data may be shared with third-party game providers integrated with the Dewi11 platform to ensure smooth gameplay functionality.
• Regulatory Authority: Dewi11 will disclose the required information to the relevant authorities when required by law, including financial crime investigations and licence compliance.
• Professional Advisors: Lawyers, accountants, and auditors bound by professional confidentiality obligations may access certain data for legitimate business operational purposes.
• Business Transfers: In the event of a merger, acquisition, or transfer of dewi11 assets, member information may be transferred to a successor entity, provided that equivalent data protection standards are maintained.

Dewi11 continually invests in security infrastructure to ensure your personal data remains protected at all times. The technical and organisational security measures we implement include:

• 256-bit SSL Encryption: All data transmitted between your device and dewi11 servers is protected with the highest-grade SSL/TLS encryption — no data is ever sent in plain text.
• Two-Factor Authentication (2FA): Members are encouraged to enable two-factor authentication to add an extra layer of protection to their accounts.
• Intrusion Detection System: Continuous 24/7 monitoring for any unauthorised access attempts or suspicious activity on the platform.
• Stored Data Encryption: Sensitive information such as passwords is stored in a cryptographic hash form that cannot be decrypted — no dewi11 employee is able to view your password.
• Internal Access Controls: Only staff with a legitimate business need are granted access to member data, and all such access is logged and audited on a regular basis.
• Secure Servers: Data is stored on servers housed in certified data centres with strict physical controls and cybersecurity measures.

While dewi11 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure against all cyber threats. It is important that members also take responsibility for keeping their passwords and login credentials safe.

Dewi11 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collect information about how you use the platform — pages visited, time spent, and any errors encountered — to help us improve our service.
• Functional Cookies: Save your personal preferences such as language, display theme, and account settings so you do not need to reconfigure them each time.
• Analytics Cookies: Helps us understand aggregate usage patterns to make data-driven decisions in improving the platform.

You can manage or disable cookies through your web browser settings at any time. However, disabling certain cookies may affect the functionality and your experience on the Dewi11 platform.

Under Malaysia's Personal Data Protection Act 2010 and Dewi11's privacy policy, you have the following rights regarding your personal data:

• Access Rights: You have the right to know what personal data we hold about you and to obtain a copy of it.
• Right to Rectification: If any of your information is inaccurate or out of date, you have the right to submit a correction request.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data, subject to legal obligations that prevent such deletion.
• Right to Object to Processing: You have the right to object to the use of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time.
• Right to Data Portability: You have the right to receive the data you have provided to us in a structured, machine-readable format.

To submit any request relating to the rights above, please contact our support team via the 24/7 live chat available on the platform. We will process your request within 30 business days.

Dewi11 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with legal obligations. The following are our retention period guidelines:

• Active Account Data: Retained for the duration your account is active, plus an additional period as required by law.
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction date in line with Malaysia's financial and tax legal requirements.
• KYC Documents: Retained for a minimum of 5 years after account closure in accordance with anti-money laundering compliance requirements.
• Communication Logs: Emails and customer support records are retained for 2 years for reference and dispute resolution purposes.
• Technical Data & Logs: System logs and technical data are retained for 90 days for troubleshooting and security purposes.

Once the retention period has expired and there is no legal requirement to continue storage, your data will be securely deleted or anonymised using industry-standard methods.

Dewi11 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or service improvements. When we make material changes:

• The "Updated" date at the top of this page will be revised accordingly.
• We will send an email notice to all registered members at least 14 days before the changes take effect.
• In-platform pop-up notices will inform you of the changes upon Login.
• For minor changes that do not affect your fundamental rights, we may update this page without a separate notice.

Your continued use of the dewi11 platform after any changes take effect will be considered your acceptance of the updated Privacy Policy. If you disagree with any changes, you have the right to close your account before they come into effect.

If you have any questions, concerns, or complaints about how dewi11 handles your personal data, we encourage you to reach out to us directly. Our data protection team is ready to assist you.

• Live Chat 24/7: The fastest way to get an immediate response — available directly on the Dewi11 platform.
• Support Email: Submit a written inquiry to our support team at [email protected] for issues that require documentation.

We are committed to responding to all privacy-related inquiries within 3 working days. For data access or deletion requests, please include your account number and identity verification details to help expedite the process.