Dewi11 Privacy Policy – Personal Data Protection for Malaysian Members

Dewi11 collects several categories of personal data when you interact with our platform. All data collection is carried out on a legitimate basis and for clearly defined purposes. The categories of data we collect are as follows:

Every piece of data dewi11 collects is used for a specific, legitimate purpose. We do not use your data for anything unrelated to the services you use. The purposes for which data is used are as follows:

• Account Management: Creating and managing your dewi11 account, processing logins, managing security settings, and granting access to all of our platform services.
• Financial Transaction Processing: Processing deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX, as well as processing withdrawals to your bank account or digital wallet in Malaysian Ringgit (RM).
• Identity Verification (KYC): To fulfil identity verification legal obligations for the prevention of fraud, money laundering, and access by underage individuals.
• Platform Security: Detecting and preventing unauthorised access, fraud, account misuse, and any activity that violates dewi11's terms.
• Responsible Gambling: Monitoring gameplay activity patterns to identify signs of problem gambling and taking proactive protective measures when necessary.
• Customer Support: Providing accurate and effective assistance when you contact the dewi11 support team regarding your account, transactions, or any technical enquiries.
• Service Communications: Sending you important notifications regarding your account, transactions, changes to terms, and relevant security information.
• Platform Improvement: Analysing aggregated (non-individual) usage data to understand usage patterns and improve the overall user experience on the dewi11 platform.
• Legal Compliance: Meeting the compliance and reporting obligations required by applicable laws and regulations in the jurisdictions where dewi11 operates.

Dewi11 does not sell, rent, or distribute your personal data to third parties for commercial marketing purposes. However, there are limited situations where dewi11 may need to share certain data with specific parties on legitimate grounds:

• Payment Service Providers: Required transaction information is shared with approved payment providers (Touch 'n Go, GrabPay, DuitNow, FPX, and others) solely for the purpose of processing your financial transactions. These providers are bound by strict confidentiality agreements.
• Game Providers: Certain game session data is shared with third-party casino and sports game providers that operate games within the dewi11 platform, to the minimum extent necessary for those games to function.
• Identity Verification Providers: Identity data is shared with approved third-party KYC services solely for the purposes of identity verification and fraud prevention.
• Regulatory & Law Enforcement Authorities: Dewi11 may be required to disclose certain data to the relevant authorities where there is a valid court order, legal obligation, or investigation related to fraud or money laundering.
• Audit & Compliance Services: Some data may be shared with independent auditors or compliance bodies that verify the integrity of dewi11's systems and its adherence to relevant industry standards.

In all of the above situations, data sharing is limited to the minimum information necessary. All third parties that receive dewi11 member data are bound by strict confidentiality agreements and are prohibited from using that data for any purpose other than what is specified in those agreements.

Dewi11 invests seriously in security infrastructure to ensure your personal data is protected at all times. The key security measures we have implemented are:

• 256-bit SSL Encryption: All communications between your browser or app and dewi11's servers are encrypted using the latest Transport Layer Security (TLS) technology, making data unreadable to any unauthorised party during transmission.
• Two-Factor Authentication (2FA): The 2FA system available to all dewi11 accounts adds an extra layer of security, ensuring only you can access your account even if someone else knows your password.
• 24/7 Security Monitoring: dewi11's cybersecurity team continuously monitors all platform activity to detect and respond to any unauthorised access attempts or suspicious behaviour.
• Encrypted Data Storage: Personal data stored in dewi11's databases is encrypted using current industry standards. This means that even in an unforeseen event, your data remains unreadable without the appropriate encryption key.
• Internal Access Controls: Access to members' personal data within dewi11's organisation is restricted to staff who require it to carry out their duties, with all access recorded and audited on a regular basis.
• Regular Security Testing: Dewi11 conducts regular penetration testing and vulnerability assessments by independent security experts to identify and address any weaknesses before they can be exploited.

While dewi11 takes all reasonable steps to protect your data, no digital security system can be guaranteed 100% secure. In the highly unlikely event of a security breach affecting your personal data, dewi11 is committed to notifying affected members within the timeframe required by applicable law and taking immediate action to limit the impact of the incident.

As a dewi11 member and the owner of your own personal data, you have several rights that you can exercise at any time. dewi11 is committed to respecting and facilitating the exercise of these rights:

• Right of Access: You may request a copy of all personal data dewi11 holds about you. This request will be processed within 30 business days and the information will be provided in a readable format.
• Right to Rectification: If you find that any personal data dewi11 holds about you is inaccurate or out of date, you have the right to request an immediate correction. You can update certain basic information directly through your dewi11 account settings.
• Right to Erasure (Right to be Forgotten): You may request the deletion of your personal data from dewi11's systems once it is no longer needed for the purpose for which it was collected. However, this right is subject to legal retention obligations that may require dewi11 to retain certain data for a specified period.
• Right to Object to Processing: You may object to the processing of your personal data for specific purposes such as direct marketing. Objections to marketing processing will be enforced immediately without question.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format for transfer to another service, should you wish to do so.
• Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

To exercise any of the rights above, please contact the dewi11 privacy team by email at support@dewi11-jit.com, clearly stating your request and your dewi11 account number for identity verification purposes. We will acknowledge receipt of your request within 3 business days and provide a full response within 30 business days.

The dewi11 platform uses cookies and similar tracking technologies to enhance the user experience and platform security. Below is an explanation of the types of cookies we use and their purposes:

• Session Cookies: This cookie is created when you log in and deleted when you log out. It is required to maintain your logged-in session status while browsing the dewi11 platform and cannot be disabled without affecting the platform's core functionality.
• Preference Cookies: Saving your preferences such as language, display layout, and notification settings so you don't have to reconfigure them every time you visit dewi11.
• Security Cookies: Helps dewi11 detect suspicious login activity, unauthorised access attempts, and usage patterns that may indicate fraud — protecting your account from security threats.
• Analytics Cookies: Collecting anonymised usage data to help us understand how users interact with the dewi11 platform — which pages are visited most frequently, how long sessions last, and so on. This data is used solely for platform improvement.

You can manage your cookie settings through your web browser. Keep in mind that disabling certain cookies may affect how dewi11 functions — particularly session cookies required for login. dewi11 recommends allowing session and security cookies for the best experience and optimal security.

Dewi11 retains your personal data for as long as it is needed for the purposes for which it was collected, or as required by Malaysian law and applicable industry regulations. General retention period guidelines are as follows:

• Active Account Data: For as long as your dewi11 account remains active, all account-related data is retained to ensure uninterrupted service and account security.
• Financial Transaction Records: Deposit and withdrawal transaction records are retained for a minimum of 7 years in accordance with applicable financial legislation and anti-money laundering compliance requirements.
• Identity Verification Data (KYC): Identity document copies are retained for a minimum of 5 years after the business relationship ends, or longer if required by applicable law.
• Security Logs: Access logs and security activity records are retained for 12 months for the purposes of security incident investigation and long-term fraud detection.
• Marketing Data: Data used for marketing communications is retained for as long as you have not withdrawn your consent or requested deletion. Withdrawal will be enforced within 5 business days.

Once the required retention period has expired, your personal data will be securely deleted or anonymised in a manner that ensures it can no longer be linked to you personally. Dewi11 conducts regular reviews of stored data to ensure that data no longer needed is handled in accordance with this procedure.

Dewi11 reserves the right to update this privacy policy from time to time in line with changes in legislation, changes to our operational practices, or improvements to the way we protect your data. Each new version of the privacy policy will be published on this page with a clear update date.

For material changes — that is, changes that significantly affect how we use your data or your privacy rights — dewi11 will notify you via your registered email address or a prominent in-platform notification before the changes take effect. This gives you sufficient time to review the updates and make an informed decision.

Continued use of the dewi11 platform after the effective date of an updated privacy policy constitutes your acceptance of the revised version. If you do not agree with the changes made, you have the right to close your account and request deletion of your data in accordance with the procedure outlined in the Your Privacy Rights section.