Privacy Policy Dewi288 — Our Commitment to Protecting Your Data

This Privacy Policy explains how Dewi288 (dewi288.vu) collects, uses, stores and protects your personal information when you use our platform, website or mobile app.

By registering an account or continuing to use the Dewi288 platform, you agree to the practices described in this policy. We encourage you to read this document in full so you understand your rights and the choices available to you.

This Policy applies to all users of the Dewi288 platform — from new members who have just registered, active users utilizing daily services, to users who have closed their accounts (in the context of data that must be retained under legal requirements).

Dewi288 collects your personal data through several channels — directly when you register or interact with the platform, and automatically through industry-standard technologies. Below are the categories of data we collect:

Every piece of data we collect has a clear and legitimate purpose. dewi288 does not use your data for purposes not stated in this policy. The primary uses of your data are as follows:

• Service provision — to manage your account, process deposits and withdrawals, and provide access to all games and platform features
• Identity verification — meet KYC and anti-money laundering (AML) requirements mandated by law
• Account security — detect and prevent unauthorised access, fraud, and system abuse
• Service communications — send account-related notices, transaction confirmations, and important updates
• Platform improvements — analyse usage patterns to improve the overall user experience
• Legal compliance — fulfil reporting obligations to the relevant authorities when required

Dewi288 does not sell or rent your personal data to any third party. However, in operating the platform, we may need to share data with the following categories of parties under limited and controlled circumstances:

• Payment processing providers — such as FPX, DuitNow, and digital wallet providers required to process your financial transactions. They are subject to strict confidentiality agreements
• Game service providers — live casino studios and game software providers that need to receive minimum session data to deliver games. This data may not be used by them for any other purpose
• Statutory Authority — dewi288 will disclose data to authorities with valid legal jurisdiction, such as financial regulators or law enforcement, when required to do so
• Identity verification services — KYC providers who assist in verifying your identity for player protection and AML compliance purposes

All third parties working with dewi288 are required to meet data protection standards equal to or higher than those we apply ourselves.

Dewi288 invests seriously in data security infrastructure. The technical and organisational measures we implement include:

• Data encryption in transit uses TLS 1.3 and SSL 256-bit protocols for all communications between your device and our servers
• Data encryption at rest — sensitive data such as financial information and KYC records are stored in encrypted form using industry-standard encryption algorithms
• Role-based access control — only staff who require it for their duties may access user data, and every access is automatically audited
• 24/7 security monitoring — an intrusion detection system operating around the clock to detect and respond to threats promptly
• Regular penetration testing by independent security experts to identify and patch vulnerabilities before they can be exploited

Dewi288 does not retain your data longer than necessary. Data retention periods depend on the type of data and relevant legal requirements:

• Active account data — retained for as long as your account is active and for a reasonable period thereafter
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements
• KYC Documents — retained for the duration the account is active and 5 years after account closure in accordance with AML requirements
• Technical logs — retained for 90 to 365 days depending on log type, for security and troubleshooting purposes
• Support communication data — retained for 3 years for customer service reference

Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices, you have the following rights regarding your personal data held by Dewi288:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your data under certain circumstances, subject to legal retention obligations
• Right to object — object to the processing of your data for specific purposes such as direct marketing
• Right to withdraw consent — withdraw consent you have given for certain data processing activities

To exercise any of these rights, contact the dewi288 customer support team via live chat or support email. Requests will be processed within 30 calendar days.

The dewi288 platform uses cookies and similar technologies to ensure the platform runs smoothly and to provide a better experience for users. Types of cookies used:

• Essential cookies — required for the platform to function, including login session management and security. These cookies cannot be disabled
• Functional cookies — store your preferences such as language and display settings for your convenience
• Analytic cookies — helps us understand how users interact with the platform for improvement purposes. This data is collected in aggregate and does not identify individuals

You can manage cookies through your web browser settings. Disabling certain cookies may affect the functionality of some parts of the platform.

Dewi288 reserves the right to update this Privacy Policy from time to time to reflect changes in law, industry practices or how we handle data. The latest update date is always displayed at the top of this document.

For material changes — meaning changes that significantly affect how we process your data or your rights — we will send a notice to your registered email at least 14 days before the changes take effect. Continued use of the platform after the effective date will be considered acceptance of those changes.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how dewi288 handles your personal data, you may contact us via:

• Live Chat — available 24/7 on the dewi288 platform, the fastest way to get a response
• Support email — [email protected] (response within 1 business day)
• Help Centre — visit the page FAQ us for answers to frequently asked questions about privacy

The dewi288 Data Protection Team handles all privacy-related enquiries and operates during Malaysia business hours (GMT+8). For complaints requiring in-depth investigation, we will provide progress updates within 5 business days.