Privacy Policy

This Privacy Policy (hereinafter referred to as the "Policy") is issued by dewa1000 (hereinafter referred to as "dewa1000", "we", "us", or "our") and applies to all personal data collected, processed, stored, or transmitted in connection with your use of the dewa1000 website at https://dewa1000.cam, including all associated subdomains, mobile interfaces, and related services (collectively, the "Platform").

dewa1000 is committed to protecting the privacy and security of all personal information entrusted to us by our users. We operate in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability. While our Platform is primarily designed for Malaysian users, data processing standards applied herein reflect best practices aligned with frameworks such as the General Data Protection Regulation (GDPR) and Malaysia's Personal Data Protection Act 2010 (PDPA) where applicable.

By accessing or using the Platform, registering a Player Account, making a deposit, or otherwise engaging with our services, you acknowledge that you have read and understood this Policy, and that you consent to the collection and processing of your personal data as described herein. If you do not consent to the practices described in this Policy, you must not use the Platform.

This Policy should be read in conjunction with our Terms & Conditions, which govern the overall contractual relationship between you and dewa1000, and our Responsible Gambling Policy.

For the purposes of this Privacy Policy, the following definitions apply:

dewa1000 collects personal data that is necessary to provide you with a safe, compliant, and functional gaming experience. The categories of personal data we collect include, but are not limited to, the following:

dewa1000 collects personal data through the following channels and mechanisms:

• Direct Provision: Data you actively provide when registering an account, completing KYC verification, making a deposit, requesting a withdrawal, contacting customer support, or responding to surveys and promotions.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, including via cookies, web beacons, session logs, and analytics tools. See Section 9 (Cookies & Tracking) for further details.
• Payment Processors: Financial data received from third-party payment providers (such as e-wallet operators, FPX participating banks, and card payment networks) in connection with your deposit and withdrawal transactions.
• Identity Verification Providers: Data received from third-party KYC and AML verification service providers used to confirm the authenticity of identity documents and assess fraud risk.
• Third-Party Fraud and Risk Tools: Technical signals and risk scores received from fraud prevention platforms used to detect irregular login patterns, multi-account behaviour, or suspicious transaction activity.
• Publicly Available Sources: Where necessary for AML compliance, we may cross-reference information against publicly available sanctions lists, politically exposed persons (PEP) databases, and adverse media sources.

dewa1000 processes your personal data for the following specific purposes:

dewa1000 relies on one or more of the following legal bases when processing your personal data:

• Contractual Necessity: Processing required to perform the contract between you and dewa1000 (i.e., the Terms & Conditions), including account management, payment processing, and KYC verification.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including AML/CTF requirements, age verification mandates, and licensing conditions.
• Legitimate Interests: Processing carried out in pursuit of dewa1000's legitimate business interests — such as fraud prevention, platform security, and service improvement — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out with your explicit, freely given consent — primarily in the context of marketing communications and the use of non-essential cookies. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

dewa1000 does not sell, rent, or trade your personal data to third parties for their independent commercial use. We may share your data with third parties only in the following limited circumstances:

• Payment Service Providers: To process deposits and withdrawals via your selected payment method. This includes Malaysian e-wallet operators (Touch 'n Go, Boost, GrabPay), DuitNow / FPX banking infrastructure, card payment networks (Visa, Mastercard), and cryptocurrency network facilitators. Each provider processes data under its own privacy policy and relevant data sharing agreements with dewa1000.
• KYC and Identity Verification Providers: Third-party services engaged by dewa1000 to verify the authenticity of identity documents, confirm date of birth, and screen against sanctions or PEP lists.
• Fraud Prevention and Risk Platforms: Technology providers used to detect account compromise, payment fraud, multi-accounting, and other security threats.
• IT Infrastructure and Hosting Providers: Cloud service providers and data hosting companies used to store, back up, and secure Platform data.
• Game Content Providers: Licensed international game studios that supply slot, live dealer, and other game content on the Platform may receive limited technical data (such as Player ID and session tokens) necessary for game delivery and result calculation.
• Legal and Regulatory Authorities: Where dewa1000 is required by applicable law, court order, regulatory direction, or licensing obligation to disclose personal data to law enforcement, anti-money laundering authorities, or other governmental bodies.
• Dispute Resolution Bodies: Where a formal dispute is escalated to a third-party dispute resolution body under dewa1000's licensing framework, relevant account and transaction data may be shared.

dewa1000 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, and in compliance with applicable legal and regulatory obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

dewa1000 uses cookies and similar tracking technologies (web beacons, pixels, local storage) on the Platform. Cookies are small text files stored on your device that help the Platform function correctly, remember your preferences, and provide analytical data.

Categories of cookies used:

You may manage your cookie preferences through your browser settings. Please note that disabling cookies beyond strictly necessary ones may affect the functionality and performance of the Platform. For specific cookie management instructions, refer to your browser's help documentation.

dewa1000 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include but are not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the dewa1000 Platform.
• Data encryption at rest for sensitive data stored in our databases, including identity documents and financial records.
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access personal data.
• Multi-factor authentication for internal systems and administrative access.
• Regular penetration testing and security audits conducted by independent security professionals.
• Incident response procedures in place to detect, contain, and notify affected parties in the event of a data security breach, in accordance with applicable legal timeframes.

While dewa1000 takes every reasonable precaution to protect your data, no method of transmission over the internet or electronic storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for securing the devices you use to access the Platform.

Subject to applicable law and certain exemptions (including those relating to legal obligations, fraud prevention, and AML compliance), you have the following rights with respect to your personal data held by dewa1000:

To exercise any of the above rights, please submit a written request to our Data Protection team via live chat or email ([email protected] — plain text address, not a clickable link). We will acknowledge your request within 5 business days and respond substantively within 30 calendar days. In complex cases, this may be extended by a further 60 days with prior notice to you.

The dewa1000 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory element of the account registration and KYC process.

If dewa1000 discovers or has reason to believe that an account is registered to, or is being used by, a person under the age of 21, we will immediately suspend the account, initiate a full investigation, withhold any funds pending the outcome, and take all necessary steps to purge the data collected, as required by law.

Parents and guardians who become aware that a minor may have accessed the Platform using their details or device should contact our support team immediately via live chat so that appropriate action can be taken without delay.

Given the international nature of dewa1000's operations and the global technology infrastructure underpinning the Platform, your personal data may be transferred to, stored in, or processed in countries outside of Malaysia. These may include jurisdictions where data protection laws differ from those in Malaysia.

Where such transfers occur, dewa1000 implements appropriate safeguards to ensure that your data receives a standard of protection consistent with the principles set out in this Policy. These safeguards include contractual data transfer agreements with receiving parties, use of cloud infrastructure providers that maintain recognised international security certifications, and technical measures to restrict data access to authorised personnel only.

By using the Platform, you acknowledge and consent to your personal data being transferred, processed, and stored in the manner described in this section.

dewa1000 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, technology infrastructure, or our data processing practices. Material changes to this Policy will be communicated to registered Players by posting a prominent notice on the Platform and/or by email notification to the registered address on file.

The "Last Updated" date at the top of this page indicates the effective date of the current version of the Policy. We encourage you to review this page periodically. Your continued use of the Platform following the effective date of any changes constitutes your acceptance of the revised Policy.

Where changes to the Policy require your renewed consent (for example, for a new category of data processing or a new purpose), we will seek such consent before proceeding. You retain the right to withdraw consent at any time without affecting the lawfulness of prior processing.

If you have any questions, concerns, or complaints regarding this Privacy Policy, the handling of your personal data, or the exercise of your data rights, please contact the dewa1000 Data Protection team using the details below:

For matters relating to your Terms & Conditions rights, please refer to our Terms & Conditions page. For responsible gambling support, please visit our Responsible Gambling page.