Privacy Policy Dewa288 – Our Commitment to Protecting Malaysian Members' Personal Data

This Privacy Policy ("Policy") describes how Dewa288 ("we", "platform") collects, uses, stores, shares, and protects your personal data ("member", "you") when you use our online betting platform, accessible at dewa288.click.

Dewa288 operates as an online betting entertainment platform offering slots, live casino, poker, and Sports Betting covering the Malaysia Super League, EPL, badminton, cricket, and virtual sports to users in Malaysia. In providing these services, we process a limited amount of personal data necessary to keep the platform running smoothly and securely.

This policy is effective from 1 January 2026 and supersedes all previous versions. Continued use of the Dewa288 platform after that date constitutes acceptance of this updated Privacy Policy.

Dewa288 collects various categories of personal data depending on how you interact with our platform. Below is a full breakdown of the data we collect:

Dewa288 not collect credit or debit card numbers directly — all financial transactions are processed through licensed and certified third-party payment providers in Malaysia: DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks). Dewa288 receives only transaction confirmations from these providers and has no access to your full card or account details with them.

Dewa288 uses the personal data we collect solely for legitimate and relevant purposes, as follows:

• Account Management: Creating, verifying, and maintaining your Dewa288 member account, including password recovery and profile information updates.
• Transaction Processing: Deposits processed via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX — plus secure, accurate withdrawals to your Malaysian bank account.
• Gaming Service Delivery: Gives you full access to every game on Dewa288 — slots, Live Casino, Poker, and Sports Betting — with accurate and fair records maintained at all times.
• Platform Security: Detecting and preventing fraud, money laundering, multiple-account usage, and any suspicious activity or violations of Dewa288's Terms & Conditions.
• Service Communications: Sending you important notifications relating to your account, transactions, terms changes, and security updates.
• Marketing Communications: Sending promotional information, new bonuses, and exclusive Dewa288 offers — only with your consent, and you may unsubscribe at any time.
• Legal Compliance: To comply with applicable legal and regulatory obligations in Malaysia, including reporting requirements to relevant authorities when required by law.
• Platform Improvements: Analysing usage patterns in aggregate and non-personal form to understand how the Dewa288 platform can be improved to deliver a better experience for all members.

Dewa288 processes your personal data on the following lawful bases in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA):

• Contract Performance: Data processing required to fulfil the service contract between Dewa288 and you as a member — including account management and financial transaction processing.
• Consent: For purposes such as marketing communications and the use of optional cookies, Dewa288 obtains your explicit consent. You may withdraw this consent at any time.
• Legitimate Interest: For platform security, fraud prevention, and service improvement analytics, where those interests do not override your fundamental rights and freedoms.
• Legal Obligation: Where data processing is required to comply with applicable laws or court orders in Malaysia.

Dewa288 does not sell members' personal data to any party. However, in the course of platform operations, we may need to share certain data with the following third parties under limited and strictly controlled circumstances:

• Malaysian Payment Providers: DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks) receive the transaction data necessary to process your deposits and withdrawals. These providers are bound by their own privacy policies and strict financial security standards.
• Game Software Provider: Platforms such as Pragmatic Play, Evolution Gaming, and PG Soft may receive technically necessary session identifiers required to deliver games to you. They do not receive your full name or financial information.
• Technical Service Providers: Companies providing technical infrastructure services such as server hosting, data processing, and cybersecurity, operating under strict confidentiality agreements with Dewa288.
• Legal Authorities: Malaysian regulatory bodies, law enforcement agencies, or courts when we are legally required to disclose specific data. We will notify you of any such disclosure where permitted by law.

All third parties who receive Dewa288 member data are required to uphold data protection standards equivalent to our own policy and to use that data only for the purposes specified in their agreement with Dewa288.

Dewa288 continually invests in technical and organisational security infrastructure to protect members' personal data from unauthorised access, loss, destruction, or disclosure. Key security measures we employ include:

• 256-bit SSL Encryption: All communications between your web browser and Dewa288's servers are protected with 256-bit TLS/SSL encryption — the same technology used by leading banks in Malaysia and worldwide.
• Stored Data Encryption: Sensitive data stored in Dewa288's databases — including financial information — is encrypted using modern, industry-recognised encryption algorithms.
• Strict Access Controls: Only Dewa288 staff with a legitimate operational need are permitted to access member data, and every access is automatically logged and monitored.
• Firewall & Intrusion Detection System: Dewa288's servers are protected by multi-layered firewalls and an intrusion detection and prevention system (IDS/IPS) operating 24/7.
• Regular Security Audits: Dewa288 conducts regular technical security audits by independent cybersecurity experts to identify and address vulnerabilities before they can be exploited.
• Two-Factor Authentication: Two-factor authentication (2FA) is available for members who wish to add an extra layer of security to their account.

While Dewa288 takes all reasonable steps to protect your data, no online security system can be guaranteed 100% secure against every threat. If you suspect your Dewa288 account has been compromised, please contact our support team immediately via 24/7 live chat.

Dewa288 retains members' personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law:

• Active Account Data: For as long as your Dewa288 account remains active, we retain all data relevant to the management and operation of your account.
• Financial Transaction Records: Deposit records, withdrawal records, and transaction history are retained for a minimum of 7 years after a transaction occurs, in line with Malaysian financial regulatory requirements.
• Game Records: Game and betting records are retained for a minimum of 5 years for compliance and dispute resolution purposes.
• Closed Account Data: When a Dewa288 account is closed at a member's request, personal data that is no longer required for legal or compliance purposes will be deleted or anonymised within 90 days from the account closure date.
• Security Logs: System and security logs are retained for 12 months for the purposes of detecting and investigating security incidents.

When personal data is no longer required for any legitimate purpose, Dewa288 will securely delete it using methods that ensure the data cannot be recovered.

As a Dewa288 member and a Malaysian citizen or resident, you have the following privacy rights under Malaysia's Personal Data Protection Act 2010 (PDPA):

To exercise any of these privacy rights, you may contact the Dewa288 support team via 24/7 live chat or send an email to [email protected] with the subject line "Privacy Rights Request". We will respond within 14 business days.

The Dewa288 platform uses cookies — small text files stored in your web browser — to enhance your experience. Below are the cookie categories we use:

• Essential Cookies — Required for core platform functions such as login sessions and security. These cookies cannot be disabled, as the platform will not function without them. No sensitive personal information is stored in these cookies.
• Analytics Cookies — Helps us understand how members use the Dewa288 platform — which pages are most popular, common navigation paths, and where users encounter difficulty. This data is processed in aggregate and without personal identifiers. You may opt out of these cookies.
• Marketing Cookies — Used to show you relevant Dewa288 promotions and advertisements based on your interests and activity. This is only active with your consent, and you may withdraw that consent at any time through the cookie settings in your Dewa288 account.

You can manage your cookie preferences through your web browser settings or via the cookie settings panel available when you first visit Dewa288. Disabling certain cookies may affect the functionality of some parts of the platform.

If you have any questions, concerns, or complaints regarding Dewa288's Privacy Policy or how we handle your personal data, please reach us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the Dewa288 platform. This is the fastest way to get a response.
• Email: [email protected] — include "Data Privacy" in the email subject line for faster processing. Email response time is typically 2–4 hours on business days.

We are committed to responding to all privacy-related inquiries within a reasonable timeframe. If you are not satisfied with our response, you have the right to file a complaint with the relevant Malaysia Personal Data Protection Department.

Dewa288 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, the technologies we use, or applicable legal requirements. Members will be notified of any material changes via a notice on the Dewa288 website and by email at least 14 days before the changes take effect.