Privacy Policy

dewi11 ("we", "us", "our") operates the online gaming and sports betting platform accessible at dewi11.buzz. We respect the privacy of every individual who accesses or uses our Platform and we are committed to handling personal data with care, transparency, and in accordance with applicable data protection principles.

This Privacy Policy (hereinafter "Policy") describes in full how dewi11 collects, uses, stores, shares, and protects the personal data of our users ("you", "Player", "User"). It also explains the rights you hold in relation to your personal data and the mechanisms through which you may exercise those rights.

This Policy applies to all personal data processed in connection with your use of the dewi11 Platform, whether you access it from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or any other location. By using the Platform, you acknowledge that you have read and understood this Policy.

For the purposes of this Privacy Policy, the following definitions apply:

For the purposes of this Privacy Policy, the Data Controller responsible for your personal data is dewi11, operating the Platform at dewi11.buzz. All enquiries, data access requests, and complaints relating to personal data processing should be directed to our designated privacy contact, details of which are provided in Section 15 of this Policy.

dewi11 takes its responsibilities as Data Controller seriously. We have implemented appropriate technical and organisational measures to ensure that personal data is processed lawfully, fairly, and transparently, in accordance with applicable data protection legislation.

dewi11 collects personal data through several channels: directly from you during account registration and subsequent account activity; automatically through your use of the Platform; and from third-party payment processors when you conduct financial transactions.

The categories of personal data we collect are as follows:

dewi11 processes your personal data for the following specified purposes. Each processing purpose is associated with a lawful basis described in Section 6.

• Account Management: Creating, verifying, and maintaining your dewi11 account, including identity verification (KYC) as required prior to withdrawal processing.
• Payment Processing: Facilitating deposits and withdrawals via Malaysian payment channels including DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, Boost, and GrabPay.
• Service Provision: Delivering online casino games, live dealer tables, sports betting markets (including Liga Super Malaysia and EPL), lottery, and all other Platform features.
• Responsible Gambling Compliance: Monitoring gaming behaviour to identify potential problem gambling patterns and to enforce deposit limits, self-exclusion orders, and age restrictions (21+).
• Fraud Prevention & Security: Detecting and investigating suspected fraudulent activity, money laundering, bonus abuse, and other prohibited conduct as defined in the Terms and Conditions.
• Legal & Regulatory Compliance: Fulfilling anti-money laundering (AML) obligations, responding to lawful requests from competent authorities, and maintaining records as required by applicable law.
• Customer Support: Responding to your enquiries, processing complaints, and resolving disputes relating to your account or transactions.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve Platform performance, user experience, and service offerings.

dewi11 processes your personal data only where a lawful basis exists for doing so. The following lawful bases apply to our processing activities:

• Contractual Necessity: Processing that is necessary to perform the contract between dewi11 and you — specifically, to provide the gaming and payment services you have registered to use.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including AML obligations, KYC identity verification, and record-keeping requirements.
• Legitimate Interests: Processing that serves dewi11's legitimate business interests — such as fraud prevention, platform security, and aggregate analytics — where those interests are not overridden by your privacy rights.
• Consent: Where we send you optional marketing communications about promotions, new game releases, or bonus offers, we do so only on the basis of your explicit prior consent. You may withdraw this consent at any time.

dewi11 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes under any circumstances. Your personal data may, however, be disclosed to the following categories of third parties strictly where necessary and on a need-to-know basis:

• Payment Service Providers: Malaysian payment processors and financial institutions (including those operating DuitNow, FPX, and major bank payment gateways) require certain transaction data to process your deposits and withdrawals securely and accurately.
• Game Studio Partners: Certified international game studios providing games on the dewi11 Platform receive session and wager data necessary to operate their game systems. These studios are bound by contractual data protection obligations.
• Identity Verification Providers: Third-party KYC verification services may receive identity document data (e.g., MyKad images) solely for the purpose of verifying your identity prior to withdrawal processing.
• Regulatory & Law Enforcement Authorities: dewi11 may be required by law to disclose personal data to competent authorities, regulatory bodies, or law enforcement agencies upon receipt of a lawful request. Such disclosures will only be made to the extent required by law.
• Professional Advisers: Legal counsel, auditors, and compliance consultants engaged by dewi11 may access personal data on a strictly confidential basis where necessary for the provision of their professional services.

As a user of the dewi11 Platform, you hold the following rights in relation to your personal data. All requests to exercise these rights should be submitted in writing to the contact details provided in Section 15.

dewi11 will respond to all data subject requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it within the initial 30-day period.

dewi11 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS): All data transmitted between your browser or device and dewi11's servers is encrypted using 256-bit TLS encryption.
• Data Encryption at Rest: Sensitive personal data stored on dewi11's servers — including identity documents and financial records — is encrypted using industry-standard encryption algorithms.
• Access Controls: Access to personal data within dewi11's systems is restricted on a strict need-to-know basis. All staff with access to personal data undergo regular privacy and security training.
• Two-Factor Authentication: dewi11 offers two-factor authentication (2FA) for all Player accounts and mandates it for all internal system administration access.
• Penetration Testing: dewi11's platform and infrastructure undergo regular independent security testing to identify and remediate vulnerabilities.
• Incident Response: In the event of a data breach that poses a risk to your rights or freedoms, dewi11 will notify affected users without undue delay and in accordance with applicable regulatory requirements.

While dewi11 takes all reasonable measures to protect your personal data, no method of transmission over the internet is entirely secure. You are also responsible for maintaining the security of your own account credentials and device access.

dewi11 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

dewi11 uses cookies and similar technologies on the Platform for the following purposes:

• Essential Cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens, and load balancing cookies. They cannot be disabled without affecting your ability to use the Platform.
• Functional Cookies: Store your Platform preferences such as language settings, preferred payment method display, and game filter settings to improve your experience on return visits.
• Analytics Cookies: Aggregate, anonymised data used to understand how users interact with the Platform — such as which pages are most frequently visited and where users encounter difficulty. This data cannot be used to identify individual users.

dewi11 does not deploy third-party advertising cookies or cross-site tracking technologies. You can manage or delete cookies through your browser settings at any time. Disabling essential cookies may impair Platform functionality including login sessions and payment processing flows.

The dewi11 Platform is strictly for use by persons aged 21 and above. dewi11 does not knowingly collect personal data from individuals below the age of 21. Age verification is a mandatory component of the account registration and KYC process.

If dewi11 discovers that personal data belonging to a person under 21 has been collected — whether through misrepresentation during registration or any other means — the relevant Account will be immediately suspended, the personal data deleted, and any funds held in the Account dealt with in accordance with our Terms and Conditions.

In limited circumstances, your personal data may be transferred to or processed by entities located outside Malaysia — for example, where our game studio partners or KYC verification providers are based in other jurisdictions. In all such cases, dewi11 ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that require recipients to apply equivalent data protection standards.

dewi11 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate contractual or technical safeguards.

dewi11 reserves the right to update or amend this Privacy Policy at any time. Material changes — those that significantly affect how we collect or use your personal data, or that materially affect your rights — will be communicated to registered Players via email notification or a prominent notice on the Platform homepage, with a minimum of 14 days' advance notice where practicable.

The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform following notification of changes constitutes your acceptance of the revised Policy.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the dewi11 privacy team through the following channels:

• Email (Privacy Enquiries): [email protected] — Please mark your subject line as "Privacy Request" for prompt routing.
• Live Chat: Available 24 hours a day, 7 days a week through the dewi11 Platform dashboard for general support and urgent account matters.

For data subject access requests, erasure requests, or other formal rights exercises under this Policy, we recommend submitting your request via email to ensure a documented and trackable communication trail.