DewaVegas Privacy Policy – Personal Data Protection for Malaysian Players

01Introduction and Scope of This Privacy Policy

Welcome to the dewavegas Privacy Policy. This document transparently explains how dewavegas ("We", "Platform") collects, processes, stores, shares, and protects your personal data ("User", "Player") when you use the website, application, and all services provided under the dewavegas name at https://dewavegas.my.

This Privacy Policy is drafted in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and forms part of dewavegas's overall Terms and Conditions. By registering a dewavegas account or using any of our services, you acknowledge that you have read, understood, and agreed to how we manage your personal data as described in this policy.

This Privacy Policy applies to all personal data you provide directly to dewavegas, data we collect automatically when you use our platform, and data we receive from legitimate third parties in connection with your account. If you do not agree with how we handle your data, please discontinue use of the dewavegas platform and contact us to request account deletion.

02Types of Personal Data Collected by DewaVegas

2.1 Data You Provide Directly

Dewavegas collects information that you voluntarily provide during the following processes:

• Account Registration: Full name, active Malaysian phone number, password, and email address (if provided)
• Identity Verification: Identity card number (MyKad), date of birth, and copies of identification documents requested for KYC (Know Your Customer) purposes
• Payment Information: The type of payment method used (Touch 'n Go, GrabPay, DuitNow, FPX, Boost, ShopeePay) and the associated account number – for transaction processing purposes only
• Support Communications: The content of any live chat, WhatsApp, or email conversations you send to the dewavegas customer support team
• Feedback: Surveys, reviews, and feedback you voluntarily submit to dewavegas

2.2 Automatically Collected Data

When you use the dewavegas platform, certain information is collected automatically to ensure the service functions correctly and securely:

• Device Data: Device type, operating system, smartphone model, screen resolution, and unique device identifier
• Network Data: IP address, internet connection type, and internet service provider (ISP)
• Usage Data: Pages visited, time spent in each section of the platform, games played, bets placed, and navigation patterns
• Session Data: Login time, logout time, session duration, and in-session activity
• Cookie Data: Information collected through cookies and similar tracking technologies as described in Section 6

2.3 Data from Third Parties

In certain circumstances, dewavegas may receive your personal data from legitimate third-party sources, such as identity verification service providers, payment providers (to verify transactions), and regulatory authorities where required by law.

03How DewaVegas Uses Your Personal Data

Dewavegas uses collected personal data solely for legitimate and necessary purposes. We do not use your data beyond the scope outlined below without obtaining fresh consent from you:

3.1 Core Operational Purposes

• Managing and maintaining your account – including the login process, security verification, and profile information updates
• Processing financial transactions – deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, or ShopeePay, and withdrawals to your account
• Providing gaming services – access to slots, live baccarat, virtual sports, badminton, live casino, and all other games on dewavegas
• Administering the VIP rewards programme – calculating reward points, determining promotion eligibility, and managing VIP tier upgrades

3.2 Security and Compliance Purposes

• Detecting and preventing fraud, money laundering, and other unlawful activities
• Verifying player identity and meeting KYC requirements
• To comply with legal and regulatory reporting requirements
• Maintaining audit records as required by applicable laws or regulations

3.3 Service Improvement Purposes

• Analysing usage patterns to improve the dewavegas interface and overall user experience
• Personalising game recommendations based on your preferences and play history
• Conducting internal market research to develop new products and features
• Evaluating the effectiveness of promotional campaigns and refining future offers

3.4 Marketing Communications (With Consent)

If you consented at the time of registration or subsequently, dewavegas may send you marketing communications including new promotional offers, bonus deals, game updates, and dewavegas platform news. You can opt out of these communications at any time through your account settings.

04Data Retention and Security Measures

4.1 Where Your Data Is Stored

Your personal data is stored on servers protected by a multi-layered security system that includes encryption at rest, strict access controls based on the principle of least privilege, continuous 24/7 security monitoring, and an active intrusion detection system.

4.2 Data Retention Periods

Dewavegas retains your personal data only for as long as it is needed for the stated purposes, or as required by law:

• Active Account Data: Retained for as long as your account remains active and in use
• Post-Account Closure Data: Transaction records and identity verification data are retained for up to 7 years after account closure to meet legal requirements related to financial regulations and anti-money laundering obligations
• Security Logs: Retained for 2 years for audit purposes and security incident investigations
• Support Communication Records: Retained for 3 years for reference and service quality improvement

4.3 Technical Security Measures

Dewavegas implements multiple layers of technical security to protect your data:

• 256-bit SSL/TLS encryption for all communications between your browser and dewavegas servers
• Two-factor authentication (2FA) is available for your dewavegas account
• Regular security vulnerability scanning conducted by both our internal security team and independent third parties
• Annual penetration testing conducted by independent cybersecurity firms
• Strict internal access controls – dewavegas staff can only access the data necessary to perform their specific duties
• A clear incident response plan to address any data security breaches promptly

05Data Sharing with Third Parties

Dewavegas does not sell or transfer your personal data to third parties for marketing purposes. However, in the course of normal platform operations, your data may be shared with the following categories of third parties for legitimate reasons:

5.1 Operations-Related Service Providers

• Payment Providers: Payment gateways processing Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, ShopeePay, Maybank2u, and CIMB Clicks transactions – only the information necessary to process each transaction is shared
• Game Providers: Evolution Gaming, Pragmatic Play, Playtech, and other providers that supply live casino games, slots, and virtual sports for the dewavegas platform – only anonymised player IDs are shared for game operation purposes
• Cloud Service Providers: Server infrastructure and data storage providers that support dewavegas platform operations
• Identity Verification Service Providers: Platforms that assist with KYC processing and identity verification in accordance with regulatory requirements

5.2 Authorities & Legal Requirements

Dewavegas may be required to disclose your personal data to the relevant authorities in the following circumstances:

• When required by a valid court order, warrant, or lawful legal directive
• To comply with investigations by Malaysian law enforcement agencies in relation to financial crime or money laundering
• To protect the vital interests of an individual in an emergency situation
• To defend legal claims against dewavegas or to enforce dewavegas's rights

5.3 Protection During Sharing

Every third party that receives dewavegas player data is required to sign a data protection agreement binding them to protection standards equivalent to or higher than those practised by dewavegas. We also conduct regular audits of these third parties to ensure ongoing compliance.

06Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files stored on your device when you visit the dewavegas platform. They help us recognise your device on future visits, remember your preferences, and deliver a smoother, more personalised experience. Cookies do not directly contain your personal information and cannot be used to run programs or download software onto your device.

6.2 Types of Cookies Used by DewaVegas

• Essential Cookies: Required for core platform functions such as staying logged in, retaining your betting cart contents, and maintaining session security. These cookies cannot be disabled without affecting the basic functionality of dewavegas.
• Performance Cookies: Collecting information on how you use the dewavegas platform – most frequently visited pages, error messages encountered – to help us improve the platform
• Functionality Cookies: Remembering your preferences such as chosen language, favourite sports, and display settings to deliver a more personalised experience
• Analytics Cookies: Helping dewavegas understand overall platform usage patterns for product and service improvement purposes

6.3 How to Manage Cookies

You can control and manage cookies through your web browser settings. Most browsers allow you to view existing cookies, delete them, and block new ones from being set. Please refer to your browser's "Help" section for specific instructions. Note that disabling certain cookies may affect the functionality and your overall experience on the dewavegas platform.

07Your Personal Data Rights

As a dewavegas player and an individual protected under Malaysia's PDPA, you have the following rights regarding your personal data:

To exercise any of the rights above, contact the dewavegas customer support team via live chat, WhatsApp, or email at support@dewavegas.my. We will respond within 14 business days from the date we receive your completed request.

08Privacy Specific to Payment Transactions

Dewavegas understands that financial information is among the most sensitive data we handle. As such, we take additional, dedicated measures to protect your payment information:

8.1 Accepted Payment Methods

The dewavegas platform accepts deposits and withdrawals via the following Malaysian payment methods:

8.2 How Payment Information Is Protected

• Your full payment account details (account number, PIN, password) never pass through dewavegas servers – all sensitive inputs are handled directly by the licensed third-party payment gateway
• Dewavegas retains only transaction identifiers and the information required for reconciliation purposes – not your full payment account details
• All payment gateways used by dewavegas comply with the PCI-DSS (Payment Card Industry Data Security Standard)
• All withdrawals will be processed only to the payment account registered under the same player's name — withdrawals to third-party accounts are not permitted
• Unusual transaction activity is automatically monitored and may trigger additional security reviews to protect your account

09Children's Privacy & Protection of Young Users

The dewavegas platform is strictly for individuals aged 18 and above. dewavegas does not knowingly collect or process personal data from anyone under the age of 18. We employ multiple verification methods to ensure players meet the minimum age requirement, including Malaysian phone number verification, MyKad verification where requested, and behavioral analysis to identify suspicious usage patterns.

If we discover that personal data belonging to a minor has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. Parents or guardians who have concerns that their child has registered a dewavegas account are advised to contact our customer support team promptly at support@dewavegas.my.

Dewavegas also encourages parents and guardians to use parental control software on devices shared with children to prevent unintended access to online gambling platforms.

10Amendments to This Privacy Policy

Dewavegas reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data protection practices, applicable laws or regulations, or the services we offer. Any changes that take effect will be published on this page with a new "Last Updated" date.

For material amendments that significantly affect how we use your personal data, dewavegas will notify you via an in-platform notification or email at least 14 days before the changes take effect. Your continued use of the dewavegas platform after the effective date of such amendments will be deemed as your acceptance of the updated Privacy Policy.

11How to Contact DewaVegas Regarding Privacy

If you have any questions, concerns, or wish to exercise your rights under this Privacy Policy — or if you would like to file a complaint regarding how dewavegas handles your personal data — please reach out to us through the following channels:

• Live Chat: Available 24/7 directly on the dewavegas platform – the fastest way to get an immediate response
• WhatsApp: Support in Bahasa Malaysia and English – ideal for enquiries that require more detailed explanation
• Email: support@dewavegas.my – for complaints or formal requests requiring a written response

Dewavegas is committed to responding to all privacy-related enquiries within 14 business days from the date a complete request is received. For complaints that cannot be resolved internally by dewavegas, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) in accordance with the procedures set out under the Personal Data Protection Act 2010.