Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by dewatogel ("we", "us", "the Company", "the Platform"), the operator of the online gaming platform accessible at https://dewatogel.buzz. It governs the collection, use, storage, sharing, and protection of personal data provided by or collected from individuals who access or register on the dewatogel platform ("you", "the Player", "the User").

Dewatogel is committed to handling personal data responsibly and in a manner consistent with applicable data protection legislation, including the principles set out under Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection frameworks. We process personal data only for specified, legitimate purposes and in a manner that respects the rights and expectations of our players.

By registering an account on dewatogel, making a deposit, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms and Conditions, which form part of the overall agreement between you and dewatogel.

Definitions

For the purposes of this Privacy Policy, the following defined terms apply:

Data Controller

Dewatogel acts as the Data Controller in respect of all personal data collected through the Platform. As Data Controller, we are responsible for ensuring that personal data is processed in compliance with applicable law and in accordance with the principles set out in this Policy.

Where dewatogel engages third-party service providers to assist in the delivery of our services — including payment processors, identity verification partners, cloud infrastructure providers, and fraud detection services — those parties act as Data Processors and are bound by contractual obligations that prohibit them from processing your data for any purpose other than the specific services they provide to dewatogel.

All Data Processors engaged by dewatogel are evaluated for their data security practices prior to engagement and are required to maintain appropriate technical and organisational safeguards at all times.

Data We Collect

Dewatogel collects personal data through several channels — directly from you when you register or interact with our platform, automatically through your use of the site, and from third-party verification services. The categories of data we collect are set out below:

Legal Basis for Processing

Dewatogel processes your personal data only where a lawful basis exists for doing so. The primary legal bases upon which we rely are as follows:

• Contractual Necessity: Processing is necessary to fulfil our obligations under the account agreement between you and dewatogel — including account creation, payment processing, game access, withdrawal handling, and customer support.
• Legal Obligation: Processing is required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and tax or financial reporting duties imposed on licensed gaming operators.
• Legitimate Interests: Processing is necessary for dewatogel's legitimate business interests — including fraud prevention, platform security, responsible gambling monitoring, and analytics — provided that those interests are not overridden by your rights and interests.
• Consent: For certain non-essential processing activities — such as direct marketing communications, promotional emails, and optional analytics — we rely on your freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

How We Use Your Data

Dewatogel uses the personal data it collects for the following purposes, all of which are consistent with the legal bases identified in Section 5:

• Account Management: Creating and maintaining your player account, processing login requests, and managing account settings and preferences.
• Service Delivery: Facilitating access to casino games, sports betting markets, live dealer sessions, and all other platform features available to registered players.
• Payment Processing: Processing MYR deposits and withdrawals via Malaysian payment methods including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and Visa/Mastercard.
• Identity Verification (KYC): Verifying your identity and age as required by applicable gaming regulations and AML legislation, including confirming that all players are aged 21 and above.
• Fraud & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, account takeover attempts, and other security incidents. This includes monitoring for unusual account behaviour patterns.
• Responsible Gambling: Monitoring player activity to identify potential indicators of problem gambling and, where relevant, applying responsible gambling tools such as deposit limits or cooling-off periods in accordance with your settings or regulatory requirements.
• Customer Support: Responding to inquiries, resolving disputes, and providing account-related assistance through our live chat and email support channels.
• Legal Compliance: Fulfilling reporting, record-keeping, and other obligations imposed on the Company by applicable gaming regulators, financial authorities, or law enforcement agencies.
• Marketing Communications (with consent): Sending promotional offers, bonus notifications, and product updates by email or on-platform messaging where you have opted in. You may unsubscribe at any time.
• Platform Improvement: Analysing usage data and player feedback to improve the platform's performance, game offering, and user experience.

Cookies & Tracking Technologies

Dewatogel uses cookies and similar tracking technologies to enhance your experience on the platform and to gather technical information necessary for the proper functioning of our services. By continuing to use dewatogel after being presented with our cookie notice, you consent to the use of cookies as described below.

The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These are essential for the operation of the Platform. They enable you to log in, maintain a session, and navigate between pages. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: These cookies remember your preferences — such as language settings, game history, and responsible gambling configurations — to provide a more personalised experience during your session.
• Analytics Cookies: We use privacy-respecting analytics tools to understand how players interact with the platform — which pages are most visited, where users encounter difficulty, and how we can improve navigation and game discovery. Analytics data is aggregated and does not identify individual users.
• Security Cookies: These cookies help us detect and prevent fraudulent logins, bot activity, and session hijacking attempts. They are a core component of our platform security infrastructure.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may impair your ability to use some features of the dewatogel platform. We do not use third-party advertising cookies or tracking pixels for the purpose of retargeting or profiling players on external platforms.

Data Sharing & Disclosure

Dewatogel does not sell, rent, or trade your personal data to third parties for commercial purposes. We share personal data with third parties only in the following circumstances, and only to the extent necessary for the specified purpose:

• Payment Processors: We share transaction-related data with payment service providers — including banks, FPX intermediaries, e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay, DuitNow), and card networks (Visa, Mastercard) — to facilitate the processing of deposits and withdrawals in MYR.
• Identity Verification Services: KYC documentation may be shared with authorised identity verification partners for the purpose of confirming player identity and satisfying regulatory requirements. These partners are contractually prohibited from using your data for any other purpose.
• Fraud Prevention & Security: We may share data with specialist fraud detection services and cybersecurity partners to protect the Platform and its users from financial crime and security threats.
• Regulatory & Legal Authorities: We will disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, and courts where required to do so by a valid legal order, warrant, or regulatory direction. Where permitted by law, we will notify you of such disclosures.
• Corporate Transactions: In the event of a merger, acquisition, corporate restructuring, or sale of all or part of the Company's assets, player data may be transferred to the acquiring entity as part of the transaction. We will notify affected players in advance of any such transfer where practicable.
• Professional Advisers: We may share data with our legal counsel, auditors, and compliance consultants where necessary for the conduct of their professional services, subject to applicable professional confidentiality obligations.

In all cases of third-party data sharing, dewatogel implements contractual safeguards to ensure that recipient parties process personal data only for the specified purpose and in accordance with applicable data protection standards.

International Data Transfers

As an internationally operating platform, some of the third-party service providers engaged by dewatogel may be located outside Malaysia. Where personal data is transferred to countries outside Malaysia, we ensure that such transfers are subject to appropriate safeguards, which may include:

• Standard contractual clauses approved by relevant data protection authorities;
• Transfer to countries that provide an adequate level of data protection as determined by applicable law;
• Binding corporate rules where the recipient is part of a corporate group subject to group-wide data protection policies.

Where data is processed outside Malaysia by our payment processing or cloud infrastructure partners, such processing is conducted in accordance with the data processing agreements in place between dewatogel and those providers. If you would like further information about the safeguards applicable to any specific international transfer, please contact us using the details provided in Section 15.

Data Security

Dewatogel implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, disclosure, and destruction. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser or mobile device and our servers is encrypted in transit using current TLS standards. The padlock indicator in your browser confirms this protection is active.
• Encryption at Rest: Sensitive personal data — including KYC documents, financial records, and identification data — is encrypted at rest using AES-256 encryption on our secure servers.
• Access Controls: Access to personal data within dewatogel's internal systems is restricted on a strict need-to-know basis. Staff members can access only the data categories required to perform their specific role. All access events are logged and audited.
• Password Security: Player passwords are hashed using industry-standard cryptographic functions before storage. Dewatogel never stores passwords in plaintext and will never ask you to reveal your password in any communication.
• Intrusion Detection: Our platform is monitored continuously for suspicious access patterns, unusual transaction behaviour, and potential security incidents. Automated alerting systems escalate anomalies for immediate review.
• Regular Security Audits: We conduct periodic security reviews and vulnerability assessments of our platform and data infrastructure to identify and address potential weaknesses before they can be exploited.

While we implement robust security measures, no digital system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, dewatogel will notify affected players and relevant authorities in accordance with applicable legal obligations and without undue delay.

Data Retention

Dewatogel retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation. The general retention principles we apply are as follows:

• Active Account Data: Personal data associated with active player accounts is retained for the lifetime of the account and for a period of up to five (5) years following account closure or the last date of player activity, in order to comply with AML record-keeping requirements.
• Financial Transaction Records: Records of all deposits, withdrawals, and wagering activity are retained for a minimum of five (5) years following the transaction date, as required under applicable financial crime prevention regulations.
• KYC Documentation: Identity and address verification documents are retained for the period required by our regulatory obligations, typically five (5) years from submission or from account closure, whichever is later.
• Technical & Usage Logs: Server logs, IP address records, and session data are retained for up to twelve (12) months for security and fraud investigation purposes, after which they are deleted or anonymised.
• Marketing Preferences: Records of your marketing consent or opt-out status are retained for the duration of your account and for a reasonable period thereafter in order to honour your preferences.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders it permanently unattributable to any identifiable individual. Anonymised data may be retained indefinitely for aggregated analytics purposes.

Your Rights

Subject to applicable law, you hold the following rights in relation to the personal data that dewatogel holds about you. These rights may be exercised by contacting us through the channels listed in Section 15:

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is processed. We will respond to verified access requests within a reasonable timeframe, typically within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Many contact and preference details can be updated directly from within your account settings.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to limitations where retention is required by law — for example, AML record-keeping obligations may prevent immediate deletion of financial records even following account closure.
• Right to Restriction: You may request that we restrict the processing of your personal data in specified circumstances — for example, where you contest the accuracy of data we hold, or where processing is unlawful but you prefer restriction to deletion.
• Right to Data Portability: Where processing is based on your consent or on a contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent — such as for marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of the above rights, please submit your request to our support team using the contact details provided in Section 15. We may ask you to verify your identity before processing any data subject request in order to protect against unauthorised access to your personal data.

Children's Privacy

Dewatogel is strictly an adult gaming platform. Access to and use of the Platform is prohibited for any person under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age.

If we become aware that personal data has been collected from a person under the age of 21 without appropriate age verification, we will take immediate steps to delete that data and close the associated account. All winnings or balances associated with an account found to belong to an underage individual will be forfeited.

If you are a parent or guardian and believe that a person under your care has registered on dewatogel without your knowledge, please contact our support team immediately so that we can investigate and take appropriate action.

Policy Amendments

Dewatogel reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business practices, or the services we offer. The most current version of this Policy will always be accessible at https://dewatogel.buzz/privacy-policy.

Where we make material changes to this Policy — particularly changes that affect how we collect, use, or share your personal data — we will notify registered players by email to the address associated with their account prior to the changes taking effect. In all cases, the date of the most recent update is indicated at the top of this page.

Your continued use of the dewatogel platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you should cease using the Platform and contact us to request account closure.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by dewatogel, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the live chat widget on the Platform. Average response time is under 2 minutes. This is the fastest channel for general privacy queries.
• Email: [email protected] — For formal data subject requests, please include "Privacy / Data Request" in the subject line. Responses within 4 hours during standard operating hours; formal data subject requests responded to within 30 days.

When contacting us regarding a data subject rights request, please provide sufficient information to enable us to verify your identity and locate your account. We may request additional verification for sensitive data access requests in order to protect player privacy.

This Privacy Policy was last reviewed and updated on 1 January 2026. All previous versions are superseded by this document. Dewatogel reserves all rights not expressly granted herein.