Privacy Policy

1. Introduction

This Privacy Policy applies to all personal data collected and processed by dewa01 (hereinafter "we," "us," "our," or "the Company") through our website at dewa01.cam, mobile applications, and all associated gaming services (collectively, "the Platform"). By registering an account, accessing our services, or providing personal information to dewa01, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

dewa01 serves as the data controller for personal information collected through the Platform. We are committed to transparency in our data handling practices and compliance with applicable data protection laws, including international privacy standards and Indonesian consumer protection regulations. This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of dewa01 services.

If you do not agree with the terms of this Privacy Policy, you should not create an account or use our services. For users under 21 years of age, access to and use of dewa01 services is strictly prohibited regardless of consent, as online gambling services are legally restricted to adults aged 21 and above.

2. Personal Data We Collect

To provide gaming services, process transactions, comply with legal obligations, and ensure platform security, dewa01 collects several categories of personal information. The types of data we collect include:

2.1 Information You Provide Directly

When you register an account or use our services, you voluntarily provide the following information:

• Account Registration Data: Full legal name, date of birth, gender, email address, mobile phone number, residential address, chosen username, and password.
• Identity Verification Data (KYC): Government-issued identification documents including Indonesian identity card (KTP), passport, or driver's license; proof of address documents such as utility bills or bank statements; selfie photographs for identity confirmation; and any additional documents requested to comply with anti-money laundering regulations.
• Financial Information: Bank account details including bank name, account number, and account holder name; e-wallet account information for OVO, DANA, GoPay, ShopeePay, or LinkAja; transaction history including deposits, withdrawals, and wagers; and source of funds documentation if required for large transactions.
• Communication Data: Content of messages sent through our customer support channels including live chat, email, and WhatsApp; feedback, complaints, and survey responses; correspondence related to disputes or account issues.
• Marketing Preferences: Your consent to receive promotional communications; preferences regarding bonus offers and marketing content; newsletter subscription status.

2.2 Information Collected Automatically

When you access the dewa01 Platform, certain technical and usage information is collected automatically:

• Device Information: Device type (smartphone, tablet, desktop computer); operating system and version (Android, iOS, Windows, macOS); browser type and version; screen resolution; device unique identifiers.
• Connection Data: IP address; internet service provider; general geographic location (city level) derived from IP address; connection timestamps.
• Usage Data: Pages visited on our Platform; features used; games played; bet amounts and frequencies; session duration; navigation patterns; referral sources.
• Cookies and Tracking Technologies: Session cookies for login authentication; preference cookies to remember your settings; analytics cookies to understand Platform usage; advertising cookies for marketing purposes (see Section 8 for detailed cookie information).

2.3 Information from Third Parties

In limited circumstances, we may receive information about you from third-party sources:

• Payment Processors: Transaction confirmation and status updates from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay).
• Identity Verification Services: Verification results from third-party KYC service providers used to authenticate identity documents and prevent fraud.
• Game Providers: Game outcome data and RTP statistics from casino game suppliers like Pragmatic Play, Evolution Gaming, and Microgaming.
• Affiliate Partners: Referral information if you were introduced to dewa01 through an affiliate marketing channel.

3. How We Use Your Personal Data

dewa01 processes your personal information for specific, legitimate purposes necessary to provide gaming services and comply with legal obligations. The purposes for which we use your data include:

3.1 Service Provision and Account Management

• Creating and maintaining your gaming account.
• Processing deposits, withdrawals, and wagers.
• Providing access to sports betting, casino games, slots, and togel lottery services.
• Calculating odds, determining game outcomes, and crediting winnings to your account balance.
• Managing bonus claims and tracking wagering requirements.
• Responding to customer support inquiries and resolving technical issues.
• Sending account-related notifications including transaction confirmations, withdrawal approvals, and security alerts.

3.2 Legal and Regulatory Compliance

• Verifying your identity and age to ensure you are 21 years or older.
• Complying with Know Your Customer (KYC) and anti-money laundering (AML) regulations.
• Preventing, detecting, and investigating fraud, money laundering, and other illegal activities.
• Reporting suspicious transactions to relevant authorities when legally required.
• Maintaining records for audit and regulatory inspection purposes.
• Responding to lawful requests from law enforcement agencies and government authorities.

3.3 Platform Security and Fraud Prevention

• Monitoring for suspicious account activity and unauthorized access attempts.
• Detecting and preventing multiple account registrations by the same individual.
• Identifying patterns of bonus abuse, collusion, or other prohibited activities.
• Protecting against cyber attacks, DDoS attacks, and other security threats.
• Investigating disputes and resolving complaints between players and the Company.

3.4 Analytics and Service Improvement

• Analyzing Platform usage patterns to improve user experience and interface design.
• Understanding player preferences to optimize game offerings and features.
• Testing new features and functionalities before full deployment.
• Measuring the effectiveness of customer support and identifying training needs.
• Generating aggregate statistical reports for internal business purposes (anonymized data only).

3.5 Marketing and Promotional Communications

With your explicit consent, we may use your contact information to:

• Send promotional offers, bonus announcements, and exclusive deals tailored to Indonesian players.
• Notify you of new game releases, tournaments, and special events.
• Deliver personalized marketing content based on your gaming preferences and history.
• Invite you to participate in surveys, feedback requests, and loyalty programs.

You may withdraw consent for marketing communications at any time by updating your account preferences or contacting customer support. Note that even if you opt out of marketing, we will still send essential account-related communications.

4. Data Sharing and Third-Party Disclosure

dewa01 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your data with trusted third-party service providers and partners in the following limited circumstances:

4.1 Service Providers and Business Partners

• Payment Processors: We share necessary financial information with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
• Identity Verification Services: Your KTP or other identification documents are shared with specialized KYC providers to verify your identity and prevent fraud.
• Game Suppliers: Limited data is shared with casino game providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, PG Soft) to enable gameplay and track game results.
• Customer Support Tools: We use third-party live chat software and customer relationship management systems to manage support inquiries efficiently.
• Cloud Hosting Providers: Platform infrastructure is hosted on secure cloud servers maintained by reputable data center operators.
• Analytics Services: Anonymized usage data is shared with analytics platforms to generate statistical insights.

All third-party service providers are contractually bound to maintain confidentiality, use data only for specified purposes, and implement appropriate security measures.

4.2 Legal and Regulatory Disclosures

We may disclose your personal information when legally required or in good faith belief that disclosure is necessary to:

• Comply with applicable laws, regulations, court orders, or government requests.
• Enforce our Terms and Conditions and investigate potential violations.
• Detect, prevent, or address fraud, security breaches, or technical issues.
• Protect the rights, property, or safety of dewa01, our users, or the public.
• Respond to lawful requests from law enforcement agencies investigating illegal activity.

4.3 Business Transfers

In the event of a merger, acquisition, corporate reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. You will be notified of any such change in ownership or control of your personal data via email and Platform notification. The acquiring entity will be required to continue protecting your data in accordance with this Privacy Policy.

5. Data Security Measures

dewa01 implements comprehensive technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security practices include:

5.1 Technical Security Controls

• Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols. Sensitive data stored in our databases is encrypted at rest using AES-256 encryption.
• Secure Authentication: Passwords are hashed using bcrypt with salt before storage. We never store passwords in plain text. Multi-factor authentication options are available for enhanced account security.
• Firewall Protection: Network-level firewalls restrict access to our systems and block unauthorized connection attempts.
• Intrusion Detection: Automated monitoring systems detect and alert us to suspicious activity, potential security breaches, and malware.
• Regular Security Audits: Third-party security firms conduct periodic penetration testing and vulnerability assessments of our Platform.
• Secure Development Practices: Our software development follows secure coding standards to prevent common vulnerabilities like SQL injection and cross-site scripting.

5.2 Organizational Security Measures

• Access Controls: Personal data access is restricted on a need-to-know basis. Only authorized personnel with legitimate business reasons can access user information.
• Employee Training: All staff members handling personal data receive regular training on data protection principles and security best practices.
• Confidentiality Agreements: Employees and contractors sign non-disclosure agreements committing to maintain data confidentiality.
• Data Segregation: Customer funds are held in segregated accounts separate from operational capital to protect your balance.
• Incident Response Plan: We maintain a documented procedure for responding to data breaches, including user notification protocols.

Despite our robust security measures, no method of internet transmission or electronic storage is 100% secure. While we strive to protect your personal information using industry best practices, we cannot guarantee absolute security. You play a critical role in protecting your account by choosing a strong password, not sharing login credentials, and logging out after each session on shared devices.

6. Data Retention Periods

dewa01 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal obligations. Our retention periods are as follows:

• Active Accounts: Personal data is retained for the duration your account remains active plus any period required to settle pending transactions or resolve disputes.
• Closed Accounts: After account closure, we retain identification documents (KTP), transaction records, and account details for 7 years to comply with anti-money laundering regulations and financial record-keeping requirements.
• Marketing Data: If you opt out of marketing communications, your contact information is removed from marketing databases within 30 days, though we retain a record of your opt-out preference to prevent re-contacting you.
• Customer Support Records: Support chat logs, emails, and complaint records are retained for 3 years for quality assurance and dispute resolution purposes.
• Technical Logs: Server logs, IP addresses, and access records are retained for 12 months for security monitoring and troubleshooting.

After the applicable retention period expires, personal data is securely deleted or anonymized so that it can no longer be associated with you. In some cases, we may retain anonymized aggregate data indefinitely for statistical analysis, as this data cannot identify individual users.

7. Your Privacy Rights

You have certain rights regarding your personal data. Subject to applicable laws, you may exercise the following rights by contacting our Data Protection Officer:

7.1 Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format (typically PDF or CSV) within 30 days of your request. You may access much of your account data directly through your account dashboard, including transaction history, personal details, and communication preferences.

7.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction. You can update most account information directly through your account settings, including address, phone number, and password. For changes to sensitive information like legal name or date of birth, please contact customer support with supporting documentation.

7.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected. However, we may be legally required to retain certain information for regulatory compliance (e.g., transaction records for anti-money laundering purposes). In such cases, we will restrict processing rather than delete the data entirely.

7.4 Right to Restrict Processing

You may request that we limit how we use your personal information in specific situations, such as when you contest the accuracy of data or object to processing. During the restriction period, we will store the data but not actively use it except with your consent or for legal claims.

7.5 Right to Data Portability

You have the right to receive your personal data in a portable format and transmit it to another service provider. We will provide your data in CSV or JSON format upon request, covering account details, transaction history, and gaming activity.

7.6 Right to Object

You may object to processing of your personal data for direct marketing purposes at any time. We will cease marketing communications immediately upon request. You may also object to processing based on legitimate interests, though we may continue processing if we have compelling legitimate grounds that override your rights.

7.7 Right to Withdraw Consent

Where we rely on your consent as the legal basis for processing (e.g., marketing communications, optional cookies), you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.

7.8 How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected] or through customer support. We will respond to your request within 30 days. For security purposes, we may request additional information to verify your identity before processing requests related to personal data.

8. Cookies and Tracking Technologies

dewa01 uses cookies and similar tracking technologies to enhance your browsing experience, remember your preferences, analyze Platform usage, and deliver personalized content. A cookie is a small text file stored on your device that allows websites to recognize you on return visits.

8.1 Types of Cookies We Use

8.2 Managing Cookie Preferences

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Please note that disabling cookies may affect Platform functionality, and some features may not work properly. To manage cookies:

• Browser Settings: Use your browser's privacy settings to block or delete cookies. Instructions vary by browser (Chrome, Firefox, Safari, Edge).
• Cookie Preferences: Adjust cookie preferences through the cookie consent banner displayed on your first visit to dewa01.cam.
• Opt-Out Tools: Use industry opt-out tools like the Network Advertising Initiative opt-out page to control advertising cookies.

9. International Data Transfers

dewa01 operates internationally and may transfer your personal data to countries outside Indonesia for processing and storage. Some of these countries may have data protection laws that differ from Indonesian regulations. When we transfer data internationally, we implement appropriate safeguards to ensure your data remains protected:

• Standard Contractual Clauses: We use European Commission-approved standard contractual clauses with third-party processors to ensure adequate protection.
• Adequacy Decisions: We transfer data only to countries recognized as providing adequate data protection standards.
• Encryption in Transit: All international data transfers are encrypted during transmission to prevent interception.
• Data Processing Agreements: Third parties processing data internationally sign agreements committing to protect data according to international standards.

By using dewa01 services, you acknowledge and consent to the transfer of your personal data outside Indonesia in accordance with this Privacy Policy and applicable data protection laws.

10. Changes to This Privacy Policy

dewa01 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes that significantly affect how we handle your personal information, we will:

• Update the "Last Updated" date at the top of this Privacy Policy.
• Send you an email notification to the address registered on your account.
• Display a prominent notice on the Platform homepage and your account dashboard.
• Request your consent for changes that require explicit agreement under applicable law.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Continued use of dewa01 services after changes take effect constitutes acceptance of the revised Privacy Policy. If you do not agree with changes, you should discontinue use of the Platform and close your account.

11. Contact Information and Data Protection Officer

If you have questions, concerns, or complaints regarding this Privacy Policy or how dewa01 handles your personal data, please contact our Data Protection Officer:

• Email: [email protected] (displayed as plain text, not a clickable link)
• Customer Support: 24/7 live chat available through your account dashboard
• General Inquiries: [email protected]
• Response Time: We aim to respond to all privacy-related inquiries within 7 business days

When contacting us regarding privacy matters, please provide sufficient detail about your concern to allow us to investigate and respond appropriately. For account-specific inquiries, we may request identity verification to protect your information from unauthorized disclosure.

If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. We encourage you to contact us first so we have an opportunity to resolve your concerns directly.