Privacy Policy — Dewi4D

Dewi4D ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal information of all individuals who access, register, or interact with our services at dewi4d.cam. This Privacy Policy ("Policy") sets out the principles and practices that govern how Dewi4D collects, uses, stores, discloses, and protects personal data in connection with the operation of our online gaming and sports betting platform.

This Policy applies to all users of the Dewi4D platform, including registered players, prospective players who browse our website, and any individuals who contact our customer support team. It applies to data collected via our website, mobile interfaces, live chat systems, email communications, and any other means through which you interact with Dewi4D.

By accessing or using the Dewi4D platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, you should discontinue use of the platform and contact our support team to arrange closure of your account.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that identifies or could reasonably identify a living individual, including name, identification number, email address, IP address, payment details, and behavioural data.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — Dewi4D, the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" — a third party that processes Personal Data on behalf of Dewi4D under written instruction, such as payment processors, KYC verification providers, and analytics services.
• "Data Subject" — the individual whose Personal Data is being processed; in this context, primarily you as a registered player or website visitor.
• "Consent" — a freely given, specific, informed, and unambiguous indication of a Data Subject's agreement to the processing of their Personal Data.
• "KYC" — Know Your Customer, the identity verification process conducted to confirm account holder identity in compliance with anti-money laundering obligations.

Dewi4D collects Personal Data in a number of categories depending on the nature of your interaction with the platform. The categories of data we collect include the following:

3.1 Account Registration Data

When you register for a Dewi4D account, we collect information you provide directly, including:

• Full legal name
• Date of birth (used for age verification — 21+ only)
• Residential address (including city — Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or other Malaysian locations)
• Email address
• Mobile telephone number
• Preferred currency (MYR)
• Username and encrypted password

3.2 Identity Verification (KYC) Data

To comply with our obligations regarding responsible gambling and to process withdrawals, we may collect copies of identity documents such as your Malaysian Identity Card (MyKad), passport, or other government-issued identification. We may also collect proof of payment method ownership (e.g., a bank statement confirming your Maybank or CIMB account details).

3.3 Financial & Transaction Data

We collect data related to deposits and withdrawals, including transaction amounts in MYR, payment method identifiers (e.g., last four digits of a bank account, e-wallet phone number associated with Touch 'n Go eWallet or Boost), transaction timestamps, and processing status. We do not store full payment card numbers or full bank account numbers.

3.4 Gameplay & Behavioural Data

We collect data relating to your activity on the platform, including games played, bet amounts, session duration, wagering history, bonus usage, and login/logout times. This data is used to operate the platform, detect fraud, and support responsible gambling monitoring.

3.5 Technical & Device Data

We collect technical information about the devices and connections you use to access the platform, including IP address, browser type and version, operating system, device identifier, and approximate geolocation derived from IP address.

3.6 Communication Data

We retain records of communications between you and Dewi4D, including live chat transcripts, email correspondence, and support ticket history. This data is retained for quality assurance, dispute resolution, and compliance purposes.

Dewi4D collects Personal Data through the following means:

• Directly from you — when you complete our registration form, submit KYC documents, contact support, or update your account profile;
• Automatically — through cookies, server logs, and similar tracking technologies as you interact with the platform;
• From payment processors — confirmation data received from payment service providers following deposit or withdrawal transactions (e.g., DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay);
• From KYC verification partners — where we engage third-party identity verification services to confirm the authenticity of identity documents submitted;
• From fraud prevention services — device fingerprinting and risk scoring data provided by fraud prevention partners to detect suspicious account activity.

We process your Personal Data for the following clearly defined purposes:

Dewi4D processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity — processing is necessary to perform the contract between you and Dewi4D, including providing gaming services, processing MYR transactions, and managing your account;
• Legal obligation — processing is required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and financial record-keeping obligations;
• Legitimate interests — processing is necessary for Dewi4D's legitimate business interests, such as fraud prevention, platform security, and service improvement, provided such interests are not overridden by your rights and interests;
• Consent — where we rely on your consent as the legal basis (primarily for marketing communications), you have the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Dewi4D does not sell, rent, or commercially transfer your Personal Data to third parties. We may share Personal Data with carefully selected third parties only in the following circumstances:

7.1 Payment Service Providers

We share transaction-related data with payment processors that facilitate MYR deposits and withdrawals on our platform. These include providers operating the Maybank2u, CIMB Clicks, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX payment channels. Data shared is limited to what is necessary to complete the transaction.

7.2 Identity Verification Providers

For KYC purposes, we may share copies of identity documents with accredited third-party verification service providers. These providers are bound by data processing agreements requiring them to handle your data securely and solely for the purpose of identity verification.

7.3 Fraud Prevention & Security Partners

We may share technical data (including IP addresses, device fingerprints, and behavioural indicators) with fraud prevention and cybersecurity partners to detect and prevent fraudulent activity, unauthorised account access, and money laundering.

7.4 Legal & Regulatory Disclosure

Dewi4D may disclose Personal Data to government authorities, law enforcement agencies, or regulatory bodies where required by applicable law, court order, or where we believe disclosure is necessary to protect the safety of our players or the public.

Dewi4D retains Personal Data for as long as necessary to fulfil the purposes for which it was collected, as described in this Policy, or as required or permitted by applicable law. The following general retention principles apply:

• Active account data — retained for the duration of your account's activity on the Dewi4D platform;
• Transaction and financial records — retained for a minimum of five (5) years from the date of the transaction, in line with financial record-keeping obligations;
• KYC documentation — retained for a minimum of five (5) years from the date of the last transaction or account closure, whichever is later;
• Communication records (support tickets, chat logs) — retained for up to two (2) years from the date of the communication, unless retention is required for an ongoing dispute;
• Self-exclusion records — retained for the duration of the exclusion period plus an additional five (5) years to prevent re-registration during the exclusion window.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with an identified individual.

Dewi4D implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encrypted storage of passwords using industry-standard hashing algorithms;
• Access controls limiting internal access to Personal Data to authorised personnel on a need-to-know basis;
• Regular security audits and vulnerability assessments of our platform infrastructure;
• Two-factor authentication options for account login;
• Firewall and intrusion detection systems protecting our server infrastructure.

While Dewi4D takes all reasonable steps to secure your Personal Data, no online platform can guarantee absolute security. You are also responsible for maintaining the confidentiality of your login credentials and for taking reasonable precautions on your own device.

Dewi4D uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit our website. They allow the platform to remember your preferences, maintain your session, and gather analytics data.

10.1 Types of Cookies We Use

• Strictly necessary cookies — essential for the platform to function correctly, including session management and security tokens. These cannot be disabled without affecting core functionality;
• Analytical cookies — used to understand how players navigate the platform, which features are most used, and where technical issues occur. Data collected is aggregated and anonymised;
• Functional cookies — used to remember your preferences such as language settings and interface customisations;
• Marketing cookies — used (where consent has been obtained) to deliver relevant promotional communications and measure the effectiveness of our marketing activity.

10.2 Cookie Management

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though doing so may affect the functionality of the Dewi4D platform. Details of how to manage cookies are available in your browser's help documentation.

As a Data Subject, you have a number of rights with respect to your Personal Data held by Dewi4D. These rights may be exercised at any time by contacting our data protection team via the contact details provided in Section 15. We will respond to all valid requests within thirty (30) calendar days.

Dewi4D is strictly an adults-only platform. Our services are intended exclusively for individuals aged 21 years and above. We do not knowingly collect Personal Data from persons under the age of 21. If we become aware that Personal Data has been collected from a person under 21, we will immediately suspend the associated account, delete the data, and take all appropriate steps to prevent further access.

The Dewi4D platform may contain references to or links to third-party services. This Privacy Policy applies solely to data processed by Dewi4D. We are not responsible for the privacy practices of any third-party website or service. If you follow a link to an external site, we encourage you to review that site's privacy policy before providing any Personal Data.

Dewi4D does not endorse or take responsibility for the content, security standards, or privacy practices of any third party, including payment service providers' own websites or any external resources referenced in our responsible gambling guidance.

Dewi4D reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or business operations. Material changes will be communicated to registered players via the email address associated with their Dewi4D account and/or via a prominent notice displayed upon login.

The effective date at the top of this Policy will be updated to reflect the date of the most recent revision. Your continued use of the platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you disagree with any changes, you should discontinue use of the platform and contact support to arrange account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data by Dewi4D, please contact us using one of the following channels:

• Live Chat: Available 24/7 via the live chat widget on the Dewi4D platform — the fastest way to reach us
• Email: [email protected] (plain text — not a clickable link)
• Coverage: Serving players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all of Malaysia

Data rights requests (access, rectification, erasure, portability, restriction, objection) should be submitted in writing via email with sufficient information to identify your account. We will acknowledge all data rights requests within five (5) business days and will endeavour to complete them within thirty (30) calendar days.