Dewitogel Privacy Policy – Player Data Protection Malaysia

Welcome to the Privacy Policy page dewitogel. We understand that privacy is a matter of great importance to every online user, especially when it involves a platform that handles financial information and personal data. That is why we take the time to explain clearly and transparently — not in complex legal language, but in plain, straightforward terms — how we manage your data.

This Privacy Policy ("Policy") applies to all users who access or use the dewitogel platform via the website dewitogel.asia, including players who have registered an account, users browsing the platform without registering, and individuals who contact our support team. By using the dewitogel platform in any capacity, you agree to the data collection and processing practices described in this document.

This policy should be read together with Terms & Conditions dewitogel, which also forms part of the overall agreement between you and us. In the event of any conflict between this Privacy Policy and the Terms & Conditions on privacy-related matters, this Privacy Policy shall take precedence.

Dewitogel collects several categories of information from users to enable the platform to operate safely, efficiently, and in compliance with legal requirements. Below is a detailed table of the types of data we collect, the purpose of collection, and the legal basis for processing:

We also collect information automatically when you use the dewitogel platform, including technical data such as your IP address, web browser type and version, time zone settings, operating system, and device type. This data is used solely for security purposes and technical platform improvements — it is not used to build a personal marketing profile of you.

Dewitogel does not collect sensitive data such as medical information, political views, or religious beliefs. The only data we hold that could be considered somewhat sensitive is identity verification documents (e.g., copies of your IC), collected solely to meet KYC requirements and stored with the highest level of encryption.

Dewitogel uses the personal information you provide solely for legitimate, transparent purposes that are directly related to the operation of the platform and the services you use. Below is a complete list of the purposes for which your data is used:

• Account management: Creating, maintaining, and managing your dewitogel account, including login verification, password resets, and profile information updates.
• Financial transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, and CIMB Clicks, as well as withdrawal of winnings in Malaysian Ringgit (RM).
• Legal compliance: Meeting the KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements that all financial platforms are obligated to uphold.
• Platform security: To detect and prevent fraud, account abuse, and other illicit activity that could harm the platform or other users.
• Customer support: Providing accurate and effective assistance when you contact the dewitogel team via live chat or email.
• Service communications: Sending important account-related notifications — such as transaction confirmations, security alerts, and policy change notices — via SMS or email.
• Platform improvements: Analysing usage patterns on an anonymised basis to understand how players use dewitogel and make relevant improvements.
• Responsible gaming: Monitoring usage patterns to identify potential gambling issues and provide appropriate intervention or support resources.

Dewitogel will not use your data to build marketing profiles for sale to third parties, make automated decisions that significantly affect you without human review, or for any purpose not stated in this policy without first obtaining your consent.

Dewitogel does not sell, rent, or disclose your personal information to third parties for marketing or commercial purposes. That said, there are specific situations where we need to share your information with certain parties to keep the platform operating securely and in compliance with the law:

• Payment service providers: Payment gateways that process your deposits and withdrawals — including e-wallet platforms and FPX services — receive the transaction information necessary to process your payment. These providers are bound by strict confidentiality agreements and receive only the minimum required information.
• Technical service providers: Companies providing hosting infrastructure, security services, and technical support for the platform may access user data in a limited technical capacity. All such providers are bound by strict data processing agreements.
• Regulatory bodies and legal authorities: Dewitogel will disclose user information to the relevant regulatory bodies or law enforcement agencies when required by applicable law — such as in cases involving financial crime investigations or compliance with court orders.
• Independent auditors: Independent security and compliance audit firms may access anonymised or limited-scope datasets as part of our periodic audit process.

In all instances of data sharing with third parties, dewitogel ensures that only the minimum information necessary for the specific purpose is shared. We do not grant any party unrestricted access to our user database.

Protecting the personal and financial data of our players is one of dewitogel's highest priorities. We continuously invest in security infrastructure and implement multiple layers of protection to keep your data safe at all times:

• Data encryption in transit: All communications between your device and dewitogel's servers are protected using TLS 1.3 with 256-bit SSL encryption. This includes logins, transactions, and all in-platform interactions.
• Data encryption at rest: Sensitive data stored in dewitogel's database — including passwords (stored in hashed form) and KYC documents — is encrypted using industry-standard encryption algorithms.
• Tiered access controls: Access to user data within dewitogel's internal systems is restricted to staff who have a genuine need to access it as part of their role. All access is logged and audited.
• Two-Factor Authentication (2FA): We offer 2FA to all users and encourage its use to add an extra layer of protection to your account.
• 24/7 Threat Monitoring: dewitogel's security system monitors suspicious activity continuously — 24 hours a day, 7 days a week — and can take automated action to protect user accounts from unauthorised access.
• Regular penetration testing: We conduct regular offensive security testing (penetration testing) using independent parties to identify and patch any vulnerabilities before they can be exploited.

While we take all reasonable precautions, no online security system can guarantee absolute 100% protection in every scenario. We therefore encourage users to practise good personal security habits as well — such as using strong, unique passwords, not sharing your login credentials with anyone, and reporting any suspicious activity to us promptly.

The dewitogel platform uses cookies and similar tracking technologies to ensure the platform functions correctly, enhance the user experience, and analyse how the platform is used. Below is an overview of the cookies we use:

Cookies classified as "Required" are necessary for the dewitogel platform to function properly — disabling them will affect your ability to log in and use the platform. "Optional" cookies can be disabled through your web browser settings, though this may affect certain aspects of your user experience. Most modern browsers allow you to manage cookie settings through their settings menu.

Dewitogel retains your personal data only for as long as necessary for the purposes outlined in this policy or as required by applicable law. The following are the data retention guidelines we follow:

• Active account data: Personal information associated with an active account is retained for as long as your account remains active and for two years after closure, in order to meet KYC and AML record-keeping requirements.
• Financial transaction records: All deposit, withdrawal, and financial activity records are retained for seven years in accordance with standard financial compliance requirements.
• Security logs: Access logs, login logs, and security activity records are retained for 12 months for the purpose of security incident investigation when required.
• Live casino recordings: Live casino sessions are recorded and retained for 90 days for the purpose of resolving any disputes that may arise.
• Customer support data: Support communication records are retained for 24 months to allow reference to previous interactions in the event of recurring issues.

Once the relevant retention period has elapsed, your data will be securely deleted from dewitogel's systems using deletion methods that ensure the data cannot be recovered. For any data held in physical format (where applicable), appropriate destruction methods will be used.

If you voluntarily close your dewitogel account, any remaining real-money balance will be refunded and the data deletion process will begin once the minimum retention period required by law has elapsed. You may contact us to request confirmation that the deletion process has been completed.

As a dewitogel user, you have several important rights regarding the personal data we hold about you. Dewitogel is committed to respecting and facilitating the exercise of these rights in a practical and straightforward manner: