1. Introduction
dewa200 respects the privacy of every person who visits or uses the platform. This Privacy Policy describes the categories of personal information processed by dewa200, the reasons for processing that information and the safeguards applied throughout the data lifecycle.
By accessing dewa200, opening an account or using any available service, you acknowledge that personal information may be processed as described in this policy. Where consent is required by applicable law, dewa200 will request that consent before carrying out the relevant activity.
This policy is intended for Malaysian users and has been written with reference to generally recognised data-protection principles, including transparency, purpose limitation, data minimisation, accuracy, security and responsible retention. Where the Malaysian Personal Data Protection Act 2010 applies, dewa200 will handle relevant personal data in accordance with its applicable requirements.
2. Scope and Definitions
This Privacy Policy applies to information processed through the dewa200 website, mobile interfaces, account functions, payment processes, customer support channels, promotional systems and responsible-play controls.
For this policy, personal data means information that identifies an individual or can reasonably be connected to an identifiable individual. Processing includes collecting, recording, organising, storing, reviewing, using, disclosing, restricting and deleting information. User means a visitor, prospective member or registered dewa200 account holder.
Important privacy principle
dewa200 seeks to collect only the information reasonably required to provide services, protect accounts, meet legal or regulatory obligations, prevent misuse and support responsible gambling.
3. Information We Collect
The type of information collected by dewa200 depends on how a user interacts with the platform. Visitors who only read public pages generally provide less information than registered members who use account or payment functions.
| Data category |
Typical examples |
Primary purpose |
| Identity data |
Full name, date of birth, nationality, MyKad or passport details |
Age checks, identity verification, account security and legal compliance |
| Contact data |
Email address, Malaysian mobile number and general location |
Account notices, verification, support and security alerts |
| Account data |
Username, encrypted credentials, preferences and account status |
Authentication, service delivery and account administration |
| Payment data |
Transaction references, masked bank details, deposit and withdrawal history |
MYR payment processing, reconciliation, fraud controls and dispute handling |
| Activity data |
Login history, game activity, sports selections, bonus use and support records |
Service operation, safer-play monitoring and misuse prevention |
| Technical data |
IP address, browser type, device identifiers, operating system and timestamps |
Security, diagnostics, performance and session management |
Payment references may relate to Malaysian services such as FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank or Hong Leong. dewa200 does not need to display complete banking credentials in ordinary account views and applies masking where appropriate.
4. How We Collect Personal Data
dewa200 may collect information directly from a user during registration, identity verification, payment activity, support conversations, promotion participation or the use of responsible-play tools. Information may also be generated automatically when a device communicates with dewa200.
In limited circumstances, dewa200 may receive information from payment processors, identity-verification providers, game suppliers, fraud-prevention services or other service providers involved in delivering an authorised function. Such information should be limited to what is reasonably necessary for that purpose.
Users must ensure that information submitted to dewa200 is accurate, current and lawfully provided. A member should not submit another person's identification document, bank account, e-wallet record or contact details without proper authority.
5. Purposes and Legal Grounds for Processing
dewa200 processes personal information only where there is a valid operational or legal reason. Depending on the circumstances and applicable law, processing may be necessary to perform an agreement, comply with a legal obligation, protect legitimate interests, establish or defend legal claims, protect vital interests or act with the user's consent.
Personal data may be used by dewa200 to:
- create, authenticate, maintain and protect a member account;
- verify identity, age and payment ownership through proportionate KYC checks;
- process and reconcile MYR deposits, withdrawals and account adjustments;
- provide casino, live-dealer and sports-related platform functions;
- respond to questions, complaints, technical issues and payment enquiries;
- detect duplicate accounts, collusion, fraud, bonus misuse and unauthorised access;
- apply deposit limits, cooling-off periods, self-exclusion and other safer-play controls;
- maintain records required for security, accounting, dispute handling or compliance;
- improve page performance, accessibility and service reliability; and
- send service notices or permitted promotional communications.
Where dewa200 relies on consent for optional communications, a user may withdraw that consent. Withdrawal does not invalidate processing completed lawfully before the request was received.
6. Payments, KYC and Verification Records
To protect members and reduce financial crime risk, dewa200 may request identity, address, source-of-funds or payment-ownership evidence. Verification documents may include a MyKad, passport, utility record, bank statement or another appropriate record. Users should provide only documents specifically requested through an authorised dewa200 process.
Payment processors may handle certain financial details independently under their own privacy obligations. dewa200 generally retains transaction references, status information, masked account details and reconciliation records rather than complete payment credentials where those credentials are not required.
If a transaction involving FPX, DuitNow, an e-wallet or a Malaysian bank requires investigation, dewa200 may compare submitted records with account details and service-provider confirmations. Access to these records is limited according to business need and applicable retention requirements.
7. Cookies, Analytics and Device Information
dewa200 may use cookies and similar browser technologies to maintain sessions, remember preferences, protect login activity and understand basic website performance. Some cookies are necessary for security or essential platform functions, while others may support analytics or optional personalisation.
Users can manage cookies through their browser settings. Blocking an essential cookie may prevent login, saved preferences or other account functions from operating correctly. dewa200 does not use cookie controls to override settings selected by the user.
Technical records may include IP addresses, device characteristics, browser information, access times and requested pages. dewa200 uses this information to identify suspicious logins, diagnose faults and maintain a stable experience for users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and other Malaysian locations.
8. Disclosure of Personal Information
dewa200 does not sell personal data as a standalone commercial product. Information may be disclosed to carefully selected service providers where disclosure is necessary to operate, secure or support the platform.
Recipients may include hosting providers, payment processors, identity-verification services, game technology providers, customer-support systems, auditors, legal advisers and fraud-prevention specialists. dewa200 expects contracted providers to process information only for authorised purposes and to maintain appropriate confidentiality and security measures.
dewa200 may also disclose information where required by law, a valid regulatory request, a court order or a lawful investigation. Information may be disclosed to protect a user, prevent serious harm, investigate suspected fraud or defend the legal rights of dewa200 and its members.
9. International Data Processing
Some technology or support providers used by dewa200 may operate outside Malaysia. As a result, personal information may be accessed or stored in another jurisdiction where permitted by applicable law.
Before using an overseas provider for relevant processing, dewa200 considers the nature of the information, the purpose of the transfer and available contractual or technical safeguards. Reasonable steps are taken to ensure that transferred information remains subject to appropriate protection.
Different countries may apply different privacy rules. An international transfer does not remove the responsibility of dewa200 to apply the safeguards required for the processing under its control.
10. Information Security
dewa200 uses administrative, organisational and technical measures intended to protect personal information from unauthorised access, accidental loss, improper alteration and unlawful disclosure. Measures may include encrypted connections, access restrictions, credential controls, monitoring, backup procedures and staff confidentiality requirements.
No internet service can guarantee absolute security. Users also have an important role in protecting their information. A dewa200 password should be unique, difficult to guess and never shared with another person. One-time verification codes must remain private.
If a user suspects unauthorised account access, the matter should be reported promptly using the plain-text contact information in this policy. dewa200 may temporarily restrict an account while investigating a credible security concern.
11. Data Retention
dewa200 retains personal information only for as long as reasonably required for the purpose for which it was collected, or for a longer period where recordkeeping, dispute, fraud-prevention, accounting or legal obligations apply.
Retention periods vary according to the type of record. Basic account records, KYC evidence, MYR transaction histories, responsible-gambling restrictions and dispute files may need to be retained after an account closes. This helps dewa200 honour self-exclusion controls, answer legitimate payment questions and respond to lawful enquiries.
When information is no longer required, dewa200 will take reasonable steps to delete, anonymise or securely isolate it. Anonymised information that can no longer identify a user may be retained for statistical, security or service-improvement purposes.
12. User Privacy Rights
Subject to applicable law and any permitted limitation, users may ask dewa200 for information about the personal data associated with their account. A request may require identity verification before records can be accessed or changed.
Access
Request confirmation of whether dewa200 processes your personal data and ask for an appropriate copy.
Correction
Ask dewa200 to correct information that is inaccurate, incomplete or no longer current.
Deletion
Request deletion where information is no longer required and no legal or operational exception applies.
Restriction
Ask for processing to be limited while the accuracy or permitted use of information is reviewed.
Objection
Object to certain processing based on legitimate interests or to permitted direct marketing.
Consent Withdrawal
Withdraw optional consent without affecting processing that was lawful before withdrawal.
Some requests cannot be fulfilled immediately or in full. For example, dewa200 may need to retain records connected with legal obligations, fraud prevention, payment disputes or a responsible-gambling exclusion. If a request is limited, the user will receive an explanation where permitted.
13. Age Restriction and Minors
dewa200 services are intended only for persons aged 21 and above. dewa200 does not knowingly permit a person under 21 to register for or use casino-style gambling services.
Age information may be verified during account registration, KYC review or withdrawal processing. If dewa200 has reasonable grounds to believe that an account belongs to a person under 21, the account may be restricted while the matter is investigated.
For Malaysian adults aged 21 and above only
A parent or guardian who believes that a minor has submitted personal information to dewa200 should contact the support team so the matter can be reviewed promptly.
14. Changes to This Privacy Policy
dewa200 may update this Privacy Policy when services, technology, legal requirements or internal practices change. The effective date shown near the top of this page identifies the current version.
Material changes may be communicated through an account notice or a prominent message on the dewa200 website. Users should review this page periodically to understand the latest privacy practices. Continued use of dewa200 after an updated policy takes effect does not replace any consent that applicable law specifically requires.
15. Contact Us
Questions about this Privacy Policy, a personal-data request or a suspected security issue may be directed to the dewa200 support team. To protect account information, dewa200 may ask the requester to complete proportionate identity verification.