Dewaslot99 Privacy Policy – Personal Data Protection for Malaysian Players

This Privacy Policy is published by dewaslot99 ("we", "Platform") and applies to all users of the dewaslot99.run website and all services offered through it. This document explains how we collect, use, store, protect, and disclose your personal information in the context of your use of our Sports Betting and online gaming platform.

Dewaslot99 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). As a licensed data controller, we take this responsibility seriously and have made ongoing investments in security infrastructure and staff training to ensure your data is always protected to the highest standards set out under the Act.

This policy covers all data processing activities that take place on the dewaslot99 platform, including account registration, deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, sports betting activities such as Malaysia Super League football and badminton, use of casino games, and all interactions with our customer support team.

Dewaslot99 collects your personal information through two main channels: information you provide directly to us, and information collected automatically as you use our platform.

Information you provide directly:

• Full name as stated in a valid identification document.
• Date of birth for age eligibility verification purposes (minimum age requirement of 21 years).
• An active Malaysian mobile number for OTP verification and account communications.
• An email address you actively monitor for account notifications and support communications.
• Full name as it appears on the payment method used (to ensure name matching for transactions).
• Identity documents (national ID or passport) when requested for additional identity verification purposes.

Automatically collected information:

• IP address, web browser type, operating system, and device information used to access the platform.
• Activity logs including pages visited, time and duration of visits, and actions taken during a session.
• Records of all financial transactions including deposits, withdrawals, and betting activity.
• Session cookie and preference cookie data to enhance the user experience on the platform.
• Country- or state-level geolocation information (not precise location) derived from your IP address for licensing compliance purposes.

Dewaslot99 uses the personal information collected solely for legitimate purposes related to platform operations and the fulfilment of our legal obligations. We do not use your data for unrelated purposes without your explicit consent.

The primary purposes for which your data is used are as follows:

• Account Management: Creating and maintaining your account, verifying your identity, and ensuring login security.
• Transaction Processing: Processing deposits from Touch 'n Go eWallet, GrabPay, DuitNow, FPX and others, and managing withdrawals to your account.
• Bet Settlement: Recording, verifying, and settling all bets placed on the platform, including live in-play bets and standard Sports Betting wagers.
• Legal Compliance: To comply with Anti-Money Laundering (AML), Know Your Customer (KYC), and reporting obligations to the relevant regulatory authorities.
• Fraud Prevention: To detect and prevent fraudulent activity, multi-account usage, and bonus system abuse.
• Customer Support: Identifying you when you contact our support team and accessing your account history to resolve issues more efficiently.
• Platform Improvements: Analysing usage patterns in aggregate (not at an individual level) to improve the platform's interface, performance, and offerings.
• Marketing Communications: Sending information about promotions, bonuses, and platform updates — you may opt out of these communications at any time.

The legal bases for processing your data include: performance of a contract (membership agreement), compliance with legal obligations, dewaslot99's legitimate interests in operating the platform safely, and the consent you provided at registration.

There are limited circumstances in which dewaslot99 may need to share certain information with the following parties:

• Payment Providers: Required transaction information is shared with providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX solely to process your deposits and withdrawals. These providers maintain their own privacy policies and are subject to strict financial regulations.
• Technical Service Providers: Third parties providing hosting infrastructure, cybersecurity, and platform analytics are bound by strict confidentiality agreements and may only use data for purposes we have specified.
• Regulatory Authorities: We may be required to disclose certain information to licensing regulatory bodies as a condition of our operating licence. This is a legal obligation that cannot be avoided.
• Legal Authorities: Where required by a court order, valid warrant, or applicable legal obligation, we may be required to disclose information to the relevant authorities.
• Identity Verification: Minimum necessary information may be shared with third-party identity verification providers (eKYC) to conduct identity checks required under AML/KYC regulations.

In all of the above cases, dewaslot99 ensures that data sharing is limited strictly to the minimum information required, and that all receiving parties are bound by appropriate confidentiality and data security obligations.

Data security is an absolute priority for dewaslot99. We have implemented a comprehensive set of technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction.

The technical security measures we have implemented include:

• SSL/TLS 1.3 encryption for all communications between your browser and dewaslot99's servers — the same technology used by Maybank and CIMB for online banking security.
• AES-256 encryption for all sensitive data stored in our databases, including personal information and transaction records.
• One-way cryptographic hashing (bcrypt) for passwords — meaning your password is not stored in readable form and cannot be recovered even by our own staff.
• Two-factor authentication (2FA) available for all member accounts via OTP to a registered mobile number.
• Round-the-clock monitoring of suspicious activity using an automated intrusion detection system.
• Network segmentation and multi-layered firewalls to protect server infrastructure.
• Regular penetration testing conducted by independent cybersecurity firms.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. We encourage you to take your own precautions: use a strong and unique password, do not share your login credentials with anyone, and always log out of your dewaslot99 account when you are done, especially on shared devices.

Dewaslot99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use three categories of cookies:

• Essential Cookies: Required for core platform functions such as login session management, security, and language preferences. These cookies cannot be disabled as they are critical to platform operation.
• Performance Cookies: Collecting aggregated information on how users interact with our platform — most frequently visited pages, response times, and errors encountered. This information is used solely to improve platform performance.
• Preference Cookies: Saving your preferences such as your chosen odds format (decimal, fractional, or American), favourite sports, and other display settings so you don't need to reconfigure them every time you log in.

You can manage cookie settings through your web browser. Disabling essential cookies may affect platform functionality. For guidance on managing cookies in your browser, refer to your browser's help documentation.

Data collected by dewaslot99 may be stored and processed on servers located within or outside Malaysia, depending on our technical infrastructure requirements. Where data needs to be transferred outside Malaysia, we ensure such transfers are protected by appropriate safeguards and comply with Malaysia's PDPA 2010.

Safeguards for international data transfers include binding data processing agreements with all cloud service providers, the use of recognised data transfer mechanisms, and regular audits of provider security standards.

Our data retention periods are based on operational and legal requirements:

• Active account data is retained for the duration of your membership, plus any additional period required by compliance obligations following account closure.
• Financial transaction records are retained for a minimum of seven years in accordance with applicable accounting and AML legal requirements.
• Security and audit logs are retained for 90 days to support incident investigations when needed.
• Customer support communications are retained for three years for reference and service improvement purposes.

Dewaslot99 respects your privacy rights and has established a clear process to help you exercise them with ease. All privacy rights requests can be submitted through:

• Email support@dewaslot99.run with the subject line "Privacy Rights Request".
• Live Chat available 24 hours on the dewaslot99 platform — our team will guide you through the correct procedure.

When submitting a privacy rights request, please include: your full name as registered on the account, your registered phone number or email address, the type of request (access, rectification, deletion, etc.), and a brief description of the data your request relates to.

We are committed to processing all privacy rights requests within 14 working days of receiving a complete submission. If your request is complex or involves a large volume of data, we may require up to 30 working days and will notify you of this extended timeline within the first 14 working days. No fee is charged for privacy rights requests submitted once within any 12-month period.

If you have any questions, concerns, or complaints regarding how dewaslot99 handles your personal data, or if you wish to exercise any of your privacy rights, please contact us through the following channels:

• Email: support@dewaslot99.run (for privacy enquiries, please use the subject line "Data Privacy" so your email is routed to the correct team)
• Live Chat: Available 24/7 at dewaslot99.run — our support team is ready to assist in Bahasa Melayu

We take all privacy-related complaints seriously and are committed to responding satisfactorily within the stipulated timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority.

Dewaslot99 reserves the right to update or amend this Privacy Policy from time to time in line with changes to our business practices, technology, legal requirements, or feedback from our members. All amendments will be published on this page with a new "Updated" date at the top.

For material amendments that significantly affect how we use or protect your data, we will notify you by email to your registered address and display a prominent notice on the dewaslot99 platform homepage at least 14 days before the changes take effect. This gives you sufficient time to review the updates and decide whether to continue using our platform.

Your continued use of the dewaslot99 platform after the effective date of any Privacy Policy amendment constitutes your acceptance of the updated policy. This version of the Privacy Policy takes effect on 1 January 2026 and supersedes all previous versions.