Privacy Policy

This Privacy Policy is issued by dewa78 ("dewa78", "we", "us", "our"), the operator of the online betting and gaming platform accessible at dewa78.cam. This Policy applies to all individuals who access, browse, or register on the dewa78 platform, including members based in Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, and all other regions of Indonesia.

dewa78 is committed to processing personal data responsibly, transparently, and in compliance with applicable international data protection standards. We have designed our data practices to give members genuine visibility and control over their information — not simply to satisfy a compliance obligation.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy. By registering an account or continuing to use the dewa78 platform after the effective date of this Policy, you confirm your understanding of and consent to the data practices described herein.

The following terms are used throughout this Privacy Policy with the meanings set out below:

dewa78 collects the following categories of personal data from members and platform visitors:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification document;
• Date of birth (used to verify the 21+ age requirement);
• Residential address in Indonesia (or your country of residence);
• Email address and mobile phone number;
• Copies of identity documents submitted for KYC verification, such as KTP (national ID card), passport, or SIM (driving license).

3.2 Financial Data

• Bank account details (account holder name, bank name such as BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, or OCBC NISP, and account number) used for withdrawals;
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja accounts used for deposits or withdrawals;
• Transaction history — deposit amounts, withdrawal amounts, dates, and payment method references;
• We do not store raw card numbers or full payment credentials — payment processing is handled by PCI-DSS-compliant third-party processors.

3.3 Account & Activity Data

• Account username, password hash, and session tokens;
• Betting history, game session records, wager amounts, and outcomes;
• Bonus and promotion redemption history;
• Customer support correspondence, including live chat transcripts and email exchanges;
• Responsible gaming tool settings, including deposit limits, session timers, and self-exclusion records.

3.4 Technical & Device Data

• IP address and approximate geographic location derived from IP;
• Device type, operating system version, and browser type;
• Session timestamps, page interaction logs, and click-stream data;
• Cookie identifiers and similar tracking technologies as described in Clause 11.

dewa78 collects personal data through the following channels:

• Direct Submission: When you complete the account registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or update your account profile settings.
• Automated Collection: When you access and interact with the dewa78 platform, our servers and analytics systems automatically record technical and device data as described in Clause 3.4. This includes data collected via cookies and similar technologies.
• Third-Party Sources: Where permitted by applicable law, we may receive supplementary identity or fraud-risk data from regulated KYC verification providers, payment processors, and financial crime screening databases to cross-verify information you have provided directly.
• Responsible Gaming Disclosures: If you voluntarily provide information about your gambling habits, financial circumstances, or personal situation through our Responsible Gaming tools or support channels, that information is recorded and used solely to administer the protective measures you have requested.

dewa78 processes your personal data for the following defined purposes only. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your separate consent:

Every processing activity dewa78 undertakes is grounded in one of the following recognized legal bases:

• Contractual Necessity: Processing that is required to fulfil the agreement between you and dewa78 — including account creation, payment processing, and game delivery — is carried out on the basis that it is necessary to perform our contract with you.
• Legal Obligation: Processing carried out to comply with applicable law — including KYC verification, AML transaction monitoring, and responding to lawful regulatory or court orders — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics is carried out on the basis of dewa78's legitimate interests, balanced against members' privacy rights. Where we rely on this basis, we have determined that our interests do not override your fundamental rights.
• Consent: Processing for optional promotional communications is carried out on the basis of your consent, which you may withdraw at any time by updating your communication preferences in your account settings or by contacting support.

dewa78 does not sell, rent, or trade personal data. We share personal data with third parties only in the following defined circumstances:

• Payment Processors: Your financial data is shared with the payment service providers facilitating your deposits and withdrawals (e.g., the banking network partners supporting BCA, BRI, BNI, Mandiri, CIMB Niaga, and the e-wallet operators for OVO, DANA, GoPay, ShopeePay, and LinkAja). These providers process data solely to execute your transaction.
• KYC & Identity Verification Providers: Identity documents and personal details may be shared with regulated third-party identity verification services to conduct the KYC checks required for withdrawal authorization and age verification.
• Fraud & AML Screening Services: Where required by our compliance framework, member data may be cross-referenced with financial crime screening databases and fraud prevention networks to identify and investigate suspicious activity.
• Game Content Providers: Limited technical session data (not identity data) is shared with licensed game studio providers — including Pragmatic Play, Evolution Gaming, Spribe, Pocket Games Soft, and NetEnt — solely to facilitate game session delivery and ensure game integrity.
• Legal & Regulatory Authorities: dewa78 will disclose personal data to law enforcement, courts, or regulatory bodies where required to do so by a valid legal obligation, court order, or regulatory direction. We will notify affected members of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of dewa78's business or assets, personal data held at the time of the transaction may be transferred to the acquiring entity, subject to equivalent privacy protections.

As an internationally operated platform, dewa78 may store and process personal data on servers located outside Indonesia. Where personal data is transferred internationally, we ensure that appropriate safeguards are in place to protect your information at a standard equivalent to the protections afforded within your home jurisdiction.

Safeguards used for international transfers include:

• Contractual data protection clauses binding the receiving party to equivalent privacy standards;
• Transfers only to jurisdictions that maintain recognized data protection frameworks;
• Technical encryption of all data in transit and at rest, regardless of storage location.

By using the dewa78 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions other than Indonesia. If you wish to understand the specific transfer mechanisms in place for a particular processing activity, please contact our support team.

dewa78 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention guidelines apply:

• Active Account Data: Retained for the full duration of your account relationship with dewa78.
• Post-Closure Account Data: Following account closure (whether voluntary or initiated by dewa78), core identity and transaction records are retained for a minimum of 5 years from the closure date to comply with international AML regulations and financial record-keeping requirements.
• KYC Documents: Identity verification documents are retained for the period required by our compliance obligations, typically 5 years from the date of last account activity or account closure, whichever is later.
• Support Correspondence: Customer support records, including live chat logs and email exchanges, are retained for a period of 3 years from the date of the last interaction, or longer where the correspondence relates to an unresolved dispute or legal matter.
• Technical & Session Data: Log files, IP records, and session data are retained for up to 12 months for security and fraud investigation purposes, after which they are securely deleted or fully anonymized.
• Marketing Consent Records: Records of your communication preferences and consent (or withdrawal of consent) are retained for the life of your account plus 3 years to demonstrate compliance.

When the applicable retention period expires, personal data is either securely and permanently deleted or rendered irreversibly anonymous. Anonymized data may be retained indefinitely for aggregated statistical and platform improvement purposes.

dewa78 implements a multi-layered security architecture to protect personal data against unauthorized access, accidental loss, destruction, or alteration. Our security program includes the following measures:

• Transport Encryption: All communications between your browser or app and the dewa78 platform are encrypted using TLS 1.2 or higher (256-bit SSL), preventing interception in transit.
• Data-at-Rest Encryption: Sensitive personal data and financial records stored in our databases are encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within dewa78's systems is restricted to authorized personnel on a strict need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication (MFA) requirements.
• Intrusion Detection: Our infrastructure is monitored continuously for anomalous access patterns, unauthorized login attempts, and potential security incidents using automated detection systems.
• Third-Party Audits: dewa78 engages independent security professionals to conduct periodic penetration testing and security audits of our platform and data infrastructure.
• Incident Response: In the event of a data security incident that poses a risk to member personal data, dewa78 will take immediate containment action and notify affected members within a reasonable timeframe, in accordance with applicable law.

dewa78 uses cookies and similar tracking technologies to ensure the proper functioning of the platform, maintain session security, and gather aggregated analytics data. The following categories of cookies are in use:

• Essential Cookies: These cookies are strictly necessary to deliver the platform's core functionality, including maintaining your logged-in session state, remembering your language and currency settings, and enabling secure authentication. The platform cannot function correctly without these cookies, and they cannot be disabled.
• Analytics Cookies: These cookies collect anonymized, aggregated information about how members navigate and interact with the platform. This data helps us identify usability issues and improve the overall member experience. No individual profiling is performed from analytics data.
• Fraud Prevention Cookies: Certain cookies store a device fingerprint or session identifier used by our fraud detection systems to identify unusual account access patterns and protect against account takeover attempts.

dewa78 does not use third-party advertising cookies or behavioral tracking cookies that build individual profiles for advertising retargeting. You may manage cookie preferences through your browser settings; however, disabling essential cookies will impair or prevent access to the platform.

As a dewa78 member, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with a clear description of your request. We will respond within 10 business days and may request identity verification before processing your request.

dewa78 applies a strict 21+ age requirement across all platform services. The platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21. Age verification is conducted on all accounts as part of the KYC process prior to withdrawal authorization, and at random intervals throughout the account lifecycle.

If dewa78 discovers or reasonably suspects that a registered account belongs to an individual under 21 years of age, we will immediately suspend the account, initiate an investigation, and — if the suspicion is confirmed — permanently close the account and delete all associated personal data, except where retention is required by legal obligation. Any funds in the account at the time of closure will be handled in accordance with our Terms & Conditions and applicable law.

If you are a parent or guardian and believe that a minor under your care has accessed or registered on dewa78 without your knowledge, please contact our support team immediately at [email protected] so that we can take prompt action.

dewa78 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. The revised Policy will be published on this page with an updated "Last Updated" date. Where changes are material — particularly changes that expand the categories of data collected, introduce new processing purposes, or alter member data rights — we will provide reasonable advance notice via the platform or to your registered email address.

Your continued use of the dewa78 platform following publication of an amended Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the amended Policy, you must cease using the platform and contact our support team to request account closure and data deletion in accordance with Clause 12.

For all privacy-related enquiries, data subject requests, or complaints regarding dewa78's handling of your personal data, please contact our support team using the details below. Our Indonesian-speaking support agents are available 24 hours a day, 7 days a week, including during national observances such as Idul Fitri, Indonesian Independence Day (17 August), and Ramadhan.

• Data Support Email: [email protected]
• Subject Line for Privacy Requests: "Privacy Request — [Your Request Type]" (e.g., "Privacy Request — Data Access")
• Response Commitment: All privacy enquiries will receive an acknowledgment within 2 business hours (WIB, UTC+7) and a substantive response within 10 business days.

If you are not satisfied with how dewa78 has handled your personal data or responded to a data rights request, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. dewa78 will cooperate fully with any such authority in connection with a legitimate complaint investigation.