Privacy Policy DewiJoker – Malaysia Member Personal Data Protection

DewiJoker Entertainment Ltd ("DewiJoker", "we", "the platform") is the data controller responsible for all personal information collected through our platform at https://dewijoker.biz. Your privacy is not merely a legal obligation to us – it is a core part of our commitment to member trust.

We understand that when you share your personal information with DewiJoker, you are placing a great deal of trust in us. We take that trust very seriously. Every decision about how we collect, store and use your data is guided by one core principle: is this truly necessary, and does it deliver genuine value to you as a member?

This Privacy Policy is drafted in accordance with the requirements of the Malaysian Personal Data Protection Act 2010 (PDPA), the primary legislation governing the processing of personal data in this country. We also comply with the requirements of our international operating licences, which mandate strict data protection standards.

If you have any questions about how we handle your data that are not addressed in this document, please contact our Privacy Officer by email at support@dewijoker.biz with the subject line "Privacy Enquiry".

DewiJoker collects your personal data through two main channels – information you provide directly to us, and information we collect automatically when you use the platform. Below is a full breakdown of the data we collect:

Information you provide directly:

• Identity data: Full name, date of birth, MyKad or passport number, identity document image (for KYC verification)
• Contact data: Email address, mobile phone number, residential address (including state and postcode)
• Account data: Username, encrypted password, language preferences and personal settings
• Financial data: Payment method details you use, such as your DuitNow account number, Touch 'n Go eWallet ID, GrabPay, Boost, ShopeePay, FPX (Maybank2u, CIMB Clicks) and any other supported payment methods
• Communication data: Records of conversations with our customer support team, feedback you have submitted, and any written correspondence

Automatically collected information:

• Technical data: IP address, device type and version, web browser type and version, operating system, screen resolution
• Usage data: Pages visited, games played, session times and duration, in-game actions
• Transaction data: A complete record of all deposits, withdrawals, bets, and winnings, including the time, amount, and method used
• Location data: General location information derived from your IP address (country and state only, not precise location)
• Cookie data: Session information and preferences stored through cookies and similar tracking technologies

The personal data we collect is used solely for legitimate and necessary purposes in operating the DewiJoker platform. We do not use your data for purposes unrelated to the services you use. The primary purposes of data use are as follows:

• Account management: Creating and maintaining your account, processing registration, verifying identity and age, and enabling secure access to the platform
• Transaction processing: Processing deposits via DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, FPX and other payment methods, as well as managing your winnings withdrawals securely and promptly
• Platform security: Detecting and preventing fraud, money laundering, unauthorised access, bonus abuse, and any other unlawful activity through our automated monitoring systems
• Legal compliance: Fulfilling our obligations under PDPA 2010, operating licence conditions, anti-money laundering (AML) requirements, and directives from relevant authorities
• Customer support: Addressing enquiries, resolving disputes, and providing technical assistance via live chat, email, and other support channels
• Service improvement: Analysing usage patterns in aggregate (not individually) to improve the interface, game selection, and overall platform experience
• Service-related communications: Sending important notifications about your account, changes to terms, or security information you need to be aware of
• Marketing (with your consent): Sending promotional offers, bonus information and VIP Rewards – only where you have given explicit consent to receive marketing communications

DewiJoker does not sell your personal data to any third party for their marketing or business purposes. We only share your data in limited, necessary circumstances as follows:

• Payment providers: Minimum transaction information necessary to be shared with payment processors such as DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, and banks operating FPX – solely for the purpose of processing your transactions. All these providers are bound by strict data protection agreements.
• Game providers: Account information required to run games from providers such as Evolution Gaming, SA Gaming, and Pragmatic Live – limited to player ID and relevant balance only
• Technical service providers: Companies that provide IT infrastructure, cloud services, and analytics tools to help us operate the platform – all bound by confidentiality agreements and prohibited from using your data for their own purposes
• Legal authorities: We will disclose data when required by a valid court order, regulatory authority directive, or in cases involving serious criminal investigations.
• Business transfer: In the event that DewiJoker undergoes a merger, acquisition or asset sale, member data may be transferred as part of that transaction. We will notify you in advance and ensure that the receiving party upholds the same data protection standards.

DewiJoker continually invests in security infrastructure to ensure your personal data is protected to the highest possible standard. The technical and organisational security measures we implement include:

• 256-bit SSL/TLS encryption: All communications between your device and DewiJoker's servers are encrypted using TLS 1.3 protocol with 256-bit encryption strength – the same standard used by Malaysia's leading banks.
• Data encryption at rest: Sensitive data such as financial information and identity documents is encrypted at rest in our database using AES-256 algorithms
• Two-factor authentication (2FA): All member accounts are protected with a 2FA option that sends a verification code to your registered phone number or email address whenever a login from a new device is detected
• Fund segregation: Member account funds are held in a bank account completely separate from DewiJoker's operational funds – this is not just good practice, it is a licence requirement
• Internal access controls: Only staff who require access to specific data to carry out their duties are granted that access – following the principle of least privilege, which is regularly audited
• 24/7 security monitoring: An automated threat detection system continuously monitors for suspicious activity and alerts our security team for immediate action
• Regular security testing: Penetration testing and vulnerability assessments are conducted by independent third parties at least twice a year
• Incident response plan: DewiJoker has clear procedures in place to respond to any data breach, including reporting to the relevant authorities and notifying affected members within the timeframe required by law

While we implement all reasonable security measures, no system can be guaranteed 100% secure. You also play an important role in keeping your account safe – use a strong, unique password, enable 2FA, and never share your login credentials with anyone.

The DewiJoker platform uses cookies and similar tracking technologies to enhance your experience and maintain platform security. Below are the categories of cookies we use:

You can manage your cookie settings through your web browser settings. Please note that disabling essential cookies may affect the functionality of the DewiJoker platform. For instructions on managing cookies in popular browsers, refer to your browser's help documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data DewiJoker holds about you:

To exercise any of the rights above, please contact the DewiJoker Privacy Officer by email at support@dewijoker.biz with the subject line "Privacy Rights Request – [type of right]". We will acknowledge receipt within 2 business days and process your request within 14 business days. No fee is charged for reasonable privacy rights requests.

In operating a platform that works with technology and game providers from around the world, your personal data may be transferred to and stored on servers located outside Malaysia. This includes the cloud infrastructure used to run the DewiJoker platform.

DewiJoker ensures that any international data transfers are carried out with adequate safeguards in place, including:

• Data transfer agreements (DTA) that require recipients to uphold data protection standards equivalent to PDPA 2010
• Use of internationally recognised standard contractual clauses
• Selecting providers that operate in jurisdictions with robust data protection legislation

You may contact us for further details on the specific protection mechanisms applied to international data transfers relating to your account.

DewiJoker retains your personal data for as long as necessary to fulfil the purposes set out in this privacy policy, or for as long as required by law and regulatory obligations. The following outlines our data retention guidelines:

• Active account data: Retained for the duration of your active account and for at least 5 years after account closure, in accordance with anti-money laundering (AML) legal requirements
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian tax and financial legal requirements
• Customer support communication records: Retained for 3 years for dispute resolution and service improvement purposes
• Technical log data: Retained for 12 months before being automatically deleted
• Marketing data (with consent): Retained until you withdraw consent or request deletion

Once data is no longer needed and there is no legal obligation to retain it, we will delete or anonymise it in a secure and irreversible manner.

DewiJoker reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Whenever we make material changes, we will:

• Updating the "Last Updated" date displayed at the top of this document
• Sending an email notification to your registered address at least 14 days before the changes take effect
• Displaying a clear notice on the DewiJoker platform homepage regarding upcoming changes

Your continued use of the DewiJoker platform after the effective date of any changes constitutes your acceptance of the updated privacy policy. If you do not agree with any of the changes, you have the right to close your account and request deletion of your data before the changes take effect.

If you have any questions, concerns or complaints about how DewiJoker handles your personal data, or if you wish to exercise any of your privacy rights, please reach out to us through the following channels:

We are committed to addressing every privacy enquiry seriously and within a reasonable timeframe. If you are unsatisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Communications and Digital.