Dewaslot Privacy Policy — Our Commitment to Protecting the Personal Data of Malaysian Members

Dewaslot is committed to protecting the privacy of every member who uses our platform. We understand that your trust is our most valuable asset, and the way we handle your personal data reflects how seriously we take that responsibility. This Privacy Policy is formulated in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) — the primary legislation governing the processing of personal data in this country.

This policy applies to all members who register for and use Dewaslot's services from Malaysia, covering every section of the platform — slots, Live Casino, poker, badminton betting, Malaysia Super League and EPL football betting, Virtual Sports, e-sports, and all other services offered at dewaslot.run. Whenever you use our platform — whether to play slots, join a live baccarat table, deposit via Touch 'n Go or GrabPay, or simply browse the promotions page — this policy applies.

Dewaslot acts as the data controller for all personal information collected from Malaysian members. This means we are responsible for determining why and how your data is processed, and we must adhere to all data protection principles set out under PDPA 2010.

Dewaslot collects various types of personal data when you use our platform. Below is a detailed breakdown of each data category we collect and how it is gathered:

Account Registration Data:

• Full name as stated on your official Malaysian identity document
• An active Malaysian phone number
• Your self-selected password (stored in encrypted form — we cannot view your actual password)
• Date of birth (for age verification)

Financial Transaction Data:

• Records of all deposits made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, or FPX
• Records of all fund withdrawals
• Payment method identifier information (e.g., the phone number linked to an eWallet, or a partially masked bank account number) — we do not store full bank account numbers or complete card details
• Full transaction history on the account

Game Activity Data:

• A complete history of all bets and gameplay — including slots, Live Casino, poker, and Sports Betting
• Play session times and duration
• Cumulative wins and losses
• Table and game information accessed

Technical & Usage Data:

• Your device's IP address
• Web browser type and operating system
• Device information (smartphone, tablet, or computer)
• Access log data — pages visited, access times, and session duration
• Cookie data and similar tracking technologies (see Section 6)

Identity Verification Data (when required):

• A copy of your MyKad or Malaysian passport for KYC (Know Your Customer) purposes
• Proof of residential address
• Proof of payment method ownership

Dewaslot uses the personal data it collects solely for the purposes listed below. We will not use your data for any other purpose beyond what is stated here without first obtaining your consent:

• Service Delivery: To manage your account, process deposits and withdrawals (including transactions via Touch 'n Go, GrabPay, DuitNow, and FPX), and enable you to play across all sections of the Dewaslot platform.
• Identity Verification & Security: To verify your identity during registration and for KYC purposes, and to detect and prevent fraud, money laundering, and unauthorised account access.
• Service Communications: To send you important account notices, security updates, transaction confirmations, and platform-related information you need to be aware of.
• Customer Support: To enable the Dewaslot support team to effectively resolve inquiries, complaints, and technical issues you report.
• Legal Compliance: To fulfil our legal obligations under Malaysia's PDPA 2010, anti-money laundering (AML) requirements, and any directives from relevant enforcement bodies.
• Responsible Gaming Monitoring: To detect play patterns that may indicate signs of problem gambling and to provide appropriate support to members who need it.
• Platform Improvement: Anonymised usage data (containing no personally identifiable information) is used to analyse how members use the platform, for product improvement and user experience purposes.
• Marketing (with consent): To send information about Dewaslot promotions, bonuses, and offers — only to members who have consented to receive marketing communications. You may withdraw this consent at any time.

Dewaslot does not sell, rent, or trade of members' personal data to any third party for commercial purposes. However, there are limited situations where we need to share your data with certain parties in order to deliver our services:

All third parties who receive your data are required to comply with data protection standards equivalent to those of Dewaslot and are not permitted to use such data for any purpose other than what has been specified. Every third-party service provider we work with has undergone a security assessment prior to engagement.

Should there be any significant change in how we share data with third parties, you will be notified via an in-platform notice or by email at least 30 days before the change takes effect.

Dewaslot invests seriously in security infrastructure to protect your personal data. The following are the technical and organisational measures we have in place:

• 256-bit SSL Encryption: All data transmitted between your browser and Dewaslot's servers is encrypted using TLS protocol with 256-bit keys — the same standard used by the banking industry.
• Stored Data Encryption: Sensitive data stored in our databases — including passwords and financial information — is encrypted at rest using the AES-256 algorithm.
• Strict Access Controls: Only Dewaslot staff with a legitimate need to access specific data are permitted to do so — based on the principle of least privilege.
• 24/7 Security Monitoring: Our automated monitoring system continuously detects suspicious activity. Any potential security threats are identified and addressed immediately.
• Regular Security Audits: Dewaslot conducts regular penetration testing and independent security audits to identify and address vulnerabilities before they can be exploited.
• Incident Management: We have a clear incident response procedure in place. Should a data breach occur that affects you, we will notify you within 72 hours in accordance with incident notification requirements.

Dewaslot uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for the platform's core functions — including maintaining your login session, remembering your language preference, and securing transactions. These cookies cannot be disabled as they are essential for the platform to operate correctly.
• Analytics Cookies: Collects information on how you use the platform — pages visited, time spent, and buttons clicked. This information is used in aggregate form to improve the user experience. It is not directly linked to your personal identity.
• Functional Cookies: Allows the platform to remember your preferences such as display settings, interface language, and any betting limits you have previously set, for a more convenient gaming experience.
• Session Cookies: Stored temporarily in your browser during an active session and deleted automatically when you close the browser.

You can manage your cookie settings through your web browser's preferences. Disabling certain cookies may affect the functionality of some parts of the platform. Essential cookies cannot be disabled without impacting your ability to log in and play.

Dewaslot retains your personal data only for as long as it is needed for the stated purposes or as required by law. The following are retention period guidelines for the various categories of data:

• Active Account Data: Retained for as long as your account is active and for a period of five (5) years after account closure, for legal compliance purposes and to resolve any claims that may arise.
• Financial Transaction Records: Retained for seven (7) years in accordance with Malaysian financial and audit legal requirements.
• Game History: Retained for three (3) years from the date of play for dispute resolution and gambling regulatory compliance purposes.
• Security Logs: Retained for twelve (12) months for security threat detection and investigation purposes.
• KYC Documents: Retained for five (5) years after the business relationship ends, in accordance with Malaysia's AML requirements.
• Marketing Data: Retained until you withdraw consent to receive marketing communications, or three (3) years of inactivity — whichever comes first.

Once data is no longer needed and there is no legal obligation to retain it, Dewaslot will securely delete or anonymise it using approved deletion procedures.

Under Malaysia's PDPA 2010 and Dewaslot's policy, you have the following rights regarding your personal data. We are committed to making it easy for you to exercise these rights:

Dewaslot's services are strictly for individuals aged 18 and above only. We do not knowingly collect personal data from individuals under the age of 18. Our registration process includes age verification to prevent sign-ups by minors.

If we discover that personal data has been collected from an individual under the age of 18 without our knowledge, we will take immediate steps to:

• Immediate closure of the relevant account
• Deleting all personal data belonging to that individual from our systems
• Returning any stored funds in accordance with the prescribed procedures

If you have reason to believe that a minor has registered an account on Dewaslot, please contact us immediately at support@dewaslot.run with the relevant details so we can take prompt action.

The Dewaslot platform may contain links or integrations with third-party services — such as the Touch 'n Go, GrabPay, or FPX payment gateways during the deposit process — each of which has its own privacy policy separate from Dewaslot.

When you are directed to a third-party website or interface to complete a transaction or other process, the relevant third party's privacy policy applies to any information you provide directly to them. Dewaslot is not responsible for the privacy practices of such third-party services.

We recommend reading the privacy policy of each payment provider or third-party service you use alongside Dewaslot, to fully understand how your data is managed across all platforms you use.

Dewaslot reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to how we protect your data. The date of the most recent update will always be displayed at the top of this page.

For significant amendments — such as changes to how we use or share your data — we will notify you through one of the following methods:

• A prominent notice on the platform when you log in
• Notification to your registered phone number
• Email to the address associated with your account (where applicable)

Notice will be given at least 30 days prior to major amendments take effect, giving you sufficient time to review the changes and decide whether you wish to continue using the platform. Continued use of the platform after the amendment's effective date will be considered acceptance of the revised policy.

If you disagree with any amendments to the privacy policy, you have the right to close your account and request deletion of your data in accordance with the procedure outlined in Section 8.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Dewaslot handles your personal data, we encourage you to reach out to us directly. We are committed to taking every privacy-related inquiry seriously and responding within a reasonable timeframe.

For urgent inquiries related to account security or privacy issues requiring prompt action, you can also reach the Dewaslot support team via live chat on the platform — available 24 hours a day, including public holidays in Malaysia.

If you are not satisfied with our response to your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the regulatory body under PDPA 2010.

Effective Date: 1 January 2026 | Version: 3.1 | Official Language: Bahasa Melayu