Introduction
This Privacy Policy ("Policy") is published by dewajudi ("Company", "Platformwe", "us", "our"), which operates the online casino and sports betting services accessible athttps://dewajudi.cam and all associated subdomains. This Policy applies to all current and prospective members, visitors, and any individual whose personal data is processed by the Company in connection with the operation of our platform.
We take data privacy seriously. This Policy is designed to be transparent, clear, and complete in explaining how we handle personal information. If you have questions that are not answered here, please contact us using the details in Section 15.
By registering an account, depositing funds, or otherwise using the dewajudi platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.
Definitions
For the purposes of this Privacy Policy, the following definitions apply:
- "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, directly or indirectly, including by reference to an identifier such as a name, an identification number, location data, or an online identifier.
- "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
- "Data Controller" means dewajudi, the entity that determines the purposes and means of processing personal data.
- "Data Processor" means any third party that processes personal data on behalf of dewajudi pursuant to a written agreement.
- "Member" / "User" means any individual who has registered an account on the dewajudi platform.
- "KYC Data" means identity documents and associated information submitted by a Member for the purpose of identity and age verification.
- "Cookies" means small data files placed on a user's device by a website for the purpose of session management, analytics, or preference storage.
- "MYT" means Malaysia Time (UTC+8), the time zone used by the Company's customer support operations.
Data We Collect
3.1 Registration Data
When you create a dewajudi account, we collect the following information:
- Full legal name
- Date of birth (to verify you are aged 21or above)
- Email address
- Malaysian mobile phone number
- Residential address (including city, state, and postcode)
- Username and encrypted password
- Preferred currency (MYR)
3.2 Identity Verification (KYC) Data
To comply with our anti-money laundering and age verification obligations, we collect:
- Copy of Malaysian Identity Card (MyKad) — front and back — or valid passport data page
- Proof of address (e.g., utility bill, bank statement, or government correspondence issued within 3 months)
- Selfie or live photograph, where requested for enhanced identity confirmation
3.3 Financial Transaction Data
We record details of all financial transactions conducted through your account, including:
- Deposit and withdrawal amounts in MYR
- Payment method used (e.g., Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, FPX, cryptocurrency wallet addresses)
- Transaction timestamps and reference numbers
- Bonus and promotional credit records
3.4 Behavioural and Usage Data
We automatically collect technical and behavioural data when you use the platform, including:
- IP address and approximate geolocation
- Device type, operating system, and browser version
- Pages visited, features used, and session duration
- Betting history, game activity, and wagering patterns
- Login timestamps and access logs
3.5 Communication Data
When you contact our support team via live chat or email, we retain records of those communications for quality assurance, dispute resolution, and training purposes.
How Data is Collected
We collect personal data through the following means:
| Collection Method | Data Collected |
|---|---|
| Account Registration Form | Name, email, phone number, date of birth, address |
| KYC Document Submission | Identity documents, proof of address |
| Cashier / Payment Portal | Transaction records, payment method identifiers |
| Cookies & Tracking Technologies | Session data, device information, behavioural analytics |
| Live Chat & Email Support | Communication content, timestamps, account references |
| Third-Party Verification Services | Identity confirmation results (pass/fail, no raw data retained beyond necessity) |
Data Processing & Legal Basis
dewajudi processes your personal data on the following legal bases, depending on the specific processing activity:
- Contractual Necessity: Processing required to fulfil our obligations under the Member Agreement, including account management, processing deposits and withdrawals, settling bets, and providing customer support.
- Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, KYC verification requirements, fraud prevention, and age verification.
- Legitimate Interests: Processing carried out for the legitimate business interests of the Company, including platform security, fraud detection, responsible gambling monitoring, and service improvement — provided such interests are not overridden by the fundamental rights and freedoms of the data subject.
- Consent: Where you have provided explicit consent for a specific processing activity, such as receiving marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
How We Use Your Data
Your personal data is used for the following purposes:
- Creating, managing, and maintaining your dewajudi account
- Verifying your identity and age (21+ requirement) in compliance with KYC obligations
- Processing deposits, withdrawals, and bet settlements in Malaysian Ringgit (MYR) and supported cryptocurrencies
- Detecting and preventing fraud, money laundering, and other illegal or prohibited activity on the platform
- Monitoring for responsible gambling concerns and enforcing self-exclusion or account restriction requests
- Providing customer support via live chat and email in English, Bahasa Melayu, and Mandarin
- Sending transactional communications (e.g., deposit confirmations, withdrawal notifications, account security alerts)
- Sending promotional communications where you have opted in to receive them
- Conducting platform analytics to improve the user experience, game selection, and payment infrastructure
- Complying with legal, regulatory, or judicial obligations as required
Data Sharing & Disclosure
dewajudi does not sell, rent, or trade your personal data to third-party marketers. We may share your data in limited, strictly controlled circumstances:
7.1 Payment Service Providers
We share necessary transaction data with our verified Malaysian payment partners — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and supported banking institutions such as Maybank, CIMB, Public Bank, Hong Leong Bank, and RHB — solely for the purpose of processing deposits and withdrawals.
7.2 Identity Verification Providers
KYC documents may be processed by third-party identity verification service providers engaged by dewajudi. Such providers are contractually bound to process data solely for verification purposes and must comply with applicable data protection standards.
7.3 Game Content Providers
Certain anonymised session and gameplay data may be shared with licensed game providers for technical support and game performance optimisation. No personally identifiable information is shared with game providers beyond what is technically necessary.
7.4 Legal and Regulatory Authorities
We may disclose personal data to law enforcement agencies, regulatory authorities, or courts where we are legally required to do so, where disclosure is necessary to protect the rights, property, or safety of dewajudi, its members, or the public, or where we are subject to a valid court order.
7.5 Business Transfers
In the event of a merger, acquisition, or sale of all or part of the Company's assets, member data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained. Members will be notified of any such transfer that materially affects the processing of their personal data.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. Our standard retention periods are as follows:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account + 5 years post-closure |
| KYC and identity documents | Duration of account + 5 years post-closure |
| Financial transaction records | 7 years from transaction date (regulatory requirement) |
| Betting and gaming history | 5 years from the date of the activity |
| Customer support communications | 3 years from the date of the communication |
| Cookie and session data | Up to 13 months from last activity |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures.
Cookies & Tracking Technologies
9.1 What Are Cookies
Cookies are small text files stored on your device when you visit the dewajudi platform. They allow the platform to remember your session, preferences, and certain aspects of your interaction with the site.
9.2 Types of Cookies We Use
- Essential Cookies: Required for the platform to function correctly. These include session management cookies and security tokens. They cannot be disabled without impairing platform functionality.
- Analytics Cookies: Used to understand how members navigate the platform — which pages are most visited, how long sessions last, and where users encounter difficulties. This data is collected in aggregate and anonymised.
- Preference Cookies: Store your language preference, display settings, and session timeout preferences to improve your experience on return visits.
- Security Cookies: Used to detect fraudulent login attempts, bot activity, and other suspicious behaviour targeting your account.
9.3 Managing Cookies
You may configure your browser to block or delete cookies at any time. Please note that disabling essential cookies will impair the functionality of the dewajudi platform and may prevent you from logging in or processing transactions. Analytics and preference cookies can be disabled without affecting core platform access.
Data Security
dewajudi employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or destruction:
- Encryption in Transit: All data transmitted between your device and our servers is protected by TLS 1.3 /256-bit SSL encryption.
- Encryption at Rest: Sensitive personal data — including KYC documents and financial records — is encrypted at rest using industry-standard encryption algorithms.
- Two-Factor Authentication (2FA): Members are encouraged to enable 2FA on their accounts. Our administrative systems require 2FA for all staff accessing member data.
- Access Controls: Access to member data is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations.
- Automated Fraud Detection: Our systems continuously monitor transactions and login activity for anomalies consistent with account compromise or fraudulent activity.
- Regular Security Audits: The platform undergoes periodic security assessments and penetration testing to identify and remediate vulnerabilities.
Notwithstanding the above, no method of electronic transmission or storage is 100% secure. While we take every reasonable precaution, we cannot guarantee absolute security of data transmitted over the Internet.
Your Rights
As a registered member of dewajudi, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details in Section 15.
Right of Access
You may request a copy of all personal data we hold about you at any time. We will respond within 30 days of receiving your verified request.
Right to Rectification
You may request correction of any inaccurate or incomplete personal data we hold. Update requests for basic account information can be submitted directly through your account settings.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overiding legal retention obligations.
Right to Portability
You may request a structured, machine-readable export of the personal data you provided to us in connection with your account, where technically feasible.
Right to Object
You may object to processing of your personal data carried out on the basis of legitimate interests, including direct marketing. We will cease such processing unless we can demonstrate compelling legitimate grounds.
Right to Restriction
You may request that we restrict the processing of your data while a rectification or objection request is under review.
Please note that certain rights may be limited in circumstances where exercising them would conflict with our legal obligations, such as regulatory data retention requirements or the prevention of financial crime.
Minors & Age Restriction
The dewajudi platform is strictly for individuals aged21 years or above. We do not knowingly collect or process personal data of anyone under the age of 21. During the registration process, users are required to confirm their date of birth, and KYC verification is used to confirm this declaration.
If we become aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete all associated data and suspend the relevant account without prior notice. If you believe that a minor has registered an account on our platform, please contact us immediately at [email protected].
International Data Transfers
dewajudi's primary operations and data infrastructure are based in connection with our international licensing jurisdiction. In certain circumstances, personal data may be processed outside of Malaysia — for example, by identity verification service providers or cloud infrastructure providers operating internationally.
Where personal data is transferred outside Malaysia, we take steps to ensure that appropriate safeguards are in place, including the use of contractual clauses that require receiving parties to protect personal data to a standard consistent with this Policy. We do not transfer personal data to jurisdictions that do not provide an adequate level of protection for the data subjects concerned.
Policy Amendments
dewajudi reserves the right to update this Privacy Policy at any time to reflect changes in our data processing activities, applicable law, or operational practices. When material changes are made, the "Last Updated" date at the top of this Policy will be revised.
For significant changes that materially affect how we process your personal data, we will notify you via the email address associated with your account or through a prominent in-platform notification. Your continued use of the dewajudi platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes.
We encourage you to review this Policy periodically to stay informed about how we protect your information. If you do not agree to the revised Policy, you should cease using the platform and request account closure.
Contact & Data Queries
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our Data Privacy team through the following channels:
- Live Chat: Available 24 hours a day, 7 days a week — accessible directly from the dewajudi website. Average response time: 3–5 minutes.
- Email: [email protected] — for formal data subject requests, please include "Privacy Request" in the subject line. Responses within 2–4 business hours (MYT) for general queries; formal data subject access requests are handled within 30 calendar days.
- Headquarters: Kuala Lumpur, Malaysia
All formal data subject rights requests — including access, rectification, erasure, portability, and objection requests — must be submitted in writing via email to [email protected]. We may require identity verification before processing a data subject rights request to ensure we respond only to the genuine account holder.