Privacy Policy DewiJoker – Our Commitment to Protecting Malaysian Players' Data

This Privacy Policy describes how DewiJoker — operating at https://dewijoker.best — collects, uses, stores, and protects your personal information when you use our online betting and entertainment platform.

We take privacy very seriously. As a platform that handles financial transactions and personal data of Malaysian players, we understand how sensitive the information you entrust to us truly is. Every decision involving data handling is made with our players' best interests and safety as the top priority.

This Privacy Policy applies to all products and services DewiJoker covers Sports Betting (football, badminton, e-sports), online lottery, Live Casino, slots, VIP programme, and all other features on our platform. It should be read alongside Terms & Conditions us.

By registering an account or using any of our services DewiJoker, you are indicating your consent to the collection and use of your personal data as described in this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

DewiJoker collects your personal data through several means — directly when you register or use the platform, automatically as you browse our website, and in some cases, through legitimate third parties.

We only collect data that is strictly necessary for the purposes described in this policy. We do not collect excessive or irrelevant data beyond what is needed to operate our platform.

DewiJoker uses your personal data for the following purposes, all of which are necessary for platform operations and delivering quality services to you:

• Account Management: Creating and managing your account, verifying your identity, and ensuring you meet our eligibility requirements, including the minimum age of 21.
• Transaction Processing: Processing deposits and withdrawals in Malaysian Ringgit (MYR) via your chosen payment method, including Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, and Boost.
• Service Delivery: Giving you access to the full suite of DewiJoker products – Malaysia Super League and EPL Sports Betting, BWF badminton betting, online lottery, Live Casino, slots, and e-sports.
• Security & Fraud Prevention: Detecting and preventing fraud, money laundering, multiple account ownership, and any activity that violates our Terms & Conditions.
• Service Communications: Sending important notifications relating to your account, transactions, changes to our terms, and security issues affecting your account.
• Marketing (With Consent): Sending you information about promotions, bonuses, and new offers — only where you have given explicit consent to receive marketing communications.
• Legal Compliance: Fulfilling legal obligations, including Anti-Money Laundering (AML) requirements and directives from the relevant authorities.
• Platform Improvement: Analyzing aggregated and anonymized usage patterns to better understand player needs and improve the overall user experience.

We will not use your data for any purpose beyond those stated above without first obtaining your renewed consent.

DewiJoker does not sell, rent, or trade players' personal data to third parties for marketing purposes. However, in limited circumstances outlined below, we may share necessary data with certain parties:

• Payment Processors: Digital wallet and banking providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, and Malaysian banking institutions receive the transaction information necessary to process your deposits and withdrawals. They are subject to their own privacy policies and Malaysian legal obligations.
• Technology Providers: Companies that provide the technical infrastructure, security software, and cloud computing services used in our platform's operations. All contracts with these providers include strict data protection clauses.
• Game Provider: For Live Casino and slots products, minimal session data is shared with the relevant game software providers for technical operational purposes only.
• Legal Authorities: When required by Malaysian law, court order, or direction from a competent authority, we will disclose the necessary data. We will notify you of any such request unless prohibited by law.
• Fraud Investigators: In cases of suspected fraud, money laundering, or serious breaches of our terms, relevant data may be shared with investigative bodies or law enforcement agencies.

DewiJoker implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL Encryption: All communications between your device and our servers are encrypted using TLS/SSL protocol at 256-bit strength.
• Two-Factor Authentication (2FA): An additional security feature available to all accounts, adding a second layer of protection beyond your password.
• Intrusion Detection System: A real-time monitoring system that detects and responds to suspicious activity 24 hours a day.
• Layered Access Controls: Internal staff may only access data required for their specific role, governed by a role-based access control system.
• Regular Security Audits: Penetration testing and security audits are conducted regularly by independent third parties to identify and close any vulnerabilities.
• Secure Backup: Data is regularly backed up to secure, separate locations to ensure service continuity.

While we do our best to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to take your own precautions as well — such as using a strong, unique password and never sharing your login details with anyone.

DewiJoker retains your personal data only for as long as necessary for the purposes described in this policy, or as required under applicable Malaysian law:

• Active Account Data: For as long as your account remains active and in use. Data is updated whenever you make changes through your account settings.
• Financial Transaction Records: A minimum of 7 years from the transaction date, in accordance with Malaysian financial and anti-money laundering legal requirements.
• Support Communication Records: 3 years after a case is resolved or an account is closed, for reference in the event of any dispute.
• Closed Account Data: After an account is closed, basic identity data is retained for 5 years for legal compliance purposes before being permanently deleted.
• Technical Logs: Access and technical activity logs are retained for 90 days before being deleted or anonymised.

Once the stipulated retention period has elapsed, your personal data will be securely deleted or fully anonymised so that it can no longer be linked to your identity.

As a player DewiJoker, you have the following rights regarding your personal data. To exercise any of these rights, you may do so via your account settings or by contacting our support team:

DewiJoker uses cookies and similar technologies to enhance the user experience, maintain platform security, and understand how players use our services. The following are the types of cookies we use:

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect platform functionality and your overall experience on DewiJoker.

DewiJoker actively prevents minors from accessing our platform. This is an absolute priority with no exceptions.

Our platform is open only to individuals aged 21 years and above. All registrations go through a rigorous age verification process using MyKad information. Should we become aware that personal data belonging to an individual under the age of 21 has been collected inadvertently, we will promptly take the following steps:

• Suspending the relevant account immediately while an investigation is conducted.
• Permanently deleting all personal data belonging to the individual from our systems.
• Refunding any deposited funds where applicable.
• Report to the relevant authorities if deemed necessary.

If you have information or reason to suspect that a minor is using this platform, please contact us immediately at support@dewijoker.best.

In the course of its operations, DewiJoker may store or process your data on servers located outside Malaysia. This includes the use of international cloud computing services and global technology providers.

Any cross-border data transfers carried out by DewiJoker adheres to the following principles:

• Data is only transferred to countries or entities that maintain an adequate or equivalent level of data protection.
• All contracts with overseas service providers include strict data protection clauses in line with international standards.
• Data transfers required for payment processing are protected under PCI-DSS standards, which safeguard card data and financial transaction security.

We do not transfer your data to jurisdictions that lack adequate privacy protections. If you have questions about cross-border data transfers involving your data, please contact our privacy team.

DewiJoker reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or other relevant factors.

When we make significant changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying an in-platform notice when you log in after an update has been published.
• Sending an email to your registered address for changes that significantly affect your privacy rights.

We encourage you to review this page periodically. Continued use of the platform DewiJoker after the changes are published indicates your acceptance of the updated policy. If you do not agree with the changes, you may close your account by contacting our support team.

If you have any questions, concerns, or requests regarding this Privacy Policy or how DewiJoker handling your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the platform. The fastest way to get immediate assistance — typical response time is under 3 minutes.
• Privacy Email: support@dewijoker.best – use the subject line "Privacy Enquiry" to ensure your email is routed to our privacy team. Response time within 24 business hours.

For formal requests relating to data rights (access, correction, deletion, data portability), please include your account details and the type of request you wish to make. All such requests will be processed within 14 to 30 calendar days, depending on the complexity of the request.

We are committed to addressing every privacy inquiry thoroughly and within a reasonable timeframe. Your satisfaction and confidence in the way we protect your data is our priority. Because without your trust, nothing else DewiJoker meaningful offers.