Privacy Policy

1.Introduction

This Privacy Policy ("Policy") is published by 88dewi ("the Company", "We", "Us", "Our") and applies to all personal data collected through the 88dewi website located at https://88dewi.asia and any associated mobile interfaces, applications, or services (collectively, the "Platform").

88dewi is an online casino and sports betting platform operated for players in Malaysia, offering live dealer games, slots, and sports betting markets in Malaysian Ringgit (MYR). In providing these services, the Company necessarily collects and processes certain categories of personal data relating to registered Members and visitors to the Platform.

This Policy sets out, in clear and accessible language, the categories of personal data we collect, the purposes for which we process that data, the legal basis on which processing is conducted, and the rights available to data subjects under applicable data protection law. We encourage all Members to read this Policy carefully before using the Platform.

This Privacy Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy. Where there is any conflict between this Policy and those documents, this Policy shall prevail with respect to data protection matters.

2.Definitions

For the purposes of this Privacy Policy, the following defined terms shall apply:

• "Data Controller" means 88dewi, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party that processes personal data on behalf of 88dewi pursuant to a data processing agreement.
• "Data Subject" means any identified or identifiable natural person whose personal data is processed by the Company — in this context, primarily registered Members and Platform visitors.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Sensitive Personal Data" means personal data of a particularly sensitive nature, such as health data or financial account information, that warrants heightened protection.
• "PDPA" means Malaysia's Personal Data Protection Act 2010 and any subsidiary regulations made thereunder.
• "Member" means any natural person who has registered an account on the 88dewi Platform.

3.Data We Collect

88dewi collects the following categories of personal data from Members and visitors to the Platform:

3.1 Registration and Identity Data

• Full legal name as per government-issued identification
• Date of birth (for age verification — minimum age 21 years)
• Malaysian Identity Card number (MyKad), Passport number, or Driver's Licence number
• Residential address and proof of address documentation
• Email address and mobile phone number
• Username and encrypted account password

3.2 Financial and Transaction Data

• Bank account details (account number, bank name — e.g., Maybank, CIMB, Public Bank, Hong Leong)
• E-wallet account identifiers (Touch 'n Go eWallet, Boost, GrabPay, DuitNow)
• Deposit and withdrawal transaction records in MYR
• Wagering activity records, bet history, and win/loss summaries
• Bonus and promotional credit transaction records

3.3 KYC and Verification Documents

• Photographs or scanned copies of government-issued identification documents
• Selfie photographs submitted as part of the verification process
• Utility bills or bank statements submitted as proof of address
• Source-of-funds documentation where requested under AML obligations

3.4 Technical and Device Data

• IP address and approximate geolocation derived therefrom
• Device type, operating system, and browser type
• Session logs, login timestamps, and activity metadata
• Cookie identifiers and similar tracking technologies (see Section 10)

3.5 Communications Data

• Records of live chat, email, and support ticket correspondence
• Feedback submitted through the Platform
• Marketing preferences and communication consent records

4.How We Collect Data

88dewi collects personal data through the following means:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to surveys or promotions;
• Automatically: through cookies, server logs, and analytics tools as you navigate the Platform (see Section 10);
• From third parties: including identity verification service providers, payment processors, fraud detection services, and publicly available registers where required for KYC or AML compliance;
• From game activity: records of gameplay, bet placements, live dealer session data, and sports betting activity generated through your use of Platform services.

5.Data Processing & Use

88dewi processes personal data for the following purposes:

6.Legal Basis for Processing

Under applicable data protection law, 88dewi relies on the following legal bases for processing personal data:

• Contractual necessity: Processing required to fulfil the contractual obligations set out in our Terms & Conditions — including account management, payment processing, and game delivery;
• Legal obligation: Processing required to comply with applicable law, including KYC/AML obligations, age verification requirements, and regulatory reporting;
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gambling monitoring, and business analytics, where such interests are not overridden by the rights of data subjects;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, informed, and revocable consent.

7.Data Sharing & Disclosure

88dewi does not sell your personal data to third parties. We may share personal data in the following limited circumstances:

• Payment processors and banking partners: Data necessary to process MYR transactions via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and local bank transfers (Maybank, CIMB, Public Bank, Hong Leong);
• Identity verification providers: KYC and document verification platforms that process identity data to confirm Member eligibility;
• Fraud prevention services: Third-party providers that assist in detecting and preventing fraudulent transactions and account misuse;
• Game studio and content partners: Aggregated, non-identifying technical data shared with licensed game studios for performance monitoring and game integrity purposes;
• Regulatory and law enforcement authorities: Where disclosure is required by applicable law, court order, or regulatory directive;
• Professional advisors: Legal, audit, and compliance advisors operating under binding confidentiality obligations.

8.International Data Transfers

Some of the third-party service providers engaged by 88dewi may be located outside Malaysia. Where personal data is transferred to recipients in other jurisdictions, the Company ensures that appropriate safeguards are in place to protect data subjects' rights, including:

• Data processing agreements incorporating standard contractual clauses;
• Transfers to jurisdictions with adequacy determinations or equivalent data protection frameworks;
• Technical and organisational measures ensuring data security during transfer and storage.

Members whose data is transferred internationally retain the same rights over their personal data as described in Section 12 of this Policy.

9.Data Retention

88dewi retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any overriding legal, regulatory, or contractual obligation to retain data for a longer period.

• Active accounts: Personal data is retained for the duration of your membership and for a period of five (5) years following account closure, in line with AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with applicable financial regulation.
• KYC documents: Retained for five (5) years from the date of verification or from the date of account closure, whichever is later.
• Communications data: Support chat and email records retained for two (2) years from the date of the interaction.
• Marketing consent records: Retained until consent is withdrawn and for one (1) year thereafter as evidence of prior consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with industry-standard data destruction procedures.

10.Cookies & Tracking Technologies

88dewi uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that enable us to recognise your browser and remember certain preferences and settings.

10.1 Categories of Cookies Used

• Strictly Necessary Cookies: Essential for Platform operation — including session authentication, security tokens, and load balancing. These cookies cannot be disabled without impairing Platform functionality.
• Performance and Analytics Cookies: Used to collect aggregated, anonymised information about how visitors interact with the Platform, enabling us to identify and resolve performance issues.
• Functional Cookies: Used to remember your preferences, such as language settings and last-visited game categories, to enhance your experience.
• Marketing Cookies: Used, with your consent, to deliver relevant promotional content based on your interests and Platform usage history.

10.2 Managing Your Cookie Preferences

You may manage your cookie preferences through your browser settings or through any consent management tool made available on the Platform. Please note that disabling strictly necessary cookies may prevent certain Platform features from functioning correctly. Withdrawing consent for marketing cookies will not affect the delivery of your core gaming services.

11.Data Security

88dewi implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 88dewi Platform;
• Encryption at rest for sensitive data stored in our database systems;
• Two-factor authentication (2FA) options available to all Members for account access;
• Access controls and role-based permissions limiting staff access to personal data on a need-to-know basis;
• Continuous security monitoring and intrusion detection systems;
• Regular security audits and penetration testing by qualified third-party professionals.

Notwithstanding the above, no method of electronic transmission or storage is entirely secure. Members are reminded to protect their own account credentials and to report any suspected security incidents to our support team immediately.

12.Your Rights as a Data Subject

Subject to applicable law and certain limited exceptions, you have the following rights with respect to your personal data held by 88dewi. These rights are described in detail in Section 12 of the User Rights feature block below. To exercise any of these rights, please contact our Data Protection team at the address provided in Section 16. We will respond to verified requests within 30 days.

Please note that exercising certain rights — such as the right to erasure or the right to object to processing — may affect your ability to maintain an active account on the Platform, particularly where the processing in question is necessary for the performance of our contractual obligations or for compliance with legal requirements.

13.Minors & Age Verification

The 88dewi Platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory step in the account registration and KYC process.

In the event that 88dewi discovers that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all associated data will be securely deleted, and any funds held in the account will be handled in accordance with our Terms & Conditions and applicable regulatory requirements.

14.Third-Party Services

The Platform may integrate with third-party payment processors, game studios, and technical service providers. Each of these parties operates under their own privacy policies and data processing agreements with 88dewi. The Company requires all third-party processors to implement appropriate data protection standards consistent with applicable law.

88dewi is not responsible for the privacy practices of independently operated third-party websites or services that may be linked from the Platform. Members are encouraged to review the privacy policies of any third-party services they use in connection with their gaming activity.

15.Policy Amendments

88dewi reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. When material changes are made, the "Last Updated" date at the top of this page will be revised accordingly. Where changes are significant, we will endeavour to notify active Members via in-platform notification or email.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the amended terms. If you object to any changes, you may request account closure as described in our Terms & Conditions.

16.Contact & Data Protection Officer

For all data protection enquiries, requests to exercise your data subject rights, or to report a suspected data breach, please contact the 88dewi Data Protection team using the details below:

You also have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction. In Malaysia, the supervising authority for PDPA matters is the Department of Personal Data Protection (PDPD) under the Ministry of Communications and Digital.