Privacy Policy

This Privacy Policy ("Policy") is published by the operator of the Dewi5000 platform ("the Company", "Dewi5000", "we", "us", or "our"), accessible at dewi5000.cam. This Policy describes how we collect, process, store, share, and protect the personal data of individuals ("Users", "Players", or "you") who register accounts on, access, or otherwise interact with the Dewi5000 platform ("the Platform").

By registering an account on dewi5000, using the Platform, or providing personal information to us in any context, you confirm that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

This Policy should be read in conjunction with the Dewi5000 Terms & Conditions, which also forms part of the agreement between you and the Company. In the event of any conflict between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail to the extent of the inconsistency.

The following definitions apply throughout this Privacy Policy:

Dewi5000 collects the following categories of personal data, depending on your level of interaction with the Platform:

3.1 Registration and Account Data

• Full legal name;
• Date of birth (for age verification — minimum age 21);
• Email address;
• Mobile number;
• Residential address, including city, state, and postcode;
• Chosen username and encrypted account password.

3.2 Identity Verification (KYC) Data

• Scanned copies or photographs of government-issued identity documents (Malaysian MyKad, Driver's Licence, or Passport);
• Proof of residential address (utility bills, bank statements, or equivalent documents dated within three months);
• Selfie photographs submitted alongside identity documents for facial verification.

3.3 Financial and Transaction Data

• Payment method details, including bank account numbers, e-wallet identifiers (e.g., registered Touch 'n Go eWallet mobile number, Boost account, GrabPay ID), and cryptocurrency wallet addresses used for deposits and withdrawals;
• Transaction history, including deposit amounts, withdrawal requests, dates, and processing status;
• Account balance and bonus credit history.

3.4 Usage and Technical Data

• IP address and geolocation data derived therefrom;
• Device type, operating system, and browser information;
• Session logs, game play history, and betting records;
• Cookies and similar tracking technologies (detailed in Section 9).

3.5 Communications Data

• Records of live chat sessions, email correspondence, and any other communications with the dewi5000 support team;
• Feedback, complaints, and dispute records.

Dewi5000 collects personal data through the following means:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, or contact our support team;
• Automatically — when you access the Platform, through server logs, cookies, and similar technologies that record technical and usage data;
• From third-party payment processors — in connection with deposits and withdrawals made via FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, or cryptocurrency networks;
• From identity verification service providers — where automated or third-party KYC processing is used to verify document authenticity;
• From fraud prevention and AML screening services — where your information may be cross-referenced against sanctions and watchlists as required under our licensing obligations.

Dewi5000 processes your personal data for the following purposes:

Dewi5000 processes personal data on the following legal grounds, consistent with internationally recognised data protection principles:

• Contractual necessity — processing required to fulfil the agreement between you and the Company (e.g., account creation, payment processing, payout delivery);
• Legal obligation — processing required to comply with applicable laws, including AML, KYC, and licensing obligations under the Company's international gaming licence;
• Legitimate interests — processing necessary for fraud prevention, platform security, and service improvement, where such interests are not overridden by your fundamental rights;
• Consent — processing for marketing communications and optional personalisation features, where you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Dewi5000 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may, however, share your data in the following limited and controlled circumstances:

• Payment processors and financial institutions — to facilitate deposits and withdrawals via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency networks;
• KYC and identity verification service providers — third-party vendors engaged to verify document authenticity and perform automated identity checks;
• Anti-fraud and AML compliance partners — to screen user information against sanctions lists and investigate suspicious activity;
• Game software providers — limited gameplay data may be shared with licensed game providers for fairness auditing and technical support purposes;
• Regulatory authorities and law enforcement — where we are legally compelled to disclose information by a court order, regulatory directive, or other binding legal process;
• Business successors — in the event of a merger, acquisition, or sale of the Company's assets, personal data may be transferred to the acquiring entity subject to equivalent privacy protections.

All third-party service providers engaged by dewi5000 are subject to contractual obligations to process personal data solely for the purposes authorised by the Company and to maintain appropriate security standards.

Dewi5000 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by our licensing and legal obligations:

• Account and registration data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure;
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure or the date of the last transaction, as required under standard AML compliance frameworks;
• Transaction records: Retained for a minimum of five (5) years following each transaction, consistent with financial record-keeping requirements;
• Customer support communications: Retained for up to three (3) years following the close of the relevant support case;
• Marketing consent records: Retained for the duration of the marketing relationship and for one (1) year following opt-out, as evidence of consent management.

Upon the expiry of applicable retention periods, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

Dewi5000 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device by a web server. Cookies do not contain executable code and cannot be used to install malware.

The Platform uses the following categories of cookies:

• Strictly necessary cookies — essential for the Platform to function, including session management, login authentication, and security features. These cannot be disabled without impairing Platform functionality;
• Functional cookies — remember your preferences (e.g., language settings, preferred deposit method) to provide a more personalised experience;
• Analytical cookies — collect aggregated, anonymised information about how users navigate the Platform to help us identify areas for improvement;
• Marketing cookies — where you have consented, used to deliver relevant promotional content and track the effectiveness of marketing campaigns.

You may manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality. For full details on cookie types and management options, please refer to your browser's help documentation.

Subject to applicable law and the provisions of our licensing framework, you hold the following rights with respect to your personal data held by Dewi5000. Requests to exercise any of these rights should be submitted to our support team.

The Company will respond to all valid data rights requests within a reasonable timeframe, generally not exceeding 30 calendar days from receipt of the request. Certain requests may be subject to identity verification before processing.

Dewi5000 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption at rest for sensitive personal data held in our databases;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Multi-factor authentication requirements for internal systems processing personal data;
• Regular security assessments and penetration testing of Platform infrastructure;
• Segregated storage environments for KYC documents, financial data, and gameplay records.

Notwithstanding the foregoing, no method of electronic transmission or storage is completely secure. The Company cannot guarantee the absolute security of data transmitted over the internet. You are responsible for maintaining the security of your account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

The Dewi5000 Platform is strictly intended for persons aged 21 years and above. The Company does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process.

If the Company becomes aware that personal data has been collected from an individual under 21 years of age, it will take immediate steps to delete such data and close the associated account. Any funds deposited by an underage user will be returned to the source payment method where technically possible.

The Company operates under international online gaming licensing and may process or store personal data in jurisdictions outside Malaysia. Where personal data is transferred to third-party service providers located outside your country of residence, the Company requires those providers to maintain data protection standards no less stringent than those applied within our own operations.

Cross-border data transfers may occur in connection with payment processing (e.g., international payment networks processing FPX, DuitNow, or cryptocurrency transactions), identity verification services, and cloud infrastructure hosting. All such transfers are governed by contractual data processing agreements that require recipient parties to protect your data in accordance with applicable international privacy standards.

Dewi5000 reserves the right to amend this Privacy Policy at any time. The "Last updated" date at the top of this document will reflect the date of the most recent revision. For material changes that significantly affect how we process your personal data, we will endeavour to provide reasonable advance notice via the Platform or through your registered contact information.

Your continued use of the Platform following publication of any amendment to this Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you must cease using the Platform and may request account closure and deletion of your personal data in accordance with the rights set out in Section 10.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Dewi5000, please contact us through the following channels:

• Live Chat Support: Available 24 hours a day, 7 days a week via the Platform interface. This is the fastest way to reach our team.
• Support Email: [email protected] — displayed as plain text only, not a clickable link. Responses are typically provided within 2 business days.

Our support team assists players from across Malaysia, including those located in Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and other cities. All privacy-related communications are handled in English.

For data rights requests (access, rectification, erasure, portability, objection), please clearly identify the nature of your request and provide sufficient information for us to verify your identity before processing the request.