dewa7 Privacy Policy

1 Definitions

The following terms carry the meanings assigned below throughout this Privacy Policy:

2 Scope & Data Controller

This Privacy Policy applies to all Personal Data collected and processed by dewa7 in connection with the registration, verification, and use of the dewa7 Platform by Members based in Indonesia. It covers data collected through the Platform's web interface, customer support channels, and any communications between dewa7 and its Members.

dewa7 acts as the data controller in respect of the Personal Data it collects from Members. This means dewa7 determines the purposes and means of processing your Personal Data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

This Policy is intended to meet internationally recognized data protection standards and reflects dewa7's commitment to responsible data governance across all markets it serves, including Indonesia.

3 Data We Collect

dewa7 collects Personal Data in three principal ways: information you provide directly, information generated automatically through your use of the Platform, and information received from third parties in connection with payment processing and identity verification.

3.1 Information you provide directly

• Full legal name, date of birth, and nationality as provided during account registration.
• Indonesian national identification number (NIK from your KTP) or passport number, submitted as part of the KYC verification process.
• Residential address in Indonesia, including city (for example Jakarta, Surabaya, Medan, Bandung, Bali, or Yogyakarta) and postal code.
• Email address and mobile phone number used for account communications and two-factor authentication.
• Payment method details, including the bank account name and number or e-wallet identifier associated with your deposits and withdrawals (BCA, BRI, BNI, Mandiri, OVO, GoPay, DANA, ShopeePay, LinkAja).
• Copies of identity and address documents submitted for KYC purposes.
• Communications you send to dewa7 customer support, including live chat transcripts and email correspondence.
• Responsible gaming preferences, including any deposit limits, session reminders, or self-exclusion requests you configure on your account.

3.2 Information collected automatically

• IP address, device type, operating system, and browser type recorded at login and during active sessions.
• Betting and gaming activity records, including wager amounts, game selections, session timestamps, and transaction history in Indonesian Rupiah (IDR).
• Session duration data and navigation patterns within the Platform, used to improve platform performance and detect unusual access patterns.
• Cookie and tracking data as described in Clause 7 of this Policy.

3.3 Information received from third parties

• Identity verification results returned by dewa7's KYC service providers following document authentication.
• Payment confirmation data from Indonesian banks and e-wallet operators confirming the status of deposit and withdrawal transactions.
• Fraud and risk signals from third-party compliance screening providers used to detect money laundering, account takeover, or other prohibited conduct.

4 How We Use Your Data

dewa7 uses the Personal Data it collects for the following purposes:

5 Legal Basis for Processing

dewa7 processes your Personal Data on one or more of the following lawful bases:

• Contract performance: Processing that is necessary to open and operate your dewa7 account, process transactions, and deliver the services you have requested.
• Legal obligation: Processing required to comply with dewa7's obligations under its international operating licence, anti-money laundering regulations, and KYC requirements — including age verification to ensure that only individuals aged 21 and above participate in real-money gambling.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and improving the Member experience, where those interests are not outweighed by your privacy rights.
• Consent: Processing for marketing communications and optional personalization features, where you have provided explicit opt-in consent. You may withdraw consent at any time by contacting dewa7 support or adjusting your account communication preferences.

6 Data Sharing & Disclosure

dewa7 does not sell, rent, or trade your Personal Data to any third party. We share your data only in the following limited circumstances:

• Payment processors and banking partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet operators (OVO, GoPay, DANA, ShopeePay, LinkAja) receive the minimum payment data necessary to process your deposit and withdrawal instructions.
• KYC and identity verification providers: Third-party identity verification services receive copies of the documents you submit for KYC purposes. These providers are contractually bound to use your data solely for verification and to apply security standards equivalent to those described in this Policy.
• Game content providers: Providers such as Evolution Gaming, Pragmatic Play, Pocket Games Soft, Microgaming, NetEnt, and Spribe receive session tokens and game-play data necessary to deliver their products through the dewa7 Platform. They do not receive your full identity or payment details.
• Fraud prevention and compliance screening services: Specialist providers who assist dewa7 in detecting money laundering, duplicate accounts, and other prohibited conduct may process limited transactional and identity data under strict contractual data protection terms.
• Regulatory and law enforcement authorities: dewa7 will disclose Personal Data to competent authorities where required to do so by applicable law, court order, or its regulatory obligations under its international operating licence. dewa7 will notify affected Members of such disclosure to the extent permitted by law.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of dewa7's assets, Member data may be transferred to the acquiring entity, subject to the acquirer's agreement to uphold privacy protections no less stringent than those set out in this Policy.

7 Cookies & Tracking Technologies

dewa7 uses cookies and similar tracking technologies to enable core Platform functionality, maintain your login session, and gather anonymized analytics data to improve the Member experience. The categories of cookies used are as follows:

• Strictly necessary cookies: Required for the Platform to function correctly, including session management, login authentication, and the security of your account. These cookies cannot be disabled without preventing you from using the Platform.
• Functional cookies: Remember your preferences such as language settings, preferred sports markets, and recently viewed games to reduce the steps you need to take on each visit.
• Analytics cookies: Collect anonymized, aggregated data about how Members navigate the Platform — for example which sportsbook markets are most frequently accessed and the average session duration. This data is used solely for internal performance improvement and is never linked to your personal identity.
• Marketing cookies: Used only where you have opted in to personalized promotional communications. These cookies help dewa7 present relevant offers — for example bonus notifications timed around Indonesian sporting events such as BRI Liga 1 fixtures, the Thomas Cup, or the AFF Cup.

You may manage cookie preferences through your browser settings at any time. Disabling functional or analytics cookies will not prevent you from using the Platform but may reduce the quality of your experience. Disabling strictly necessary cookies will prevent login and account access.

8 Data Retention

dewa7 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active membership and for a minimum of five years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction records: All deposit and withdrawal records denominated in IDR are retained for a minimum of five years from the date of the transaction.
• KYC documents: Identity and address verification documents are retained for the duration of your membership and for a minimum of five years after account closure. Original document copies are deleted once verification is complete; only the verification outcome and reference data are retained thereafter.
• Customer support communications: Support tickets, live chat transcripts, and email correspondence are retained for three years from the date of the most recent interaction in a given case.
• Marketing consent records: Records of your marketing opt-in and opt-out preferences are retained for the duration of your membership to demonstrate compliance with consent obligations.
• Anonymized analytics data: Aggregated, anonymized platform usage data may be retained indefinitely as it cannot be used to identify any individual Member.

When Personal Data is no longer required, dewa7 applies secure deletion or anonymization procedures to ensure it cannot be recovered or reconstructed.

9 Security Measures

dewa7 applies technical and organizational security measures proportionate to the risk of processing Personal Data in the online gaming and betting environment. Key measures include:

• 256-bit SSL/TLS encryption on all data transmitted between Members' browsers and dewa7 servers, ensuring that login credentials, payment details, and personal information cannot be intercepted in transit.
• Password hashing using industry-standard algorithms. Plain-text passwords are never stored on dewa7 systems.
• Two-factor authentication (2FA) available to all Members for an additional layer of account access security.
• Access controls ensuring that dewa7 staff can only access Member data on a strict need-to-know basis, with all access events logged and regularly audited.
• Real-time anomaly detection that monitors login patterns, transaction behavior, and session activity for indicators of unauthorized access or account takeover attempts.
• Penetration testing and security audits conducted periodically by independent information security specialists.

While dewa7 maintains robust security measures, no online platform can guarantee complete immunity from all security threats. In the event of a personal data breach that poses a risk to Member rights, dewa7 will notify affected Members and relevant authorities promptly in accordance with its obligations.

Members are responsible for maintaining the security of their own dewa7 login credentials and for ensuring that they do not share their username or password with any third party. If you suspect that your account has been accessed without your authorization, you should contact dewa7 support immediately at [email protected].

10 Your Privacy Rights

As a dewa7 Member, you hold the following rights in respect of your Personal Data. To exercise any of these rights, please contact dewa7 at [email protected]:

dewa7 will respond to all verified rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it. Requests may be submitted by email to [email protected] with the subject line "Privacy Rights Request".

11 Minors

The dewa7 Platform is strictly for adults aged 21 and above. dewa7 does not knowingly collect Personal Data from individuals under the age of 21. The KYC verification process is designed to identify and reject registrations from underage applicants before any real-money activity can take place.

If dewa7 becomes aware that Personal Data has been collected from a person under the age of 21, the associated account will be suspended immediately, any deposited funds will be returned to the originating payment method following verification, and all Personal Data relating to that individual will be deleted from dewa7's systems in accordance with the retention procedures described in Clause 8.

If you believe that a person under the age of 21 may have created a dewa7 account, please notify us immediately at [email protected] so that the matter can be investigated and resolved without delay.

12 Third-Party Links

The dewa7 Platform may display references to or logos of third-party payment providers, sports leagues, and game studios for informational purposes. Where any such third-party services have their own digital interfaces that you access independently, those services operate under their own privacy policies and data practices for which dewa7 bears no responsibility.

dewa7 recommends that Members review the privacy policies of any third-party service they interact with directly, including Indonesian banks (BCA, BRI, BNI, Mandiri), e-wallet operators (OVO, GoPay, DANA, ShopeePay, LinkAja), and game providers such as Evolution Gaming and Pragmatic Play.

13 Policy Updates

dewa7 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or the services we offer. When material changes are made, dewa7 will provide prominent notice on the Platform and, where practicable, notify Members by email to the address registered on their account, at least 7 days before the revised Policy takes effect.

The "Last updated" date shown at the top of this page reflects the date on which the most recent version of this Policy became effective. Your continued use of the dewa7 Platform following the effective date of any update constitutes your acceptance of the revised Policy. If you do not agree to the changes, you should cease using the Platform and may request account closure by contacting dewa7 support.

14 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact the dewa7 privacy team using the details below. All privacy-related communications are handled confidentially.

If you are not satisfied with dewa7's response to a privacy complaint, you may escalate the matter to the relevant data protection supervisory authority in your jurisdiction. dewa7 will cooperate fully with any such inquiry.