Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all users of the dewa52 platform operated at https://dewa52.cam and its mobile-optimized interfaces. It governs the collection and processing of personal data submitted during account registration, KYC (Know Your Customer) verification, financial transactions, customer support interactions, and gameplay activities. By creating an account or using our services, you acknowledge that you have read, understood, and agreed to this Privacy Policy in its entirety.

dewa52 operates as an online gaming platform serving Indonesian users. We are committed to transparency regarding data practices and provide users with control over their personal information through account settings and data access requests. If you do not agree with any aspect of this Privacy Policy, you must cease using our services immediately.

2. Information We Collect

2.1 Information You Provide Directly

When you register an account with dewa52, we collect the following personal information:

• Identity Information: Full legal name (as it appears on your KTP - Kartu Tanda Penduduk), date of birth, gender, nationality, and government-issued identification number for age verification (21+ requirement) and compliance with anti-money-laundering (AML) regulations.
• Contact Information: Email address, phone number (including WhatsApp contact), and residential address (city, province, postal code).
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers for account recovery purposes.
• Financial Information: Bank account details (bank name, account number, account holder name) for Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja) for deposits and withdrawals. Payment card details, if provided, are processed through PCI-DSS compliant third-party payment processors and are not stored on our servers.
• Verification Documents: KTP photo, selfie photo (for identity verification), proof of address documents (if requested), and source-of-funds documentation (for large transactions or AML compliance).

2.2 Information Collected Automatically

When you use the dewa52 platform, we automatically collect certain technical and usage data:

• Device and Browser Information: IP address, device type (desktop, mobile, tablet), operating system, browser type and version, screen resolution, and device identifiers (for fraud prevention and security purposes).
• Gameplay and Transaction Data: Complete history of all bets placed, games played, deposits made, withdrawals requested, bonus claims, wagering patterns, win/loss records, session duration, and timestamps for all activities.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar tracking technologies to remember your preferences, maintain login sessions, analyze platform usage patterns, prevent fraud, and deliver personalized content. You can manage cookie preferences through your browser settings, though disabling certain cookies may limit platform functionality.
• Communication Records: All interactions with our customer support team via live chat, WhatsApp, email, and phone are recorded and stored for quality assurance, training purposes, dispute resolution, and regulatory compliance.

3. How We Use Your Information

dewa52 uses your personal data for the following legitimate business purposes:

3.1 Account Management and Service Delivery

• Create, maintain, and authenticate your user account
• Process deposits, withdrawals, and bonus transactions
• Verify your identity and age (21+ requirement) through KYC procedures
• Enable gameplay across casino games, sports betting, togel (Indonesia's traditional numbers lottery), sabung ayam (online cockfighting streams), and other gaming products
• Provide customer support and respond to inquiries in Indonesian and English
• Maintain transaction history and account balance records

3.2 Security, Fraud Prevention, and Compliance

• Detect and prevent fraudulent activity, bonus abuse, multi-accounting, and money laundering
• Enforce our Terms & Conditions and investigate Terms violations
• Comply with legal obligations under anti-money-laundering (AML) and counter-terrorist financing (CTF) regulations
• Respond to law enforcement requests, court orders, and regulatory inquiries (when legally required)
• Protect the security and integrity of our platform through intrusion detection, DDoS protection, and vulnerability monitoring

3.3 Responsible Gaming

• Monitor gambling behavior patterns to identify potential problem gambling warning signs
• Implement and enforce deposit limits, loss limits, session time limits, and self-exclusion requests
• Provide reality-check reminders and self-assessment tools
• Offer referrals to Indonesian problem gambling support resources

3.4 Marketing and Communications (With Your Consent)

• Send promotional emails about bonuses, tournaments, new games, and special offers (you may opt out at any time via unsubscribe links or account settings)
• Deliver personalized content and game recommendations based on your preferences and play history
• Send transactional notifications (deposit confirmations, withdrawal status updates, account security alerts) which cannot be opted out as they are essential to service delivery

3.5 Platform Improvement and Analytics

• Analyze aggregate user behavior to improve platform performance, game selection, payment options, and user experience
• Conduct A/B testing and user research to optimize interface design and functionality
• Generate anonymized statistical reports for business intelligence (individual users are not identifiable in these reports)

4. How We Share Your Information

dewa52 does not sell, rent, or trade your personal information to third parties for marketing purposes. We share your data only in the following limited circumstances:

4.1 Service Providers and Partners

We share necessary personal data with trusted third-party service providers who assist us in operating the platform:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive payment information required to process deposits and withdrawals.
• Game Providers: Certified international game studios receive minimal data (user ID, bet amounts, game session information) required to deliver casino games, live dealer experiences, and sports betting services. They do not receive your identity documents or financial account details.
• KYC Verification Services: Third-party identity verification providers may access your KTP photo and personal information to confirm age (21+) and identity authenticity.
• Customer Support Tools: Live chat platforms and helpdesk software providers access communication records to enable efficient customer service delivery.
• Cloud Infrastructure Providers: Secure cloud hosting services store encrypted user data with enterprise-grade security measures.

All third-party service providers are contractually bound to protect your data and use it only for the specific purposes we authorize.

4.2 Legal and Regulatory Obligations

We may disclose your personal information when required by law or to protect our legal rights:

• In response to valid legal requests from Indonesian government authorities, law enforcement agencies, or courts
• To comply with anti-money-laundering (AML) reporting obligations
• To investigate suspected fraud, Terms violations, or illegal activity
• To protect the safety, security, and rights of dewa52, our users, or the public

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy involving dewa52, your personal information may be transferred to the acquiring entity. We will notify affected users via email before any such transfer and provide options to delete accounts if desired.

5. Data Security and Protection

dewa52 employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• SSL/TLS Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL encryption (the same standard used by online banking platforms).
• Secure Data Storage: Personal data and financial records are stored in encrypted databases with restricted access controls. Only authorized personnel with legitimate business needs can access sensitive information.
• Password Protection: Account passwords are hashed using bcrypt algorithms and are never stored in plain text. Even dewa52 employees cannot view your password.
• Two-Factor Authentication: Optional 2FA via email or SMS provides an additional security layer for account logins and withdrawals.
• Regular Security Audits: Our platform undergoes periodic penetration testing, vulnerability assessments, and security audits by independent third-party firms.
• Fraud Detection Systems: Machine learning algorithms monitor transactions and gameplay patterns in real-time to detect suspicious activity and prevent unauthorized access.

While we implement robust security measures, no online platform can guarantee absolute security. Users share responsibility for protecting their accounts by using strong, unique passwords, not sharing login credentials, and reporting suspicious activity immediately.

6. Your Data Protection Rights

Under international data protection principles and Indonesian privacy standards, you have the following rights regarding your personal information:

6.1 Right to Access

You may request a copy of all personal data we hold about you. Submit access requests to [email protected] with the subject line "Data Access Request." We will respond within 30 days with a comprehensive report in portable format (PDF or CSV).

6.2 Right to Rectification

If any personal information we hold is inaccurate or outdated, you may update it directly through your account settings or by contacting customer support. Some changes (such as name or date of birth) may require re-verification via KTP submission.

6.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your account and associated personal data by contacting [email protected]. Please note that we are legally required to retain certain transaction records, KYC documents, and financial data for 5-7 years under anti-money-laundering regulations even after account closure. All other data will be permanently deleted within 90 days of your request.

6.4 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (CSV or JSON), and to transmit that data to another service provider if desired.

6.5 Right to Object and Restrict Processing

You may object to certain data processing activities (such as marketing communications) or request that we restrict processing to storage-only purposes. Note that objecting to essential processing (such as identity verification or transaction processing) may prevent us from providing services to you.

6.6 Right to Withdraw Consent

Where data processing is based on your consent (such as marketing emails), you may withdraw consent at any time via unsubscribe links, account settings, or by contacting support. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

7. Data Retention

dewa52 retains your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy or to comply with legal obligations:

• Active Accounts: Account data, transaction history, and gameplay records are retained indefinitely while your account remains active.
• Closed Accounts: After voluntary account closure or termination, most personal data is deleted within 90 days. However, KYC documents (KTP, selfie), financial transaction records, and communication logs are retained for 5-7 years as required by anti-money-laundering (AML) and tax compliance regulations.
• Inactive Accounts: Accounts with zero balance and no activity for 12+ consecutive months may be archived. Archived account data is retained for regulatory compliance purposes but is no longer accessible for platform use.
• Self-Excluded Accounts: Self-exclusion requests are retained permanently to prevent future account creation and ensure responsible gaming commitments are honored.

8. Cookies and Tracking Technologies

dewa52 uses cookies and similar tracking technologies to enhance user experience and platform functionality:

• Essential Cookies: Required for core platform functions such as maintaining login sessions, remembering language preferences, and ensuring secure connections. These cannot be disabled without impairing platform functionality.
• Performance Cookies: Collect anonymous data about how users interact with the platform (pages visited, time spent, click patterns) to identify technical issues and optimize performance.
• Functional Cookies: Remember your preferences (display settings, notification preferences, game favorites) to provide a personalized experience.
• Marketing Cookies: Track your browsing behavior to deliver relevant promotional content and measure campaign effectiveness. You may opt out of marketing cookies through browser settings or account preferences.

Most web browsers accept cookies by default. You can manage cookie preferences through browser settings (Chrome: Settings > Privacy > Cookies, Firefox: Options > Privacy > Cookies, Safari: Preferences > Privacy). Disabling cookies may limit access to certain platform features.

9. Third-Party Websites and Services

The dewa52 platform may contain links to third-party websites (such as game provider sites, payment processor login pages, or responsible gaming resources). We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies only to information collected by dewa52.

10. Children's Privacy Protection

dewa52 services are strictly intended for adults aged 21 years or older. We do not knowingly collect personal information from individuals under 21. All users must complete KTP verification to confirm age eligibility before accessing real-money gameplay. If we discover that a user under 21 has registered an account, we will immediately suspend the account, forfeit any remaining funds, and delete all associated personal data. Parents and guardians should monitor children's internet usage and ensure minors do not access gambling platforms.

11. International Data Transfers

Your personal data may be transferred to, stored in, and processed in jurisdictions outside Indonesia where our servers, service providers, and business partners are located. These jurisdictions may have different data protection laws than Indonesia. When we transfer data internationally, we implement appropriate safeguards such as standard contractual clauses, encryption, and access controls to ensure your information remains protected in accordance with this Privacy Policy and applicable data protection regulations.

12. Changes to This Privacy Policy

dewa52 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. Material changes will be communicated via email to registered users and through prominent notice on the platform homepage. The "Last Updated" date at the top of this policy indicates when the most recent changes were made. Continued use of our services after changes have been posted constitutes acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

13. Contact Information and Data Protection Inquiries

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer:

• Email: [email protected] (Subject: Privacy Inquiry / Data Access Request / Data Deletion Request)
• Live Chat: Available 24/7 via the dewa52 platform (after login)
• Response Time: We aim to respond to all privacy inquiries within 5 business days, and to fulfill data access or deletion requests within 30 days as required by data protection regulations.