1 Introduction
This Privacy Policy (hereinafter referred to as the "Policy") is published by Dewitogel (hereinafter referred to as "Dewitogel", "We", "Us", or "the Platform"), the operator of the online gambling platform accessible at dewitogel.cam. This Policy applies to all personal data collected from registered players, website visitors, and any other individuals who interact with the Dewitogel Platform or its associated services.
Dewitogel is committed to protecting the privacy and personal data of all users, including Malaysian players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions. We handle personal data in accordance with applicable international data protection standards and the requirements of our licensing framework.
By registering an account on Dewitogel, using our Services, or continuing to browse our Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions, which govern the overall agreement between you and Dewitogel.
If you do not agree with any aspect of this Privacy Policy, you should discontinue use of the Platform and may request account closure and deletion of your personal data, subject to our legal retention obligations.
2 Definitions
For the purposes of this Privacy Policy, the following definitions apply:
- Personal Data: Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, IP address, and device identifiers.
- Data Subject: The natural person to whom Personal Data relates — in the context of this Policy, primarily registered players and Platform visitors.
- Data Controller: The entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, Dewitogel acts as the Data Controller.
- Data Processor: Any third party that processes Personal Data on behalf of and under the instruction of the Data Controller.
- Processing: Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion, or any other form of handling.
- Consent: A freely given, specific, informed, and unambiguous indication of agreement by the Data Subject to the Processing of their Personal Data.
- KYC: Know Your Customer — the identity verification process required under Dewitogel's international licensing obligations.
- Platform: The Dewitogel website at dewitogel.cam, including all games, services, payment interfaces, and support channels.
3 Data Controller Information
Dewitogel acts as the Data Controller with respect to Personal Data collected from users of the Platform. As Data Controller, Dewitogel is responsible for determining what data is collected, for what purposes, and how it is processed, stored, and protected.
Dewitogel operates under international licensing in a recognised offshore jurisdiction. While no Malaysian government data protection authority directly oversees the Platform's operations, Dewitogel voluntarily applies principles consistent with internationally recognised privacy frameworks, including concepts derived from the General Data Protection Regulation (GDPR) and the principles underlying Malaysia's Personal Data Protection Act 2010 (PDPA) where applicable to our Malaysian user base.
Note for Malaysian players: Although Dewitogel is not directly subject to the Malaysian PDPA (which governs commercial transactions within Malaysia), we apply equivalent privacy protections as a matter of good practice and respect for our Malaysian players' data rights.
4 Personal Data We Collect
Dewitogel collects personal data through multiple channels, including account registration, KYC verification, payment processing, customer support interactions, and automatic technical data collection. The categories of data we collect are described below:
- Full legal name, username, email address, and date of birth.
- Contact details including telephone number and residential address.
- Government-issued identification documents submitted during KYC (Malaysian MyKad, Driver's Licence, Passport).
- Proof of address documents (utility bills, bank statements) dated within three months.
- Selfie photographs taken for identity verification purposes.
- Bank account details associated with FPX and DuitNow transactions.
- eWallet identifiers used for Touch 'n Go eWallet, Boost, and GrabPay transactions.
- Transaction history including deposit amounts, withdrawal requests, and betting activity.
- Cryptocurrency wallet addresses used for BTC, ETH, USDT, or BNB deposits and withdrawals.
- Bank name and account holder details for withdrawal processing (Maybank, CIMB, Public Bank, Hong Leong Bank, and others).
Important: Dewitogel does not store full card numbers or CVV codes. Card payment data is handled by PCI-DSS compliant third-party payment processors and is never stored on Dewitogel's own servers.
The following technical data is collected automatically when you use the Platform:
| Data Type | Examples | Purpose |
|---|---|---|
| Device Information | Device type, operating system, browser version | Platform optimisation and fraud detection |
| IP Address | IPv4 / IPv6 address at time of access | Geolocation checks, fraud prevention, session security |
| Session Data | Login timestamps, pages visited, session duration | Security monitoring, responsible gaming tools |
| Betting Activity | Games played, wagers placed, win/loss records | Account management, responsible gaming monitoring |
| Cookie Data | Session cookies, preference cookies, analytics tokens | Session continuity, user experience, analytics |
- Content of live chat conversations, email correspondence, and support tickets submitted to Dewitogel's customer service team.
- Records of your communication preferences and opt-in/opt-out choices for promotional communications.
5 Legal Basis for Processing
Dewitogel processes Personal Data only where a valid legal basis exists. The applicable legal bases for our data processing activities are as follows:
- Contractual necessity: Processing required to perform the contract between Dewitogel and the registered player — including account management, payment processing, withdrawal of funds, and provision of gambling services.
- Legal obligation: Processing required to comply with Dewitogel's licensing obligations, anti-money laundering (AML) requirements, Know Your Customer (KYC) mandates, and reporting obligations under applicable international law.
- Legitimate interests: Processing carried out for Dewitogel's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the Platform's services — where those interests are not overridden by the Data Subject's rights and interests.
- Consent: Where Dewitogel processes Personal Data for purposes not covered by the above bases — such as optional marketing communications — we will obtain your explicit consent beforehand. You may withdraw consent at any time without affecting the lawfulness of prior processing.
6 How We Use Your Personal Data
Dewitogel uses the personal data collected for the following specific purposes. We process your data only for purposes that are compatible with the reason it was originally collected:
- Account creation and management: To register and maintain your Dewitogel account, authenticate your identity, and manage your account settings and preferences.
- KYC and age verification: To verify that you are at least 21 years of age, confirm your identity, and satisfy our licensing body's Know Your Customer requirements.
- Payment processing: To process deposits via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency channels, and to process withdrawal requests to your verified payment methods.
- Service delivery: To provide access to sports betting markets (including Liga Super Malaysia and EPL), live casino games, lottery products, slot games, and all other Platform services.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other prohibited activities.
- Responsible gaming: To monitor gambling behaviour for signs of problem gambling, enforce deposit limits and self-exclusion requests, and comply with responsible gaming obligations under our licensing framework.
- Customer support: To respond to your inquiries, resolve disputes, process complaints, and communicate material changes to our services or terms.
- Platform improvement: To analyse usage patterns, identify technical issues, and improve the overall performance and user experience of the Platform.
- Legal compliance: To comply with applicable laws, court orders, regulatory requests, and our international licensing obligations.
- Marketing communications (with consent only): To send you promotional offers, bonus announcements, and personalised recommendations where you have provided your explicit consent to receive such communications. You may opt out at any time.
7 Data Sharing & Disclosure
Dewitogel does not sell your personal data to third parties. We may share your personal data with third parties only in the limited circumstances described below, and always subject to appropriate data protection safeguards:
- Payment service providers: Financial institutions and payment processors facilitating FPX, DuitNow, eWallet, card, and cryptocurrency transactions require access to relevant transaction and identity data to process payments securely.
- KYC and identity verification services: Third-party identity verification providers may receive KYC documents and identity data to perform automated or manual verification checks on behalf of Dewitogel.
- Game content providers: Third-party game studios and live casino software providers may receive session data and player identifiers necessary to deliver their game content within the Platform.
- Fraud prevention and AML services: Specialist anti-fraud and anti-money laundering service providers may receive transaction data and device information to assist in detecting suspicious activity.
- Licensing and regulatory authorities: Dewitogel may be required to disclose player data to its international licensing authority, law enforcement agencies, or other competent authorities where required by law or court order.
- IT and cloud infrastructure providers: Hosting, database, and cloud storage providers process data on Dewitogel's behalf under strict data processing agreements that prohibit independent use of the data.
All third parties with whom Dewitogel shares personal data are contractually required to handle that data securely, use it only for the specified purpose, and maintain confidentiality. Dewitogel does not authorise any third-party processor to sell or otherwise commercially exploit your personal data.
8 International Data Transfers
As an internationally operating platform, Dewitogel may transfer your personal data to servers, processors, and partners located outside Malaysia and outside the jurisdiction of your residence. Such transfers may occur to countries that do not have data protection laws equivalent to those in your home jurisdiction.
Where personal data is transferred internationally, Dewitogel takes reasonable steps to ensure that such transfers are made in a lawful manner and that adequate protections are in place. These measures may include contractual data protection clauses with the receiving party, transfer to countries or entities with recognised adequate protection standards, or other legally recognised transfer mechanisms.
By using the Dewitogel Platform, Malaysian players acknowledge that their personal data may be transferred to, stored in, and processed in jurisdictions outside Malaysia, including the jurisdiction in which Dewitogel's licensing authority is based.
9 Data Retention
Dewitogel retains personal data only for as long as is reasonably necessary to fulfil the purposes for which it was collected, subject to our overriding legal and licensing obligations. The following general retention principles apply:
- Active account data: Retained for the full duration of your account relationship with Dewitogel plus a period of up to five (5) years following account closure, to satisfy anti-money laundering record-keeping obligations.
- KYC and identity documents: Retained for a minimum of five (5) years following the end of the player relationship, as required under applicable AML and licensing frameworks.
- Transaction and betting records: Retained for a minimum of five (5) years following the date of each transaction, in accordance with financial record-keeping requirements.
- Customer support records: Retained for up to three (3) years following resolution of the relevant support interaction or complaint.
- Marketing consent records: Retained for as long as you have an active account, plus three (3) years following account closure, to evidence compliance with consent requirements.
- Technical logs and cookies: Session cookies are deleted when you close your browser. Analytics data is typically retained in aggregated form for up to two (2) years.
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with any identifiable individual.
10 Cookies & Tracking Technologies
Dewitogel uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored in your browser that allow the Platform to recognise your device and maintain certain session or preference data between visits.
- Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your visit. These cannot be disabled without breaking core Platform functionality.
- Functional cookies: Store your preferences such as language settings, display preferences, and responsible gaming tool configurations.
- Analytics cookies: Collect aggregated, anonymised data about how visitors use the Platform — such as which pages are most visited and how users navigate between sections. This data helps us improve the Platform experience.
- Security and fraud prevention cookies: Used to detect and prevent suspicious activity, bot traffic, and fraudulent access attempts.
You may control and delete cookies through your browser settings. Most modern browsers — including those on Android and iOS devices commonly used by Malaysian players — allow you to view, accept, reject, or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to log in to and use the Platform.
Dewitogel does not deploy third-party advertising or cross-site tracking cookies. No data from our Platform cookies is shared with advertising networks.
11 Data Security
Dewitogel implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- Encryption in transit: All data transmitted between your device and Dewitogel's servers is encrypted using 256-bit SSL/TLS protocols, the same standard adopted by Malaysian financial institutions for online banking services.
- Encryption at rest: Sensitive personal data and financial records stored on Dewitogel's servers are encrypted at rest using AES-256 encryption.
- Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff members with access to player data are subject to confidentiality obligations and undergo regular security training.
- Payment data isolation: Card payment data is processed by PCI-DSS compliant third parties and is never stored on Dewitogel's own infrastructure.
- Penetration testing: The Platform undergoes regular third-party security assessments to identify and remediate vulnerabilities.
- Incident response: Dewitogel maintains a formal data breach response procedure. In the event of a data breach that poses a risk to your rights, we will notify affected players and relevant authorities as required by applicable law.
Your role in account security: Dewitogel's security measures are most effective when complemented by responsible account management on your part. Please use a strong, unique password for your Dewitogel account and never share your credentials with third parties.
12 Your Data Rights
As a Data Subject, you hold the following rights with respect to the personal data Dewitogel holds about you. These rights may be subject to limitations where processing is necessary to comply with our legal or licensing obligations.
Right of Access
Request a copy of all personal data Dewitogel holds about you, along with information on how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your account or our records.
Right to Erasure
Request deletion of your personal data where there is no overriding legal or contractual basis for continued retention.
Right to Restrict Processing
Request that Dewitogel temporarily restricts use of your data while a correction or objection is being assessed.
Right to Portability
Receive a structured, machine-readable copy of personal data you have provided to Dewitogel, where technically feasible.
Right to Object
Object to processing based on legitimate interests, including direct marketing. We will honour valid objections within a reasonable period.
To exercise any of the above rights, please contact Dewitogel's Data Protection contact via email at [email protected]. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it.
Where a data rights request is refused, we will explain the reason for refusal and inform you of your right to seek further recourse through the appropriate supervisory authority in the jurisdiction of Dewitogel's licensing body.
13 Children & Minors
Dewitogel's Platform and Services are strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory component of our KYC process for all registered accounts.
If Dewitogel becomes aware or has reasonable grounds to believe that an account has been registered by or on behalf of a person under 21 years of age, we will immediately suspend the account, investigate the matter, delete any personal data collected from the minor where legally permissible, and report the matter to our licensing authority as required.
If you believe a minor may have accessed or registered on the Dewitogel Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.
🔞 21+ Only. Gambling on Dewitogel is exclusively for adults aged 21 and above. Parents and guardians are encouraged to use internet filtering tools to prevent minors from accessing gambling websites.
14 Amendments to This Privacy Policy
Dewitogel reserves the right to update or amend this Privacy Policy at any time. Such changes may reflect updates to our data processing practices, changes in applicable law, developments in our services, or amendments to our licensing requirements.
Material amendments to this Privacy Policy will be communicated to registered players by email and/or by a prominent notice on the Platform no less than fourteen (14) days prior to the changes taking effect. Non-material amendments — such as corrections of typographical errors or clarifications that do not affect the substance of how data is processed — may take effect immediately upon publication.
The "Last Updated" date displayed at the top of this Policy reflects the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy.
Previous versions of this Privacy Policy may be requested from Dewitogel's support team for reference purposes.
15 Contact Us
If you have any questions, concerns, or formal requests relating to this Privacy Policy or the manner in which Dewitogel processes your personal data, please contact us using the details below. We respond to all data-related enquiries as a priority.
For data rights requests, please include your full name, the email address associated with your Dewitogel account, a clear description of the right you wish to exercise, and any information that will assist us in locating and processing your request efficiently. We may require proof of identity before processing access or erasure requests, to ensure we do not disclose or delete data in response to fraudulent requests.
Related documents: Terms & Conditions | Responsible Gambling | FAQ
