Privacy Policy — Your Data, Protected by dewi39

1. Introduction and Scope

1.1 Who We Are

dewi39 is an online betting and casino platform serving users in Indonesia. This Privacy Policy applies to all services offered through the dewi39 website (https://dewi39.cam) and any associated mobile applications or interfaces. When we refer to "dewi39", "we", "us", or "our", we mean the dewi39 platform and its operators. When we refer to "you" or "your", we mean any individual who accesses or uses our Services.

1.2 Scope of This Policy

This Privacy Policy describes how dewi39 collects, uses, stores, shares, and protects your personal information when you register for an account, deposit or withdraw funds, place bets, contact customer support, or otherwise interact with our platform. By using dewi39, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your data as described herein. If you do not agree with this Privacy Policy, you must discontinue use of the dewi39 platform immediately.

1.3 Data Controller

dewi39 acts as the data controller for all personal information collected through our platform. We are responsible for determining the purposes and means of processing your personal data in accordance with applicable data protection laws, including but not limited to Indonesia's data protection regulations and international data privacy standards where applicable.

2. Information We Collect

2.1 Personal Information Provided by You

When you register for a dewi39 account, we collect the following personal information directly from you:

• Identity Data: Full legal name, date of birth, place of birth, gender, nationality
• Contact Data: Email address, mobile phone number, residential address (street, city, postal code, province)
• Account Data: Username, password (stored in encrypted form), security questions and answers
• Financial Data: Bank account details (bank name, account number, account holder name), e-wallet account identifiers (OVO, GoPay, DANA, ShopeePay account phone numbers or IDs), payment transaction history
• Verification Documents: Government-issued photo identification (Indonesian KTP, passport, driver's license), proof of address documents (utility bills, bank statements), and in some cases, payment method verification documents (bank statements, e-wallet screenshots)
• Communication Data: Content of any messages, emails, or live chat conversations you have with our customer support team

2.2 Information Collected Automatically

When you access and use the dewi39 platform, we automatically collect certain technical and usage data:

• Device Data: Device type, operating system, browser type and version, screen resolution, device identifiers
• Connection Data: IP address, ISP (Internet Service Provider), geolocation data (country, region, city — derived from IP address)
• Usage Data: Pages viewed, links clicked, time spent on pages, games played, bet history, deposit and withdrawal records, login and logout timestamps
• Cookies and Tracking Technologies: Session cookies, preference cookies, analytics cookies. See Section 8 (Cookies) for more details.

2.3 Information from Third Parties

In limited circumstances, we may receive information about you from third-party sources, including:

• Payment processors and financial institutions (to verify payment method ownership and detect fraudulent transactions)
• Identity verification service providers (to confirm your identity during KYC procedures)
• Fraud prevention and anti-money laundering databases (to screen for high-risk users)

3. How We Use Your Information

3.1 Purposes of Data Processing

dewi39 processes your personal information for the following purposes:

3.2 Automated Decision-Making

dewi39 uses automated systems to detect unusual betting patterns, potential fraud, or bonus abuse. These systems may flag accounts for manual review. If an automated decision negatively affects your account (e.g., withdrawal delay, account suspension), you have the right to request human review by contacting our support team.

3.3 Marketing Communications

If you have opted in to receive marketing communications, we may send you promotional emails or SMS messages about new games, bonuses, and special offers. You can opt out of marketing communications at any time by clicking the "unsubscribe" link in any email, replying STOP to any SMS, or adjusting your preferences in your account settings. Please note that even if you opt out of marketing communications, we will still send you essential account-related messages such as transaction confirmations, security alerts, and service updates.

4. How We Share Your Information

4.1 Third-Party Service Providers

dewi39 works with carefully selected third-party service providers to deliver our Services. We may share your personal data with:

• Payment Processors: To facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, GoPay, DANA, ShopeePay, and other payment methods
• Identity Verification Providers: To conduct KYC checks and verify the authenticity of submitted documents
• Cloud Hosting and Data Storage Providers: To securely store account data and transaction records
• Customer Support Tools: To manage and respond to support inquiries via live chat, email, and ticketing systems
• Fraud Prevention and Security Services: To detect suspicious activity, prevent fraud, and protect against cyberattacks
• Game and Software Providers: To deliver live casino games, RNG slots, and sports betting services (these providers do not receive your full personal details — only anonymized user IDs for session management)

All third-party service providers are contractually required to process your data only for the specific purposes we authorize and to maintain the same level of data protection as dewi39. We do not allow our service providers to use your data for their own purposes or to disclose it to unauthorized parties.

4.2 Legal and Regulatory Disclosure

We may disclose your personal information to government authorities, regulators, or law enforcement agencies if:

• Required by law, court order, subpoena, or other legal process
• Necessary to comply with anti-money laundering (AML) or know-your-customer (KYC) regulations
• Needed to investigate or prevent fraud, illegal activity, or violations of our Terms & Conditions
• Required to protect the rights, property, or safety of dewi39, our users, or the public

4.3 Business Transfers

In the event that dewi39 undergoes a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

4.4 No Sale of Personal Data

dewi39 does not sell your personal information to third parties. We do not share your data with marketing companies, data brokers, or advertisers without your explicit consent.

5. How We Protect Your Information

5.1 Security Measures

dewi39 employs industry-standard technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

• 256-Bit SSL Encryption: All data transmitted between your device and our servers is encrypted using Secure Socket Layer (SSL) technology, the same encryption standard used by banks and financial institutions.
• Encrypted Data Storage: Sensitive personal information and financial data are stored in encrypted form on secure servers with restricted access controls.
• Password Hashing: User passwords are hashed using industry-standard cryptographic algorithms and are never stored in plain text.
• Firewalls and Intrusion Detection: Our infrastructure is protected by firewalls, intrusion detection systems, and regular security audits.
• Access Controls: Personal data is accessible only to authorized dewi39 employees and contractors who require access to perform their duties. All personnel with data access are bound by confidentiality agreements.
• Regular Security Audits: We conduct periodic vulnerability assessments and penetration testing to identify and address potential security weaknesses.

5.2 Your Responsibility

While we implement robust security measures, you are also responsible for protecting your account:

• Choose a strong, unique password and do not share it with anyone
• Enable two-factor authentication (2FA) if available
• Log out of your account when using shared or public computers
• Do not click on suspicious links or download attachments from unknown sources
• Notify us immediately at [email protected] if you suspect unauthorized access to your account

5.3 Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you within 72 hours of becoming aware of the breach, in accordance with applicable data protection laws. The notification will include details of the breach, potential impact, and steps we are taking to mitigate harm.

6. How Long We Keep Your Information

6.1 Retention Periods

dewi39 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and resolve disputes:

• Active Accounts: Personal data is retained for the duration of your account's active status and for a reasonable period thereafter to handle any post-closure inquiries or disputes.
• Transaction Records: Betting history, deposit and withdrawal records are retained for a minimum of 7 years from the date of the transaction, as required by anti-money laundering (AML) and financial record-keeping regulations.
• KYC Documents: Identity verification documents are retained for 7 years following account closure, in compliance with regulatory requirements.
• Closed Accounts: After voluntary account closure, we retain minimal personal data (account ID, transaction history) for legal and regulatory compliance. All other data is deleted or anonymized within 90 days of closure, unless retention is required by law.
• Marketing Data: If you opt out of marketing communications, your contact details will be retained on a suppression list to ensure we do not contact you again.

6.2 Anonymization and Deletion

After the applicable retention period expires, we will either securely delete your personal data or anonymize it such that it can no longer be linked to you. Anonymized data may be retained indefinitely for statistical analysis and platform improvement purposes.

7. Your Privacy Rights

7.1 Rights Under Data Protection Law

Subject to applicable data protection laws, you have the following rights regarding your personal information:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request that we correct inaccurate or incomplete personal data. You can update most information directly through your account settings.
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data, subject to legal retention requirements. We cannot delete data that we are legally required to retain (e.g., transaction records for AML compliance).
• Right to Restriction of Processing: You may request that we limit the processing of your data in certain circumstances (e.g., while we verify the accuracy of contested data).
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format (e.g., CSV or JSON).
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. You can opt out of marketing at any time.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to Lodge a Complaint: If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the relevant data protection authority in Indonesia or your country of residence.

7.2 How to Exercise Your Rights

To exercise any of the above rights, please contact our Data Protection Officer at [email protected] with the subject line "Privacy Rights Request." Please provide your full name, account username, and details of your request. We will respond to all requests within 30 days. In some cases, we may require additional information to verify your identity before processing your request.

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work more efficiently, improve user experience, and provide information to website owners.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the website to function properly (e.g., session authentication, load balancing). These cannot be disabled.
• Functional Cookies: Remember your preferences (e.g., language selection, username for login forms).
• Analytics Cookies: Help us understand how users interact with our platform (e.g., which pages are most visited, how long users stay) so we can improve our Services. We use anonymized data and do not track you across other websites.
• Advertising Cookies: dewi39 does not use third-party advertising cookies. We do not serve ads or share your data with ad networks.

8.3 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing ones. However, disabling strictly necessary cookies may prevent you from using certain features of the dewi39 platform, including logging in or placing bets.

9. International Data Transfers

dewi39 primarily operates within Indonesia and stores user data on servers located in secure data centers. However, some of our third-party service providers (e.g., cloud hosting providers, payment processors) may be located outside Indonesia. When we transfer your data internationally, we ensure that appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by data protection authorities
• Service providers certified under recognized data protection frameworks
• Encryption of data in transit and at rest

By using dewi39, you consent to the transfer of your data to countries outside Indonesia where necessary to provide our Services, subject to the protections described above.

10. Children's Privacy

dewi39 is strictly for users aged 21 years and older. We do not knowingly collect personal information from individuals under 21. Our registration process includes age verification, and we conduct KYC checks to confirm user age. If we discover that we have inadvertently collected data from a user under 21, we will immediately delete that data and close the account. If you believe a minor has registered on dewi39, please contact us immediately at [email protected].

11. Changes to This Privacy Policy

dewi39 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. The "Last Updated" date at the top of this page will be revised whenever changes are made. Material changes that significantly affect your rights will be communicated via email to the address registered on your account or via prominent notice on the dewi39 homepage. Your continued use of our Services after changes are posted constitutes your acceptance of the revised Privacy Policy.

We recommend reviewing this page periodically to stay informed about how we protect your information.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or how dewi39 handles your personal data, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 via the dewi39 homepage
• Data Protection Officer: For privacy-specific inquiries, use the subject line "Data Protection Inquiry"
• Support Hours: All times displayed in Western Indonesia Time (WIB, UTC+7)

Our Indonesian-speaking support team is ready to assist you with any privacy-related questions. For general information about dewi39, visit our About Us page. For our full user agreement, see our Terms & Conditions. For responsible gaming tools and resources, visit our Responsible Gaming page.