dewahk Privacy Policy

1. Introduction

Welcome to the dewahk Privacy Policy. This document explains how dewahk ("we," "us," "our") collects, uses, protects, and shares personal information when you use our online gaming platform and services available at dewahk.cam. We are committed to protecting your privacy and handling your personal data with transparency, security, and respect for your rights.

This Privacy Policy applies to all users of dewahk services, including website visitors, registered members, and anyone who interacts with our platform. By creating an account, accessing our website, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

We recognize that privacy is a fundamental right, especially in the context of online gaming where sensitive financial and personal information is involved. dewahk is designed with privacy by design principles, meaning data protection considerations are integrated into every aspect of our platform development and operations. We comply with applicable Indonesian data protection laws and strive to meet international privacy standards to ensure your information is handled responsibly.

2. Information We Collect

To provide our gaming services, verify your identity, process transactions, and comply with legal obligations, dewahk collects various categories of personal information. We collect information directly from you, automatically through your use of our services, and in some cases from third parties such as payment processors and identity verification services.

Information You Provide Directly

When you register an account, use our services, or contact customer support, you provide us with the following information:

• Account Registration Information: Full legal name, date of birth, gender, residential address, email address, mobile phone number, username, and password
• Identity Verification (KYC) Documents: Government-issued photo identification (Indonesian National Identity Card / KTP, passport, or driver's license), proof of address documents (utility bills, bank statements), selfie photographs for identity confirmation, and payment method verification documents
• Financial Information: Bank account details (bank name, account number, account holder name) for Indonesian banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, and others; e-wallet account information for OVO, DANA, GoPay, ShopeePay, and LinkAja; credit/debit card information (card number, expiration date, CVV) processed securely through encrypted payment gateways
• Transaction History: Records of all deposits, withdrawals, bets placed, game outcomes, bonus claims, and account balance changes
• Communications: Messages you send to customer support via email, live chat, WhatsApp, or in-app messaging, including any documents or information you provide in those communications
• Optional Profile Information: Preferred language, communication preferences, marketing consent preferences, and responsible gaming limit settings

Information Collected Automatically

When you access and use dewahk services, our systems automatically collect certain technical and usage information:

• Device Information: Device type (desktop, mobile, tablet), operating system, browser type and version, screen resolution, device identifiers, and hardware specifications
• Connection Information: IP address, internet service provider, approximate geographic location (city/region based on IP), time zone, and connection timestamps
• Usage Data: Pages viewed, games played, session duration, clickstream data, bet patterns, feature usage, navigation paths through the platform, and interaction with promotional content
• Cookies and Similar Technologies: Session cookies for authentication, persistent cookies for preferences, analytics cookies to understand usage patterns, and advertising cookies for targeted promotions (see Section 8 for details)
• Security and Fraud Detection Data: Login timestamps, failed login attempts, account access patterns, unusual activity flags, and device fingerprinting for fraud prevention

Information from Third Parties

In certain circumstances, we receive information about you from third-party sources:

• Payment Processors: Transaction confirmation, payment method validation, and fraud screening results from banks, e-wallet providers, and payment gateways
• Identity Verification Services: Document authentication results, identity validation confirmations, and watchlist screening outcomes from third-party KYC providers
• Public Databases: Information from publicly available sources to verify your identity or comply with anti-money laundering regulations

3. How We Use Your Information

dewahk uses your personal information for specific, legitimate purposes related to providing gaming services, complying with legal obligations, and improving your experience. We process your data based on the following legal grounds: contractual necessity (to perform our agreement with you), legal compliance (to meet regulatory requirements), legitimate interests (to operate our business securely), and consent (where you've given explicit permission).

Primary Uses of Your Information

• Account Management: Create and maintain your dewahk account, authenticate your identity when you log in, manage your account settings and preferences, and provide customer support
• Transaction Processing: Process deposits and withdrawals, verify payment methods, detect and prevent fraudulent transactions, comply with anti-money laundering (AML) regulations, and maintain transaction records as required by law
• Gaming Services Delivery: Enable you to place bets on sports events and play casino games, slots, live dealer games, lottery games including togel, and other gaming products; calculate and credit winnings; apply bonus terms; enforce betting limits and responsible gaming controls
• Identity Verification (KYC): Verify you are at least 21 years old, confirm your identity to prevent fraud and account takeover, ensure compliance with Indonesian gambling regulations, prevent multiple accounts, and fulfill our legal obligations under AML laws
• Security and Fraud Prevention: Monitor for suspicious activity and prevent fraudulent transactions, protect against unauthorized access to accounts, detect collusion or bonus abuse, enforce our Terms and Conditions, and protect the integrity of our gaming platform
• Legal Compliance: Comply with Indonesian laws and regulations governing online gaming, respond to law enforcement requests and court orders, fulfill tax reporting obligations, maintain records as required by regulators, and report suspicious transactions to appropriate authorities
• Communications: Send you account notifications (deposits, withdrawals, security alerts), respond to your inquiries and support requests, provide responsible gaming reminders and limit notifications, send promotional offers and bonuses (with your consent), and deliver important updates about our services or policies
• Platform Improvement: Analyze usage patterns to improve user experience, test new features and optimize existing ones, troubleshoot technical issues, conduct research to understand player preferences, and develop new games and betting markets tailored to Indonesian players

4. Data Sharing and Disclosure

dewahk does not sell, rent, or trade your personal information to third parties for their marketing purposes. We only share your information in limited circumstances necessary to operate our business, comply with legal obligations, or protect our legitimate interests. When we share data with third parties, we require them to protect your information through contractual agreements and only use it for specified purposes.

When We Share Your Information

• Service Providers: We share necessary information with trusted third-party service providers who assist us in operating our platform, including payment processors (to process deposits and withdrawals to Indonesian banks and e-wallets), cloud hosting providers (to store data securely), customer support software providers, identity verification services (for KYC compliance), fraud detection services, and email/SMS communication platforms. These providers are contractually obligated to protect your data and use it only for the services they provide to us.
• Game Providers: When you play games from third-party studios, minimal information (username, bet amounts, game outcomes) is shared with those game providers to enable gameplay. Game providers are bound by data protection agreements and do not receive your personal identity information or financial details.
• Payment Partners: Your payment information (bank account details, e-wallet accounts, card information) is shared with banks, e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja), and payment gateways to process your transactions. Payment data is transmitted through encrypted channels and processed according to banking industry security standards.
• Legal and Regulatory Authorities: We disclose information when required by Indonesian law, court order, subpoena, or legal process. This includes responding to law enforcement requests, complying with anti-money laundering investigations, reporting suspicious transactions to financial intelligence units, and cooperating with tax authorities. We will notify you of such disclosures unless prohibited by law.
• Corporate Transactions: If dewahk is involved in a merger, acquisition, asset sale, or bankruptcy proceeding, your personal information may be transferred to the successor entity. You will be notified of any such change in ownership or control of your personal data.
• Protection of Rights: We may disclose information to enforce our Terms and Conditions, protect against fraud or security threats, defend against legal claims, protect the safety of our users or the public, or investigate potential violations of our policies.

What We Do NOT Share

dewahk does not share your personal information with:

• Advertising networks for behavioral targeting (we do not sell your data to advertisers)
• Data brokers or information resellers
• Unrelated third parties for their own marketing purposes
• Social media platforms (unless you explicitly connect your social account)

5. Data Security Measures

Protecting your personal information is a top priority at dewahk. We implement comprehensive technical, organizational, and physical security measures to safeguard your data against unauthorized access, disclosure, alteration, or destruction.

Technical Security Measures

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data at rest (stored on our servers) is encrypted using AES-256 encryption. Payment information is encrypted and processed through PCI DSS compliant payment gateways.
• Secure Servers: Your data is stored on secure servers located in protected data centers with physical access controls, 24/7 monitoring, fire suppression systems, and redundant power supplies. Servers are regularly patched and updated to protect against vulnerabilities.
• Access Controls: Access to personal data is restricted to authorized personnel who need it to perform their job functions. All employees sign confidentiality agreements and receive data protection training. We use role-based access controls, multi-factor authentication for administrative systems, and audit logs to track data access.
• Firewalls and Intrusion Detection: Our network infrastructure includes enterprise-grade firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) to monitor and block malicious traffic. Regular penetration testing and security audits are conducted by independent security firms.
• Password Protection: User passwords are hashed using strong cryptographic algorithms (bcrypt with salt). We never store passwords in plain text. We enforce password strength requirements and encourage users to enable two-factor authentication where available.

Organizational Security Measures

• Data Protection Policies: We maintain comprehensive data protection policies and procedures that govern how employee handle personal information. Regular training ensures staff understand their responsibilities.
• Incident Response Plan: We have a documented incident response plan for data breaches or security incidents. In the event of a breach that poses a risk to your rights, we will notify you and relevant authorities as required by law.
• Regular Audits: Our security practices are audited regularly by internal and external auditors. We conduct vulnerability assessments, penetration tests, and security reviews to identify and address potential weaknesses.
• Vendor Management: Third-party service providers are carefully vetted for security practices. We require contractual commitments to data protection and conduct periodic reviews of their security measures.

6. Data Retention

dewahk retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary based on the type of information and the purpose for which it is used.

Retention Periods

• Account Information: Retained for the duration of your account's active status plus seven (7) years after account closure to comply with Indonesian financial regulations and anti-money laundering laws.
• Transaction Records: Maintained for seven (7) years from the date of transaction as required by Indonesian financial record-keeping regulations and tax laws.
• Identity Verification Documents: KYC documents are retained for seven (7) years after account closure to meet regulatory compliance requirements.
• Communication Records: Customer support communications, emails, and chat logs are retained for three (3) years to resolve disputes and improve service quality.
• Marketing Consent Records: Records of your marketing preferences and consent are maintained for the duration of your account plus three (3) years to demonstrate compliance with consent requirements.
• Technical Logs: Server logs, access logs, and security logs are typically retained for ninety (90) days unless needed for security investigations or legal proceedings.

Data Deletion

After the applicable retention period expires, we securely delete or anonymize your personal information. Deletion methods include secure erasure of electronic data and destruction of physical documents. Anonymized data (data that can no longer identify you) may be retained indefinitely for statistical analysis and research purposes.

7. Your Privacy Rights

Under Indonesian data protection laws and our commitment to privacy, you have certain rights regarding your personal information. dewahk respects these rights and provides mechanisms for you to exercise them.

How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection Officer via email at [email protected] with the subject line "Privacy Rights Request" or use the contact methods listed in Section 12. We will respond to your request within 30 days. We may need to verify your identity before fulfilling certain requests to ensure we're disclosing information only to the rightful account holder.

8. Cookies and Tracking Technologies

dewahk uses cookies and similar tracking technologies to provide, secure, and improve our services. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how you use our platform.

Types of Cookies We Use

• Essential Cookies: Necessary for the platform to function. These cookies enable you to log in, navigate the site, and access secure areas. They cannot be disabled as they are required for service delivery.
• Functional Cookies: Remember your preferences such as language selection, preferred currency display, and account settings. These enhance your experience but are not strictly necessary.
• Analytics Cookies: Help us understand how visitors use our platform, which pages are most popular, how long users spend on each page, and where users encounter errors. This information helps us improve our services. We use analytics tools that anonymize IP addresses.
• Performance Cookies: Monitor platform performance, load times, and technical errors to ensure optimal functionality and identify areas for improvement.
• Marketing Cookies: Track your interaction with promotional content to deliver relevant offers and measure the effectiveness of our marketing campaigns. You can opt out of marketing cookies through your browser settings.

Managing Cookies

Most browsers allow you to control cookies through settings. You can set your browser to refuse all cookies, accept only certain cookies, or notify you when a cookie is set. Note that disabling essential cookies will impair the functionality of dewahk services. Consult your browser's help documentation for instructions on managing cookies.

9. Third-Party Services

dewahk integrates with third-party services including payment processors (Indonesian banks, e-wallets), game providers, and identity verification services. These third parties have their own privacy policies governing how they collect, use, and protect your information. We encourage you to review the privacy policies of these third parties, especially payment providers, before providing information to them.

Our platform may contain links to third-party websites for informational purposes. dewahk is not responsible for the privacy practices or content of these external sites. Clicking on third-party links is at your own discretion and risk.

10. Children's Privacy

dewahk services are strictly restricted to individuals aged 21 years or older. We do not knowingly collect, use, or disclose personal information from anyone under the age of 21. Our registration process includes age verification, and our KYC procedures require government-issued identification to confirm age eligibility.

If we discover that we have inadvertently collected information from a person under 21 years of age, we will immediately delete that information and close any associated account. If you believe we have collected information from a minor, please contact us immediately at [email protected].

Parents and guardians should monitor their children's online activities and use device-level parental controls to prevent access to online gambling sites.

11. International Data Transfers

dewahk primarily serves Indonesian residents, and your data is processed and stored on servers located in secure data centers that may be situated outside Indonesia. When we transfer your personal information internationally, we ensure appropriate safeguards are in place to protect your data in accordance with Indonesian data protection laws.

Third-party service providers we work with may also process your information in countries outside Indonesia. We require these providers to implement adequate data protection measures through contractual agreements, including Standard Contractual Clauses or equivalent mechanisms recognized by Indonesian authorities.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how dewahk handles your personal information, please contact our Data Protection Officer through the following channels:

• Email: [email protected] (please use subject line "Privacy Inquiry" or "Data Protection")
• Live Chat: Available 24/7 on our website for general privacy questions
• WhatsApp: +62 812-3456-7890 (operating hours 08:00-02:00 WIB daily)

We aim to respond to all privacy inquiries within 48 hours and provide substantive responses within 30 days. For complex requests such as data access or deletion, we may require additional time and will keep you informed of our progress.

Updates to This Privacy Policy

dewahk may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. Material changes will be communicated via prominent notice on our website and email notification to registered users. The "Last Updated" date at the top of this document indicates when the most recent changes were made.

Continued use of dewahk services after changes take effect constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.