Privacy Policy

dewi45 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every individual who interacts with our platform. We operate the online gaming platform at https://dewi45.cam, providing sports betting, live casino, slot gaming, and traditional games including togel (Indonesia's traditional numbers lottery) to players across Indonesia and other eligible markets.

This Privacy Policy has been prepared in accordance with generally recognized international data protection principles and applicable data privacy regulations. It explains in clear, plain terms how we handle your personal information — from the moment you first visit our website through to the closure of your account and beyond, where retention obligations apply.

We process personal data only where we have a legitimate, lawful basis for doing so. We are transparent about what we collect and why. We take reasonable and proportionate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure. And we respect your rights as a data subject to access, correct, and control your information.

If you have any questions about this Policy or about how dewi45 handles your personal data, please contact our Data Privacy team at the address specified in Section 16 of this document.

The following defined terms are used throughout this Privacy Policy:

3.1 Registration Data

When you create a dewi45 account, we collect the following information:

• Full legal name (as it appears on your Indonesian National Identity Card / KTP)
• Date of birth (to verify you are at least 21 years of age)
• Email address
• Indonesian mobile phone number
• Account password (stored in irreversibly hashed form — we never store plain-text passwords)
• Residential address in Indonesia

3.2 Identity Verification (KYC) Data

To comply with our anti-money-laundering and responsible gaming obligations, we collect:

• A copy of your valid Indonesian KTP (front and back)
• A selfie photograph of you holding your KTP alongside a dated verification note
• Proof of residential address (utility bill, bank statement, or equivalent document)
• Proof of ownership of the bank account or e-wallet used for deposits (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, or LinkAja)

3.3 Financial Data

We collect and process the following financial information to facilitate deposits and withdrawals:

• Bank account name, account number, and bank name (BCA, BRI, BNI, Mandiri, or other supported institutions)
• E-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja) where used as a payment method
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment references
• Wagering history and account balance records

3.4 Technical & Device Data

When you access the Platform, our servers and analytics tools automatically collect certain technical information:

• IP address and approximate geographic location derived from IP
• Browser type and version
• Operating system and device type
• Pages visited, time spent on each page, and clickstream data
• Session start and end times (recorded in Western Indonesia Time, WIB / UTC+7)
• Referral URL (the page or link from which you arrived at the Platform)

3.5 Communications Data

When you contact our support team or communicate with dewi45 through any channel, we retain records of those communications, including email correspondence, live chat transcripts, and any attachments or documents you provide.

3.6 Data We Do Not Collect

dewi45 does not collect biometric data, health information, religious or political beliefs, racial or ethnic origin data, or any other special-category personal data beyond what is strictly required for identity verification and fraud prevention purposes.

4.1 Directly From You

The majority of personal data we hold is provided directly by you during the account registration process, KYC verification, deposit and withdrawal requests, and when you contact our support team. You are in control of what you provide, though failure to supply required information may prevent us from offering certain services (such as processing withdrawals without completed KYC).

4.2 Automatically Through Platform Use

Technical data — including IP addresses, session data, and device information — is collected automatically when you access and interact with the Platform. This data is gathered through server logs, cookies, and similar tracking technologies as described in Section 11 of this Policy.

4.3 From Third Parties

In certain circumstances, dewi45 may receive personal data about you from third parties, including:

• Payment processors and banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, and e-wallet providers) who provide transaction confirmation data
• KYC and identity verification service providers who assist in validating the authenticity of identity documents
• Fraud detection and risk management services that flag potentially suspicious activity patterns
• Regulatory or law enforcement bodies where required by law

dewi45 processes your personal data for the following specific and legitimate purposes:

dewi45 relies on the following legal bases to process your personal data, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you have accepted, including account management, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering (AML) obligations, Know Your Customer (KYC) requirements, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing necessary for purposes of fraud prevention, platform security, network and information security, and improving the quality of our services, where these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Where dewi45 relies on legitimate interests as the legal basis for processing, we conduct a balancing test to ensure that our interests do not override your fundamental rights and freedoms. Records of these assessments are maintained internally.

7.1 Categories of Recipients

dewi45 does not sell your personal data. We share personal data with third parties only where necessary and only with parties bound by appropriate data protection agreements. Categories of recipients include:

• Payment and Banking Partners: BCA, BRI, BNI, Mandiri, CIMB Niaga, and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum payment data required to process your transactions.
• KYC and Identity Verification Providers: Specialist third-party services that assist in verifying the authenticity of identity documents submitted during KYC review.
• Game Providers: Software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, and Spribe receive limited session data necessary to deliver their games within the Platform.
• Cloud Infrastructure and Hosting Providers: Our technical infrastructure is hosted on enterprise-grade cloud platforms operating under strict data processing agreements.
• Fraud Prevention and Risk Management Services: Third-party tools that help identify and prevent fraudulent account activity, bonus abuse, and money laundering.
• Legal and Regulatory Authorities: Where required by law, regulation, or a valid court order, dewi45 will disclose personal data to relevant governmental or regulatory bodies.

7.2 Prohibition on Onward Transfer

All third-party Data Processors with whom dewi45 shares personal data are contractually prohibited from using that data for any purpose other than delivering the specific service for which they were engaged. They may not further disclose, sell, or sub-license the data to any additional parties without dewi45's prior written consent.

As an internationally operating gaming platform, dewi45 may transfer personal data to servers or service providers located outside Indonesia. Where such transfers occur, dewi45 takes appropriate safeguards to ensure that your personal data receives a level of protection consistent with the standards described in this Privacy Policy.

Safeguards employed for international transfers include:

• Data processing agreements incorporating internationally recognized standard contractual clauses
• Transfer only to jurisdictions or organizations that maintain adequate data protection standards as assessed by dewi45
• Encryption of data in transit using TLS 1.2 or higher at all times
• Regular review and audit of third-party service providers' data security practices

For Players based in Indonesia, dewi45 endeavors to process and store the majority of personal data within the Asia-Pacific region wherever operationally feasible, minimizing the need for intercontinental data transfers.

dewi45 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any overriding legal or regulatory retention requirements. The following general retention periods apply:

After the applicable retention period expires, personal data is securely deleted or irreversibly anonymized so that it can no longer be associated with any individual.

10.1 Technical Measures

dewi45 implements a comprehensive set of technical security controls to protect personal data against unauthorized access, accidental loss, alteration, and disclosure:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers
• AES-256 encryption for personal data and sensitive financial information stored at rest
• Bcrypt hashing for all account passwords — plain-text passwords are never stored
• Multi-factor authentication (MFA) for all administrative access to production systems
• Automated intrusion detection and prevention systems (IDS/IPS)
• Regular penetration testing and vulnerability assessments by independent security firms
• Firewalled server environments with strict network segmentation

10.2 Organizational Measures

Beyond technical controls, dewi45 maintains organizational data protection practices including:

• Strict role-based access controls — staff members access only the personal data required for their specific function
• Mandatory data privacy and security training for all personnel with access to player data
• Documented data breach response procedures with defined notification timelines
• Regular internal audits of data processing activities and third-party processor compliance

10.3 Your Responsibility

While dewi45 takes all reasonable measures to protect your data on our side, you are responsible for maintaining the security of your own account credentials. Do not share your password with any third party, use a unique and strong password for your dewi45 account, and enable two-factor authentication where available. Contact support immediately if you suspect your account has been compromised.

11.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the Platform. They help the Platform recognize your browser, remember your preferences, maintain your login session, and gather analytical data about how the Platform is used.

11.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These enable your login session, maintain your account security, and remember your language and region preferences. These cookies cannot be disabled without breaking core Platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymized data about how visitors use the Platform — which pages are visited most, how long sessions last, and where users navigate from. This data helps us improve the Platform's structure and content.
• Functionality Cookies: Remember your preferences such as display settings, preferred payment method, and other personalization options to enhance your experience on return visits.
• Marketing Cookies: Used where you have given consent to track your activity across the Platform for the purpose of delivering relevant promotional offers and bonus notifications. These can be disabled without affecting core functionality.

11.3 Managing Cookies

You can control and delete cookies through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. For detailed guidance on managing cookies in your specific browser, please refer to your browser's official help documentation. Continued use of the Platform after reviewing this section constitutes acknowledgment of our cookie practices.

As a data subject, you hold the following rights in relation to your personal data held by dewi45. You may exercise any of these rights by contacting our Data Privacy team at the address listed in Section 16:

dewi45 will respond to all valid data subject requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, of which we will notify you. We may require you to verify your identity before processing any data subject request to protect against unauthorized access to your personal information.

The dewi45 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes mandatory age verification, and our KYC procedures include verification of date of birth through government-issued identity documents.

If dewi45 discovers that personal data has been collected from an individual under the age of 21, we will immediately:

• Suspend the associated account pending investigation
• Delete all personal data collected from the underage individual, except where retention is required by law
• Notify the appropriate regulatory authority if required by applicable law

If you are a parent or guardian and believe your child may have created a dewi45 account, please contact us immediately at the address in Section 16 so that we can take prompt action.

The dewi45 Platform integrates games and services supplied by third-party Game Providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, and Spribe. When you play a game supplied by a third-party provider, limited session and gameplay data may be processed by that provider in accordance with their own privacy policies.

dewi45 carefully vets all Game Providers and integration partners for data security standards before onboarding. However, once data passes to a third-party provider's systems for the purposes of game delivery, dewi45's direct control over that data is limited to what is specified in our data processing agreements with those providers.

This Privacy Policy does not cover the data practices of third-party websites, applications, or services that you may access via links appearing on the Platform. dewi45 strongly encourages you to review the privacy policies of any third-party services you use in connection with your gaming activity.

dewi45 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page reflects the date on which the most recent version came into effect.

Where changes are material — meaning they meaningfully affect how we collect, use, or share your personal data — we will notify you by:

• Sending a notification email to your registered address at least seven (7) days before the revised Policy takes effect
• Displaying a prominent notice on the Platform's homepage and, where applicable, presenting an in-platform notification upon your next login

Minor changes — such as editorial corrections, formatting updates, or clarifications that do not alter the substance of our data practices — may be made without advance notice, though the "Last Updated" date will always reflect the most recent revision.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must discontinue use of the Platform and contact support to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way dewi45 processes your personal data, please reach out to our Data Privacy team through the following channel:

For general support inquiries unrelated to data privacy, our full customer support team — including Indonesian-speaking agents — is available at the same address around the clock.