Privacy Policy

1.1 Who We Are. dewa7 ("we", "us", "our", or "the Operator") operates the online betting and gaming platform accessible at https://dewa7.cam. We are the data controller responsible for the personal information collected through the platform, our customer support channels, and any related communications.

1.2 Purpose of This Policy. This Privacy Policy explains what personal data dewa7 collects from players and visitors, the purposes for which that data is processed, the legal grounds relied upon, how long data is retained, and the rights available to individuals whose data we hold.

1.3 Scope. This Policy applies to all personal data processed by dewa7 in connection with:

• Account registration and ongoing account management.
• Deposits, withdrawals, and payment transaction records.
• Gameplay activity across all game categories, including sports betting, live casino, togel (Indonesia's traditional numbers lottery), slot gacor (high-payout slots), and sabung ayam (traditional cockfighting) markets.
• Customer support interactions via live chat, email, and WhatsApp.
• Visits to the dewa7 website by non-registered users.
• Marketing communications where you have provided consent.

1.4 Indonesia Market. dewa7 primarily serves players resident in Indonesia. Where this Policy references applicable law, it includes internationally recognised data protection principles and any applicable Indonesian regulations governing personal data, including Law No. 27 of 2022 on Personal Data Protection (Undang-Undang Perlindungan Data Pribadi / UU PDP) and its implementing regulations, to the extent they apply to the Operator's activities.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

dewa7 collects personal data through several channels. The categories below describe what we collect, and in each case why that data is necessary.

3.1 Registration Data

When you create an account, we collect your full legal name, date of birth, email address, mobile phone number (including country code), and preferred currency (IDR). This information is required to create and operate your account and to verify that you meet the minimum age requirement of 21 years.

3.2 Identity Verification (KYC) Data

Prior to processing your first withdrawal, we collect government-issued identity documents (KTP or Paspor), a selfie photograph, and proof of payment method ownership. This data is used exclusively for identity verification, fraud prevention, and anti-money-laundering (AML) compliance. KYC documents are stored in encrypted form and accessed only by authorised verification staff.

3.3 Financial & Transaction Data

We record details of all deposits and withdrawals including the payment method used (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, or LinkAja), transaction amounts in IDR, timestamps, and transaction reference numbers. We do not store full bank account passwords or e-wallet PINs — only the account name and number necessary for payment processing and same-source withdrawal verification.

3.4 Gameplay & Betting Activity

We log your betting and gaming activity including game sessions, wager amounts, outcomes, bonus usage, and session durations. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement. Aggregate, anonymised gameplay data may be used for statistical analysis.

3.5 Device & Technical Data

When you access the platform, our servers automatically collect your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This technical data is used for security monitoring, fraud detection, and platform optimisation. We use device fingerprinting techniques to detect duplicate account registrations.

3.6 Communications Data

When you contact our support team via live chat, email, or WhatsApp, we retain records of those communications including the content of messages, timestamps, and the agent who handled the interaction. This data is used for quality assurance, dispute resolution, and compliance purposes.

3.7 Marketing Preference Data

If you opt in to receive promotional communications, we record your consent, the date it was given, and your channel preferences (email, SMS, or both). We also track email open rates and click-through rates on promotional messages using anonymised identifiers, solely to measure campaign effectiveness.

dewa7 uses the personal data it collects for the following purposes:

dewa7 does not use automated decision-making processes that produce legal or similarly significant effects on Players without human review. Where automated systems flag an account for review (e.g., fraud detection), a qualified member of our compliance team performs a manual assessment before any action is taken.

dewa7 processes personal data only where a valid legal basis exists. The primary legal grounds we rely upon are as follows:

• Contractual Necessity: Processing required to perform the contract between dewa7 and you as a Player — including account management, payment processing, and delivery of betting and gaming services.
• Legal Obligation: Processing required to comply with applicable law — including KYC identity verification obligations, AML record-keeping, and responses to lawful requests from competent authorities.
• Legitimate Interests: Processing that serves dewa7's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, security monitoring, dispute resolution, and platform improvement through anonymised analytics.
• Consent: Processing based on your freely given, specific, and informed consent — including the sending of marketing and promotional communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6.1 Principle of Minimal Sharing. dewa7 shares your personal data only where strictly necessary for the purposes described in this Policy, and only with recipients who are contractually bound to protect it to equivalent standards.

6.2 Categories of Recipients

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to process your deposits and withdrawals. Each processor operates under its own privacy and data-security framework.
• KYC Verification Services: Third-party identity verification providers receive KYC documents solely for the purpose of verifying your identity. These providers are contractually prohibited from using your documents for any other purpose.
• Game Studios: Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive a pseudonymised player identifier and session token to deliver game content. They do not receive your full name, identity documents, or financial account details.
• Technology & Infrastructure Providers: Cloud hosting, content delivery, and security service providers that process data on our behalf under strict data-processing agreements.
• Legal & Regulatory Authorities: We may disclose personal data to competent authorities where required by applicable law, court order, or lawful investigative request. We will notify you of such disclosures where legally permissible.

6.3 No Sale of Data

dewa7 does not sell, rent, exchange, or otherwise commercially transfer your personal data to any third party for marketing or commercial purposes. This prohibition is absolute and applies regardless of the form of compensation offered.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of substantially all of dewa7's assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of such a transfer and provided the opportunity to request deletion of your data before the transfer takes effect.

7.1 Cross-Border Processing. As an internationally operated platform serving Indonesian players, dewa7 may process or store personal data on servers or through service providers located outside Indonesia. Where such transfers occur, dewa7 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required under applicable Indonesian data protection law.

7.2 Safeguards. International data transfers are governed by one or more of the following safeguards:

• Contractual data protection clauses incorporated into agreements with all international Data Processors.
• Transfers to jurisdictions whose data protection frameworks have been assessed as providing an adequate level of protection.
• Technical measures including end-to-end encryption that ensure data remains protected in transit and at rest regardless of the jurisdiction in which it is stored.

7.3 Player Rights Unaffected. International transfers do not affect your rights under this Privacy Policy. Regardless of where your data is processed, you retain all the rights described in Clause 10 and may exercise them by contacting dewa7 support.

8.1 Retention Principles. dewa7 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. When data is no longer required, it is securely deleted or anonymised.

8.2 Retention Periods. The following retention periods apply to the main categories of personal data dewa7 holds:

8.3 Extended Retention. Where personal data is subject to an active legal dispute, regulatory investigation, or fraud inquiry, retention may be extended beyond the periods above until the matter is fully resolved.

9.1 What Are Cookies. Cookies are small text files placed on your device when you visit a website. dewa7 uses cookies and similar technologies (including local storage and session tokens) to operate the platform, maintain your login session, and understand how players use the site.

9.2 Categories of Cookies We Use

9.3 No Third-Party Advertising Cookies. dewa7 does not deploy third-party advertising, retargeting, or behavioural-profiling cookies. No data collected via cookies on the dewa7 platform is shared with advertising networks.

9.4 Managing Cookies. You can manage or disable cookies via your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in and using the platform. Instructions for managing cookies are available in the help documentation of all major browsers (Chrome, Firefox, Safari, Edge).

dewa7 respects your rights over your personal data. Depending on applicable law and the specific circumstances of your request, you may be entitled to exercise the following rights:

• Right of Access: Request a copy of the personal data dewa7 holds about you, along with information about how it is used.
• Right to Rectification: Request correction of inaccurate or incomplete personal data. Minor corrections (e.g., email address updates) may be made directly in your account settings.
• Right to Erasure: Request deletion of your personal data, subject to legal and regulatory retention obligations. Data required for AML compliance, active dispute resolution, or fraud prevention cannot be deleted until the relevant retention period has elapsed.
• Right to Restrict Processing: Request that dewa7 restrict processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Request a structured, machine-readable copy of the personal data you have provided to dewa7, for the purpose of transferring it to another service provider.
• Right to Object: Object to processing of your personal data where dewa7 relies on legitimate interests as the legal basis, including profiling for fraud-detection purposes.
• Right to Withdraw Consent: Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

11.1 Technical Safeguards. dewa7 implements a layered suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit TLS/SSL encryption for all data in transit between your device and our servers.
• Encryption at rest for all sensitive data categories, including KYC documents and financial records.
• Two-factor authentication (2FA) available for all Player accounts and mandatory for all internal staff accounts with access to personal data.
• Automated real-time intrusion detection and DDoS mitigation systems.
• Role-based access controls ensuring that staff can access only the categories of personal data required for their specific job function.
• Regular independent security audits and penetration testing of the platform infrastructure.

11.2 Organisational Safeguards. All dewa7 staff who handle personal data receive mandatory data-protection training. Access to KYC documents is restricted to a small, named group of authorised verification personnel and is logged for audit purposes.

11.3 Data Breach Notification. In the event of a personal data breach that poses a risk to your rights and interests, dewa7 will notify affected Players without undue delay — and in any case within 72 hours of becoming aware of the breach — describing the nature of the incident, the categories of data affected, and the steps taken to mitigate harm.

11.4 Your Responsibility. The security of your account also depends on you. Please use a strong, unique password for your dewa7 account, enable two-factor authentication, and never share your login credentials with anyone. dewa7 support staff will never ask for your password.

12.1 Strict Age Requirement. The dewa7 platform is strictly for individuals aged 21 years and over. We do not knowingly collect, store, or process personal data from individuals under the age of 21. Registration by or on behalf of a minor is a material breach of our Terms & Conditions and this Privacy Policy.

12.2 Discovery of Minor Accounts. If dewa7 becomes aware that personal data has been collected from a minor — whether through our own review, a report from a third party, or a parental notification — we will immediately suspend the relevant account, delete all associated personal data (subject to any fraud-prevention hold), and return any net deposited funds to the verified payment method.

12.3 Parental Guidance. We encourage parents and guardians to use parental control tools to prevent minors from accessing online gambling platforms. If you are concerned that a minor in your household may have registered on dewa7, please contact our support team at [email protected] immediately.

13.1 Scope Limitation. This Privacy Policy applies solely to personal data processed by dewa7. The dewa7 platform may contain references to, or integrations with, third-party services — including payment processors, game studios, and customer communication tools. Each of these third parties operates under its own privacy policy, and dewa7 is not responsible for the data practices of those third parties.

13.2 Due Diligence. dewa7 evaluates the privacy and security practices of all third-party service providers before entering into a data-processing relationship. We require all processors to meet minimum data-protection standards and to process personal data only as instructed by dewa7.

13.3 Player Responsibility. When you interact directly with a third-party service — for example, when you open your BCA or OVO mobile banking application to initiate a deposit — you are subject to that provider's terms and privacy policy, not dewa7's. We recommend reviewing the privacy policies of your payment providers.

14.1 Right to Update. dewa7 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

14.2 Notification of Material Changes. Where a proposed amendment materially affects how we process your personal data or reduces your rights under this Policy, we will provide at least 14 days' advance notice by publishing the updated Policy on the platform and, where reasonably practicable, by sending a notification to your registered email address.

14.3 Continued Use. Your continued use of the dewa7 platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with an amendment, you may contact support to close your account and request deletion of your data as described in Clause 10.

14.4 Version Archive. Previous versions of this Privacy Policy are available on request by contacting [email protected].

15.1 Data Protection Queries. For any questions, concerns, or requests relating to this Privacy Policy or dewa7's data practices, please contact our data protection team using the details below. All communications must be in English for efficient handling:

• Email: [email protected] — subject line: "Privacy Enquiry — [Your Username]" (plain text, not a clickable link)
• Live Chat: Available 24/7 directly within the platform — select "Privacy & Data" as the enquiry category
• WhatsApp: +62 811 0000 7777 (plain text, not a clickable link)

15.2 Response Commitment. dewa7 acknowledges all privacy-related enquiries within 3 business days and provides a substantive response within 14 business days of receiving all information required to process the request. Complex requests may take up to 30 days; you will be informed if this applies to your request.

15.3 Complaints. If you are not satisfied with dewa7's response to a privacy concern, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. For Indonesian residents, this is the Komisi Informasi or other competent authority as designated under Indonesian data protection law. dewa7 will cooperate fully with any such investigation.