Privacy Policy — dewa6

dewa6 ("we", "us", "our") operates the online gaming platform accessible at https://dewa6.app (the "Platform"), providing world-class slots, live casino, sports betting, and traditional card and number games to Members across Indonesia. As a platform that processes personal data in connection with real-money gaming activities, dewa6 takes its data protection responsibilities with the utmost seriousness.

This Privacy Policy ("Policy") describes in precise, transparent terms the categories of personal data we collect from you, the purposes for which that data is processed, the legal bases on which we rely, the parties with whom data may be shared, the measures we take to keep your data secure, the period for which we retain it, and the rights you hold in relation to it.

This Policy applies to all individuals who visit, register on, or otherwise interact with the dewa6 Platform, including prospective Members who have not yet completed registration. It should be read alongside the dewa6 Terms & Conditions (available at /terms-conditions) and Responsible Gaming Policy (available at /responsible-gaming), both of which are incorporated by reference.

This Policy was last reviewed and updated on 1 January 2026. All previous versions are superseded in their entirety by this document.

The following terms, where used in this Privacy Policy, carry the meanings defined below:

• "Personal Data" means any information relating to an identified or identifiable natural person — specifically, information from which you can be directly or indirectly identified, including by reference to a name, account identifier, location data, IP address, or one or more factors specific to your identity.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means the legal entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, dewa6 is the Data Controller in respect of all Member data.
• "Data Processor" means a third party that processes Personal Data on behalf of dewa6 under a written data processing agreement, such as a payment processor or KYC verification provider.
• "Member" means any individual who has registered an Account on the dewa6 Platform and accepted the Terms & Conditions.
• "KYC" means Know Your Customer — the identity verification process dewa6 uses to confirm a Member's identity, age, and place of residence, in accordance with applicable international anti-money laundering standards.
• "Cookies" means small text files placed on your device by the Platform to enable certain features, remember your preferences, and support analytics and fraud-prevention functions.
• "Applicable Law" means the data protection, privacy, and anti-money laundering laws and regulations of the jurisdiction in which dewa6 holds its international gaming licence, together with any other laws applicable to the processing activities described in this Policy.

dewa6 collects Personal Data from you through several distinct channels. The categories of data we collect are as follows:

3.1 Data You Provide Directly

• Registration Data: Full legal name, date of birth, gender, residential address in Indonesia (including city — Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, Makassar, and others), email address, and mobile phone number.
• KYC Documentation: Copies of your Indonesian National Identity Card (KTP — Kartu Tanda Penduduk), passport, driving licence, utility bills, bank statements (from BCA, BRI, BNI, Mandiri, CIMB Niaga, or other Indonesian banks), and any other documents submitted as part of the identity verification process.
• Financial Data: Bank account details, e-wallet account references (OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction records including deposit amounts, withdrawal requests, and payment method history — all denominated in Indonesian Rupiah (IDR).
• Communication Data: Any messages, complaints, feedback, or support requests you send to dewa6 through live chat, email, or WhatsApp, including the content of those communications and any attachments.
• Responsible Gaming Data: Information you provide when setting deposit limits, requesting cooling-off periods, or applying for self-exclusion — including the nature and duration of any restrictions applied to your Account.

3.2 Data Collected Automatically

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited on the Platform, games played (including game titles, session durations, bet amounts, and outcomes), navigation paths, click-stream data, and timestamps of access events.
• Geolocation Data: Approximate geolocation derived from your IP address, used to ensure you are accessing the Platform from a permitted territory. dewa6 does not collect precise GPS-level location data from your device without your explicit consent.
• Cookie and Tracking Data: Data collected through cookies and similar technologies as described in Section 7 of this Policy.

3.3 Data Received from Third Parties

• Payment Processors: Transaction confirmation data, payment status updates, and fraud-screening results returned by our payment processing partners.
• KYC Verification Providers: Identity verification results, document authenticity assessments, and politically exposed person (PEP) or sanctions screening outcomes.
• Fraud Prevention Services: Risk scores, device fingerprint data, and behavioural analytics returned by third-party fraud detection systems used to protect the Platform and its Members.

dewa6 processes your Personal Data for the following specific purposes. We do not process your data for any purpose that is incompatible with those listed here without first notifying you and, where required, obtaining your consent.

• Account Management: Creating and maintaining your Member Account, authenticating your identity at login, and managing Account settings and preferences.
• Service Delivery: Enabling you to access and play all games and betting products on the Platform, processing your deposits and withdrawals via Indonesian payment methods (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja), and crediting bonuses and promotional rewards to your Account.
• KYC and Regulatory Compliance: Verifying your identity, age (21+), and residential address as required under dewa6's international gaming licence and applicable anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.
• Fraud Prevention and Platform Security: Detecting and investigating suspected fraudulent activity, unauthorised Account access, money laundering, bonus abuse, and other prohibited conduct as defined in the dewa6 Terms & Conditions.
• Responsible Gaming: Monitoring gaming patterns to identify indicators of potential gambling-related harm, applying Member-requested deposit limits, session controls, and self-exclusion tools, and facilitating referrals to support services where appropriate.
• Customer Support: Responding to your enquiries, complaints, and support requests submitted via live chat, email ([email protected]), or WhatsApp, and maintaining records of those interactions for quality assurance and dispute resolution.
• Marketing and Promotions: Sending you information about dewa6 bonuses, promotions, and new product features by email, SMS, or in-platform notification — but only where you have provided your consent to receive such communications, and only for products on the dewa6 Platform. You may opt out at any time by contacting dewa6 Support.
• Platform Improvement: Analysing aggregated, anonymised usage data to identify technical issues, optimise game performance, improve the user experience, and inform product development decisions. No individually identifiable data is used for this purpose.
• Legal Obligations: Complying with court orders, regulatory requests, law enforcement enquiries, and any other legal obligation applicable to dewa6 under Applicable Law.

Every data processing activity carried out by dewa6 is grounded in one or more of the following recognised legal bases under international data protection standards:

• Contractual Necessity: Processing necessary for the performance of the contract between you and dewa6 — i.e., the dewa6 Terms & Conditions — including Account registration, service delivery, payment processing, and customer support.
• Legal Obligation: Processing required to comply with a legal obligation applicable to dewa6, including KYC verification, AML/CTF compliance, record-keeping obligations under our gaming licence, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing necessary for dewa6's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — specifically in relation to direct marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

dewa6 does not sell, rent, or otherwise commercially transfer your Personal Data to third parties. We share Personal Data only in the following strictly defined circumstances:

• Payment Processors: We share the minimum financial data necessary to process your deposits and withdrawals with our authorised payment processing partners, including Indonesian bank transfer facilitators and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). All payment processors are contractually bound to process your data solely for payment facilitation purposes and in accordance with PCI-DSS standards.
• KYC and Identity Verification Providers: We share identity and document data with our KYC verification partners to fulfil our legal obligations to verify your age and identity. KYC providers are contractually prohibited from using your data for any purpose other than identity verification on dewa6's behalf.
• Game Studio Providers: Certain game performance and session data is shared with game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe — to the extent technically necessary to deliver their games within the Platform. Game studios do not receive your personal registration or payment data.
• Fraud Prevention and Security Services: We share device, behavioural, and transactional data with specialist fraud prevention providers to protect the Platform and its Members from fraudulent activity.
• Regulatory and Law Enforcement Authorities: We may disclose Personal Data to government bodies, regulatory authorities, or law enforcement agencies where required to do so by Applicable Law, court order, or lawful regulatory request. dewa6 will, where legally permitted, notify affected Members of such disclosures.
• Business Transfers: In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of dewa6's business assets, your Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and any material change to this Privacy Policy that results from it.

All third parties with whom dewa6 shares Personal Data are required to implement appropriate technical and organisational security measures and to process that data solely in accordance with dewa6's written instructions.

The dewa6 Platform uses cookies and similar tracking technologies to provide you with a consistent, secure, and personalised experience. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential to the operation of the Platform. These cookies enable core functions such as session authentication, Account access, and security features. They cannot be disabled without materially impairing your ability to use the Platform.
• Performance and Analytics Cookies: Collect anonymised data about how Members use the Platform — including which pages are visited most frequently and where technical errors occur — to help us improve Platform performance. This data is aggregated and does not identify individual users.
• Functional Cookies: Remember your preferences and settings (such as your preferred language, display settings, and recently played games) to provide a more personalised experience across sessions.
• Targeting and Advertising Cookies: Used, with your consent, to deliver promotional content about dewa6 products that is relevant to your interests and gaming history on the Platform. dewa6 does not use advertising cookies to serve third-party advertisements from other brands.

You can manage your cookie preferences at any time through your browser settings. Please be aware that disabling certain categories of cookies — particularly strictly necessary cookies — may limit your ability to access certain features of the Platform. Detailed information about the specific cookies deployed by dewa6 is available upon request to [email protected].

dewa6 retains Personal Data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by Applicable Law and our international gaming licence obligations. The following retention periods apply:

Upon expiry of the applicable retention period, Personal Data is either securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual. Where retention beyond the standard period is required due to an ongoing investigation, legal proceeding, or regulatory inquiry, dewa6 will retain the relevant data until that matter is resolved.

As a Member of the dewa6 Platform, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please submit a written request to [email protected], clearly identifying yourself, the right you wish to exercise, and the specific data or processing activity to which your request relates.

• Right of Access: You have the right to request confirmation of whether dewa6 holds Personal Data about you and, if so, to receive a copy of that data together with information about how it is being processed. We will respond to verified access requests within thirty (30) days.
• Right to Rectification: You have the right to request correction of any Personal Data we hold about you that is inaccurate or incomplete. Minor updates — such as a change of address or phone number — may be made directly through your Account dashboard.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where it has been unlawfully processed. Note that this right is subject to important exceptions: dewa6 is required by Applicable Law to retain certain data (particularly KYC and transaction records) for defined minimum periods, and such data cannot be deleted during those retention periods.
• Right to Restriction of Processing: You have the right to request that dewa6 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, and machine-readable format, and to request that it be transmitted directly to another data controller where technically feasible.
• Right to Object: You have the right to object to processing based on legitimate interests at any time. You also have an unconditional right to object to the processing of your Personal Data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

dewa6 implements a comprehensive programme of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key elements of this programme include:

• Encryption in Transit: All data transmitted between your device and the dewa6 Platform is encrypted using Transport Layer Security (TLS 1.2 or higher). Our SSL certificate is maintained and renewed continuously to ensure uninterrupted secure transmission.
• Encryption at Rest: Sensitive Personal Data stored on dewa6 servers — including KYC documents, payment records, and Account credentials — is encrypted at rest using AES-256 encryption or equivalent industry-standard protocols.
• Access Controls: Access to Personal Data within dewa6's internal systems is governed by strict role-based access controls. Employees and contractors are granted access only to the specific data categories necessary to perform their job functions. All access is logged and subject to regular audit.
• Network Security: The dewa6 Platform infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and regular penetration testing conducted by qualified independent security specialists.
• Two-Factor Authentication: dewa6 supports two-factor authentication (2FA) for Member Account access and mandates it for all internal administrative systems.
• Incident Response: In the event of a confirmed personal data breach that poses a risk to affected individuals, dewa6 will notify the relevant regulatory authority within 72 hours of becoming aware of the breach, and will notify affected Members without undue delay where the breach is likely to result in a high risk to their rights or interests.

Despite these measures, no digital platform can guarantee absolute security. Members are encouraged to contribute to their own account security by using a strong, unique password, enabling 2FA, and reporting any suspected unauthorised access to [email protected] immediately.

The dewa6 Platform is strictly intended for adults aged 21 years and older. dewa6 does not knowingly collect, process, or retain Personal Data from individuals under the age of 21. This restriction reflects both our international gaming licence obligations and our commitment to responsible gaming in the Indonesian market.

dewa6's KYC verification process is specifically designed to detect and reject registration attempts by individuals who do not meet the 21+ age requirement. Where dewa6 discovers that Personal Data has been collected from an individual under the age of 21 — whether through a successful circumvention of age verification controls or otherwise — we will immediately suspend the relevant Account, void any associated transactions, and permanently delete all Personal Data collected from that individual without delay.

If you are a parent or guardian and believe that your child has submitted Personal Data to dewa6 in breach of this Policy, please contact us immediately at [email protected]. We will investigate and take prompt remedial action, including permanent deletion of the relevant data.

dewa6 operates as an internationally licensed platform. In order to deliver its services to Members in Indonesia, certain Personal Data may be transferred to, stored in, or processed in jurisdictions outside Indonesia, including the jurisdiction in which dewa6 holds its gaming licence and the locations of our third-party service providers (payment processors, KYC providers, game studios, and cloud infrastructure providers).

Where Personal Data is transferred internationally, dewa6 takes all reasonable steps to ensure that such transfers are subject to appropriate safeguards, including:

• Contractual clauses that impose data protection obligations on the recipient consistent with internationally recognised standards;
• Transfers only to jurisdictions or service providers that maintain security and privacy standards equivalent to those described in this Policy;
• Data processing agreements with all third-party processors that specify the purposes of processing, the security measures to be applied, and the prohibition on any further transfer without dewa6's written consent.

By using the dewa6 Platform and submitting your Personal Data, you acknowledge and consent to the international transfers described in this Section, subject to the safeguards set out above.

dewa6 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in Applicable Law, updates to our international gaming licence conditions, or improvements to our Platform and services.

When material changes are made to this Policy, dewa6 will:

• Update the "Effective Date" at the top of this page;
• Display a prominent notice on the Platform's homepage and/or login page for a period of at least fourteen (14) days following the update;
• Send a notification to your registered email address summarising the key changes, where the change materially affects your rights or the way we use your data.

Your continued use of the dewa6 Platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you must cease using the Platform and may request closure of your Account by contacting [email protected].

If you have any questions, concerns, or formal complaints regarding this Privacy Policy or the way dewa6 handles your Personal Data, please contact our Data Protection team using the details below. All contact details are provided as plain text and are not clickable links.

• Email: [email protected]
• WhatsApp: +62 811 0000 6666
• Live Chat: Available 24/7 on the dewa6 Platform, staffed by native Indonesian-speaking agents (WIB, UTC+7)
• Response Target: dewa6 aims to respond to all privacy-related enquiries within three (3) business days, and to complete all verified rights requests within thirty (30) calendar days

When submitting a privacy enquiry or rights request, please include your registered username, a description of your request, and — for rights requests — a copy of a government-issued identity document to allow us to verify your identity before processing the request.

If you are not satisfied with dewa6's response to your complaint, you have the right to escalate your complaint to the relevant regulatory or supervisory authority designated under dewa6's licensing jurisdiction. dewa6 will provide details of the appropriate authority upon request.