Privacy Policy
How Dewagg Protects Your Data

Introduction

Dewagg ("Company", "Platform", "we", "us", "our") is committed to protecting the privacy and personal data of all users ("User", "Player", "you", "your") who access or use the Dewagg online gaming and sports betting platform at https://dewagg.buzz and any associated services (collectively, the "Platform"). This Privacy Policy ("Policy") sets out the basis on which we collect, process, store, share, and protect personal data in connection with your use of the Platform.

This Policy is issued in accordance with the data protection principles applicable under our international licensing framework and should be read alongside our Terms and Conditions and Responsible Gambling Policy, each of which forms part of your agreement with Dewagg.

By registering an account on the Platform, completing the KYC verification process, or otherwise using any features of the Dewagg Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must cease using the Platform immediately.

Definitions

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, date of birth, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means Dewagg, as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party that processes personal data on behalf of Dewagg pursuant to a data processing agreement.
• "KYC" means Know Your Customer verification procedures used to confirm a User's identity, age, and payment method ownership.
• "Cookies" means small text files stored on a User's device by a web browser to retain session information and preferences.
• "Sensitive Personal Data" means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, health information, or financial details beyond standard payment information.

Data We Collect

Dewagg collects personal data only to the extent necessary to provide a safe, compliant, and functional gaming and betting service to our Users. The categories of personal data we may collect are outlined in the table below.

How We Collect Your Data

Dewagg collects personal data through the following channels:

4.1 Information You Provide Directly

• Account registration forms, where you provide your name, date of birth, email, and contact details.
• KYC verification submissions, where you upload identity and address documentation.
• Deposit and withdrawal requests, where payment method information is captured.
• Customer support interactions via live chat, email, or any written correspondence with the support team.
• Survey responses, feedback submissions, and promotional participation where you voluntarily provide information.

4.2 Information Collected Automatically

• Technical data collected when you access the Platform, including your IP address, device type, browser version, and operating system.
• Usage data collected through server logs, including page navigation paths, session duration, and features accessed.
• Cookies and similar tracking technologies placed on your device when you visit the Platform, subject to your cookie preferences.
• Location data derived from IP address resolution, used to apply jurisdictional access controls and detect VPN usage.

4.3 Information from Third Parties

• Identity verification data returned by third-party KYC service providers engaged by Dewagg to confirm document authenticity.
• Payment validation data from payment processors, including DuitNow, FPX, and Malaysian bank partners such as Maybank, CIMB, Public Bank, and Hong Leong.
• Fraud risk signals from licensed anti-fraud and AML screening services.

Data Processing

Dewagg processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your Player account, including authentication, password management, and notification services.
• Identity Verification: Conducting KYC checks to verify your identity, confirm your age (minimum 21 years), and validate ownership of payment methods in accordance with our licensing obligations.
• Payment Processing: Processing deposits and withdrawals via local Malaysian payment channels including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency methods.
• Anti-Money Laundering (AML) Compliance: Monitoring account activity for signs of money laundering, fraud, or other financial crime, as required under international gaming licence obligations.
• Responsible Gambling: Monitoring gameplay patterns to identify at-risk behaviour, applying deposit limits and self-exclusion requests, and delivering responsible gaming notifications.
• Platform Security: Detecting and preventing fraud, account takeover attempts, cheating, collusion, and other prohibited conduct.
• Customer Support: Addressing account queries, resolving disputes, and communicating relevant account-related information to Users.
• Legal and Regulatory Compliance: Meeting obligations under our international gaming licence, including record-keeping, audit support, and cooperation with lawful regulatory enquiries.
• Product Improvement: Analysing usage patterns and User feedback to improve the performance, stability, and feature set of the Platform.
• Marketing Communications: Sending promotional offers, event notifications, and game updates to Users who have consented to marketing communications. You may withdraw consent at any time through your Account settings.

Legal Basis for Processing

Dewagg processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between Dewagg and you, including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations under our international gaming licence, including AML monitoring, KYC verification, and record retention.
• Legitimate Interests: Processing conducted to pursue Dewagg's legitimate interests, including fraud prevention, platform security, and product analytics, where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your explicit consent, primarily for marketing communications and optional analytics. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

Dewagg does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We may share your personal data only in the following limited circumstances:

• Service Providers: Third-party vendors engaged by Dewagg to provide services integral to the Platform's operation, including payment processors, KYC verification providers, fraud detection services, customer support technology providers, and cloud infrastructure operators. All service providers are bound by data processing agreements that restrict their use of your data.
• Game Providers: Licensed international game studios whose titles are hosted on the Platform may receive limited technical and session data necessary to deliver game content. No identity or financial data is shared with game providers beyond what is technically required.
• Regulatory Authorities: Where required by law or by lawful request from a competent regulatory authority or court under our licensing jurisdiction, Dewagg may disclose personal data. We will notify affected Users of such disclosure requests where legally permitted to do so.
• Anti-Fraud & AML Partners: Licensed fraud prevention and anti-money laundering screening providers may receive data required to conduct identity and transaction risk assessments.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of Dewagg's assets, User data may be transferred as part of that transaction. Affected Users will be notified in advance.

Cookies & Tracking Technologies

The Dewagg Platform uses cookies and similar technologies to provide a functional, secure, and personalised user experience. The following categories of cookies may be placed on your device:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing identifiers. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences, including language settings, last-visited game categories, and deposit method choices, to personalise your experience on return visits.
• Analytics Cookies: Used to collect aggregated data about how Users navigate the Platform, which pages are visited most frequently, and where technical issues occur. This data is used to improve Platform performance and does not identify individual Users.
• Security & Fraud Prevention Cookies: Used to detect unusual activity, flag potential account takeover attempts, and support responsible gambling monitoring by tracking session duration and activity patterns.

You may manage cookie preferences through your browser settings. Disabling certain cookie categories may affect Platform functionality, including session persistence and personalised features. Dewagg does not use third-party advertising cookies or place tracking cookies for the benefit of external advertisers.

Data Retention

Dewagg retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, audit, and licensing obligations. Specific retention periods are guided by the following principles:

• Account Data: Retained for the duration of the account's active status and for a minimum of five (5) years following permanent account closure, in accordance with AML record-keeping requirements under our licensing framework.
• Transaction Records: Deposit, withdrawal, and betting transaction records are retained for a minimum of five (5) years from the date of the transaction.
• KYC Documents: Identity and verification documents are retained for the duration of the account relationship and for a minimum of five (5) years following account closure.
• Customer Support Records: Communications with the support team are retained for three (3) years from the date of the interaction.
• Marketing Preferences: Consent records and marketing preference data are retained for the duration of the marketing relationship and for one (1) year following opt-out.

Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. You may request early deletion of your data subject to the conditions described in Section 12 (User Rights) below.

Data Security

Dewagg implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security infrastructure includes:

• 256-bit Transport Layer Security (TLS) encryption applied to all data transmitted between your device and the Dewagg Platform.
• Encryption at rest for sensitive personal and financial data stored on our servers.
• Multi-factor authentication requirements for administrative Platform access.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Continuous monitoring of system logs for anomalous access patterns and potential security incidents.

International Data Transfers

As an internationally operating platform serving players across Malaysia and other jurisdictions, Dewagg may transfer personal data to, and process data in, countries outside of Malaysia. Such transfers may occur where our service providers, data processors, or licensing authorities are located in other jurisdictions.

Where personal data is transferred internationally, Dewagg ensures that appropriate safeguards are in place to protect that data, including contractual obligations on receiving parties that are equivalent to the protections provided under this Policy. Transfers are conducted only to countries or service providers that maintain adequate data protection standards as assessed under our applicable licensing framework.

Your Data Rights

Subject to applicable law and our regulatory obligations, you have the following rights in respect of your personal data held by Dewagg. Requests to exercise these rights may be submitted to our Data Protection contact at the email address set out in Section 16.

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. For account-linked data, corrections can be initiated by contacting our support team directly.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our overriding legal obligations including AML record retention requirements.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances, such as where the accuracy of data is disputed or where you have objected to processing pending verification of legitimate grounds.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request that we provide your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to processing of your personal data carried out on the basis of legitimate interests, including direct marketing. Objections to marketing will be honoured immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

Dewagg will respond to data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and reasons for delay. We may need to verify your identity before processing a data rights request.

Minors & Age Policy

The Dewagg Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Our KYC verification process is designed to identify and prevent account registrations by underage individuals.

If Dewagg becomes aware, or has reason to believe, that an account has been registered by a person under the age of 21, we will immediately suspend that account, conduct a review, and permanently close the account if the age violation is confirmed. Any funds associated with such an account will be handled in accordance with our Terms and Conditions and applicable legal requirements.

If you are a parent or guardian and believe that a minor in your care has registered an account on the Dewagg Platform, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action.

Third-Party Links & Services

The Dewagg Platform may contain references to or integrations with third-party services such as payment processors, customer support platforms, and game delivery networks. This Privacy Policy applies only to data collected and processed by Dewagg directly. It does not apply to data collected by third-party services accessed through or in connection with the Platform.

Where you interact with a third-party payment provider (such as Touch 'n Go eWallet, Boost, or a Malaysian banking partner), that provider's own privacy policy governs the data they collect in connection with your payment transaction. Dewagg is not responsible for the privacy practices of third-party service providers and encourages you to review their policies independently.

Amendments to This Policy

Dewagg reserves the right to update or revise this Privacy Policy at any time. Material changes — including changes to the categories of data collected, the purposes of processing, or your rights — will be communicated to registered Users via the email address on their account and through a prominent notice on the Platform prior to the effective date of the change.

Non-material clarifications and typographical corrections may be made without prior notice. The "Last updated" date at the top of this page will always reflect the most recent revision. Your continued use of the Platform following notification of material changes constitutes your acceptance of the revised Policy. The current version of this Policy supersedes all previous versions.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by Dewagg, please contact our Data Protection team using the details below. We aim to respond to all data-related enquiries within five (5) business days.

For responsible gambling requests, account self-exclusion, or other gaming-related concerns, please visit our Responsible Gambling page or reference the support information in our FAQ.