Your privacy matters. This policy explains exactly what personal data dewa90 collects, why we collect it, how we protect it, and the rights you hold as a member on our platform.
dewa90 ("we", "us", "our") is the operator of the online gaming platform accessible at https://dewa90.cam. We are committed to protecting the privacy and security of every person who interacts with our platform, whether as a registered member, a prospective member browsing our games, or a visitor navigating our content pages.
This Privacy Policy sets out in clear, plain English how dewa90 collects, uses, stores, shares, and safeguards personal data in connection with the provision of our Services to members primarily located in Indonesia. It also describes your rights in relation to that data and the mechanisms available to exercise those rights.
This Privacy Policy applies to all dewa90 Services, including our website at https://dewa90.cam, live casino games (Baccarat, Andar Bahar, Teen Patti), RNG slots, sportsbook markets, and togel (Indonesia's traditional numbers lottery) draw products. It should be read together with our Terms & Conditions and Responsible Gaming Policy.
Your Consent: By registering a dewa90 account, making a deposit, or continuing to use our platform after this policy has been updated and brought to your attention, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, email address, date of birth, residential address, payment details, device identifiers, and IP addresses. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction. |
| "Data Controller" | dewa90, as the entity that determines the purposes and means of Processing of Personal Data collected through the platform. |
| "Data Processor" | Any third party that Processes Personal Data on behalf of dewa90 in accordance with dewa90's instructions, including payment processors, KYC verification providers, and cloud infrastructure partners. |
| "Member" | A natural person who has completed registration on dewa90 and whose account has been activated. |
| "Services" | All gaming, betting, payment, and support services offered by dewa90 through the platform. |
| "Sensitive Data" | A subset of Personal Data warranting heightened protection, including financial account details, identity document numbers, and information related to a Member's gaming behaviour for responsible gaming purposes. |
dewa90 collects the minimum Personal Data necessary to deliver our Services safely, comply with our legal obligations, and continuously improve the member experience. The categories of data we collect are as follows:
When you open a dewa90 account, we collect: full legal name, date of birth, email address, mobile phone number, residential address in Indonesia (including city — for example Jakarta, Surabaya, Bandung, Medan, or Bali), preferred username, and a hashed version of your chosen password. We never store passwords in plain text.
To comply with our anti-money-laundering (AML) obligations and to verify that members are at least 21 years of age, we collect copies of government-issued identity documents (Indonesian KTP, SIM, or passport), proof of residential address, and proof of payment method ownership. These documents are processed by our KYC verification partner and stored in encrypted form.
We collect transaction data associated with deposits and withdrawals made via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, and LinkAja. This includes bank account numbers, e-wallet identifiers, transaction amounts in Indonesian Rupiah (IDR), and timestamps. We do not store full card numbers or CVV codes; payment card data (if applicable) is handled exclusively by PCI-DSS-compliant payment processors.
We record all gameplay sessions, bet placement history, game outcomes, bonus transactions, login and logout times, session durations, and navigation behaviour within the platform. This data is used for account management, dispute resolution, responsible gaming monitoring, and game performance analysis.
When you access dewa90, our servers automatically collect your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session cookie identifiers. This technical data is used for fraud prevention, security monitoring, and platform optimisation.
If you contact dewa90 customer support via email or live chat, we retain records of those communications — including the content of messages, timestamps, and any attachments — for quality assurance, dispute resolution, and training purposes.
Where you have opted in to receive promotional communications, we record that preference alongside the channel (email or on-platform notification) through which you wish to be contacted. You may update or withdraw your marketing consent at any time via your account settings.
dewa90 collects Personal Data through the following mechanisms:
| Purpose | Data Categories Used |
|---|---|
| Account registration and management | Registration Data, Device & Technical Data |
| Age and identity verification (KYC / AML) | KYC Data, Registration Data, Financial Data |
| Processing deposits and withdrawals in IDR | Financial Data, KYC Data |
| Delivering gaming services and settling bets | Gaming & Activity Data, Registration Data |
| Fraud prevention and security monitoring | Device & Technical Data, Financial Data, Gaming & Activity Data |
| Responsible gaming monitoring and intervention | Gaming & Activity Data, Registration Data, Communications Data |
| Customer support and dispute resolution | Communications Data, Registration Data, Gaming & Activity Data, Financial Data |
| Personalised promotions and bonus offers (where opted in) | Marketing Preference Data, Gaming & Activity Data |
| Platform analytics and product improvement | Device & Technical Data, Gaming & Activity Data (aggregated/anonymised) |
| Compliance with applicable law and regulatory obligations | All categories as required |
dewa90 processes your Personal Data on the following legal bases:
dewa90 does not sell, rent, or trade your Personal Data to any third party for that party's own commercial purposes. Data is shared only as strictly necessary for the delivery of our Services or as required by law.
In the event of a merger, acquisition, or sale of all or substantially all of dewa90's assets, Personal Data held by dewa90 may be transferred to the acquiring entity as part of that transaction. You will be notified via email and/or a prominent platform notice before your data becomes subject to a materially different privacy policy.
Important: All third-party Data Processors engaged by dewa90 are contractually required to process your Personal Data only on dewa90's instructions, to maintain appropriate technical and organisational security measures, and to delete or return data at the conclusion of the processing relationship.
dewa90 retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention schedules apply:
| Data Category | Retention Period | Rationale |
|---|---|---|
| Registration Data | Duration of membership + 5 years after account closure | AML obligation; dispute resolution |
| KYC / Identity Documents | 5 years from the date of verification or account closure (whichever is later) | Regulatory AML retention requirement |
| Financial Transaction Records | 5 years from each transaction date | AML and financial reporting obligations |
| Gaming & Bet History | 3 years from each game session | Dispute resolution; responsible gaming monitoring |
| Customer Support Communications | 2 years from each interaction | Quality assurance; dispute resolution |
| Device & Technical Logs | 12 months from collection | Security monitoring; fraud detection |
| Marketing Preference Records | Until withdrawal of consent + 1 year | Evidence of consent; unsubscribe compliance |
At the expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Anonymised, aggregated data may be retained indefinitely for platform analytics purposes, as it no longer constitutes Personal Data.
dewa90 implements a layered technical and organisational security programme designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:
Your Responsibility: While dewa90 takes every reasonable step to secure the platform, no internet-based service can guarantee absolute security. You are responsible for maintaining the confidentiality of your dewa90 account credentials. Never share your password with anyone — dewa90 staff will never ask for your password. If you suspect unauthorised access to your account, contact our support team immediately at support@dewa90.cam.
Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, maintain your session state, and collect aggregate usage data. dewa90 uses first-party cookies only — we do not allow third-party advertising networks to place tracking cookies on our platform.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your authenticated login session, CSRF protection tokens, and load-balancing state. Without these cookies, the platform cannot function. | Session / up to 24 hours |
| Functional | Remember your language preference, game lobby layout, and responsible gaming notification settings. | Up to 12 months |
| Analytics | Collect aggregated, anonymised data on page visits, game loading times, and navigation flows to help us improve the platform. No personally identifiable data is sent to analytics systems. | Up to 12 months |
| Security / Fraud | Device fingerprinting tokens used by our fraud detection system to identify suspicious session patterns and detect duplicate accounts. | Up to 6 months |
Strictly necessary and security cookies cannot be disabled without breaking core platform functionality. Functional and analytics cookies may be disabled via your browser settings. Please note that disabling functional cookies may affect your experience — for example, your session preferences may not be saved between visits. Consult your browser's help documentation for instructions on managing cookies.
As a data subject whose Personal Data is processed by dewa90, you hold the following rights. To exercise any of these rights, contact us at support@dewa90.cam with the subject line "Data Rights Request". We will respond within thirty (30) calendar days of receipt.
Request a copy of all Personal Data dewa90 holds about you, along with information about how it is processed and on what legal basis.
Request correction of any inaccurate or incomplete Personal Data we hold about you. For registration details, you may also update information directly via your account profile.
Request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent. This right is subject to our legal retention obligations described in Section 8.
Request that we restrict processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
Request a structured, machine-readable export of Personal Data you have provided to dewa90, where technically feasible and where processing is based on your consent or contractual necessity.
Object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes. Where you object, dewa90 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by updating your preferences in your account settings or by contacting support.
If you believe dewa90 has processed your Personal Data unlawfully, you have the right to lodge a complaint with the competent data protection supervisory authority in the jurisdiction where dewa90 holds its operating licence.
dewa90 is strictly an adults-only platform. Our Services are available exclusively to individuals who are at least 21 years of age. We do not knowingly collect Personal Data from any person under the age of 21.
Age verification is a mandatory step in our KYC process. Any account identified as belonging to a person under 21 will be closed immediately, all gameplay reversed where possible, and all deposited funds returned to the originating payment method after identity verification. If you are a parent or guardian and believe that a minor has registered on dewa90 without your consent, please contact us immediately at support@dewa90.cam.
Age Restriction — 21+ Only: It is an offence under our Terms & Conditions to provide false date-of-birth information during registration. dewa90 employs automated age-estimation tools and manual document review to enforce this requirement.
dewa90 operates as an internationally licensed gaming platform and, as a result, some of your Personal Data may be transferred to and processed in countries outside Indonesia. This may occur in the context of cloud hosting infrastructure, KYC verification services, game studio integrations, or fraud prevention tools operated by partners in other jurisdictions.
Where such international transfers occur, dewa90 ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to that described in this Privacy Policy. These safeguards include:
dewa90 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes in the Services we offer. Material changes will be communicated to all active Members via the email address registered to their account and/or via a prominent notice on the dewa90 platform, at least seven (7) days before the revised policy takes effect.
The effective date displayed at the top of this page will be updated each time a new version is published. We encourage you to review this Privacy Policy periodically. Your continued use of the platform after the effective date of any amendment constitutes acceptance of the revised policy. If you do not accept the revised terms, you must close your account before the effective date of the change.
Prior versions of this Privacy Policy are available on request by contacting support@dewa90.cam.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about how dewa90 handles your Personal Data, please contact our Data Protection team through the following channel:
Please include "Data Rights Request" or "Privacy Enquiry" in the subject line of your email, along with your registered username and a description of your request, so that we can locate your account and respond efficiently.
How We Protect You
Every measure dewa90 takes is designed to ensure your personal information remains private, secure, and used only in ways you would expect.
All data transmitted between your device and the dewa90 platform is encrypted using industry-standard 256-bit SSL/TLS protocols. Your personal and financial information is protected in transit at all times.
dewa90 operates a strict no-data-sale policy. Your personal information is never sold, rented, or traded to any third party for commercial purposes. Data is shared only with operational partners under binding data processing agreements.
Identity documents submitted for KYC verification are encrypted at rest and processed exclusively by our vetted verification partner. Document images are never stored unencrypted and are subject to the retention limits in Section 8.
dewa90 gives you full control over your Personal Data. You can access, correct, export, or request deletion of your data at any time by contacting our Data Protection team. Marketing preferences can be updated directly in your account settings.
Transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja involve only the minimum financial data required for processing. Full bank account credentials are never stored on dewa90 servers.
dewa90 does not retain your data indefinitely. Every category of Personal Data has a defined maximum retention period, after which it is securely deleted or anonymised. See Section 8 for the full retention schedule.
Ready to Play?
Now that you understand how dewa90 protects your personal data, dive into our full range of games — from live Baccarat and Andar Bahar tables to thousands of slots and real-money sportsbook markets. Your privacy is always our priority.