dewa39 is committed to protecting the privacy and security of every player's personal data. This Privacy Policy explains exactly what information we collect, why we collect it, how we use it, and the rights you hold over your own data.
Last updated: January 1, 2026Six core principles that govern how dewa39 handles your personal information.
We collect only the personal data that is strictly necessary to provide our services, verify your identity, process transactions, and comply with our legal obligations. We do not harvest data beyond what each specific purpose requires.
dewa39 does not sell, rent, or trade your personal information to third-party marketers under any circumstances. Your data is used exclusively to operate and improve our platform and to fulfill our regulatory compliance requirements.
All personal data stored on dewa39 servers is protected using industry-standard AES-256 encryption at rest and TLS 1.3 encryption in transit. Our infrastructure undergoes regular third-party security audits and penetration testing.
You retain the right to access, correct, and in certain circumstances request deletion of your personal data. You may also object to certain processing activities or request that we restrict how we use your data while a complaint is being resolved.
This Privacy Policy is written in plain, professional English — not in impenetrable legal jargon designed to obscure our practices. We aim to give you a clear and honest picture of every data processing activity we undertake on your behalf.
We do not retain your personal data indefinitely. Each category of data has a defined retention period based on operational necessity and regulatory requirements. Once the retention period expires, data is securely deleted or anonymized.
About This Policy: This Privacy Policy applies to all personal data collected and processed by dewa39 in connection with the operation of the platform at https://dewa39.cam, including all related subdomains, mobile interfaces, and customer communications. By creating an account on dewa39, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein. This policy is effective as of January 1, 2026.
At dewa39, we recognize that trust is the foundation of a lasting relationship with our players. Indonesian players — whether in Jakarta, Surabaya, Bandung, Bali, or anywhere across the archipelago — deserve to know precisely how the platform they trust handles their personal information. This Privacy Policy is our public commitment to that standard of transparency.
This policy should be read alongside our Terms and Conditions and Responsible Gaming Policy, all of which form part of the agreement between dewa39 and each registered player. Where this Privacy Policy conflicts with those documents on a data-protection matter, this Privacy Policy takes precedence.
For the purposes of applicable data protection legislation, dewa39 (operating under the domain https://dewa39.cam) acts as the Data Controller — the entity that determines the purposes and means of processing your personal data.
dewa39 is licensed and regulated internationally as an online gaming operator. All data processing activities carried out under this policy are conducted in accordance with our licensing obligations and internationally recognized data protection principles, including purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability.
If you have questions about how dewa39 processes your personal data, or if you wish to exercise any of your data-subject rights, please contact our dedicated Data Privacy team at the address set out in Section 14 of this policy.
dewa39 collects personal data across several categories depending on your level of interaction with the platform. The following table summarizes the data categories and specific data points we collect:
| Data Category | Specific Data Points | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender, National ID (KTP) number or passport number | Mandatory |
| Contact Data | Email address, mobile phone number, residential address (city, province, postal code) | Mandatory |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal history | Mandatory |
| Verification Data | Copies of government-issued ID, proof of address documents, selfie photograph for liveness checks | Mandatory (KYC) |
| Account Data | Username, encrypted password hash, account creation date, login history, session timestamps, preferred language, notification preferences | Mandatory |
| Transaction Data | Bet history, game session records, wagering amounts, winnings, bonus redemptions, balance movements | Automatic |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, time zone (WIB/WITA/WIT) | Automatic |
| Communications Data | Live chat transcripts, email correspondence, support ticket records, WhatsApp message logs (where applicable) | When applicable |
| Marketing Data | Communication preferences, responses to promotional campaigns, referral source | Optional |
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond the liveness check photograph used solely for identity verification purposes.
dewa39 collects personal data through the following means:
dewa39 processes your personal data only where we have a valid legal basis for doing so. The following table outlines our primary processing purposes and the corresponding legal basis for each:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract |
| Identity verification (KYC) and age verification (21+) | Legal obligation; legitimate interests |
| Processing deposits and withdrawals via BCA, BRI, BNI, Mandiri, and approved e-wallets | Performance of contract |
| Anti-money laundering (AML) screening and fraud prevention | Legal obligation; legitimate interests |
| Providing customer support (live chat, email, WhatsApp) | Performance of contract; legitimate interests |
| Sending transactional communications (deposit confirmations, withdrawal notifications) | Performance of contract |
| Sending promotional communications and personalized bonus offers | Consent (withdrawable at any time) |
| Platform analytics, improvement, and security monitoring | Legitimate interests |
| Responsible gaming monitoring and self-exclusion enforcement | Legal obligation; legitimate interests; vital interests |
| Compliance with regulatory reporting obligations | Legal obligation |
Withdrawing Consent: Where our processing is based on your consent (e.g., receiving marketing emails or promotional SMS messages), you may withdraw that consent at any time by updating your notification preferences in your account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
dewa39 does not sell, rent, or share your personal data with third parties for their own commercial or marketing purposes. We may, however, disclose your personal data to the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual data protection safeguards:
Any third party that receives personal data from dewa39 is required to handle that data in accordance with applicable privacy standards. We conduct due diligence on all data processors before engagement and review those arrangements on an ongoing basis.
As an internationally operated online gaming platform serving players in Indonesia, some of your personal data may be transferred to, stored in, or processed in countries outside Indonesia. This may occur where our cloud infrastructure, game content providers, or KYC partners are based in other jurisdictions.
Whenever personal data is transferred outside Indonesia, dewa39 implements appropriate safeguards to ensure that your data receives a standard of protection equivalent to the protections described in this policy. These safeguards include:
By using the dewa39 platform, you acknowledge that your personal data may be processed in jurisdictions outside Indonesia. If you require further information about specific cross-border transfer arrangements, please contact our Data Privacy team (see Section 14).
dewa39 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting obligations. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | AML regulatory obligation |
| KYC verification documents | Duration of account + 5 years after closure | Legal and regulatory compliance |
| Financial transaction records | 7 years from transaction date | Financial reporting obligations |
| Bet and game session history | 5 years from session date | Dispute resolution; regulatory audit |
| Customer support communications | 3 years from last interaction | Quality assurance; dispute resolution |
| Marketing preference data | Until consent is withdrawn or account closed | Consent-based processing |
| Technical / log data | 13 months from collection | Security monitoring; fraud detection |
Upon expiry of the applicable retention period, personal data is either securely deleted from our systems or anonymized in such a way that it can no longer be associated with any individual. Anonymized data may be retained indefinitely for statistical and analytical purposes.
dewa39 maintains a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:
Your Responsibility: While dewa39 takes extensive measures to secure your data on our end, you are responsible for maintaining the security of your own login credentials. Never share your password with anyone — including dewa39 support staff, who will never ask for your password. If you suspect your account has been compromised, contact us immediately via live chat.
As a dewa39 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our Data Privacy team using the details in Section 14. We will respond to all verifiable requests within 30 days.
How to Submit a Rights Request: To exercise any of the rights listed above, contact our Data Privacy team at [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request". We may need to verify your identity before processing the request. We will acknowledge receipt within 48 hours and provide a substantive response within 30 calendar days.
dewa39 strictly prohibits the registration and use of the platform by anyone under the age of 21 years. We do not knowingly collect personal data from individuals under 21. Age verification is a mandatory component of our KYC process for all players.
If we become aware that we have inadvertently collected personal data from a person under the age of 21, we will take immediate steps to delete that data, close the associated account, and return any deposited funds (less any applicable processing fees) to the source payment method. If you believe a minor may have registered on dewa39, please notify us immediately via our support channels so that we can investigate and act promptly.
21+ Only: Access to dewa39 is restricted to adults aged 21 and over. By registering, you confirm that you meet this age requirement and that you are providing truthful information about your age. Providing false age information constitutes a breach of our Terms and Conditions and may result in criminal referral.
The dewa39 platform may contain references to third-party game providers, payment systems, and other services. While dewa39 exercises reasonable care in selecting its partners and service providers, we are not responsible for the privacy practices or content of any third-party services. Each third-party provider operates under its own privacy policy, which governs how that provider collects and uses your data.
When you interact with a third-party game from providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft within the dewa39 platform, those providers may receive technical session data necessary to deliver the game experience. dewa39 contractually requires all game content providers to handle such data in accordance with applicable privacy standards and prohibits them from using session data for any purpose other than game delivery and technical support.
dewa39 does not control, and is not responsible for, the privacy practices of any third-party payment provider, including local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja). We encourage you to review the privacy policies of those providers directly for information on how they handle your financial data.
dewa39 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via their registered email address and display a prominent notice on the platform at least 7 days before the changes take effect.
The "Last Updated" date at the top of this page will always reflect the date on which the most recent version of this policy came into force. We encourage you to review this Privacy Policy periodically. Your continued use of the dewa39 platform after the effective date of any amended policy constitutes your acceptance of those changes.
If you have concerns about any proposed changes to this Privacy Policy, please contact our Data Privacy team before the effective date to discuss your concerns. If you do not agree with the amended policy, you may close your account and withdraw any remaining real-money balance in accordance with our Terms and Conditions.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way dewa39 handles your personal data, please reach out to our Data Privacy team through any of the following channels:
We are committed to resolving all privacy-related inquiries promptly and transparently. All formal data rights requests will receive an acknowledgment within 48 hours and a substantive response within 30 calendar days of receipt.
Effective Date: This Privacy Policy is effective as of January 1, 2026. It supersedes all previous versions of the dewa39 Privacy Policy. For the complete framework governing your use of dewa39, please also review our Terms & Conditions and Responsible Gaming pages.
Still have questions about how dewa39 handles your data? Our support team is available around the clock. You can also explore our FAQ for quick answers, or review our Terms and Conditions and Responsible Gaming pages for the full picture of how we operate.