Dewa42 Privacy Policy – Member Personal Data Protection

1 Introduction

Dewa42 understands that trust is the foundation of every good relationship between a platform and its users. When you register and play at dewa42, you entrust us with certain personal information — and we take that trust seriously.

This Privacy Policy is designed to be as clear as possible — not a legal document deliberately written to confuse. We want you to know exactly what happens with your data, why we need it, and what we will never do with it. If any part is still unclear, the dewa42 support team is ready to explain at any time.

---

2 Data We Collect

Dewa42 collects data from various sources to deliver optimal service and ensure the security of all members. The following are the categories of data we collect:

---

3 How We Use Your Data

The data we collect is used responsibly and only for purposes relevant to platform operations. Specifically, we use it to:

• Operate and maintain member accounts — including the registration process, login, and profile management.
• Process financial transactions — deposits, withdrawals, and accurate transaction history recording.
• Identity Verification (KYC) — to ensure account security and compliance with applicable regulations.
• Prevent and detect fraud — dewa42's security systems analyze activity patterns to identify potential misuse.
• Enhance the platform experience — anonymous activity data is used to understand user preferences and optimize features.
• Send relevant communications — security notifications, account update information, and promotions tailored to your preferences.
• Meet legal obligations — including transaction record retention for the duration required by regulation.

---

4 Legal Basis for Data Processing

Every personal data processing activity we carry out has a clear legal basis. dewa42 processes member personal data based on one or more of the following grounds:

• Contract performance — data processing required to fulfill Dewa42's obligations to members under the agreed Terms and Conditions.
• Legitimate interests — processing required to operate the business legally and protect the interests of the platform and all members against fraudulent activity.
• Legal obligation — processing required by applicable laws and regulations, including reporting obligations to competent authorities where necessary.
• Consent — for certain types of processing, such as sending marketing communications, we request explicit consent which may be withdrawn at any time.

---

5 Sharing Data with Third Parties

Dewa42 does not sell or trade members' personal data to outside parties. However, in the course of operating the platform, there are situations where data may need to be shared with certain third parties:

• Technology service providers — infrastructure, payment processing, and hosting partners that support platform operations. All partners are bound by confidentiality agreements and only access data necessary for their services.
• Game service providers — game providers integrated on the dewa42 platform may receive game session data necessary to run those games properly.
• Legal authority — data may be shared with authorities when required by a valid legal order, financial crime investigation, or regulatory reporting obligation.
• Independent audit — external auditors conducting platform compliance reviews may access data within a limited and protected scope.

---

6 Data Security

Protecting member personal data is an operational priority we never compromise on. dewa42 implements the following layers of technical and organizational security:

• 256-bit SSL encryption for all data transmitted over the network.
• Encryption of sensitive data stored in the database using strong encryption algorithms.
• Role-based access control ensuring only authorized personnel can access specific data.
• Real-time security monitoring with an intrusion detection system active around the clock.
• Regular security audits conducted by our internal team and independent third parties.
• Regular cybersecurity training for all employees who handle member data.

While we implement the best available security measures, no digital system can guarantee absolute security. dewa42 is committed to responding to any security incident as quickly as possible and notifying affected members in accordance with regulatory obligations.

---

7 Cookies and Tracking Technologies

Dewa42 uses cookies and similar technologies to enhance your experience on our platform. The following types of cookies are used:

• Essential cookies — required for core platform functions such as login sessions and security. These cookies cannot be disabled without disrupting platform use.
• Functional cookies — stores your preferences such as language, display settings, and recently played game history for a more personalized experience.
• Analytics cookies — collects anonymous data on how members use the platform, used to identify areas for improvement.
• Security cookies — helps identify and prevent unauthorized access by recognizing familiar devices and access patterns.

You can manage your cookie preferences through your browser settings or the privacy preference center on the dewa42 platform. Disabling certain types of cookies may affect some functionality.

---

8 Your Rights Over Personal Data

As a dewa42 member, you have a number of rights you can exercise at any time regarding your personal data. These are not merely legal obligations — we believe they are fundamental rights that must be respected.

---

9 Data Retention and Deletion

Dewa42 retains personal data only for as long as necessary for the purposes outlined in this policy. Our principle is simple: data that is no longer needed is deleted, not kept just in case.

• Active account data — retained for as long as the account remains active and in use by the member.
• Closed account data — retained for 5 years after account closure for audit and legal compliance purposes, then permanently deleted.
• Financial transaction data — retained for 7 years in accordance with applicable financial record-keeping obligations.
• Security logs — retained for 12 months for security incident investigation purposes if needed.
• Support communication data — retained for 2 years for service quality improvement purposes.

---

10 Updates to This Policy

This Privacy Policy will be updated periodically to reflect changes in our practices, legal requirements, or new platform features. We will communicate any updates through:

• An in-platform notification when you log in for the first time after an update.
• Email sent to the address registered on your account for significant changes.
• An updated "Last updated" date at the top of this page.

Continuing to use the platform after an update is published is considered acceptance of the new policy version. If you do not agree with the changes made, you have the right to close your account and request data deletion in accordance with the applicable procedure.

---

11 How to Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, you can reach the dewa42 team via:

• Live chat — available 24 hours a day, 7 days a week directly from the dewa42 platform once you are logged in to your account.
• Support email — send privacy-related questions or requests to the official email address listed in the footer of this page.

We are committed to responding to all privacy-related inquiries or requests within 2 business days, and to resolving requests requiring further action within 30 calendar days.