dewa90 Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how dewa90 ("dewa90," "we," "us," or "our") collects, uses, discloses, stores, and protects personal information obtained from individuals ("you" or "User") who access or use the dewa90 online casino platform available at dewa90.one (the "Platform").

By registering an account, accessing the Platform, or otherwise providing your personal information to dewa90, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

This Policy should be read together with the dewa90 Terms & Conditions, which govern your overall use of the Platform. Capitalised terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

Data Controller

For the purposes of the Data Privacy Act of 2012 and applicable data protection legislation, dewa90 acts as the Personal Information Controller in respect of the personal data it collects and processes through the Platform. dewa90 determines the purposes and means of processing your personal information and is responsible for ensuring that such processing complies with applicable law.

Where dewa90 engages third-party service providers to process personal data on its behalf (for example, payment processors or identity verification providers), those parties act as Personal Information Processors and are bound by data processing agreements that require them to handle your data only in accordance with dewa90's instructions and applicable law.

Personal Data We Collect

dewa90 collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include:

How We Collect Your Data

dewa90 collects personal data through the following means:

• Direct interactions: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, pixel tags, and server logs.
• Third-party sources: Identity and fraud-check data received from KYC verification providers, payment processors, and fraud prevention agencies where permitted by law.
• Publicly available sources: Information from public databases or government registries used to verify your identity or comply with anti-money laundering obligations.

Purposes & Legal Basis for Processing

dewa90 processes your personal data only where there is a lawful basis to do so. The table below sets out the primary purposes for which we process your data and the corresponding legal basis under the Data Privacy Act of 2012:

Sharing Your Personal Data

dewa90 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, Maya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process your financial transactions.
• KYC and identity verification providers: Third-party services that verify your identity documents and age in compliance with Philippine gaming regulations.
• Fraud prevention and AML agencies: Organisations that help dewa90 detect and prevent fraudulent activity, money laundering, and other financial crimes.
• IT and platform service providers: Cloud hosting, data storage, and cybersecurity providers who process data on dewa90's behalf under strict contractual obligations.
• Regulatory and law enforcement authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other Philippine government bodies where disclosure is required by law or court order.
• Professional advisers: Lawyers, auditors, and accountants bound by professional confidentiality obligations, where necessary for dewa90's legal or business operations.

Data Retention

dewa90 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with Philippine AML regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• Gaming history: Retained for a minimum of three (3) years for regulatory compliance and dispute resolution purposes.
• Marketing communications data: Retained until you withdraw your consent or for a maximum of two (2) years from your last interaction with dewa90, whichever is earlier.
• Technical and usage logs: Retained for up to twelve (12) months for security and analytics purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with you.

Security Measures

dewa90 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data transmitted between your device and the dewa90 Platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorised dewa90 personnel and service providers on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Penetration testing: dewa90 conducts regular security assessments and penetration tests to identify and remediate vulnerabilities in the Platform.
• Incident response: dewa90 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights, dewa90 will notify the National Privacy Commission (NPC) and affected individuals in accordance with the Data Privacy Act of 2012.
• Staff training: All dewa90 personnel who handle personal data receive regular data protection and security awareness training.

While dewa90 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. You are responsible for keeping your dewa90 account credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.

Cookies & Tracking Technologies

dewa90 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyse usage patterns, and deliver relevant content. A cookie is a small text file placed on your device when you visit the Platform.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform. Your cookie preferences can also be updated via the cookie consent banner displayed on your first visit to dewa90.

Your Data Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by dewa90:

• Right to be informed: You have the right to be informed about how your personal data is collected and processed, as set out in this Policy.
• Right of access: You may request a copy of the personal data dewa90 holds about you, along with information about how it is being used.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. You can update basic account information directly in your dewa90 account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to dewa90's legal retention obligations.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you have grounds relating to your particular situation.
• Right to data portability: You may request that dewa90 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe dewa90 has violated your data privacy rights.

Minors

The dewa90 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. dewa90 does not knowingly collect personal data from individuals under the age of 21.

If dewa90 becomes aware that personal data has been collected from a person under 21 years of age, it will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the Platform, please contact our support team immediately.

International Data Transfers

dewa90 primarily stores and processes personal data within the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines (for example, cloud infrastructure providers), dewa90 ensures that such transfers are carried out in compliance with the Data Privacy Act of 2012, including by implementing appropriate contractual safeguards such as standard data protection clauses.

dewa90 will not transfer your personal data to a country or territory that does not provide an adequate level of data protection without first implementing appropriate safeguards and, where required, obtaining your consent.

Changes to This Policy

dewa90 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. The date of the most recent revision is displayed at the top of this page. Where changes are material, dewa90 will notify registered players by email or via a prominent notice on the Platform prior to the changes taking effect.

Your continued use of the Platform following the publication of any revised Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how dewa90 protects your personal data.

Contact & Data Protection Officer

dewa90 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection law. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the dewa90 DPO: