Dewetoto is committed to protecting your personal data with transparency, integrity, and full respect for your privacy rights. This Policy explains what we collect, how we use it, and how we keep it safe.
All personal data transmitted between your device and the dewetoto platform is encrypted using 256-bit SSL technology — the same standard employed by Malaysian financial institutions including Maybank and CIMB.
Dewetoto does not sell, rent, or trade your personal information to third parties for marketing or commercial purposes. Data shared with partners is strictly limited to what is necessary for payment processing, regulatory compliance, and platform operations.
You have the right to access, correct, port, and request deletion of your personal data at any time. Dewetoto responds to verified data subject requests within 30 calendar days, in line with applicable data protection standards.
We collect only the personal data that is strictly necessary for account management, payment processing, identity verification, and regulatory compliance. We do not collect data speculatively or retain it beyond the periods outlined in this Policy.
Promotional communications from dewetoto are opt-in by default. You may withdraw consent for marketing emails or SMS at any time via your Account Settings or by contacting our support team. Withdrawal of marketing consent does not affect your ability to use the Platform.
This Privacy Policy is written in plain English and structured to be genuinely readable — not buried in legal jargon. We explain clearly what data we collect, why we collect it, who we share it with, and how long we keep it.
Dewetoto ("we", "us", "our", "the Platform") operates the online gaming platform accessible at https://dewetoto.cam. We are committed to processing the personal data of our registered players ("you", "the Player", "Data Subject") in a manner that is lawful, fair, and transparent.
This Privacy Policy ("Policy") describes the types of personal information that dewetoto collects in connection with your use of the Platform, the purposes for which that information is processed, the circumstances under which it may be disclosed to third parties, the measures we take to protect it, and the rights available to you in connection with your personal data.
This Policy applies to all personal data collected via the dewetoto website, mobile-optimised interface, live chat, email, and any other interaction channel through which you engage with the Platform. It should be read in conjunction with dewetoto's Terms & Conditions, which governs the overall relationship between you and the Platform.
By registering an account or continuing to use the dewetoto platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, please discontinue use of the Platform and contact us to close your account.
This Policy was last reviewed and updated on 1 January 2026. We encourage you to review this page periodically to remain informed of any changes.
The following terms have the meanings set out below when used throughout this Privacy Policy:
Dewetoto acts as the Data Controller for all Personal Data collected through the dewetoto Platform. As Data Controller, dewetoto determines the purposes for which Personal Data is collected and the manner in which it is processed.
Where dewetoto engages third-party service providers — including payment processors, identity verification providers, and analytics platforms — to process Personal Data on its behalf, those providers act as Data Processors under binding data processing agreements that restrict their use of your data to the specific purposes authorised by dewetoto.
For any queries relating to the exercise of your data protection rights or the manner in which dewetoto processes your Personal Data, you may contact our team via the channels described in Section 15 of this Policy.
Dewetoto collects Personal Data from Players in a variety of contexts. The categories of data collected, and the circumstances in which each category arises, are set out below.
When you create a dewetoto account, we collect the following information:
For the purpose of satisfying our regulatory KYC obligations, we collect:
In connection with deposits and withdrawals processed via Malaysian payment methods — including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, and supported cryptocurrencies — we collect:
During your use of the Platform, we automatically record:
We automatically collect certain technical data when you access the Platform:
When you contact dewetoto via live chat or email, we retain records of those communications, including the content of your messages, timestamps, and any attachments provided, for the purposes of customer service, dispute resolution, and compliance record-keeping.
Dewetoto processes your Personal Data for the following purposes:
Dewetoto processes your Personal Data under one or more of the following legal bases:
Important: Where processing is based on consent, you have the right to withdraw that consent at any time by contacting our support team or updating your Account Settings. Withdrawal of consent for marketing communications does not affect your ability to use the Platform or receive service-related communications that are necessary for your account operation.
Dewetoto does not sell, rent, or trade your Personal Data to any third party for commercial or marketing purposes. We may share your Personal Data with third parties only in the circumstances described below.
To process deposits and withdrawals, dewetoto shares necessary transaction and identity data with licensed payment service providers and financial institutions, including those facilitating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong transactions, as well as cryptocurrency exchange and network infrastructure providers. These processors are contractually bound to use your data only for payment settlement purposes.
KYC verification may be conducted in partnership with licensed third-party identity verification services. These providers process the documentary evidence you submit (such as your Malaysian MyKad or passport) solely for the purpose of confirming your identity and age eligibility.
Dewetoto may disclose Personal Data to regulatory bodies, licensing authorities, financial intelligence units, or law enforcement agencies where required to do so by law, court order, or in the discharge of our compliance obligations — including mandatory reporting of suspicious transactions.
We engage third-party providers for cloud hosting, cybersecurity, analytics, fraud prevention, and customer communication infrastructure. All such providers operate under data processing agreements that restrict their use of your Personal Data to the specific purposes for which they are engaged.
In the event of a merger, acquisition, sale of assets, or other corporate restructuring, your Personal Data may be transferred to the acquiring entity as part of that transaction. In such circumstances, you will be notified via your registered email address prior to your data being transferred and becoming subject to a different privacy policy.
Some of dewetoto's third-party service providers operate from jurisdictions outside of Malaysia. Where Personal Data is transferred to a country that does not provide an equivalent level of data protection to Malaysia's Personal Data Protection Act 2010 (PDPA), dewetoto implements appropriate safeguards to protect your data, including contractual clauses that bind the recipient to data protection obligations consistent with applicable international standards.
By using the dewetoto Platform, you acknowledge that your Personal Data may be processed in jurisdictions outside Malaysia in connection with the legitimate operational needs of the Platform, subject to the safeguards described in this section.
Dewetoto retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. The following table provides indicative retention periods by data category:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account Registration Data | Duration of account + 5 years post-closure | Legal obligation / AML compliance |
| KYC & Identity Documents | 5 years from account closure or last transaction | Regulatory / licensing requirement |
| Financial Transaction Records | 7 years from date of transaction | Financial reporting obligations |
| Gameplay & Betting History | 5 years from date of activity | Dispute resolution / responsible gambling |
| Customer Support Records | 3 years from date of interaction | Legitimate interests / dispute resolution |
| Marketing Consent Records | Until consent withdrawn + 2 years | Consent / legal accountability |
| Technical & Device Logs | 13 months from collection | Security / fraud prevention |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with dewetoto's data destruction procedures. Certain data may be retained for longer periods where required by a specific legal obligation or ongoing regulatory investigation.
Dewetoto uses cookies and similar tracking technologies to operate the Platform, enhance user experience, and support our analytics and fraud prevention functions. When you first access the Platform, you will be presented with a cookie consent notice.
You may manage your cookie preferences via the cookie consent settings on the Platform. Most web browsers also allow you to control cookies through their settings — including blocking or deleting cookies already stored on your device. Note that disabling non-essential cookies will not affect your ability to register an account or use core gaming services, but may reduce the quality of your personalised experience.
Note: Dewetoto does not use cookies or tracking technologies to build advertising profiles for third-party ad networks. Session and behavioural data collected via cookies is used exclusively for Platform operation, security, and responsible gambling purposes.
Dewetoto implements a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. These measures include, but are not limited to:
While dewetoto takes all reasonable steps to protect your Personal Data, no internet-based service can guarantee absolute security. In the event of a material data security incident affecting your Personal Data, dewetoto will notify you and relevant regulatory authorities in accordance with applicable breach notification obligations.
Subject to applicable data protection law, you have the following rights with respect to your Personal Data held by dewetoto. To exercise any of these rights, please contact our support team via the details in Section 15.
Request a copy of the Personal Data we hold about you and information about how it is processed.
Request correction of inaccurate or incomplete Personal Data held about you without undue delay.
Request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Request that we restrict the processing of your Personal Data in certain circumstances, such as when accuracy is contested.
Receive your Personal Data in a structured, commonly used, machine-readable format for transfer to another controller.
Object to processing based on legitimate interests or for direct marketing purposes. Marketing objections are honoured immediately.
Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
Lodge a complaint with the relevant supervisory authority if you believe your data protection rights have been infringed.
Dewetoto will respond to verified data subject requests within 30 calendar days of receipt. Where a request is complex or voluminous, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason within the initial 30-day period. We do not charge a fee for processing data subject requests unless they are manifestly unfounded or excessive.
The dewetoto Platform is strictly for use by persons aged 21 years and above. Dewetoto does not knowingly collect Personal Data from individuals under the age of 21. If we become aware that Personal Data has been submitted by or on behalf of a person under 21, we will immediately suspend the associated account, delete the data, and decline any pending withdrawal requests pending further review.
21+ Strictly Enforced: If you have reason to believe that a minor has registered an account on the dewetoto Platform using false age information, please contact our support team immediately so that we may investigate and take appropriate action.
Dewetoto employs both automated age estimation tools and document-based KYC verification to enforce the 21+ age requirement. Age verification is conducted during registration and again before the first withdrawal is processed.
Dewetoto reserves the right to amend this Privacy Policy at any time. When material changes are made — such as changes to the categories of data collected, the purposes of processing, or your rights — we will notify registered Players via the email address associated with their Account at least 14 calendar days before the changes take effect.
The current version of this Policy is always accessible at https://dewetoto.cam/privacy-policy. The "Effective Date" at the top of this document indicates when this version came into force. Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms.
For minor changes — such as correction of typographical errors or clarifications that do not substantively alter your rights or our obligations — we may update this Policy without prior individual notice, though the document will always reflect the most recent revision date.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by dewetoto, please use one of the following contact channels. All communications are handled in English by our Malaysian-based support team, with responses in MYT (UTC+8).
Available 24 hours a day, 7 days a week — including all Malaysian public holidays. Average first response: under 90 seconds.
[email protected]
(plain text — not a clickable link)
Response: within 4 hours during business hours
Please include your registered Account username or email address, the specific nature of your request (e.g., data access, rectification, erasure), and a brief description of the Personal Data involved. We may request identity verification before processing your request to ensure we disclose data only to authorised individuals.
Your data is protected, your rights are respected, and your information will never be sold to third parties. Now enjoy 3,200+ verified games and fast MYR payouts — for players aged 21 and above only.
For players aged 21 and above only. Play responsibly within your means. Dewetoto — Malaysia's trusted online casino.