Privacy Policy

1.1 dew212 is an internationally licensed online betting and casino platform serving players across Indonesia. We understand that the players who trust us with their personal data deserve a clear, honest account of how that data is handled — free of legalese designed to obscure rather than inform. This Policy aims to deliver exactly that.

1.2 This Policy applies to all personal data collected through: (a) the dew212 website at dew212.cam; (b) any mobile-optimised interface of the same platform; (c) direct communications between you and our customer support team via email or live chat; and (d) any other channel through which you voluntarily submit personal information to dew212.

1.3 This Policy should be read together with our Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference.

1.4 dew212 acts as the data controller for all personal data collected and processed under this Policy. Our designated data contact can be reached at [email protected].

The following terms carry the meanings assigned to them throughout this Policy:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, including name, email address, date of birth, financial account details, device identifiers, and IP addresses.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the party that determines the purposes and means of processing Personal Data — in this context, dew212.
• "Data Processor" means a third party that processes Personal Data on behalf of dew212 under a written data processing agreement.
• "KYC" means Know Your Customer — the identity and age verification procedures dew212 carries out to meet its compliance obligations and to protect players from fraud.
• "Cookies" means small text files placed on your device by a web server to store session information, preferences, and usage data.
• "Account" means the registered user account you hold on dew212.cam.

3.1 dew212 collects personal data through several channels and for distinct purposes. The categories of data we collect are described below.

Registration Data

When you create an Account, we collect: full legal name; date of birth; residential address (including city, province, and postal code within Indonesia); email address; and your preferred username. This information is required to open and maintain your account.

Identity Verification (KYC) Data

To satisfy our age-verification and anti-fraud obligations, we collect copies of government-issued identification (National ID / KTP or passport), proof of residential address, and payment method ownership evidence. KYC documents are processed securely and are not retained beyond the periods described in Section 9.

Financial Transaction Data

We record all deposit and withdrawal transactions including amount (in IDR), timestamp, transaction reference number, and the payment method used (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja). Full payment account numbers are not stored by dew212 — only the last four digits or masked identifiers used for reconciliation.

Betting & Gaming Activity Data

We maintain records of all bets placed, games played, stakes, outcomes, and session durations. This dat a is used to operate the platform, detect prohibited conduct, process responsible gaming requests, and improve our service offering.

Technical & Device Data

When you access the Platform, our servers automatically log: IP address; browser type and version; operating system; device type (desktop, mobile, or tablet); referring URL; pages visited; and session timestamps. This data is used for security monitoring, fraud detection, and platform performance analytics.

Communications Data

If you contact our support team by email or live chat, we retain a record of that correspondence — including your name, contact details, and the content of the exchange — for the purpose of resolving your query and maintaining a service history.

4.1 dew212 uses personal data only for the purposes for which it was collected, or for compatible purposes that a reasonable person would expect given the context of collection. The primary purposes are set out in the table below.

4.2 We will not use your data for automated individual decision-making that produces significant legal effects without human review, except where required by law or where you have provided explicit consent.

4.3 Where we wish to use your data for a new purpose not covered by this Policy, we will notify you in advance and obtain any required consent before proceeding.

5.1 dew212 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and dew212 — including account management, bet settlement, and financial transactions — is carried out on the basis that it is necessary to fulfil our contractual obligations to you.
• Legal Obligation: Certain processing activities — particularly KYC verification, AML record-keeping, and fraud reporting — are required by applicable laws and regulations. dew212 must carry out this processing regardless of consent.
• Legitimate Interests: Where neither contractual necessity nor legal obligation applies, we may process data on the basis of our legitimate interests, provided those interests are not overridden by your privacy rights. Legitimate interests include fraud prevention, platform security, and service improvement.
• Consent: Where processing is not covered by the above bases — such as sending optional promotional emails — we will obtain your prior opt-in consent. You may withdraw consent at any time by contacting our support team.

6.1 dew212 does not sell, rent, or trade your personal data. We share data only with the following categories of recipients, and only to the minimum extent necessary for the stated purpose:

• Payment Processors: To facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja, we share transaction data with the relevant payment service provider. Each provider operates under its own privacy policy and applicable Indonesian financial regulation.
• KYC & Identity Verification Partners: We engage accredited third-party identity verification services to process KYC documents. These partners are bound by strict data processing agreements and are not permitted to use your documents for any purpose beyond the identity check requested by dew212.
• Technology & Infrastructure Providers: Our platform is hosted on enterprise-grade cloud infrastructure. Hosting providers may have incidental access to data stored on their servers; they operate under confidentiality agreements and are not permitted to process that data independently.
• Regulatory & Law Enforcement Authorities: We will disclose personal data to government authorities, regulators, or law enforcement agencies when required to do so by applicable law, valid legal process, or a binding regulatory order.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of dew212's assets, player data may be transferred to the successor entity. You will be notified of any such transfer and of the successor's privacy commitments before the transfer takes effect.

6.2 Any third party that receives personal data from dew212 is required, by contract, to process that data only for the specified purpose, to implement appropriate security measures, and to delete the data once the processing purpose has been fulfilled.

7.1 dew212 is an internationally licensed platform and some of our technology infrastructure and service partners are located outside Indonesia. As a result, your personal data may be transferred to and processed in countries other than Indonesia.

7.2 Where such transfers occur, dew212 ensures that adequate safeguards are in place — including standard contractual clauses, data processing agreements, or the recipient country's recognition as providing an adequate level of data protection — to ensure that your data receives a standard of protection equivalent to that applied within Indonesia.

7.3 By using the Platform, you acknowledge and consent to the transfer of your personal data to countries outside Indonesia for the processing purposes described in this Policy.

8.1 dew212 uses cookies and similar tracking technologies (collectively, "Cookies") to deliver a functional, secure, and personalised platform experience. The following table describes the categories of Cookies we use:

8.2 dew212 does not use advertising or tracking cookies that share your browsing behaviour with third-party ad networks. We do not build advertising profiles based on your Platform activity.

8.3 Most browsers allow you to control cookie settings through the browser's privacy or settings menu. Disabling Strictly Necessary Cookies will impair the functionality of the Platform and may prevent you from logging in or placing bets. Disabling other cookie categories will not affect core platform access but may reduce the quality of your personalised experience.

9.1 dew212 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active Account Data: Retained for the duration of your account plus five (5) years following account closure, in compliance with international AML record-keeping standards.
• KYC Documents: Retained for five (5) years following the completion of the KYC process or account closure, whichever is later.
• Financial Transaction Records: Retained for five (5) years following each transaction, in line with financial record-keeping obligations.
• Customer Support Communications: Retained for two (2) years following the resolution of the relevant query or complaint.
• Technical / Device Logs: Retained for up to twelve (12) months from the date of collection, after which they are anonymised or deleted.
• Marketing Preferences: Retained until you withdraw consent or request deletion, after which opt-in records are retained for one (1) year as evidence of prior consent.

9.2 At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is technically impractical within a short timeframe (e.g., data held in encrypted backup archives), dew212 will isolate that data from active processing and delete it at the next scheduled purge cycle.

10.1 As a data subject, you hold the following rights in relation to your personal data held by dew212. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered account email address and a description of your request.

• Right of Access: You may request a copy of all personal data dew212 holds about you, together with information on how it is used and with whom it is shared.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that we correct it promptly.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations described in Section 9.
• Right to Restrict Processing: You may request that we suspend active processing of your data — for example, while a rectification request is being investigated — without requesting full deletion.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object at any time to processing based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

10.2 dew212 will acknowledge all data rights requests within three (3) business days and provide a substantive response within thirty (30) calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further thirty (30) days with prior notification.

10.3 We will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive — in which case we may charge a reasonable administrative fee or decline to act, and will notify you of the reason.

11.1 dew212 implements a layered security architecture to protect your personal data from unauthorised access, alteration, disclosure, or destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your browser and our servers;
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
• Multi-factor authentication for all administrative and operational system access;
• Continuous intrusion detection and prevention systems monitoring for anomalous activity;
• Regular third-party penetration testing and security audits;
• Secure, geographically distributed data backup with encryption.

11.2 In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, dew212 will notify affected players without undue delay — and in any case within seventy-two (72) hours of becoming aware of the breach — providing details of the nature of the breach, the categories of data affected, and the steps taken to address it.

11.3 While we maintain robust security measures, no system is entirely immune to attack. You are responsible for maintaining the security of your own account credentials and for notifying us promptly at [email protected] if you suspect unauthorised access.

12.1 dew212 operates a strict minimum-age policy of 21 years. The Platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC processes.

12.2 If dew212 discovers or is notified that personal data has been collected from an individual who is under 21 years of age, we will immediately suspend the associated account, delete the personal data collected, and — where applicable — report the incident in accordance with our responsible gaming obligations.

12.3 If you are a parent or guardian and believe that a minor has created an account on dew212, please contact us immediately at [email protected]. We will treat such reports as a priority and act within twenty-four (24) hours of receiving a credible notification.

13.1 The Platform may occasionally reference third-party services — such as payment providers or game studios — whose own websites or apps are subject to separate privacy policies. dew212 is not responsible for the data practices of these third parties, and this Policy does not extend to any website or service that is not operated by dew212.

13.2 We encourage you to review the privacy policy of any third-party service before providing that service with your personal data. The presence of a reference to a third-party service on the Platform does not constitute an endorsement of that service's privacy practices.

14.1 dew212 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. When we make material changes, we will post a prominent notice on the Platform no less than seven (7) days before the revised Policy takes effect and, where we hold a valid email address for you, we will send you a direct notification.

14.2 The effective date at the top of this page will be updated to reflect the date on which the current version came into force. Prior versions of this Policy are available on request by emailing [email protected].

14.3 Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the changes. If you do not accept the revised Policy, you must cease using the Platform and may request account closure.

15.1 For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our data team using the details below. All communications should be submitted in English or Bahasa Indonesia.

15.2 dew212 aims to acknowledge all privacy-related enquiries within three (3) business days and to resolve complaints within thirty (30) calendar days. For complex matters, we may extend this period and will notify you accordingly.

15.3 If you are not satisfied with our response to a privacy complaint, you may refer the matter to the applicable data protection authority or seek independent dispute resolution. dew212 will cooperate fully with any such process.