Your Consent: By registering an account on the dewaxx Platform, depositing funds, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please do not use the dewaxx Platform.
1. Introduction
dewaxx ("we", "us", "our", "Company") is committed to protecting the privacy and personal data of every individual who interacts with the dewaxx Platform at dewaxx.cam. This Privacy Policy ("Policy") describes in plain, transparent terms how we collect, use, store, share, and protect your personal data when you visit our website, create an account, or use any of our gaming and sports-betting services.
This Policy applies to all users of the dewaxx Platform, including registered players, visitors who browse without an account, and individuals who contact our customer support team. It applies regardless of whether you access the Platform from a desktop browser, a mobile device, or any other internet-connected device.
This Policy should be read alongside our Terms & Conditions, which form the broader contractual framework governing your relationship with dewaxx. In the event of any conflict between this Policy and the Terms & Conditions solely on a privacy matter, this Policy prevails.
2. Definitions
The following terms carry specific meanings throughout this Policy:
- "Personal Data" means any information relating to an identified or identifiable natural person.
- "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
- "Data Controller" means dewaxx, the entity that determines the purposes and means of processing your Personal Data.
- "Data Processor" means a third party that processes Personal Data on behalf of dewaxx under a written data-processing agreement.
- "KYC" means Know Your Customer — the identity verification process mandated for regulatory compliance.
- "Platform" means the dewaxx website, mobile-optimized site, and any associated applications accessible via dewaxx.cam.
- "Player" / "User" / "you" means any natural person who registers an account or interacts with the Platform.
- "Cookie" means a small text file placed on your device by the Platform to enable certain functionality and analytics.
3. Data We Collect
dewaxx collects the following categories of personal data, depending on your interaction with the Platform:
3.1 Registration Data
- Full legal name (as appearing on your KTP or other government-issued ID)
- Date of birth (to verify the 21+ age requirement)
- Email address and mobile phone number
- Residential address (city, province, postal code)
- Preferred username and encrypted password
- Preferred payment method and associated account details (e.g., BCA account number, OVO or DANA mobile number)
3.2 Identity Verification (KYC) Data
- Scanned or photographed copy of KTP (Indonesian National Identity Card), SIM, or passport
- Selfie photograph holding the identity document
- Proof of address documents dated within three months
- Source-of-funds declaration (required for high-volume accounts)
3.3 Transactional Data
- Deposit and withdrawal history, amounts in Rupiah (IDR / Rp), timestamps, and payment channel used
- Game activity logs: games played, bet amounts, win/loss outcomes, session durations
- Bonus claims, wagering progress, and promotional participation records
3.4 Technical and Usage Data
- IP address, device type, operating system, and browser version
- Pages visited, links clicked, time spent on each page, and navigation paths
- Login timestamps and geographic location data derived from IP address
- Cookie and session data (see Section 11)
3.5 Communications Data
- Records of live chat conversations, email correspondence, and WhatsApp support interactions
- Feedback submissions and survey responses
- Dispute and complaint records
Note: dewaxx does not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data. Payment card numbers (Visa, Mastercard) are processed directly by our PCI-DSS-certified payment partners and are never stored on dewaxx servers.
4. How We Collect Your Data
We collect personal data through the following channels:
4.1 Directly From You
The majority of your personal data is provided directly by you during the account registration process, KYC submission, deposit or withdrawal requests, customer support interactions, and when you voluntarily complete any profile, preference, or feedback form on the Platform.
4.2 Automatically Through Technology
When you access the Platform, certain technical data is collected automatically through cookies, web beacons, and server log files. This includes your IP address, device identifiers, and browsing behavior on the Platform. See Section 11 for full details on cookies and how to manage your preferences.
4.3 From Third-Party Service Providers
We may receive limited personal data from our payment processing partners (such as BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja) to confirm the status of a transaction, verify account ownership, or investigate a disputed payment. We may also receive fraud-risk signals from identity verification services used during the KYC process.
4.4 From Publicly Available Sources
In certain fraud-prevention or compliance scenarios, dewaxx may cross-reference information you provide against publicly available records, such as government-issued sanction lists or publicly accessible business registries, to satisfy our anti-money-laundering (AML) obligations.
5. Purpose of Processing
dewaxx processes your personal data for the following specific, documented purposes:
| Purpose | Categories of Data Used |
|---|---|
| Account creation and management | Registration data, technical data |
| Identity verification (KYC) | KYC documents, registration data |
| Processing deposits and withdrawals in IDR | Transactional data, registration data |
| Delivering and personalizing gaming services | Game activity logs, transactional data |
| Fraud detection and prevention | Technical data, transactional data, KYC data |
| AML and regulatory compliance | KYC data, transactional data, registration data |
| Customer support and dispute resolution | Communications data, transactional data |
| Responsible gaming monitoring | Game activity logs, transactional data |
| Sending transactional notifications | Registration data (email, phone number) |
| Promotional communications (opt-in only) | Registration data, game activity logs |
| Platform analytics and performance improvement | Technical and usage data |
6. Legal Basis for Processing
dewaxx relies on the following legal bases when processing your personal data:
6.1 Contractual Necessity
Processing is necessary to perform the contract between you and dewaxx — that is, to operate your account, process your deposits and withdrawals in Rupiah (IDR), and deliver the gaming services you have requested. Without this processing, we cannot provide you with the Platform's services.
6.2 Legal Obligation
Certain processing activities — particularly KYC identity verification, transaction monitoring, and AML record-keeping — are required to comply with applicable international regulatory and licensing obligations. We cannot waive these requirements on individual request.
6.3 Legitimate Interests
We process certain technical and usage data on the basis of our legitimate interests in maintaining Platform security, preventing fraud, improving our services, and operating a sustainable and trustworthy gaming business. We balance these interests against your privacy rights and do not process data where your interests override ours.
6.4 Consent
Where we rely on consent — primarily for optional marketing communications via email or SMS — you may withdraw that consent at any time without detriment to your account standing. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
7. Data Sharing with Third Parties
dewaxx does not sell or rent your personal data. We share your data only in the following limited and controlled circumstances:
7.1 Payment Service Providers
To process your deposits and withdrawals, we share the minimum necessary data with our Indonesian payment partners — including BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja, and international card networks (Visa, Mastercard). These providers act as Data Processors and are contractually bound to handle your data only for the purpose of completing your transaction.
7.2 Identity Verification Providers
To conduct KYC checks, we may share your identity documents and registration data with accredited third-party identity verification services. These providers are subject to strict data-processing agreements and may not use your data for any purpose other than verification on our behalf.
7.3 Game Content Providers
Game studios and content providers — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — receive anonymized or pseudonymized session data necessary to deliver their games on our Platform. These providers do not receive your full name, contact details, or financial information.
7.4 Fraud Prevention and AML Services
We share relevant transactional and identity data with fraud-prevention and AML compliance services where there is a reasonable suspicion of fraudulent activity, money laundering, or other prohibited conduct. Such disclosures are made under applicable legal obligations and are documented in our compliance records.
7.5 Legal and Regulatory Authorities
We will disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by a valid legal order, court judgment, or applicable law. We will, where legally permitted, notify you of any such disclosure request promptly.
7.6 Business Transfers
In the event of a merger, acquisition, or sale of substantially all of dewaxx's assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify registered Players via email before any such transfer takes effect and ensure the receiving entity maintains equivalent data-protection standards.
No Marketing Data Sales: dewaxx will never sell, rent, or provide your personal data to third-party advertisers, data brokers, or marketing agencies. Any data shared with third parties is strictly for operational and compliance purposes as described above.
8. International Data Transfers
As a Platform serving Indonesian players with internationally licensed operations, some of your personal data may be transferred to, stored in, or processed in countries outside Indonesia. Where such transfers occur, dewaxx ensures that appropriate safeguards are in place, which may include:
- Contractual clauses between dewaxx and the receiving entity requiring equivalent data-protection standards.
- Use of service providers whose data-protection practices have been independently assessed and certified.
- Transfers to jurisdictions recognized as providing an adequate level of data protection under applicable international standards.
You may request information about the specific safeguards applicable to any particular international transfer by contacting us at [email protected].
9. Data Retention
dewaxx retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable regulatory or legal obligations. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Contractual and regulatory compliance |
| KYC documents | 5 years after account closure | AML regulatory requirement |
| Transaction records | 5 years after transaction date | Financial record-keeping obligations |
| Game activity logs | 3 years from session date | Dispute resolution, responsible gaming monitoring |
| Customer support records | 3 years from last interaction | Dispute resolution and quality assurance |
| Marketing preferences | Until opt-out + 1 year | Proof of consent management |
| Technical/usage logs | 13 months | Security monitoring and analytics |
Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymized so that it can no longer be associated with you as an identifiable individual.
10. Data Security
dewaxx implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. Key measures include:
10.1 Technical Safeguards
- 256-bit SSL/TLS encryption on all data transmissions between your device and our servers.
- AES-256 encryption at rest for all sensitive data stored in our databases.
- Multi-factor authentication (MFA) available for all Player accounts and mandatory for internal staff access.
- Regular penetration testing and vulnerability assessments conducted by independent third-party security firms.
- Firewalls, intrusion detection systems, and 24/7 infrastructure monitoring.
10.2 Organizational Safeguards
- Access to personal data is restricted on a strict need-to-know basis. KYC documents are accessible only to authorized compliance staff.
- All staff and third-party processors who handle personal data are bound by confidentiality obligations.
- Regular data-protection training is provided to all employees handling personal information.
- A documented data-breach response procedure is in place, with a commitment to notify affected players within 72 hours of discovering a material breach.
Your Responsibility: While dewaxx takes every reasonable precaution to protect your data, the security of your account also depends on you. Keep your password confidential, use a strong and unique password, and contact us immediately at [email protected] if you suspect unauthorized access to your account.
11. Cookies & Tracking Technologies
The dewaxx Platform uses cookies and similar tracking technologies to deliver a functional, personalized, and secure experience. The following categories of cookies are used:
11.1 Strictly Necessary Cookies
These cookies are essential for the Platform to function. They enable you to log in, maintain your session, navigate between pages, and access secure areas of the site. You cannot opt out of strictly necessary cookies while continuing to use the Platform.
11.2 Functional Cookies
These cookies remember your preferences — such as your preferred language, display settings, and last-visited game categories — to provide a more personalized experience on return visits.
11.3 Analytics Cookies
We use analytics cookies to understand how Players navigate the Platform, which pages are most visited, and where technical errors occur. This data is used in aggregate form to improve Platform performance and user experience. Analytics data is pseudonymized and does not identify you personally.
11.4 Security Cookies
Security cookies help us detect and prevent fraudulent activity, unauthorized login attempts, and bot traffic. They are a core component of our fraud-prevention infrastructure and cannot be disabled without impacting Platform security.
11.5 Managing Cookies
You may control cookie settings through your browser's built-in privacy controls. Disabling certain non-essential cookies may affect the functionality or personalization of your experience on the Platform. Note that deleting cookies will log you out of any active session.
12. Your Data Rights
As a user of the dewaxx Platform, you are entitled to the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with your full name, registered email address, and a description of your request. We will respond within 14 business days.
12.1 Right of Access
You have the right to request a copy of all personal data we hold about you, along with information about how it is being processed and the purposes for which it is used.
12.2 Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. Note that correcting KYC data will require resubmission of supporting documentation.
12.3 Right to Erasure
You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that regulatory retention obligations (see Section 9) may prevent immediate deletion of certain data categories.
12.4 Right to Restriction
You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing and we are assessing whether our legitimate interests override your rights.
12.5 Right to Data Portability
Where processing is based on your consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON).
12.6 Right to Object
You have the right to object to processing carried out on the basis of our legitimate interests, including profiling. You also have an absolute right to object to your data being used for direct marketing purposes, which we will action immediately upon receipt of your objection.
12.7 Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal. You can unsubscribe from marketing communications directly via the unsubscribe link in any email we send, through your Account settings, or by contacting support.
How to Submit a Request: Email [email protected] with the subject line "Data Rights Request". Include your full registered name and the specific right(s) you wish to exercise. We will verify your identity before processing the request and will respond within 14 business days.
13. Minors and Age Restriction
The dewaxx Platform is strictly for adults aged 21 years or older. We do not knowingly collect, store, or process personal data from individuals under the age of 21. If you are under 21, you must not register an account, deposit funds, or place any wager on the Platform.
During the registration process, all users are required to confirm that they are 21 or older. KYC verification includes mandatory age verification against government-issued identification. Where dewaxx discovers that personal data has been collected from an individual under 21, we will immediately close the associated account, return any deposited funds via the original payment method, and securely delete all personal data associated with the underage user.
Parents and guardians are responsible for preventing minors from accessing the Platform. We strongly recommend the use of parental control software on shared devices. If you believe a minor has registered on the Platform, please notify us immediately at [email protected].
14. Third-Party Services & Links
The dewaxx Platform integrates third-party services — including game content providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Pocket Games Soft), payment processors, and analytics tools — which may operate their own privacy policies. dewaxx is not responsible for the data-handling practices of these third parties beyond the scope of the data-processing agreements we hold with them.
Where the Platform displays any link to a third-party website or service outside of dewaxx.cam, please note that clicking such a link will take you outside our Platform. dewaxx accepts no responsibility for the privacy practices or content of external sites. We encourage you to read the privacy policy of any third-party site you visit.
15. Policy Amendments
dewaxx reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or Platform functionality. The revised Policy will be published on this page with an updated "Last Updated" date at the top of the document.
Where amendments are material — for example, where we introduce a new purpose for processing your data or change our data-sharing arrangements — we will notify all registered Players via email at least seven (7) days before the changes take effect. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.
If you do not accept the revised Policy, you should stop using the Platform and may request account closure by contacting our support team. Upon closure, we will continue to retain your data only for the periods required under applicable regulatory and legal obligations as described in Section 9.
16. Contact & Complaints
If you have any questions, concerns, or complaints about this Privacy Policy or the way dewaxx handles your personal data, please contact our Data Protection team through the following channels:
- Email: [email protected]
- Live Chat: Available 24/7 within your Account dashboard
- Subject Line for Privacy Queries: "Privacy Policy Inquiry" or "Data Rights Request"
- Response Time: We aim to respond to all privacy-related inquiries within 14 business days
- Support Hours: 24/7, with Indonesian-speaking agents available on WIB timezone
Escalation: If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data-protection authority or the dispute-resolution body specified under the dewaxx licensing framework. Details will be provided upon request.