Privacy Policy yes2win – Personal Data Protection for Malaysia Players

01Introduction

Yes2win operates as an online casino and sports betting platform offering digital entertainment services to users in Malaysia. As a platform that handles users' financial and personal information, we recognise that privacy is not merely a legal obligation — it is the foundation of trust built between us and every player who chooses yes2win.

This Privacy Policy is drafted to provide full transparency on how we handle your data. We uphold the principle of minimum data collection — we only collect information that is genuinely necessary to provide you with a safe, seamless, and responsible service.

By using the yes2win platform, you agree to the collection and use of information as described in this Privacy Policy. If you disagree with any part of this policy, please discontinue use of the platform and contact us for further enquiries.

02Data Collected

Yes2win collects several categories of personal information to ensure the platform operates securely and complies with relevant legal requirements. Below are the categories of data we collect:

We do not collect any information considered sensitive, such as biometric data, health information, political views, or religious beliefs, unless you voluntarily provide it in the context of customer support.

03Data Collection Methods

Yes2win collects your personal data through several transparent and identifiable channels:

• Account registration: When you register a new account, you provide us directly with basic information such as your name, email address, and phone number.
• KYC process: To fulfil identity verification requirements, you will be asked to upload identification documents such as a copy of your national ID or passport, and proof of current address.
• Financial transactions: Every time you make a deposit or withdrawal, our system automatically records the transaction details, including payment method, amount and transaction time.
• Platform usage: Technical and activity data is collected automatically when you use the yes2win website or mobile app, including pages visited, games played, and session duration.
• Support communications: When you contact our support team via live chat or email, the content of that conversation is stored for complaint resolution and service improvement purposes.
• Cookies and similar technologies: Our platform uses cookies, tracking pixels and local storage technologies to enhance the user experience and analyse usage patterns.

04Purpose of Data Use

Every piece of data we collect has a clear and legitimate purpose. yes2win uses your personal information for the following purposes:

• Account management: Creating, managing, and maintaining your user account, including secure login processes and two-factor authentication.
• Transaction processing: Processing all deposits and withdrawals quickly and securely through trusted payment providers such as DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay.
• KYC/AML compliance: Fulfilling legal obligations related to Know Your Customer (KYC) and anti-money laundering (AML) requirements imposed on financial and gaming platform operators.
• Platform security: Detecting and preventing fraudulent activity, unauthorized access, hacking, and system abuse through continuous monitoring of account activity patterns.
• Responsible gaming: Monitoring gambling patterns to identify players who may be experiencing difficulties and providing appropriate assistance through self-management tools.
• Service communications: Sending important notifications related to your account, changes to terms, security updates, and transaction information.
• Product improvement: Analyzing aggregated usage data to understand user needs and continuously improve platform quality over time.
• Relevant marketing: Where you have given consent, we may send you promotional information about offers and bonuses relevant to your gaming profile.

05Data Sharing

Yes2win understands that your trust is built on the confidence that your personal information is handled responsibly. We only share your data under the following limited circumstances:

• Payment providers: Required transaction information is shared with third-party payment providers such as DuitNow and FPX solely for the purpose of processing your deposits and withdrawals.
• Technical service providers: Cloud infrastructure, cybersecurity, and analytics service providers that assist us in operating the platform. All such third parties are bound by strict confidentiality agreements.
• Regulatory authority: Where required by law or by direction of a competent regulatory authority, we are obligated to disclose certain information. Such disclosures are made only to the extent required by law.
• Crime prevention: In cases of suspected fraud, money laundering, or other criminal activity, relevant information may be shared with the appropriate law enforcement authorities.
• Business transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred as part of that business transaction, subject to prior notice to users.

Yes2win never sells, rents, or discloses your personal data to third-party advertisers, marketing companies, or any commercial entity for their own marketing purposes.

06Data Security

Protecting your personal and financial data is the absolute priority of yes2win. We continuously invest in industry-grade security infrastructure to ensure your information is always safeguarded:

• End-to-end encryption: All data transmitted between your device and yes2win servers is protected by 256-bit SSL encryption with TLS 1.3 — the highest standard used by global financial institutions.
• Secure storage: Personal data is stored on servers protected by multi-layered firewalls, real-time intrusion detection systems, and strict access controls based on the principle of least privilege.
• Two-factor authentication (2FA): yes2win supports and strongly encourages the use of two-factor authentication for all user accounts to add an extra layer of protection against unauthorised access.
• 24/7 monitoring: Our cybersecurity team monitors the platform around the clock to detect any suspicious activity and respond promptly to any identified threats.
• Periodic security audits: The yes2win platform undergoes regular independent security audits by third-party cybersecurity firms to identify and address any potential vulnerabilities.
• Staff training: All yes2win staff with access to user data undergo rigorous data protection training and are bound by confidentiality obligations in their employment contracts.

07Cookies & Tracking

Yes2win uses cookies and similar tracking technologies to enhance the user experience, maintain session security and understand how users interact with our platform.

• Essential cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting anonymous information about how users interact with our platform to help us identify areas that require improvement.
• Functional cookies: Storing user preferences such as language, geographic region, and display settings to deliver a more personalized experience.
• Analytics cookies: Used alongside third-party analytics tools to understand traffic patterns, referral sources, and user navigation behaviour in aggregate and anonymised form.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality and user experience of the yes2win platform.

08Data Storage & Deletion

Yes2win retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law:

• Active account data: Retained for the duration your account is active and for any additional period required after account closure to meet audit and legal compliance requirements.
• Financial transaction records: Retained for a minimum of seven years from the transaction date in accordance with Malaysia's financial and taxation legal requirements.
• Security logs: Security log and account activity data is retained for 12 months for investigation purposes in the event of a security incident.
• Customer support data: Support conversation records are retained for 24 months after case resolution to allow reference if an issue recurs.

When data is no longer needed and there is no legal obligation to retain it, yes2win will delete or anonymise that data using secure, irreversible procedures.

09Your Rights

As a yes2win user, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

• Right of access: You have the right to request a copy of all personal data we hold about you. Such requests will be processed within 14 business days.
• Right to rectification: If you find that any information we hold is inaccurate or outdated, you have the right to request an immediate correction.
• Right to erasure: In certain circumstances, you may request that we delete your personal data, subject to applicable legal record-retention obligations.
• Right to object: You have the right to object to the processing of your data for direct marketing purposes at any time, without needing to provide a reason.
• Right to data portability: You may request that we provide your personal data in a machine-readable format for transfer to another service provider.
• Right to withdraw consent: Where data processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact the yes2win privacy team by email at [email protected] or via live chat on the platform. We will respond within a reasonable timeframe and will not charge any fee for legitimate requests.

10Children's Privacy

The yes2win platform is strictly for adults aged 18 and above. We take child protection very seriously and actively implement measures to prevent minors from accessing our platform.

Yes2win does not intentionally collect, process, or store any personal data from individuals under the age of 18. If we discover that a minor's personal data has been inadvertently collected, we will take immediate action to delete that data and close the associated account.

Parents and guardians concerned about the possibility of minors accessing the yes2win platform are encouraged to use parental control software on shared devices and to contact us immediately if they suspect any inappropriate access.

11Policy Amendments

Yes2win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to how we protect your data.

Whenever material changes are made to this Privacy Policy, we will notify you via an in-platform notification or email to your registered address, at least seven days before the changes take effect. The last updated date shown at the top of this document will be revised each time an amendment is made.

Your continued use of the yes2win platform following any amendments to this Privacy Policy means you accept those changes. If you do not agree with the amendments made, please discontinue use of the platform and contact us for further discussion.

12Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way yes2win handles your personal data, our team is ready to assist through the following channels:

• Live chat: Available 24 hours a day, 7 days a week — the fastest way to get an immediate response to any privacy concern.
• Email: [email protected] — for detailed enquiries requiring documentation or comprehensive written clarification.
• FAQ Page: Visit FAQ page for answers to the most frequently asked questions about privacy and account security.