Yes2win Privacy Policy – Malaysian User Data Protection

1. Introduction – yes2win's Privacy Commitment

Yes2win ("we", "Platform", "Company") values the privacy of every user who registers and uses our platform. This Privacy Policy ("Policy") details how we collect, store, use, disclose, and protect your personal information when you use the yes2win platform — whether through our official website or mobile app.

By registering an account or using any yes2win service, you hereby consent to the collection and use of your personal data as described in this Policy. If you disagree with any aspect of this Policy, please contact us before continuing to use the platform.

Yes2win operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. We are committed to ensuring your personal data is managed responsibly, transparently, and securely at all times.

2. Types of Personal Data We Collect

Yes2win collects your personal data through several channels — directly from you during the registration and platform usage process, automatically via standard tracking technologies, and in some cases through trusted third-party sources. The categories of data we collect are as follows:

2.1 Personal Identification Data

• Full name as stated on your official Malaysian identity document (MyKad or passport).
• Identity card number (MyKad) or passport number for foreign nationals.
• Date of birth to verify that you meet the platform's minimum age requirement (18 years old).
• Full current residential address.
• Profile photo or identity verification documents uploaded for eKYC purposes.

2.2 Contact & Communication Data

• Active email address used for registration and official communications.
• An active Malaysian mobile number for SMS verification and 2FA.
• Records of all communications with the yes2win customer support team, including live chat logs.

2.3 Financial Data

• Malaysian bank account details registered for deposit and withdrawal purposes.
• E-wallet details (Touch 'n Go, Boost, GrabPay) registered to your yes2win account.
• Records of your deposit and withdrawal transaction history on the platform.

2.4 Platform Usage Data

• Records of your gaming activity and wagering history in your account.
• IP address, device type, operating system, and browser information used.
• Login session data including date, time, and general geographic location.
• Preferences and settings saved to your account.

3. How We Use Your Data

Yes2win uses collected personal data solely for lawful, necessary, and stated purposes as outlined in this Policy. We do not use your data for any other purpose without obtaining your additional consent. The primary purposes of data use are as follows:

• Service Provision: Enabling you to register, log in, play, make deposits and withdrawals, and access all features of the yes2win platform.
• Identity Verification (eKYC): Ensuring you meet the minimum age requirement and verifying your identity to comply with anti-money laundering regulations.
• Transaction Processing: Processing all deposits and withdrawals securely and accurately to your registered bank account or e-wallet.
• Account Security: Detecting and preventing unauthorized access, fraud, and suspicious activity on your account.
• Customer Support: Providing efficient and accurate assistance whenever you contact the yes2win support team.
• Essential Communications: Sending account-related notifications, platform updates, policy changes, and relevant promotional offers.
• Platform Enhancement: Analyzing usage patterns in aggregate and anonymized form to enhance the overall user experience.
• Legal Compliance: Fulfilling reporting and compliance obligations to relevant authorities in accordance with Malaysian law.

4. Sharing Data with Third Parties

Yes2win does not sell, rent, or trade users' personal data to any external party for commercial purposes. However, in certain limited and necessary situations, we may share your data with the following parties:

4.1 Trusted Service Providers

Yes2win works with carefully selected third-party service providers to support platform operations. These include payment processors supporting DuitNow, FPX, and Malaysian e-wallets, eKYC service providers for identity verification, cloud service providers for secure data storage, and game providers such as Pragmatic Play and Evolution Gaming. All third parties are bound by strict data protection agreements and may only use your data for specified purposes.

4.2 Legal Requirements

Yes2win will disclose users' personal data to the relevant authorities when required by Malaysian law, a valid court order, or upon request by law enforcement agencies in the context of investigations into financial crime, money laundering, or other illegal activities involving our platform.

• Your data will not be sold to third-party advertisers or marketing companies.
• Your data will not be shared with competitors or other online entertainment platforms.
• Your data will not be used to build advertising profiles without your explicit consent.

5. Data Security Measures

Protecting your personal data from unauthorized access, loss, misuse, or disclosure is a top priority at yes2win. We implement a range of technical and organizational security measures to ensure comprehensive data protection:

• Data Encryption in Transit: All data transmitted between your device and yes2win servers is secured with 256-bit SSL/TLS encryption — the same standard used by leading banking institutions.
• Stored Data Encryption: Sensitive data such as passwords and financial information is stored in encrypted form using industry-recognised encryption algorithms.
• Access Control: Only authorized yes2win staff with a legitimate business need are permitted to access users' personal data, and all such access is logged and monitored.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect and respond to any threats or unauthorised access attempts.
• Regular Security Testing: yes2win conducts regular security audits and penetration testing to identify and address any system vulnerabilities.
• Two-Factor Authentication (2FA): yes2win provides and encourages the use of 2FA to add an extra layer of protection to your account.

6. Use of Cookies and Related Technologies

Yes2win uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit our website or use our app. The types of cookies we use are as follows:

• Session Cookies: Required to maintain your login session and ensure the platform functions correctly. These cookies are automatically deleted when you close your browser.
• Preference Cookies: Saving your preferences such as language, display theme, and game settings for a seamless experience on future visits.
• Analytics Cookies: Helping us understand how users interact with the platform for continuous improvement purposes. Data collected is aggregated and anonymized.
• Security Cookies: Used to identify and prevent fraudulent activity and to protect user accounts.

You can manage your cookie settings through your browser. Please note, however, that disabling essential cookies may affect certain functions of the yes2win platform.

7. Your Rights as a User

Under Malaysia's Personal Data Protection Act (PDPA) and yes2win's internal policies, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact the yes2win privacy team via live chat or our support email. We will endeavour to respond to all requests within 30 business days.

8. Data Retention Period

Yes2win retains users' personal data only for as long as necessary to fulfil the purpose of collection or to comply with relevant legal obligations. General data retention period guidelines are as follows:

• Active Account Data: Retained for as long as your account is active and for a defined period following account closure.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the transaction date in accordance with Malaysian financial and tax legal requirements.
• Support Communication Logs: Retained for two (2) years for reference and dispute resolution purposes.
• Identity Verification Data (eKYC): Retained for the period required under applicable anti-money laundering legislation.

Once the retention period expires, data will be securely deleted or anonymised using approved procedures to prevent any possibility of re-identification.

9. Changes to This Privacy Policy

Yes2win reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. When we make significant changes, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a clear notice on the yes2win platform's home page.
• Sending notifications via email or in-app alerts for significant changes.

Your continued use of the yes2win platform after any changes take effect will be considered your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.