🔒 yes2win Privacy Policy

Yes2Win Privacy Policy – Data Protection Commitment for Malaysian Players

At Yes2Win, your privacy is not merely a legal obligation — it is our moral responsibility. This policy explains clearly and honestly how we collect, use, store, and protect your personal data as a member of our platform.

Last updated: January 2026 English (en-MY) 256-bit SSL
256-bit SSL
Encrypted Data
No Data Sales
Player Rights Protected
24/7 Support
Full Compliance

Our Privacy Commitment

Yes2Win's Six Core Data Protection Principles

Before reading the full policy, here are the core principles that guide how Yes2Win handles your personal data every day.

01

Bank-Grade Encryption

All your personal data, account information, and payment details are protected with 256-bit SSL encryption — the same standard used by Malaysia's major banking institutions such as Maybank and CIMB. Your data is never transmitted in unencrypted form over any network.

02

No Sale of Data to Third Parties

Yes2Win has never and will never sell, rent, or trade your personal data to third parties for marketing purposes. Your information belongs to you — we use it only for the purposes clearly stated in this policy and agreed to by you at registration.

03

Minimal Data Collection

Yes2Win only collects data that is genuinely necessary to provide our services. We do not request irrelevant information, and we do not retain data longer than required. This principle of "minimum collection" is central to our approach to privacy.

04

Players' Full Rights Over Their Data

You have the right to access, correct, transfer, or request the deletion of your personal data at any time. The process is straightforward — contact Yes2Win support and we will assist you within a reasonable timeframe at no additional charge.

05

Immediate Notification in the Event of a Breach

In the event of any security incident affecting your data, Yes2Win is committed to notifying you promptly — within the timeframe prescribed by applicable data protection regulations. Transparency in critical situations is an obligation we take seriously.

06

Periodic Data Deletion

Data that is no longer needed for service purposes or legal requirements will be securely deleted in accordance with our data management schedule. We do not retain unnecessary records — this reduces your privacy risk over the long term.

1

Introduction & Scope of This Policy

This Privacy Policy describes how Yes2Win ("Platform", "We") collects, uses, discloses, stores, and protects your personal data when you use our platform at yes2win.im and all related services.

This document applies to all users of the platform Yes2Win — including website visitors, prospective members considering registration, active registered members, and former members whose accounts have been closed but whose data remains within the designated retention period. By using the Yes2Win platform in any capacity, you acknowledge that you have read and understood this Privacy Policy.

We wrote this policy in plain language because we believe you deserve to understand how your data is handled — not buried in legal jargon that's hard to follow. If anything is unclear, reach out and we'll be happy to walk you through it.

Important Note

This Privacy Policy forms part of the Yes2Win Terms & Conditions. By registering an account or using the platform, you agree to the terms set out in this policy. You will be notified of any material changes before they take effect.

2

Personal Data We Collect

Yes2Win collects your personal data through several means depending on how you interact with our platform. Below is a list of data categories we collect, along with their sources and examples:

Data Category Example How It Is Collected
Identity Data Full name, date of birth, identity card number (when KYC is required) Registration form, KYC process
Contact Data Malaysian phone number, email address, state of residence Account registration, profile updates
Financial Data EWallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), FPX bank account information Deposit and withdrawal processing
Transaction Data Deposit history, withdrawal history, betting records, wins and losses In-platform activity
Technical Data IP address, device type, operating system, web browser, device ID Automated system logs
Usage Data Pages visited, session duration, games played, betting preferences Platform analytics
Communication Data Live chat conversation records, support tickets, emails to our team Customer support interactions

We not collect sensitive data such as your health information, religious beliefs, political views, or sexual orientation. The financial data we store does not include full credit card numbers — payments are processed directly through recognised payment gateways and we only receive transaction reference tokens.

Data for Visitors Without an Account

Even if you have not registered a Yes2Win account, we may collect basic technical data such as your IP address and browser information via performance cookies to ensure the website functions properly. No personally identifiable information is collected from unregistered visitors.

3

How We Use Your Data

Yes2Win uses your personal data solely for the following purposes — we do not use your data for anything outside this list without your additional consent:

  • Service Provision: Managing your account, processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, and ensuring your access to all games and betting options available on the Yes2Win platform.
  • Identity Verification (KYC): Verifying that you are who you say you are, confirming you meet the minimum age requirement of 18 years, and fulfilling anti-money laundering (AML) and Know Your Customer (KYC) compliance requirements.
  • Platform Security: Detecting and preventing fraud, unauthorized access, multiple account ownership, bonus abuse, and any suspicious activity that could compromise the security of your account or the platform as a whole.
  • Responsible Gambling: Monitoring gameplay patterns to identify signs of problem gambling and providing support to players who need assistance — this is to safeguard your wellbeing.
  • Customer Support: Responding to enquiries, resolving technical and financial issues, and providing assistance via live chat, email, and other support channels.
  • Platform Improvements: Analysing usage patterns in aggregate (not at an individual level) to understand how players use the platform and where improvements can be made.
  • Marketing Communications: Sending promotional information, bonus offers, and platform updates — only where you have given your consent to receive such communications. You may unsubscribe at any time.
  • Legal Compliance: To fulfil reporting obligations to relevant authorities as required by applicable law.
4

Legal Basis for Data Processing

Yes2Win only processes your personal data where there is a valid legal basis for doing so. Depending on the purpose of the processing, the bases we rely on are:

  • Contract Performance: Processing is required to fulfil the agreement between you and Yes2Win — including managing your account, processing deposits and withdrawals, and providing access to games. Without this data processing, we are unable to provide our services to you.
  • Legitimate Interests: Processing for the purposes of platform security, fraud prevention, and service improvement — where Yes2Win's legitimate interests and the safety of all users form a valid legal basis, provided this does not override your privacy rights.
  • Legal Obligation Compliance: Processing required to comply with legal obligations, including AML, KYC, and financial reporting requirements.
  • Consent: For marketing communications and optional cookie usage — where you have given explicit consent. Consent may be withdrawn at any time without affecting your core services.
Right to Withdraw Consent

If data processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

5

Data Sharing with Third Parties

Yes2Win does not sell, rent or trade your personal data. However, we may share certain data with the following categories of third parties under limited and controlled circumstances:

  • Payment Service Providers: Payment gateways that process your deposit and withdrawal transactions — including eWallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and the FPX system. They receive only the data necessary to process the relevant transaction.
  • Game Software Providers: Game content providers such as live baccarat, slots and other casino game providers that supply gaming content to the Yes2Win platform. Data sharing is limited to the session IDs and tokens required to enable gameplay.
  • Technical Service Providers: Companies that provide technical infrastructure services such as server hosting, cybersecurity and analytics — all bound by strict data processing agreements and prohibited from using your data for their own purposes.
  • Legal Authorities: Law enforcement agencies, regulatory bodies or courts when Yes2Win is legally required to disclose certain information.
  • Professional Advisors: Lawyers, accountants, or auditors bound by professional confidentiality obligations — only in circumstances where professional advice is required.

All third parties who receive your data from Yes2Win are bound by confidentiality and data protection agreements. They are strictly prohibited from using your data for any purpose other than those authorised by Yes2Win.

Cross-Border Data Transfers

Some of our technical service providers may operate outside Malaysia. When data is transferred outside Malaysia, Yes2Win ensures a level of protection equivalent to Malaysian standards through appropriate data protection contracts.

6

Data Security Measures

Yes2Win implement comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure:

  • 256-bit SSL Encryption: All communications between your browser and Yes2Win's servers are encrypted using TLS 1.3 — the latest and most secure encryption standard currently available.
  • Data-at-Rest Encryption: Sensitive data stored in our databases — including passwords (stored as one-way hashes) and financial information — is encrypted using industry-recognised encryption algorithms.
  • Internal Access Controls: Only Yes2Win staff who require access to your data to carry out their legitimate duties will be granted access — on a strictly need-to-know basis. All access is logged and monitored.
  • 24/7 Security Monitoring: A real-time threat monitoring system that detects suspicious activity — including unusual login attempts, questionable transactions and potential cyberattacks.
  • Regular Security Audits: Independent security assessments and penetration testing are conducted regularly by third parties to identify and address vulnerabilities before they can be exploited.
  • Incident Management: Clear, tested incident response procedures to ensure any security breach is handled swiftly and effectively, including notifying affected users within the required timeframe.

While we take all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. We encourage you to also take security precautions on your end — in particular, use a strong and unique password for your Yes2Win account and never share your login credentials with anyone.

7

Data Retention Period

Yes2Win retain your personal data only for as long as necessary for the purposes outlined in this policy, or to comply with applicable legal requirements. The following is a general guide to retention periods by data category:

Data Category Retention Period Reason
Identity & contact data Throughout the active account period + 5 years after closure KYC & AML Requirements
Financial transaction records 7 years from the date of transaction Financial reporting requirements
Betting records 3 years from the date of the bet Dispute resolution & audit
Support communication logs 2 years from the date of interaction Referrals & service improvements
Technical & security logs 1 year from the log date Security analysis & audits
Marketing data & optional cookies Until consent is withdrawn Based on your consent

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you personally. Anonymised data may be used for analytics and research purposes indefinitely, as it no longer constitutes personal data.

8

Cookies Policy

Yes2Win use cookies and similar tracking technologies to ensure the platform functions properly and to provide you with a better experience. The following are the categories of cookies we use:

You can manage your cookie settings through your web browser. Disabling essential cookies will affect platform functionality and you may be unable to log in or use Yes2Win services properly.

9

Your Personal Data Rights

As a user of the platform Yes2Win, you have the following rights regarding your personal data. To exercise any of these rights, contact us at support@yes2win.im or via our 24/7 live chat:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide a response within 30 days of receiving your request, at no charge for reasonable requests.

Right to Rectification

If the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. You can also update most of your profile information directly through your Yes2Win account settings.

Right to Erasure ("Right to Be Forgotten")

You may request the deletion of your personal data in certain circumstances — for example, when the data is no longer needed for its original purpose, or when you withdraw your consent. This right does not apply where we are legally required to retain the data.

Data Portability Rights

You have the right to receive the personal data you have provided to Yes2Win in a machine-readable format (such as CSV or JSON), and to transfer that data to another service provider if you wish.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests in certain circumstances.

Right to Restrict Processing

In certain circumstances — such as when you dispute the accuracy of your data or while a deletion request is under review — you may ask us to restrict the processing of your data until the matter is resolved.

10

Child & Youth Protection

Yes2Win takes the protection of children and young people extremely seriously. Our platform is strictly for users aged 18 and above, and we do not knowingly collect or process the personal data of individuals under the age of 18.

During the registration process, we request age verification. During KYC, age is verified through official identification documents. If we determine that data collected belongs to a minor, we will:

  • Close the account in question immediately.
  • Delete all data associated with the individual as promptly as possible.
  • Returning any legitimate remaining balance to the payment method used for deposit.
  • Taking the necessary additional steps to prevent re-registration by the same individual.

Parents and guardians concerned about their children potentially accessing online gambling platforms are advised to install parental control software on all household devices and to have open conversations with their children about the risks of gambling. If you suspect a Yes2Win account has been created by a minor, please contact us immediately at support@yes2win.im.

11

Amendments to This Privacy Policy

Yes2Win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technological developments. The "Updated" date at the top of this page will always show the date of the latest version.

When we make material changes to this policy — changes that significantly affect how we handle your data — we will:

  • Displaying clear notices on the Yes2Win platform.
  • Sending notification emails to the address you registered with.
  • For highly significant changes, requesting your explicit confirmation before the changes take effect.

Continued use of the platform Yes2Win after being notified of a policy change will be considered your acceptance of the updated policy. If you disagree with the changes and do not wish to accept the new policy, you have the right to close your account and withdraw your balance before the new policy takes effect.

Subscribe to Notifications

Keep your Yes2Win account email address up to date so you never miss important notifications about policy changes or account security.

12

Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how Yes2Win handles your personal data, please contact us through the following channels:

  • Privacy Email: support@yes2win.im — include "Privacy Enquiry" in your email subject line to ensure it is handled by the right team.
  • 24/7 Live Chat: Accessible directly from the Yes2Win platform — available in Bahasa Melayu at all times.

We are committed to responding to all privacy enquiries within 30 days of receipt. For more complex requests, such as data deletion or data portability requests, we will provide a more specific timeframe after reviewing your request.

If you are not satisfied with how we have handled your request after contacting us, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.

Additional Resources

Understanding Your Data Privacy at Yes2Win — A Guide for Malaysian Players

In today's digital age, personal data is an incredibly valuable asset. Many people are unaware of just how much information about themselves is spread across various online platforms — and even fewer understand what those platforms actually do with it. At Yes2Win, we believe you deserve to know exactly what happens to your data.

Why Does Yes2Win Need to Collect Your Data?

A fair question. The simple answer — to provide a safe, fair, and regulated service to all users. Without basic data collection, Yes2Win cannot verify that you are a legitimate user (and not a bot or fraudster), cannot process your payment via Touch 'n Go eWallet or GrabPay, cannot confirm that you are at least 18 years of age, and cannot detect if someone else is attempting to access your account without authorization.

There are also legal compliance requirements to consider. Online gambling platforms are obligated to conduct KYC (Know Your Customer) checks and comply with anti-money laundering (AML) regulations. This is not optional for Yes2Win — it is a legal obligation designed to protect Malaysia's financial system from abuse.

How Your Data Helps Protect You

One of the most important uses of your data at Yes2Win is to protect you from fraud and unauthorised access. Consider this scenario — someone manages to obtain your Yes2Win account password (perhaps through phishing, or because you reuse the same password across multiple sites). Without the data records we retain, it would be difficult for us to detect that a login attempt was suspicious — for example, an IP address from an unusual location, a device never used before, or a transaction pattern that deviates from your norm.

The technical data we collect — including IP addresses, device types and usage patterns — enables our security systems Yes2Win identify when something seems "off" and take protective action — such as requesting additional verification or temporarily blocking access. This is a layer of protection working behind the scenes to keep your funds and account secure.

Steps You Can Take to Protect Your Privacy

Even if Yes2Win take all reasonable steps to protect your data, digital security is a shared responsibility. Here are some things you can do:

  • Use a strong and unique password: Your Yes2Win account password should be different from passwords you use elsewhere. A strong password combines uppercase letters, lowercase letters, numbers, and symbols — and is at least 12 characters long.
  • Enable two-factor authentication (2FA): This is a highly effective additional layer of security. Even if someone knows your password, they still cannot log in without access to your phone.
  • Be alert to phishing: Yes2Win will never contact you by email or WhatsApp to request your password or payment details. If you receive any such communication, it is a phishing attempt — do not click the link and report it to us.
  • Use a secure network: Avoid accessing your Yes2Win account over unprotected public Wi-Fi at cafes, shopping malls or airports. Use your mobile data connection or a secure home Wi-Fi network instead.
  • Review your account activity regularly: Review your Yes2Win login history and account transactions periodically. If you notice anything unfamiliar, contact our support team immediately.

Your Rights Are Real — Not Just Words on a Page

The section on your rights in this policy is not merely legally required boilerplate. Yes2Win genuinely honour these rights. If you request a copy of your data, we will provide it. If you request deletion of your data after closing your account, we will action it within the limits permitted by law. If you want to know why we retain a particular piece of data, we will give you a clear explanation.

Your trust is the foundation of everything we do at Yes2Win. A good online betting platform is about more than exciting games or competitive odds — it's also about a platform you can trust to handle your sensitive information with integrity and accountability. That is our commitment to every Malaysian player who chooses Yes2Win as their betting platform.

If you have any questions, concerns, or feedback about how we handle data privacy, our door is always open. Reach out to our support team Yes2Win fluent in Bahasa Malaysia via 24/7 live chat or email at support@yes2win.im. We will respond promptly and respectfully.

Yes2Win's Data Protection Commitment

All your personal data and payment information is protected with 256-bit SSL encryption. Yes2Win does not sell your data to third parties. You may access, correct, or request deletion of your data at any time. For more information about your rights or how we manage your data, contact us at support@yes2win.im or read our Terms & Conditions us.

FAQs

Yes2Win Data Privacy FAQ

No — Yes2Win has never sold, rented or traded your personal data to third parties for marketing or any other commercial purpose, and we never will. We may share certain data with technical service providers that help us operate the platform — such as payment gateways for processing your transactions via Touch 'n Go eWallet or FPX — but all such third parties are bound by strict confidentiality agreements and may only use your data for the specific purposes authorised by Yes2Win.

To request a copy of your personal data, send an email to support@yes2win.im with the subject line "Data Access Request" and include your full name and the phone number registered to your Yes2Win account. We will verify your identity before providing any data — this is for your own security, ensuring data is only sent to the legitimate account holder. We will provide a response within 30 days of the verified request, in a format that is easy to read.

Yes, you may request the deletion of your personal data under certain circumstances. However, there are legal limitations to this right — we are required to retain financial transaction records for 7 years and KYC records for 5 years after account closure to comply with anti-money laundering legislation. Beyond these limits, we will delete any data requested. To initiate a deletion request, close your account first and then contact support@yes2win.im with a written request. We will process your request and provide confirmation once completed.

Should Yes2Win cease operations, all player personal data will be managed in accordance with applicable data protection laws. We will provide adequate notice to all active members, ensure all account balances are fully refunded, and ensure data is securely deleted or transferred as required by law. Data that must be retained by law (such as financial records) will continue to be held by the appointed party managing the wind-down, for the period stipulated by law.

In the event of a security incident affecting your personal data, Yes2Win is committed to acting immediately: containing the incident, assessing its scope and impact, and notifying affected users within the prescribed timeframe. We will contact you via your registered email with details of what occurred, what data may have been affected, and steps you can take to protect yourself. We will also report the incident to the relevant authorities as required by law. Transparency in critical situations is part of our commitment to your privacy.
🔒 Your Data Is Safe at Yes2Win

Register with Yes2Win & Enjoy Safe, Secure Betting

Your personal data is protected with 256-bit SSL encryption, is never sold to third parties, and you have full rights to access or delete your data. Register with confidence and start enjoying live baccarat, football, badminton, lottery, and slots at Yes2Win.

256-bit SSL · No Data Sales · 18+ Only

Bahasa Melayu