Privacy Policy Yes Win – Data Protection for Malaysian Members

1Introduction

Yes Win ("we", "the platform") is committed to protecting the privacy and security of the personal information of all members who use our online entertainment platform. This Privacy Policy clearly and transparently explains how Yes Win handles your personal data from the moment you register an account through the entire duration of your active membership.

As an online casino and Sports Betting platform serving Malaysian players, Yes Win understands that trust is the foundation of our relationship with every member. That trust is built not only through fair gameplay and timely payouts, but also through responsible, transparent management of personal data in line with industry best practices.

This Privacy Policy applies to all information collected through the yes win website, mobile application (where applicable), email communications, live chat interactions, and all other channels through which you may share information with us. By continuing to use the yes win platform, you confirm that you have read and understood this Privacy Policy.

2Data We Collect

2.1 Information You Provide Directly

During the registration process and your use of the Yes Win platform, you may provide us with the following information:

• Full name as shown on your official identification document (MyKad);
• National ID number (MyKad) for identity verification purposes;
• Date of birth to verify age eligibility (18 years and above);
• An active email address for account communications and notifications;
• A Malaysian mobile number registered in your name;
• Current residential address;
• Malaysian bank account or e-wallet details (account number, bank name) for processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, or FPX;
• Information you share when contacting customer support.

2.2 Automatically Collected Information

When you use the yes win platform, our systems automatically collect certain technical information to ensure the platform functions properly and your account remains secure:

• The IP address of the device used to access the platform;
• Web browser type and version;
• Device type and operating system;
• Date and time of login and logout;
• Game history, bets placed, and transaction records within the platform;
• Pages visited and time spent in each section of the platform;
• Cookie data and similar tracking technologies (see Section 6).

3How We Use Your Data

Yes win uses the personal information collected solely for legitimate purposes directly related to platform operations. The primary uses of your data are as follows:

3.1 Account Management and Services

• Processing and verifying new account registrations;
• Verifying member identity through the mandatory KYC (Know Your Customer) process;
• Processing deposits made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, and other accepted Malaysian payment channels;
• Processing withdrawals to your bank account or e-wallet within the stipulated timeframe;
• Sending important notifications related to your account, transactions, and security activity;
• Providing effective customer support whenever you reach out to our team.

3.2 Security and Fraud Prevention

• Identifying and preventing unauthorised access to member accounts;
• Detecting suspicious activity such as attempts at multiple account ownership or bonus abuse;
• Complying with legal requirements related to anti-money laundering;
• Investigating complaints and disputes involving member accounts;
• Monitoring and protecting the integrity of the platform against manipulation or technical exploitation.

3.3 Platform Improvement and User Experience

• Analysing aggregated usage patterns (without identifying individuals) to improve platform functionality;
• Developing new features and games relevant to the needs of Malaysian players;
• Personalising your user experience based on your preferences and gaming habits;
• Sending you relevant promotional offers and bonuses (subject to your notification preferences).

3.4 Responsible Gaming

Yes win uses your gaming activity data for responsible gaming purposes, including identifying behavioural patterns that may indicate a need for support. This is done solely to protect the interests of our members and not for marketing purposes. More information about yes win's responsible gaming programme is available on the Responsible Gaming us.

4Data Sharing and Disclosure

Yes win does not sell member personal information. However, there are limited circumstances in which we may share your data with certain parties for legitimate operational purposes:

4.1 Trusted Third-Party Service Providers

Yes Win works with a select group of third-party service providers to support the operation of our platform. These include:

• Payment gateway providers for processing deposits and withdrawals via TNG eWallet, GrabPay, DuitNow, and other channels;
• Game providers such as Evolution Gaming, Pragmatic Play, and SA Gaming, which offer Live Casino games, slots, and poker through the yes win platform;
• Licensed third-party identity verification and KYC service providers;
• Information technology infrastructure and cybersecurity service providers.

All third-party service providers are required to protect your data to a standard no less stringent than the one we uphold ourselves. They are permitted to use your data only for the specific purposes we direct and nothing beyond that.

4.2 Legal Requirements

Yes win may disclose your personal information to the relevant authorities if required to do so by law, court order, or direction from a legitimate regulatory body. In such circumstances, we will endeavour to notify you in advance unless prohibited by law or impractical in an emergency situation.

5Data Security

Yes win continually invests in security infrastructure to keep your personal data protected at all times. Key security measures we have in place include:

• 256-bit SSL/TLS encryption for all data communications between your device and our servers;
• Encryption at rest for all sensitive information stored in our databases;
• Role-based access control ensuring that only authorised staff can access member data;
• Round-the-clock security monitoring by our IT security team to detect threats;
• Regular security audits by independent third parties to identify and address vulnerabilities;
• Rigorous data backup procedures to ensure system recovery in the event of a technical failure;
• Two-factor authentication (2FA) is available to all members to secure account login.

While yes win takes all reasonable security measures, no system can guarantee absolute 100% security. We encourage all members to play their part in protecting their accounts by using a strong password, not sharing login credentials with anyone, and notifying us immediately if unauthorised access is suspected.

6Cookies and Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. Yes Win uses cookies and similar tracking technologies to keep the platform running properly, enhance the user experience, and understand how members use our services.

6.2 Types of Cookies Used

You can manage or delete cookies through your browser settings. Please note, however, that disabling certain cookies may affect the functionality of some parts of the Yes Win platform.

7Your Personal Data Rights

As a yes win member, you have the following rights in relation to the personal data we hold about you. These rights may be exercised by contacting our team at support@yeswin.site:

To exercise any of the above rights, submit a written request to us at support@yeswin.site, including your yes win account number and the specific right you wish to exercise. We will process your request within 30 business days. There are circumstances in which we may be unable to fulfil a request in full — for example, where data deletion conflicts with financial record-keeping obligations prescribed by law.

8Data Retention Period

Yes win retains member personal information for as long as your account remains active and for a defined period following account closure, depending on the type of data and applicable legal requirements:

• Account records and registration information: Retained for a minimum of 5 years after account closure to comply with legal requirements related to anti-money laundering;
• Financial transaction records (deposits and withdrawals): Retained for 7 years from the date of transaction in accordance with accounting standards and financial regulations;
• Customer support communication records: Retained for 2 years for reference and dispute resolution purposes;
• Access log technical data: Retained for 90 days for security and incident investigation purposes;
• Gaming history: Retained for the duration of the active account plus 3 years for responsible gambling and dispute purposes.

Once the applicable retention period has elapsed, data will be permanently deleted or anonymised in accordance with our secure data disposal procedures.

9Child Protection

The yes win platform is exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store any personal information from minors. The yes win registration process includes age verification and identity verification to ensure that only adults are able to access the platform.

If yes win becomes aware that a child's personal information has been collected without valid parental or guardian consent, we will take immediate steps to delete that information and close the relevant account. If you believe your child or a minor may have registered an account on yes win, please contact us immediately at support@yeswin.site.

10Links to Other Websites

The yes win platform may contain links to websites of our game providers or technology partners within the gaming context. yes win is not responsible for the privacy practices of those external websites, and this Privacy Policy does not apply to them.

We encourage you to read the privacy policy of every external website you visit. Any information you share directly with third-party websites is your responsibility and subject to their own privacy policies.

11Amendments to the Privacy Policy

Yes win reserves the right to amend or update this Privacy Policy at any time in line with changes to our business practices, technologies used, or applicable legal requirements. Any amendments will take effect immediately upon the updated version being published on the yes win website.

For material amendments — those that significantly change how we use your data — we will send a notification to the email address registered to your account at least 14 days before the changes take effect. This gives you sufficient time to review the updates and decide whether to continue using the Yes Win platform.

It is good practice to review this Privacy Policy periodically, especially before carrying out financial transactions or sharing new personal information. The date of the last update is always displayed at the top of this document.

12Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how yes win handles your personal data, we encourage you to contact us directly. The yes win data privacy team will address every enquiry seriously and in a timely manner.

You can reach us through:

• Email: support@yeswin.site — for privacy enquiries, data rights requests, or data security complaints;
• Live Chat: Available on the Yes Win platform 24 hours a day, 7 days a week in both Bahasa Malaysia and English;
• Target Response Time: Within 2 hours for live chat and within 24 working hours for email.

We value the trust you place in Yes Win and are committed to addressing every privacy-related enquiry with transparency, sincerity, and within a reasonable timeframe. Thank you for taking the time to read this Privacy Policy in full — it reflects our commitment to an open and trustworthy relationship with every Yes Win member in Malaysia.