Yes2Win APK Privacy Policy — Malaysian Player Data Protection

This Privacy Policy applies to all users who access or use the platform yes2win apk — covering the main website at yes2winapk.net, the yes2win apk mobile app, and all services provided through the platform.

"Personal data" in the context of this document refers to any information that can be used to identify you directly or indirectly — including your name, phone number, email address, financial information, betting history, and technical device data used to access the platform.

This policy covers:

• The types of personal data we collect and how they are collected.
• The purposes for which that data is collected and used.
• Who your data may be shared with and under what circumstances.
• The security measures we take to protect your data.
• Your rights regarding the personal data we hold.
• How to contact us for any privacy-related queries or requests.

Yes2win apk collects personal data through several means — directly when you provide it to us, automatically when you use the platform, and in some cases from legitimate third-party sources. Below is a summary of the types of data we collect:

We not collect your full credit/debit card number, e-wallet PIN, or online banking password. All financial transactions are processed through registered and licensed third-party payment systems — we only receive confirmation that a transaction was successful, not the full details of your payment instrument.

Every piece of data we collect has a clear and legitimate purpose. yes2win apk use your personal data for the following purposes:

yes2win apk does not sell your personal data to any third party for marketing or commercial purposes. Your data may only be shared in the limited circumstances set out below:

• Payment service providers: Information required to process your deposits and withdrawals is shared with the relevant payment providers (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX banks). These providers are subject to their own privacy policies and are regulated by Bank Negara Malaysia.
• Game providers: For casino, slots, and poker products that run on third-party provider platforms, the minimum information required to operate a game session may be shared. All game providers we work with have strict confidentiality agreements in place with yes2win apk.
• Regulatory and law enforcement bodies: We may be required to disclose your personal data to Malaysian government agencies, courts, or regulatory bodies that have valid legal authority to request such disclosure. We will only comply with requests that have a solid legal basis.
• Fraud prevention and AML: In cases where there is reasonable suspicion of money laundering or other illegal activity, relevant information may be shared with the appropriate authorities as required by law.
• Business transfers: If yes2win apk is involved in a merger, acquisition, or asset transfer, user data may be transferred as part of those business assets. You will be notified before any such transfer takes place and will have the option to request deletion of your data.

yes2win apk implement a range of technical and organisational measures to protect your personal data from unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All communications between your device and our servers are encrypted using 256-bit SSL/TLS protocol — the same level of encryption used by Malaysia's major banking institutions. Data is never transmitted in plain text.
• Encryption of stored data: Sensitive data such as identity information and financial details is encrypted at rest in our database — not just during transmission. Even in the unlikely event of a database breach, the stored data cannot be read without the encryption key.
• Strict internal access controls: Access to user data within our internal systems is limited to staff who require it to perform their job functions. All access is logged and monitored. The principle of least privilege is strictly observed — no employee is granted more access than their role requires.
• Regular security audits: Our platform undergoes regular independent security audits conducted by third-party cybersecurity experts. Any identified vulnerabilities are promptly remediated based on risk priority.
• 24/7 Monitoring: Our automated monitoring system runs 24 hours a day to detect suspicious access patterns, intrusion attempts, and anomalies that may indicate security threats. Our security team responds to alerts in real time.
• Two-factor authentication (2FA): We offer and encourage the use of two-factor authentication for account login. 2FA adds an extra layer of security that prevents unauthorised access even if your password is compromised.

While we implement all reasonable measures, no security system can be guaranteed to be one hundred percent foolproof. We will notify you in a timely manner should a data breach occur that affects your personal data, in accordance with applicable legal requirements.

Yes2win apk uses cookies and similar tracking technologies to enhance your experience on the platform. Below are the types of cookies we use and their purposes:

We not using cookies to track your activity on other websites outside the yes2win apk platform, and we do not share cookie data with third-party advertisers.

You can manage and delete cookies through your web browser settings. Please note, however, that disabling essential cookies may affect certain functions within the yes2win apk platform, including the ability to stay logged in during a betting session.

As a responsibly operated betting platform, yes2win apk have certain legal obligations relating to the collection and processing of financial data:

• KYC (Know Your Customer) Process: We are required to verify a member's identity before approving withdrawals or when certain limits are reached. KYC documents you submit (MyKad, passport, proof of address) are stored securely and accessed only by authorised KYC staff.
• Transaction records: All deposit and withdrawal records are retained for the minimum period required by applicable law. This includes the date and time of each transaction, the amount in Malaysian Ringgit (RM), the payment method used (Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX Maybank2u, CIMB Clicks), and the transaction status.
• AML (Anti-Money Laundering) Monitoring: We monitor transaction patterns to identify activity that may be linked to money laundering. This is a legal requirement, not a choice. Your transaction data may be reviewed by our compliance team if suspicious patterns are detected.
• Betting history: Records of all bets you place — covering football, casino, poker, badminton, and esports — are retained for dispute resolution, auditing, and compliance with relevant authorities.

Yes2win apk retains your personal data only for as long as necessary for the stated purposes or as required by law. Below is a guide to our retention periods:

• Active account data: For as long as your account remains active, we retain all data necessary to provide our services to you.
• Data following account closure: When you close your account, most personal data will be deleted within 30 days. However, certain records — such as transaction history, KYC documents, and legally required compliance data — will be retained for a minimum of 5 years as required under Malaysian financial and anti-money laundering laws.
• Support communication data: Chat records with our customer support team are retained for 3 years for reference and dispute resolution purposes.
• Technical data and logs: Server logs and technical data such as IP addresses are typically deleted or anonymised after 12 months.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered. For data stored in physical format (printed KYC documents), destruction is carried out using certified cross-cut shredders.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and our own commitment to user privacy, you have the following rights regarding the personal data we hold:

yes2win apk does not accept registration or platform use by individuals under the age of 18. Our platform is not designed for children, and we do not knowingly collect personal data from minors.

If we discover that data we have collected belongs to an individual under the age of 18, we will take immediate steps to:

• Suspending and closing the account immediately.
• Deleting all personal data relating to that individual from our systems as promptly as possible.
• Returning any deposited funds (where applicable) to the original payment source.

If you are a parent or guardian and have reason to believe your child has registered an account on yes2win apk, please contact us immediately via live chat or email at support@yes2winapk.net. We will handle such cases with the highest priority and in strict confidence.

Yes2win apk reserves the right to update or amend this privacy policy from time to time to reflect changes in our practices, technical requirements, or evolving legal obligations. The "Updated" date at the top of this page indicates when the policy was last reviewed.

For material changes — that is, changes that significantly alter the way we handle your personal data — we will provide advance notice through:

• Email notifications sent to the email address registered to your account.
• A clear notice on the platform's main page when you log in.
• In some cases, we may require your active confirmation of consent to amended policies before you can continue using the platform.

Your continued use of the yes2win apk platform after changes are published constitutes your acceptance of the updated privacy policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your data. For matters relating to our privacy policy in general, please also refer to Terms & Conditions published by us separately.

If you have any questions, concerns, or requests regarding this privacy policy or how we handle your personal data, we encourage you to reach out to us directly:

• Email: support@yes2winapk.net — use the subject line "Data Privacy Enquiry" to ensure your message is routed to the relevant team promptly.
• Live Chat: Available 24/7 on the yes2win apk platform. Our Malay-speaking team is ready to assist, with an average response time of under 2 minutes.

We are committed to addressing all privacy concerns seriously and in a timely manner. We typically respond to privacy-related queries within 2 business days, and to formal data rights requests within 14 business days.