PDPA Data Protection

Privacy Policy yes1win – Malaysian Players' Personal Data Protection

Yes1win takes the protection of your personal data seriously. This policy transparently explains how your information is collected, used, stored, and protected in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: 1 January 2026  |  Version 2.4

How yes1win Protecting Your Data

Six core data protection principles underpinning every information handling decision on the yes1win platform.

256-bit SSL Encryption

All data transmitted between your device and yes1win's servers is encrypted using 256-bit SSL technology. This means your personal and financial information cannot be intercepted by third parties.

Full PDPA Compliance

Yes1win operates within the framework of Malaysia's Personal Data Protection Act 2010. All data collection and processing is carried out in accordance with the principles set out by the PDPA.

No Data Sales

Yes1win has never sold, rented, or commercialised members' personal data to any third party. Your data belongs to you — we only use it for the stated purposes.

Secure & Up-to-Date Servers

Data is stored on servers protected by firewalls and intrusion detection systems. Security updates are performed regularly to address the latest cyber threats.

Controls in Your Hands

You have the right to access, correct, delete and object to the processing of your personal data. All requests are processed within 14 working days through the yes1win support team.

Data Breach Notice

In the event of a data breach affecting your personal information, yes1win will notify you within a reasonable timeframe and take immediate remedial action.

1

Scope and Application of This Policy

This Privacy Policy describes the personal data collection and handling practices of yes1win for all members using our platform via the website or mobile app. This policy applies to all registered players and visitors accessing the yes1win platform from Malaysia.

By registering an account or continuing to use the yes1win services, you acknowledge that you have read and understood this policy. If you do not agree with any aspect of this policy, please discontinue use of the platform and contact our support team to close your account.

Legal Basis: This policy is prepared in compliance with the requirements of the Malaysia Personal Data Protection Act 2010 (PDPA) and internationally accepted data protection principles.

2

Types of Personal Data Collected

Yes1win collects various types of data depending on how you interact with our platform. The following are the main categories of data we process:

Data Category Information Examples Collection Method
Identity Information Full name, date of birth, identity card number Account registration & KYC
Contact Information Email address, phone number, residential address Registration & profile updates
Financial Information Bank account number, transaction records Deposits & withdrawals
Technical Data IP address, device type, web browser, approximate location Automatic access logs
Activity Data Game history, betting records, session duration Platform usage
Communications Support chat records, emails, feedback Interactions with our team

Yes1win does not collect sensitive data such as health information, religious beliefs, or criminal records unless specifically required for legal compliance purposes.

3

Purpose of Personal Data Use

Personal data collected by yes1win is used solely for the following legitimate and stated purposes:

  • Account management: Creating, verifying, and maintaining your member account, including identity verification through the KYC process.
  • Transaction processing: Processing deposits, withdrawals, and all financial transactions related to your account securely.
  • Service delivery: Allowing you to access all games, promotions, and yes1win platform features without interruption.
  • Customer support: Answering inquiries, resolving technical issues, and providing comprehensive support to members.
  • Platform security: Detecting and preventing fraud, money laundering, unauthorized access, and other illegal activities.
  • Marketing communications: Sending relevant offers, promotions, and information — only to members who have given their consent. You may withdraw consent at any time.
  • Legal compliance: Meeting reporting obligations to regulatory bodies and relevant authorities as required by law.
  • Responsible gambling: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate assistance.
4

Data Sharing with Third Parties

Yes1win does not sell or rent members' personal data to third parties for marketing or commercial purposes. Data is only shared in the following circumstances:

4.1 Trusted Service Providers

Yes1win works with selected service providers such as payment gateway providers, licensed game providers, and customer support platforms. All such third parties are bound by strict data protection agreements and are only permitted to use the data necessary to perform their services.

4.2 Legal Requirements

Data may be disclosed to relevant authorities when required by court order, applicable law or official investigations by law enforcement agencies. yes1win will notify you of any such disclosure unless prohibited by law.

Our Guarantee: yes1win has never and will never sell members' personal data to advertisers, data brokers, or any commercial third party. This is an absolute commitment that will not be compromised.

5

Data Storage and Retention Period

Yes1win retains your personal data for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable law. Typical retention periods are as follows:

  • Active account data: Retained for the duration your account remains active and in use.
  • Financial transaction data: Retained for a minimum of 7 years in accordance with anti-money laundering legal requirements.
  • KYC records and identity verification: Retained for up to 5 years after account closure.
  • Support communication logs: Retained for 2 years for reference and complaint resolution purposes.
  • Technical log data: Retained for 90 days before being automatically deleted.

Upon expiry of the relevant retention period, data will be securely deleted or permanently anonymised in accordance with standardised data deletion procedures.

6

Cookies and Tracking Technologies

Yes1win uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small files stored on your device to enable certain features to function correctly.

6.1 Types of Cookies Used

  • Essential cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled.
  • Performance cookies: Collecting information about how you use the platform to help us improve the user experience.
  • Functional cookies: Remembering your preferences such as language, set betting limits, and display settings.
  • Analytics cookies: Used to understand platform usage patterns in aggregate and anonymous form.

You can manage cookie settings through your web browser settings. However, disabling essential cookies may affect the functionality of the yes1win platform.

7

Identity Verification (KYC)

As part of yes1win's commitment to security and anti-money laundering compliance, we conduct a Know Your Customer (KYC) process that includes member identity verification.

7.1 Documents That May Be Requested

  • Proof of identity: Malaysian Identity Card (MyKad), passport, or other official identity documents.
  • Proof of address: Utility bill, bank statement or official document showing your current residential address.
  • Proof of payment method: A screenshot or statement confirming ownership of the bank account used for deposits.

All KYC documents are stored securely and used solely for verification purposes. yes1win does not share copies of your identity documents with third parties without your consent or a clear legal requirement.

The yes1win KYC process is conducted entirely within a secure environment. Uploaded documents are encrypted and accessed only by authorized staff. The process is typically completed within 24 hours.

8

Your Rights as a Data Subject

Under the Malaysia PDPA 2010, you have the following rights regarding your personal data held by yes1win:

Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 14 working days.

Right to Rectification

If your data is inaccurate or outdated, you have the right to request a correction through your account settings or by contacting customer support.

Right to Erasure

You may request deletion of your data under certain circumstances, subject to legal retention obligations binding on us.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time. Objections will be enforced immediately.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another platform of your choice.

Right to Restriction of Processing

Under certain circumstances, you may request that we limit the processing of your data while a dispute is being resolved.

To exercise any of the above rights, contact the yes1win support team via live chat or our support email. All requests are handled within 14 business days at no charge.

9

Data Security Measures

Yes1win implements comprehensive layers of technical and operational protection to keep your personal data secure at all times:

  • Data encryption in transit: All communications between your browser/app and yes1win's servers are protected by 256-bit SSL/TLS.
  • Data encryption at rest: Sensitive data such as financial information is encrypted in the database using industry-standard encryption.
  • Strict access controls: Only staff with specific authorisation may access members' personal data, and every access is automatically logged.
  • Regular security testing: yes1win conducts regular penetration testing and security audits to identify and address vulnerabilities.
  • 24/7 threat monitoring: An automated monitoring system operates around the clock to detect and respond to suspicious activity.
  • Staff training: All yes1win staff who handle personal data receive comprehensive and regular data protection training.

While yes1win takes all reasonable measures, no security system can guarantee 100% absolute security. We encourage you to use a strong password, enable two-factor authentication, and notify us immediately if you suspect any unauthorised activity on your account.

10

Policy Amendments and Contact Us

Yes1win reserves the right to update this Privacy Policy from time to time to reflect changes in data processing practices, legal requirements, or new platform features. Any material changes will be communicated to you via your registered email or a notice displayed on the platform at least 14 days before taking effect.

We encourage you to review this page periodically to stay informed about how yes1win protects your personal data. The date of the most recent update is always displayed at the top of this page.

10.1 How to Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the handling of your personal data by yes1win, please contact our support team via live chat on the platform. Our team is available 24 hours a day, 7 days a week.

Complaints to Authorities: If you believe that yes1win's processing of your data violates Malaysia's PDPA, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia through the relevant official channels.

Your Data Is Safe With Us

Play at yes1win with Peace of Mind

You now know how yes1win protects your privacy. Register an account today and enjoy thousands of games with the confidence that your personal data is always in safe hands.

18+ only. Subject to Terms and Conditions  |  Responsible Gambling.

Bahasa Melayu