Important Note: This Privacy Policy describes YesWin's data protection practices and forms part of the overall agreement between you and our platform. By using YesWin's services, you acknowledge that you have read and understood how we manage your personal data.
1 Introduction
Yeswin takes our responsibility to protect the personal data of all members and platform users seriously. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data management.
As an online betting and gaming platform serving users in Malaysia, we understand that your trust is the most valuable asset we hold. We are therefore committed to handling every piece of information you share with us with the highest level of confidentiality and protection.
This policy applies to all information collected through the YesWin website, mobile app, customer support systems, and any other communication channels related to our platform. If you have any questions about how we handle your data, the final section of this document provides contact details for our privacy team.
2 Personal Data We Collect
Yeswin collects personal information necessary to provide a safe service, meet legal requirements, and deliver a better experience to you. The following are the categories of data we collect:
| Data Categories | Examples of Information | Primary Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, MyKad / passport number | KYC verification, fraud prevention |
| Contact Data | Email address, mobile phone number | Account communications, security notifications |
| Financial Data | Payment methods, deposit and withdrawal records | Transaction processing, AML compliance |
| Technical Data | IP address, device type, browser, operating system | Account security, fraud detection |
| Usage Data | Wagering records, games played, active session time | Service improvement, personalised recommendations |
| Document Data | MyKad photo, verification selfie, utility bill | KYC Identity Verification |
We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive information such as medical data, religious beliefs, or political views unless required by law under very limited circumstances.
Minimum Data: yeswin practises the principle of data minimisation — we only request information that is genuinely necessary to provide a safe and legally compliant service. You will not be asked to provide excessive information during the registration process.
3 How We Use Your Data
Every piece of data we collect has a clear and lawful purpose. yeswin does not use your data for any purpose other than those stated here, except with your explicit consent:
- Identity Verification (KYC): Ensuring every member is a real individual aged 18 or above with a valid identity, in line with anti-money laundering legal requirements.
- Transaction processing: Verifying deposits, processing withdrawals, and maintaining accurate financial records for each member account.
- Account security: Detecting suspicious login attempts, fraudulent activity, and other security threats that could compromise your account.
- Legal compliance: Meeting reporting obligations to the relevant authorities under applicable Malaysian law.
- Customer support: Helping you resolve issues, answer inquiries, and provide accurate and effective assistance.
- Platform enhancements: Analyzing usage patterns in aggregate and anonymous form to improve the user experience and system performance.
- Promotional communications: Sending information about the latest offers and promotions — only if you have given consent to receive such communications.
We process your data on valid legal bases, including the performance of a contract, compliance with legal obligations, the legitimate interests of yeswin, and in some cases, your explicit consent.
4 Data Storage & Security
Yeswin implements multiple layers of technical and organisational security controls to protect your personal data from unauthorised access, disclosure, alteration, or destruction:
- 256-bit SSL Encryption: All data transmitted between your browser or app and yeswin's servers is protected with industry-standard TLS 1.3 encryption.
- Data-at-rest encryption: Sensitive data stored in our databases, including identity and financial information, is encrypted using AES-256.
- Strict access controls: Only authorized personnel with a valid business need have access to members' personal data, and all access is logged and monitored.
- Two-factor authentication (2FA): Our internal systems require multi-factor authentication for all access to sensitive member data.
- 24/7 Monitoring: Our automated threat detection system monitors for abnormal activity around the clock and sends immediate alerts to the security team.
- Regular security audits: Independent security assessments are conducted periodically to identify and address potential system vulnerabilities.
Security Note: While we implement robust technical protections, no digital system can guarantee 100% absolute security. You are also responsible for keeping your password and account login details confidential. Contact us immediately if you suspect any unauthorised access.
5 Data Sharing with Third Parties
Yeswin does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, we do share data in the following limited circumstances:
- Payment service providers: To process your deposits and withdrawals via FPX, TNG eWallet, GrabPay, and other supported payment methods. These providers are bound by strict confidentiality agreements.
- Identity verification partner: Approved third-party KYC service providers assist us in verifying identity documents securely and efficiently.
- Cloud services and infrastructure: Data is stored on servers managed by infrastructure providers that comply with internationally recognised security standards.
- Competent authority: We are required by law to disclose certain data to Malaysian authorities upon receiving a court order or other lawful request.
- Professional advisors: Lawyers, accountants, and auditors bound by their own professional confidentiality obligations.
All third parties with whom we share your data are required to uphold data protection standards no less stringent than this Privacy Policy. We have zero tolerance for any use of yeswin member data outside the agreed scope.
6 Cookies & Tracking Technologies
Yeswin uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:
| Cookie Types | Purpose | Duration |
|---|---|---|
| Essential Cookies | Maintaining login sessions, security settings | Session / 24 hours |
| Preference Cookies | Saving language preferences, display themes | 1 year |
| Analytics Cookies | Anonymous usage statistics for improvement purposes | 90 days |
| Security Cookies | Detecting suspicious activity and fraud | 30 days |
Essential cookies are required for the platform's core functionality and cannot be disabled. Other cookies can be managed through your browser settings. Please note that disabling certain cookies may affect some features on the yeswin platform.
We do not use third-party tracking cookies for advertising or targeted marketing without your consent. All analytics data is collected in aggregate form and is not linked to your personal identity.
7 Cross-Border Data Transfers
As an online platform, some of your data may be processed or stored on servers located outside Malaysia. This occurs primarily in the context of cloud infrastructure and technical support services used by yeswin.
In all cases of cross-border data transfers, YesWin ensures that:
- Data recipients provide a level of data protection equal to or higher than that required by Malaysia's PDPA.
- Legally binding data processing agreements (DPA) are signed with all vendors handling our members' data.
- Data transfers only occur to countries or organizations with a recognized data protection framework.
- You will be notified if there are significant changes to the location where your data is stored or processed.
Full Control: Regardless of where your data is processed, the privacy rights set out in this Privacy Policy apply to you in full. You may contact us at any time to find out where your data is stored.
8 Your Rights Regarding Personal Data
Under PDPA 2010 and YesWin's commitment to privacy, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you. Requests are processed within 21 business days.
Right to Rectification
If any of your data is inaccurate or outdated, you may request a correction through our support team.
Right to Erasure
You may request data deletion, subject to any active legal retention obligations.
Right to Object to Processing
You may object to the processing of your data for specific purposes such as direct marketing.
Right to Data Portability
You may request your data in a structured, machine-readable format for transfer to another platform.
Right to Restrict Processing
In certain circumstances, you may ask us to restrict the processing of your data while an issue is being resolved.
To exercise any of the rights above, contact our privacy team via the support email. We aim to respond to all privacy rights requests within 21 calendar days. In complex cases, this period may be extended by up to 60 days with written notice to you.
9 Data Retention & Deletion
Yeswin retains your personal data only for as long as necessary for the original purpose of collection, or as required by law. General data retention guidelines are as follows:
- Active account data: Retained for as long as your account is active and in use on the YesWin platform.
- KYC and identity data: Retained for a minimum of 7 years after account closure in accordance with Malaysia's anti-money laundering legal requirements.
- Financial transaction records: Retained for 7 years for audit, tax reporting, and AML compliance purposes.
- Support communication logs: Retained for 3 years for dispute resolution and service improvement purposes.
- Usage analytics data: Anonymous aggregated data is retained indefinitely; identifiable usage data is deleted within 2 years.
- Marketing data: Deleted within 30 days of you withdrawing consent for promotional communications.
Once the required retention period has elapsed, your data will be securely deleted or anonymised so it can no longer be linked to you. We apply data deletion methods that comply with recognised security standards.
10 Child Protection
Yeswin is a platform dedicated to adults aged 18 and above. We do not knowingly collect or process personal data from individuals under 18 years of age.
Our registration and KYC verification process is designed to identify and prevent sign-ups by underage individuals. Should we find that data from an underage individual has been collected unintentionally, we will:
- Immediately suspend and archive the relevant account while an investigation is carried out.
- Permanently deleting all personal data of the individual once verification is complete.
- Refunding any funds that may have been deposited into the relevant account.
- Reporting the case to the relevant authorities if necessary.
Notice to Parents / Guardians: If you believe your child who is under age has registered at yeswin, please contact our support team immediately. We will take prompt action to address the situation.
11 Amendments to the Privacy Policy
Yeswin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or improvements in how we protect your data.
When we make significant changes to this Privacy Policy, we will:
- Updating the "Last Updated" date at the top of this document.
- Sending email notifications to all registered members at least 14 days before changes take effect.
- Displaying a clear notice on our website and app about upcoming changes.
Continued use of the yeswin platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you disagree with any changes, you may close your account before they take effect.
12 Contact Our Privacy Team
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, our privacy team is here to help:
- Email: [email protected]
- Live Chat: Available 24/7 via the chat icon at the bottom corner of the platform
- Response time: We aim to respond to all privacy inquiries within 3 business days
For formal data rights requests (access, correction, deletion), please clearly state the type of request and include proof of identity so we can process it securely and accurately. You also have the right to lodge a complaint with the Malaysia Department of Personal Data Protection if you are dissatisfied with how we handle your data.
Why Your Privacy Is Safe at yeswin
More than just words — here is the real infrastructure and commitment we have built to protect every YesWin member.
256-bit SSL Encryption
Every byte of data travelling between your device and yeswin's servers is encrypted using TLS 1.3 — the same standard used by leading financial institutions worldwide.
Malaysia PDPA Compliance
Our privacy policy and data management practices are fully developed in compliance with Malaysia's Personal Data Protection Act 2010, not merely generic international guidelines.
No Data Sales
Yeswin has never and will never sell members' personal data to advertisers or data brokers. Your data is used solely for the purposes you have directly consented to.
Strict Internal Access Controls
Only designated staff with a legitimate business need can access member data, and every access is automatically logged and monitored at all times.
Independent Security Audit
Our systems undergo periodic independent security assessments by recognised third-party audit firms to ensure data protection consistently meets the highest standards.
Full Control in Your Hands
Through your yeswin account settings, you can manage communication preferences, request a copy of your data, and exercise your privacy rights easily — no complicated process required.
Privacy Policy FAQ
Join yeswin with Complete Confidence
Your data is protected. Your privacy is respected. It is time to enjoy a betting and gaming platform fully trusted by members across Malaysia.