Privacy Policy yes33 — Your Data Protection Is Our Priority

1. Data We Collect

To deliver the best, safest, and most compliant service, yes33 collects several categories of information from users of our platform. This data collection is necessary and conducted transparently — we only collect what is truly required.

1.1 Personal Identification Information

During the registration and KYC verification process, you will be required to provide the following information:

• Full name as shown on your identity card (MyKad) or passport.
• Identity card number (MyKad) or passport number for non-Malaysian citizens.
• Date of birth for age verification purposes (18 years and above).
• Gender and nationality.
• Full current residential address.

1.2 Contact Information

• An active Malaysian mobile number (used for OTP verification).
• A valid and active email address.

1.3 Financial Information

To enable deposit and withdrawal transactions to be carried out securely, we collect:

• Registered bank account number and bank name.
• E-wallet account information (DuitNow, Touch 'n Go, GrabPay) if used.
• Deposit and withdrawal transaction records.
• Bank statement documents as part of the KYC process.

1.4 Technical Data & Activity

Our system automatically logs the following technical information when you use the platform:

• IP address and approximate geographic location.
• Type and version of the web browser or mobile app used.
• Device operating system (iOS, Android, Windows, etc.).
• Login history including date, time, and location.
• Records of wagering activity, games played, and session duration.
• Cookie and session token data for security and convenience purposes.

2. Purpose of Data Collection

Every piece of data we collect has a clear and legitimate purpose. yes33 does not collect data excessively or for undisclosed purposes. The following are the primary purposes of our data collection:

2.1 Marketing Communications

With your consent, yes33 may send you information about the latest promotions, new bonuses, and exclusive offers via email or in-app notifications. You may withdraw this consent at any time through your account settings or by contacting our support team.

2.2 Responsible Gaming

Your gaming activity data is used to monitor wagering patterns and ensure a healthy, safe playing experience. This includes identifying early warning signs of problem gambling and connecting you with appropriate support resources if needed.

3. Information Sharing

Yes33 takes a highly limited and responsible approach to data sharing. Our core principle is simple: your data is not sold, not rented, and not shared except in situations of absolute necessity as disclosed below.

3.1 Trusted Third-Party Service Providers

We may share necessary data with third parties that help us operate the platform, including:

• Payment gateway providers: to securely process your deposit and withdrawal transactions.
• Identity verification service providers: for a legally compliant KYC process.
• Cloud infrastructure providers: for secure data storage and service continuity.
• Game software providers: only the data necessary to enable the games to function.

All third parties are bound by strict confidentiality agreements and are only permitted to use your data for the stated purposes.

3.2 Legal Requirements

Yes33 may disclose your personal data when required by Malaysian law, including upon receipt of a valid court order, requests from law enforcement agencies, or relevant regulatory bodies. In such cases, we disclose only the minimum information required and will notify you where permitted to do so.

3.3 Cross-Border Data Transfers

In some cases, our service providers may operate outside Malaysia. Any cross-border data transfer is only carried out where the recipient country has an equivalent or higher level of data protection, or where appropriate safeguarding mechanisms have been established.

4. Data Security

Data security is more than a slogan at yes33 — it is an ongoing investment. We implement multiple layers of technical and organisational security controls to protect your personal information from unauthorised access, loss, or misuse.

4.1 Technical Security Measures

• 256-bit SSL/TLS encryption for all data transmitted between you and our platform.
• Passwords and authentication information are stored in an irreversible hashed format.
• Two-factor authentication (2FA) is available for all member accounts as an added layer of security.
• Continuous 24/7 system monitoring to detect suspicious activity.
• Firewalls and intrusion detection systems that are regularly updated.
• Regular security vulnerability scans conducted by both internal and external security teams.

4.2 Internal Access Controls

Access to members' personal data within yes33 is strictly controlled on a need-to-know basis. Only employees who require access to specific data to perform their duties are permitted. All access is logged and audited regularly.

4.3 Security Incident Response

Yes33 has an established incident response procedure. In the event of a data breach that may affect your personal information, we will:

• Containing the incident and limiting any damage as quickly as possible.
• Notifying you within 72 hours via email or in-platform notification.
• Providing clear information about what happened, the data potentially affected, and the steps you should take.
• Reporting incidents to the relevant authorities as required by law.

5. Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by yes33. We fully respect these rights and provide straightforward mechanisms for you to exercise them.

To exercise any of the above rights, contact the yes33 support team via live chat on the platform or send an email to [email protected]. Please state your request clearly along with your account number to help us process it faster.

6. Cookies & Tracking Technologies

Yes33 uses cookies and similar tracking technologies to enhance user experience, ensure platform security, and understand how our platform is used. The following is a detailed explanation of the types of cookies we use.

6.1 Types of Cookies Used

• Essential Cookies: Required for core platform functions such as login, session security, and verification. These cookies cannot be disabled as the platform will not function without them.
• Performance Cookies: Collecting information on how you use the platform (pages visited, session duration) to help us improve the user experience.
• Functional Cookies: Remembering your preferences such as language, display settings, and login details for ease of use.
• Analytics Cookies: Used in aggregated and anonymised form to understand usage trends and improve our platform overall.

6.2 Cookie Management

You can control and manage cookies through your web browser settings. Most modern browsers allow you to view, delete, and block cookies. Please note, however, that disabling essential cookies may affect the functionality of the yes33 platform and your gaming experience.

7. Data Retention and Deletion

7.1 Data Retention Period

Yes33 retains your personal data for as long as your account is active and for any additional period required by Malaysian law following account closure. In general, the retention periods are as follows:

• Financial transaction records: minimum 7 years as required by Malaysian financial law.
• KYC documents: minimum 5 years after account closure.
• Platform activity logs: 2 years from the date of activity.
• Customer support communication records: retained for 3 years from the date of communication.
• Session cookie data: Automatically deleted when the session ends or the browser is closed.

7.2 Deletion After Retention Period

Once the specified retention period has ended, yes33 will securely delete or anonymize your personal data using methods that ensure it cannot be recovered. The deletion process is carried out systematically and audited on a regular basis.

7.3 Early Deletion Requests

If you request data deletion before the mandatory retention period ends, yes33 will delete all data not subject to legal obligations and will notify you of any data that must be retained, along with the reasons.

8. Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how yes33 handles your personal data, we encourage you to contact us directly. Our privacy team is ready to assist and committed to providing a satisfactory response.

• Live Chat 24/7: The fastest way — directly within your yes33 platform.
• Privacy Email: [email protected] — for data-related complaints or requests that require written documentation.
• Response Time: We aim to respond within 24 hours for general enquiries and 7 business days for formal data rights requests.

For formal complaints regarding personal data processing that cannot be resolved internally, you have the right to submit a complaint to the Personal Data Protection Commissioner of Malaysia under the Personal Data Protection Act 2010.