Privacy Policy Yes Win – Our Commitment to Protecting Your Data

Yes Win is an online Sports Betting and casino platform operating for players in Malaysia. In the course of providing our services, we collect and process certain personal data from members to ensure the platform runs securely, efficiently, and fairly for all users.

We understand that trust is the foundation of the relationship between Yes Win and every one of our members. That trust depends greatly on how we handle the information you entrust to us — which is why we took the time to write this privacy policy in plain, straightforward language, not confusing legal jargon.

This Privacy Policy applies to all personal data collected through:

• The Yes Win website at yeswin.click and all associated subdomains.
• The yes win mobile app (if downloaded).
• All your interactions with the yes win customer support team via live chat, email, or WhatsApp.
• Any marketing communications you receive from Yes Win, subject to your consent.

This policy is governed by Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. Yes Win operates as the data controller responsible for all personal data of Malaysian members processed through our platform.

Yes Win collects various types of personal data depending on how you interact with our platform. Below is a detailed breakdown of the data we collect and its sources:

Data You Provide Directly:

• Full name as stated on your official Malaysian identity document (MyKad or passport).
• An active Malaysian phone number, used for account verification and security communications.
• Email address (if provided) for account notifications and service communications.
• Date of birth, to verify that you meet the minimum age requirement of 21 years.
• Payment information such as account numbers or e-wallet details (DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, FPX) used for deposits and withdrawals.
• Identity verification documents such as a photo of your MyKad when required for the KYC (Know Your Customer) process.

Data Collected Automatically:

• Your device's IP address each time you access the yes win platform.
• Device information including device type, operating system, browser version, and screen resolution.
• Gaming activity data including bets placed, matches watched, slots played, amounts wagered, and session duration.
• Account login and logout timestamps.
• Cookie data and tracking technologies described in Section 9 of this document.

Personal data collected by Yes Win used exclusively for the following legitimate and clearly stated purposes. We do not use your data for any other purpose without informing you in advance:

• Account Management: Creating, verifying and maintaining your Yes Win account, including processing registration, secure login and account recovery.
• Financial Transaction Processing: Processing deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX, as well as winnings withdrawals to your bank account or e-wallet.
• Identity Verification (KYC): Meeting anti-money laundering (AML) requirements and verifying that members satisfy the minimum age and other eligibility criteria.
• Gaming Services Provision: Enabling you to play slots, bet on Malaysian Super League, EPL, badminton, and other sports, and access all features on the Yes Win platform.
• Platform Security: Detecting and preventing fraud, multi-account usage, bonus abuse, and any activity that violates yes win's Terms & Conditions.
• Customer Support: Processing enquiries, complaints and support requests submitted via live chat, email or WhatsApp.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support to members who may need it.
• Service Communications: Sending you important account notifications such as deposit confirmations, winning alerts, terms updates, and security information.
• Marketing (with consent): Sending information about yes win promotions, new bonuses, and special offers — only where you have given explicit consent to receive such marketing communications.
• Platform Improvements: Analysing aggregated usage data (without identifying individuals) to understand how members use the platform and make relevant improvements.

Every processing of personal data by Yes Win is carried out on the basis of one or more lawful grounds under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Contract Performance: Processing necessary to fulfil our contractual obligations to you as a Yes Win member — including payment processing, game provision and account management.
• Legal Obligation: Processing required to comply with applicable Malaysian law, including anti-money laundering (AML/KYC) requirements and financial reporting obligations.
• Legitimate Interests: Processing for platform security, fraud prevention, and service improvement purposes, where our legitimate interests do not override your fundamental rights.
• Consent: For optional processing such as marketing communications, we rely on your explicit consent, which may be withdrawn at any time.

Yes Win does not sell members' personal data to any party. However, in the course of operating the platform, we may need to share certain data with the following categories of third parties under limited and controlled circumstances:

• Payment Service Providers: DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX, and associated bank providers receive the transaction data necessary to process your deposits and withdrawals. These providers are bound by their own privacy policies and Malaysia's financial compliance requirements.
• Game Providers: Companies such as Pragmatic Play, PG Soft and other providers may receive session identifiers necessary to deliver their games to you. They do not receive your full name or financial information.
• Technology Service Provider: Companies that provide server infrastructure, CDN, email services, and analytics tools used by yes win. All such providers are bound by data processing agreements that prohibit them from using your data for any purpose beyond what has been specified.
• Regulatory Authority: Yes Win will disclose required data to the relevant Malaysian authorities when mandated by law or a valid court order.
• Identity Verification Service Providers: Third-party KYC providers who assist us in verifying member identities in accordance with AML compliance requirements.

In all of the above cases, Yes Win only share the minimum data necessary for the specific stated purpose, and ensure that all parties receiving the data are bound by equivalent confidentiality and data protection obligations.

Protecting members' personal data Yes Win is a technical and operational priority that we take very seriously. We implement multiple layers of security measures to ensure your data is protected at all times:

• 256-bit SSL Encryption: All communications between your device and Yes Win's servers are protected with the highest-grade TLS/SSL encryption, preventing any third party from intercepting data in transit.
• Data at Rest Encryption: Sensitive data stored in Yes Win's databases — including payment information and identity documents — is encrypted using robust encryption algorithms.
• Role-Based Access Control: Every yes win staff member only has access to the data required for their specific role. Access to sensitive member data is automatically monitored and logged.
• Two-Factor Authentication (2FA): All internal yes win staff accounts with access to data management systems are protected by mandatory 2FA.
• Regular Security Audits: Yes Win's infrastructure undergoes regular independent penetration testing and security audits to identify and address potential vulnerabilities.
• 24/7 Monitoring: Yes Win's threat monitoring system operates around the clock to detect suspicious activity and respond swiftly to any security threats.

While we take all reasonable precautions, no security system in the world can guarantee 100% protection against every possible threat. We encourage members Yes Win to take protective measures on their own end as well — using strong passwords, not sharing passwords, and ensuring their devices are protected with up-to-date antivirus software.

Yes Win retains members' personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by applicable Malaysian law. The following are general guidelines for our retention periods:

• Active Account Data: For as long as your Yes Win account remains active, we retain all data necessary to maintain services for you.
• Financial Transaction Data: Records of all deposit, withdrawal, and winnings transactions are kept for a minimum of 7 years from the transaction date, in accordance with Malaysia's financial reporting legal requirements.
• Identity Verification Data (KYC): Identity verification documents and information are retained for a minimum of 5 years after account closure, in accordance with AML requirements.
• Gaming History Data: Gaming and betting records are retained for 3 years for customer support purposes, dispute resolution, and responsible gaming analysis.
• Support Communication Logs: Customer support conversation records are retained for 2 years for quality control purposes and recurring case reference.
• Marketing Data: Data used for marketing communications is deleted when you withdraw your consent or close your Yes Win account.

Once the applicable retention period has ended, data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the Yes Win, you have the following rights regarding your personal data:

To exercise any of the rights above, you may submit a request to the data protection team Yes Win via email to support@yeswin.click with the subject "Personal Data Rights Request". We will respond within 30 days from the date the request is received.

Platform Yes Win uses cookies and similar tracking technologies to enhance user experience, maintain account security, and understand how members interact with our platform.

Types of cookies we use:

• Strictly Necessary Cookies (Non-Refusable): These cookies are required for the core functions of the Yes Win platform — secure login, session verification, fraud prevention and account balance management. Without them, the platform will not function properly.
• Functional Cookies: Saving your preferences such as language, display format, and other settings to improve your experience on the Yes Win platform.
• Analytics Cookies: Helping us understand how members use the platform — which pages are visited most, where users encounter difficulties, and how we can improve the overall experience. This data is collected in aggregate form and does not identify individuals.
• Marketing Cookies (with consent): Used to display relevant yes win advertisements and promotions to you, only with your consent. You may decline these cookies without affecting the core functionality of the platform.

You can manage your cookie settings through your web browser settings or via the cookie management panel available when you first visit the website Yes Win. Please note that disabling mandatory cookies may affect your ability to use the platform.

Platform Yes Win is a service intended for adults aged 21 years and above only. We do not knowingly collect or process personal data of individuals under the age of 21.

The Yes Win registration process requires age verification, and we take reasonable precautions to ensure that individuals below the minimum age are unable to register or use the platform.

If we discover that personal data of individuals under 21 has been collected without our knowledge — for example, through registration using false information — we will take immediate steps to:

• Closing the associated account immediately.
• Deleting all personal data collected in relation to that individual.
• Refunding any deposits made through the appropriate channels.

Parents or guardians who have reason to believe their child has registered or is using the platform Yes Win without authorisation may contact us immediately at support@yeswin.click for prompt action.

In the course of operating the platform Yes Win, members' personal data may be processed by third-party service providers operating outside Malaysia — such as cloud server infrastructure providers or international game suppliers.

When cross-border data transfers occur, Yes Win ensure that equivalent protection is provided to your data through the following mechanisms:

• Legally binding data processing agreements with all third-party providers that receive Malaysian members' data.
• Standard data protection clauses requiring providers to comply with data protection standards equivalent to or exceeding Malaysia's PDPA requirements.
• Regular due diligence assessments of the security and privacy practices of all third-party providers that receive yes win member data.

You can obtain further details about the protection mechanisms applied to any cross-border data transfers by contacting the support team Yes Win.

Yes Win reserves the right to update or amend this Privacy Policy from time to time in response to changes in legislation, regulatory requirements, industry practices, or technological developments that affect how we handle personal data.

When material changes are made to this policy — meaning changes that significantly affect your rights or how we use your data — we will:

• Displaying a clear notice on the Yes Win platform homepage at least 14 days before the changes take effect.
• Sends notifications to registered members via the phone number or email address linked to their account.
• Updating the "Last Updated" date shown at the top of this document.

For less material changes — such as grammar corrections, clearer wording, or the addition of information that does not affect how your data is processed — Yes Win reserves the right to make such changes without prior notice, with the updated date revised to reflect the latest version.

We encourage you to review this Privacy Policy page periodically to stay up to date on our privacy practices Yes Win. Continued use of the platform after changes take effect will be considered acceptance of the amended policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how Yes Win handles your personal data, our team is ready to assist through the following channels:

• Privacy Email: support@yeswin.click – Please use the subject line "Data Privacy" or "PDPA Request" to ensure your enquiry is routed to the right team. We aim to respond within 30 working days for all data rights enquiries.
• Live Chat: For general privacy enquiries, the yes win customer support team, available 24/7, can provide initial guidance and direct you to the appropriate resources.
• WhatsApp: Available for general enquiries. For formal data rights requests, email is the preferred channel to ensure an accurate written record.

Yes Win is committed to addressing all privacy concerns seriously and professionally. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia, which oversees PDPA compliance in this country.

This Privacy Policy is to be read together with Yes Win Terms & Conditions and Responsible Gaming Policy ours. Together, these three documents form a comprehensive framework for use of the platform Yes Win that is safe, fair, and responsible.