Privacy Policy yes2win99 – Malaysia Member Personal Data Protection

This Privacy Policy describes yes2win99's data management practices, including the types of information collected, the purposes for collection, parties who may receive that information, retention periods, and your rights as a data subject.

This Policy applies to all of the following activities on the yes2win99 platform:

• Member account registration and management.
• Financial transactions including deposits and withdrawals.
• Participation in all types of games and betting.
• Communications with the customer support team.
• Using the yes2win99 mobile app.
• Browsing the yes2win99 website even without logging in.

Yes2win99 only collects data that is genuinely necessary to provide a safe and efficient service. Below are the types of data we collect and the purpose behind each:

We do not collect sensitive information such as medical data, religious beliefs, or political views. All data collection is carried out lawfully with your consent.

Collected data is used solely for the following purposes and will not be used outside this scope without your additional consent:

• Account Management: Creating, verifying, and managing your member account, including password recovery and two-factor identity verification.
• Transaction Processing: Processing deposits, withdrawals, and bonus transfers securely and accurately.
• Fraud Prevention: Identifying and blocking suspicious activity, duplicate accounts, or collusion attempts that could compromise platform security.
• Customer Support: Understanding the context of your issue when you contact our support team, enabling faster and more accurate resolution.
• Platform Improvements: Analyzing usage patterns in aggregate (not individually) to improve the functionality and user experience of the yes2win99 platform.
• Responsible Gaming: Monitoring gameplay patterns to identify members who may need assistance and offering appropriate self-control tools.
• Marketing Communications: Sending bonus offers, promotions, and the latest updates – only to members who have agreed to receive such communications.

Yes2win99 does not sell your personal data. However, there are limited situations where we may share data with certain parties:

• Payment Providers: Minimum transaction information required is shared with FPX, Maybank, CIMB, TNG eWallet, and Boost to process your financial transactions. All these providers are bound by strict confidentiality obligations.
• Technical Service Providers: Vendors who help operate the platform infrastructure (such as cloud and cybersecurity services) have limited access to only the data required for their specific functions.
• Legal Authorities: yes2win99 will disclose data when required by a valid court order, law enforcement request, or applicable regulatory compliance requirement.
• Independent Audit: Officially appointed compliance and security auditors are granted limited access to records strictly for audit purposes.

In all of the above cases, we ensure that any party receiving data is bound by a confidentiality agreement and uses it solely for the stated purpose.

Yes2win99 uses cookies and similar tracking technologies to enhance user experience and platform security. Types of cookies used:

• Essential Cookies: Required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled as they affect essential platform functionality.
• Performance Cookies: Collecting information on how you use the platform (pages visited, time spent) to help us improve the user experience.
• Functional Cookies: Storing your personal preferences such as your chosen odds format, language, and display settings to ensure a more comfortable experience on every visit.

You can manage or delete cookies through your browser settings. However, disabling essential cookies may affect the functionality of the yes2win99 platform.

Yes2win99 retains your personal data only for as long as necessary for the stated purposes or as required by law. Our general retention schedule is as follows:

• Active Account Data: Retained for the duration your account is active and for 7 years after account closure for financial regulatory compliance purposes.
• Transaction Records: Retained for 7 years as required by Malaysia's financial regulations.
• Customer Support Logs: Retained for 3 years after the last case resolution.
• Technical Data (Server Logs): Retained for 90 days and then automatically deleted.

When data is no longer needed, it is securely deleted or anonymized using methods that ensure it cannot be recovered.

Under Malaysia's PDPA and yes2win99's internal policies, you have the following rights regarding your personal data:

Yes2win99 continuously invests in security infrastructure to protect your data against threats such as unauthorized access, data breaches, and unlawful modification. The technical and organizational measures we implement include:

• Data-at-Rest Encryption: Sensitive data stored in our databases is protected by AES-256 encryption — whether data is in transit or at rest in storage.
• Two-Factor Authentication (2FA): All internal administrative access requires two-factor authentication, reducing the risk of unauthorized access even if a password is compromised.
• Continuous Monitoring: Automated security monitoring systems operate around the clock to detect and respond to threats in real time.
• Penetration Testing: Independent security audits and penetration tests are conducted regularly to identify and patch vulnerabilities before they can be exploited.
• Staff Training: All yes2win99 staff who handle member data undergo regular privacy and cybersecurity training.

Yes2win99 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational improvements. The "Updated" date at the top of this page indicates when the current version took effect.

For material changes that significantly affect how we process your data, we will provide clear notice through:

• An in-account notice upon your next login.
• Email sent to your registered address.
• Announcements on the platform's home page.

We encourage you to review this page periodically. Your continued use of the yes2win99 platform after any changes take effect signifies your acceptance of the updated Privacy Policy.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, please contact us through the following channels:

• Live Chat: Available 24/7 within the platform — the fastest way to handle any immediate inquiry.
• Privacy Email: [email protected] – for official written requests regarding data rights.
• Response Time: General inquiries are answered within 24 hours. Official data rights requests are resolved within 14 business days.

For more information about your responsibilities as a platform user and your rights as a member, you may also refer to Terms and Conditions and the Responsible Gaming page.