This Privacy Policy explains how yes2win collects, uses, stores, and protects your personal information when you register and play on our platform. We are committed to handling your data with transparency, security, and respect.
This Privacy Policy ("Policy") is issued by yes2win ("yes2win", "we", "us", "our"), the operator of the online gaming platform accessible at yes2win.one and its associated subdomains, mobile interfaces, and related digital services (collectively, the "Platform").
yes2win acts as the data controller in respect of all personal data processed in connection with your use of the Platform. As data controller, yes2win determines the purposes for which and the means by which personal data is processed, and bears primary responsibility for that processing under applicable data protection law.
This Policy applies to all current and former registered players of the yes2win Platform, visitors to the yes2win website, and any individual whose personal data yes2win processes in connection with the operation of the Platform. It applies regardless of the device or method of access used.
By registering on yes2win, using the Platform, or providing personal data to yes2win by any means, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you should not register on or use the yes2win Platform.
yes2win does not sell, rent, or trade your personal data to third parties for their marketing purposes. Your data is collected and used solely for the lawful purposes of operating the yes2win Platform, meeting our regulatory and licensing obligations, and providing you with the services you have requested.
yes2win collects the following categories of personal data in connection with the operation of the Platform and the provision of gaming services:
yes2win collects personal data through the following means:
The majority of personal data yes2win processes is provided directly by you during the account registration process, through KYC document submission, when you make deposits or withdrawals via the cashier, when you contact yes2win customer support, or when you update your account profile or responsible gaming settings.
When you access and use the yes2win Platform, certain technical and activity data is collected automatically through server logs, cookies, and similar technologies. This includes your IP address, device information, and detailed records of all gaming activity on your account.
yes2win may receive personal data from regulated third-party service providers engaged to assist with identity verification, fraud prevention, and AML compliance. For example, yes2win's KYC verification provider may return identity confirmation or risk-scoring data in connection with your account registration. yes2win's payment processors provide transaction confirmation and payment method verification data.
yes2win processes personal data only where a lawful basis for processing exists. The table below summarises the primary processing purposes and the corresponding legal basis for each:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract |
| KYC identity verification and age check | Legal obligation (gaming licence) |
| Processing deposits and withdrawals | Performance of contract |
| Anti-money laundering (AML) compliance | Legal obligation |
| Fraud detection and prevention | Legitimate interests |
| Providing gaming services (casino, slots, sportsbook) | Performance of contract |
| Customer support provision | Performance of contract |
| Responsible gaming monitoring and intervention | Legal obligation / Legitimate interests |
| Platform security and technical operation | Legitimate interests |
| Marketing communications (where opted in) | Consent |
| Regulatory reporting and audit compliance | Legal obligation |
yes2win does not sell personal data. Personal data is shared only with the following categories of third parties, and only to the extent strictly necessary for the stated purpose:
yes2win will disclose personal data to gaming regulators, law enforcement authorities, financial intelligence units, or other governmental bodies where required to do so by applicable law, court order, or regulatory direction. yes2win will, where legally permitted, notify affected players of such disclosures.
yes2win does not sell, rent, or otherwise commercialise personal data to any third party for marketing, advertising, data brokerage, or profiling purposes. Third parties engaged by yes2win as data processors are contractually prohibited from using yes2win player data for any purpose other than the specific service for which they are engaged.
yes2win uses cookies and similar technologies on the Platform for the purposes of session management, security, platform analytics, and the delivery of personalised gaming experiences. The following categories of cookies are used:
You may manage cookie preferences through your browser settings. Note that disabling certain cookies may impact your ability to use features of the yes2win Platform. yes2win does not use cross-site tracking cookies or share cookie data with third-party advertising networks.
yes2win retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to mandatory minimum retention periods imposed by applicable gaming licensing regulations and financial crime prevention laws.
As a general guide: account and KYC data is retained for a minimum of 5 years following account closure; transaction records are retained for a minimum of 5 years; gaming activity records are retained for the duration of account operation plus 5 years. Communications records are retained for 2 years from the date of communication. Where data is retained solely to comply with legal obligations, it is not used for any other purpose during the retention period.
At the end of the applicable retention period, yes2win securely deletes or anonymises personal data in a manner that prevents reconstruction of the original data.
yes2win implements a comprehensive information security programme designed to protect personal data against unauthorised access, disclosure, alteration, loss, and destruction. Security measures include:
While yes2win takes extensive measures to protect your data, you are responsible for maintaining the security of your yes2win account credentials. Use a strong, unique password. Enable 2FA in your account settings. Never share your login details. If you suspect your account has been compromised, contact yes2win support immediately via live chat.
Subject to applicable data protection law and yes2win's regulatory obligations, you have the following rights in respect of your personal data:
To exercise any of these rights, please contact yes2win's data protection team at [email protected]. yes2win will respond to valid requests within 30 days. Identity verification will be required before yes2win acts on a data subject request.
The yes2win Platform is strictly intended for individuals aged 21 years and above. yes2win does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the mandatory KYC process for all registered accounts.
If yes2win becomes aware that personal data has been collected from an individual under the age of 21, yes2win will immediately close the associated account, delete the personal data, and return any deposited funds to their source. If you have reason to believe that an individual under 21 has registered on the yes2win Platform, please contact yes2win support immediately.
yes2win operates under international gaming authority licensing and uses cloud infrastructure and third-party service providers that may process personal data in locations outside Malaysia. Where personal data is transferred internationally, yes2win ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that required under yes2win's applicable data protection obligations.
Safeguards may include: contractual data protection clauses binding the recipient to appropriate data protection standards; transfers to jurisdictions that have received a data protection adequacy determination; or other legally recognised transfer mechanisms. By using the yes2win Platform, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia for the purposes described in this Policy.
yes2win reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to registered players via the Platform notification system or registered email address, with a minimum of 7 days' notice before taking effect where practicable. The current version of this Policy, with its effective date and version number, is always available on this page.
For all privacy-related enquiries, data subject requests, or concerns about how yes2win handles your personal data, please contact yes2win's data protection team:
yes2win aims to acknowledge all privacy enquiries within 48 hours and resolve them within 30 days. Where you remain unsatisfied with yes2win's handling of a privacy concern, you may escalate the matter to the applicable regulatory authority under yes2win's gaming licence.
All data transmitted between your device and the yes2win Platform is encrypted using 256-bit SSL/TLS โ the same encryption standard used by major banks and financial institutions in Malaysia. Your personal and financial data is never transmitted in plain text.
yes2win does not sell, rent, or trade your personal data to third parties for any marketing or commercial purpose. Your data is used only to operate your account, process transactions, meet regulatory obligations, and keep the Platform secure.
yes2win supports your rights to access, correct, delete, port, and restrict your personal data. Submit a request via live chat or email and yes2win's data protection team will respond within 30 days โ with identity verification required before action is taken.
Sensitive personal data โ including identity documents, financial records, and payment method information โ is encrypted at rest in yes2win's secure cloud infrastructure. Access is restricted by role and requires multi-factor authentication from yes2win staff.
yes2win collects only the personal data strictly required to operate your account, meet KYC and AML regulatory obligations, process payments, and provide gaming services. We do not collect data speculatively or beyond what our stated purposes require.
yes2win's security infrastructure undergoes regular independent penetration testing and vulnerability assessments. Security findings are remediated promptly. yes2win maintains a formal security incident response procedure, including data breach notification where required.
Live casino, 500+ slots, full sportsbook โ all in MYR with 1โ2hr Touch n Go eWallet withdrawals. Secure, licensed, and transparent.
Strictly for players aged 21 and above. Please gamble responsibly.