yeswin Privacy Policy

1. Who We Are and Scope of This Policy

This Privacy Policy applies to all personal data collected and processed by yeswin in connection with your use of the yeswin online gaming platform accessible at yeswin.asia ("the Platform"). yeswin operates as the data controller in respect of personal data collected directly from registered Users.

This Policy applies to all persons who visit the Platform, register a yeswin account, place wagers, make deposits or withdrawals, or otherwise interact with yeswin's services. By accessing the Platform or completing the yeswin registration process, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside the yeswin Terms & Conditions, which govern the overall relationship between yeswin and its registered Users.

2. Personal Data We Collect

yeswin collects the following categories of personal data in connection with the registration, operation, and maintenance of your account:

2.1 Identity and Contact Data

• Full legal name as it appears on your identity document;
• Date of birth;
• Malaysian identity card number (MyKad) or passport number where required for identity verification;
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya);
• Email address and Malaysian mobile phone number.

2.2 Financial Data

• Payment method details including bank account numbers (Maybank, CIMB, Public Bank), e-wallet identifiers (Touch n Go eWallet, Boost), and card details (Visa/Mastercard) — stored in tokenised form only, never as raw card data;
• Deposit and withdrawal history, transaction amounts in MYR, and payment timestamps;
• Wallet balances and bonus balances.

2.3 Gaming and Usage Data

• Bet history, game session data, wager amounts, and outcomes;
• Sport and market preferences, live casino table selections, slot game history;
• Login timestamps, session durations, and platform navigation patterns;
• Responsible gaming tool usage including deposit limit settings and self-exclusion elections.

2.4 Technical Data

• IP address, device type and model, browser type and version, operating system;
• Cookie identifiers and similar tracking data as described in Section 7;
• Approximate geolocation derived from IP address.

2.5 Communications Data

• Records of live chat interactions, support tickets, and email correspondence with yeswin;
• Responses to surveys or promotional communications where you have opted in.

3. How We Collect Your Data

yeswin collects personal data through the following means:

• Direct provision — data you enter during yeswin account registration, identity verification, deposit/withdrawal requests, support communications, and promotional opt-ins;
• Automated technical collection — data collected automatically as you use the Platform, including session logs, device fingerprinting, and cookie data;
• Third-party verification services — identity and age verification data obtained from authorised KYC (Know Your Customer) service providers where required to meet regulatory obligations;
• Payment processors — transaction confirmation and status data received from payment service providers including e-wallet operators and banking partners;
• Fraud detection systems — behavioural and technical signals processed by yeswin's anti-fraud infrastructure.

4. Purposes and Legal Basis for Processing

yeswin processes your personal data for the following purposes, each grounded in an appropriate legal basis:

• Account creation and maintenance — necessary for the performance of the contract between you and yeswin;
• Identity and age verification — legal obligation under applicable gaming authority licensing requirements, including confirmation that you are aged 21 or above;
• Processing deposits and withdrawals in MYR — necessary for contract performance and compliance with payment processing obligations;
• AML and fraud prevention — legal obligation and legitimate interest of yeswin in protecting the integrity of the platform;
• Customer support and dispute resolution — legitimate interest and contractual necessity;
• Responsible gaming monitoring — legal obligation and legitimate interest in player protection, including tracking gameplay patterns that may indicate problematic gambling behaviour;
• Platform improvement and analytics — legitimate interest in maintaining and improving yeswin's services, using aggregated and anonymised data where possible;
• Marketing communications — with your consent only, where you have opted in to receive promotional offers from yeswin. Consent may be withdrawn at any time via your account settings.

5. Disclosure of Your Data to Third Parties

yeswin does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data with the following categories of recipient, strictly for the purposes described in this Policy:

• Payment service providers — to process deposits and withdrawals via Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, Visa, and Mastercard;
• KYC and identity verification providers — to fulfil age and identity verification obligations;
• Gaming platform and software licensors — game providers may receive anonymised session data for game integrity and certification purposes;
• Fraud detection and cybersecurity providers — to protect yeswin and its players from fraudulent activity;
• Regulatory and law enforcement authorities — where required by law, court order, or licensing authority directive, yeswin will disclose personal data as required. We will notify affected Users where legally permitted to do so;
• Professional advisors — including legal counsel, auditors, and compliance consultants, subject to confidentiality obligations.

All third-party data processors engaged by yeswin are subject to contractual data processing agreements requiring them to handle your data in accordance with applicable data protection standards.

6. Data Retention

yeswin retains your personal data for as long as your account is active and for a period following account closure as required by applicable gaming licence conditions and AML regulations. In practice, this means:

• Account and identity data is retained for a minimum of five (5) years following account closure;
• Financial transaction records are retained for a minimum of seven (7) years;
• Gaming and session data is retained for three (3) years after the final session date;
• Support communication records are retained for three (3) years.

After the applicable retention period has expired, data is securely deleted or irreversibly anonymised. Anonymised, aggregated data may be retained indefinitely for statistical and analytics purposes and cannot be used to identify individual Users.

7. Cookies and Tracking Technologies

yeswin uses cookies and similar tracking technologies to operate the Platform, maintain your login session after yeswin login, personalise your experience, and collect analytics data. The following categories of cookies are used:

• Strictly necessary cookies — required for the Platform to function, including session management and security tokens. These cannot be disabled without impairing Platform functionality;
• Functional cookies — remember your language preferences, recently played games, and UI settings;
• Analytics cookies — collect aggregated data on how Users interact with the Platform to help yeswin identify improvements. Data is processed in anonymised or pseudonymised form;
• Marketing cookies — only placed with your prior consent, used to tailor promotional content within the yeswin platform.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core yeswin platform, but may affect some personalisation features.

8. Security of Your Personal Data

yeswin implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, and misuse. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and yeswin's servers;
• Encryption of sensitive data fields at rest, including payment method tokens and identity document references;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
• Regular internal security assessments and third-party penetration testing;
• Multi-factor authentication for all staff accessing systems that hold personal data.

Despite these measures, no transmission over the internet is completely secure. yeswin cannot guarantee absolute security of data in transit. You are responsible for maintaining the security of your yeswin login credentials — see the Account Security section of our Terms & Conditions for your obligations.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, yeswin will notify affected Users without undue delay and take all reasonable steps to mitigate the impact.

9. Your Rights as a Data Subject

Subject to applicable data protection law, you hold the following rights in respect of the personal data yeswin holds about you:

• Right of access — you may request a copy of the personal data yeswin holds about you;
• Right to rectification — you may request correction of inaccurate or incomplete data;
• Right to erasure — you may request deletion of your data, subject to yeswin's legal and regulatory retention obligations;
• Right to restrict processing — you may request that yeswin limits how it uses your data in certain circumstances;
• Right to data portability — you may request a machine-readable export of data you have provided to yeswin;
• Right to object — you may object to processing based on legitimate interest, including direct marketing;
• Right to withdraw consent — where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time via your account settings.

To exercise any of these rights, contact yeswin support via live chat or by emailing [email protected]. yeswin will respond to verified requests within 30 days. We may need to verify your identity before processing your request.

10. Children and Minors

Age verification is conducted as part of the yeswin registration and KYC process. Players who cannot provide satisfactory proof of age will not have their accounts activated or will have existing accounts suspended pending verification.

11. Changes to This Privacy Policy

yeswin reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable law. When material changes are made, yeswin will notify registered Users via email or an in-platform notification at least 14 days before the changes take effect. The "Last Updated" date at the top of this page will be revised accordingly.

Continued use of the yeswin platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the changes, you should discontinue use of the Platform and close your account.

12. Contact and Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or want to raise a data protection concern, please contact yeswin through the following channel:

Email (plain text — not a clickable link): [email protected]

Our support team is available 24/7 via live chat on the yeswin platform. Data protection enquiries will be escalated to yeswin's designated data compliance contact and responded to within 30 days.