Yes55 Privacy Policy – Your Personal Data Protection

01 Introduction & Scope

Yes55 ("we", "our platform") is an online gaming platform operating under a valid licence and fully committed to protecting the privacy of every user. This Privacy Policy explains in detail how we handle your personal data when you register, log in, make a deposit, play games, or interact with any part of the yes55 platform.

This policy applies to all users of the yes55 platform, including visitors who browse the website without registering an account, registered members, and former members who have closed their accounts. We encourage you to read this document carefully and to contact us if anything is unclear.

By accessing or using the yes55 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, we ask that you discontinue use of our platform.

02 Personal Data Collected

Yes55 only collects personal data that is strictly necessary for the purposes stated in this policy. We do not collect excessive or irrelevant data. The following are the categories of data we collect:

We may also receive your personal data from third parties such as identity verification providers, social media platforms (if you register via a social account), and payment service providers. All data received from these third parties is subject to this Privacy Policy.

03 How We Use Your Data

The personal data we collect is used solely for legitimate and necessary purposes in operating the yes55 platform. We do not use your data for unrelated purposes without obtaining your consent first. The primary uses of your personal data are as follows:

• Account management: Creating, verifying, and maintaining your yes55 account, including the KYC process as required by law.
• Transaction processing: Securely and accurately processing deposits, withdrawals, bonuses, and all financial transactions on the platform.
• Platform security: Detecting and preventing fraudulent activity, money laundering, account breaches, and system abuse.
• Customer support: Providing effective technical support and customer service when you contact our team.
• Legal compliance: Fulfilling reporting obligations to regulatory authorities and relevant government bodies in accordance with Malaysian law.
• Platform enhancements: Analyzing usage patterns in aggregate (not individually) to improve platform functionality and user experience.
• Marketing communications: Sending information about promotions, bonuses, and exclusive offers — only if you have consented to receive them.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and take appropriate preventive action.

04 Data Sharing with Third Parties

Yes55 does not share your personal data with external parties except in the circumstances described below. All data sharing is conducted on a legitimate need basis and is subject to binding confidentiality agreements.

• Payment service providers: DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, MAE, and the cryptocurrency processors we use receive only the minimum financial information required to process your transactions.
• Identity verification providers: Registered third-party KYC companies receive your identification documents for verification purposes only and are not permitted to use them for any other purpose.
• Regulatory authority: We fully comply with any lawful requests from Malaysian government authorities, courts, or law enforcement bodies.
• Gaming software providers: Your game session data is shared with the relevant game provider solely to ensure proper game functionality.
• Cloud services and infrastructure: The cloud service providers we use to store and process data are bound by strict data protection agreements.

In all of the data sharing cases above, yes55 ensures that recipients may only use the data for the stated purpose and may not transfer it to any other party without our written consent.

05 Data Security

We continuously invest in robust security infrastructure to protect your personal data from unauthorized access, loss, alteration, or disclosure. Key security measures we implement include:

• Data in transit is encrypted using TLS 1.3 and 256-bit SSL protocols for all communications between your device and yes55 servers.
• Data-at-rest encryption is applied to all databases containing members' personal and financial information.
• Two-factor authentication (2FA) is available and encouraged for all yes55 member accounts.
• Round-the-clock security monitoring using advanced intrusion detection systems (IDS) and intrusion prevention systems (IPS).
• Regular penetration testing by independent cybersecurity experts to identify and address any system vulnerabilities.
• Role-based access control (RBAC) ensuring staff can only access data required for their specific duties.
• Periodic internal and external security audits are conducted to ensure ongoing compliance with the latest security standards.

06 Cookies & Tracking Technologies

Yes55 uses cookies and similar tracking technologies to enhance user experience, maintain session security, and understand how our platform is used. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting information on how you use our platform (pages visited, time spent, errors encountered) to help us improve our services. All data is collected anonymously.
• Functional cookies: Storing your preferences such as language choice, display settings, and login information to make the platform easier to use on future visits.
• Analytics cookies: Allows us to understand platform usage patterns in aggregate for continuous improvement purposes. This data is not linked to your personal identity.

You can manage your cookie preferences through your web browser settings at any time. However, disabling certain cookies may affect the functionality of some parts of the yes55 platform. Note: the yes55 platform does not use third-party cookies for targeted advertising.

07 Your Rights Over Personal Data

As a yes55 platform user and an individual protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data. We respect and facilitate the exercise of each of these rights:

To exercise any of the above rights, you may submit a request to our Data Protection Officer team via email at [email protected] or through the live chat in your account. We will process your request within 14 working days and notify you of the action taken.

08 Data Retention & Deletion

Yes55 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy or as required by applicable Malaysian law. Retention periods vary by data type:

• Active account data: Stored throughout the duration your account remains active and updated continuously in line with operational requirements.
• Financial transaction data: Retained for a minimum of 7 years after the transaction date in compliance with accounting and anti-money laundering (AML) legal requirements.
• KYC and identity verification data: Retained for a minimum of 5 years after account closure in accordance with regulatory requirements.
• Security and activity logs: Retained for 2 years for security incident investigation and audit purposes.
• Customer support communication data: Retained for 3 years to ensure service continuity and historical reference.
• Cookie data: It depends on the type of cookie — session cookies are deleted as soon as you close your browser, while persistent cookies are stored until their set expiry date or until you manually delete them.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered. For data that cannot be fully deleted for technical reasons, it will be anonymised so that it can no longer be linked to your identity.

09 Changes to the Privacy Policy

Yes55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service improvements. Any material changes will be communicated to you in the following ways:

• In-account notifications on yes55 at least 14 days before the changes take effect.
• Notification emails are sent to your registered email address for significant changes.
• The "Updated" date at the top of this page will be revised to reflect the latest amendments.

Continued use of the yes55 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you disagree with the changes made, you have the right to close your account and request a withdrawal of your remaining funds in accordance with the procedures set out in Terms and Conditions ours.

10 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way we handle your personal data, please contact the yes55 Data Protection Officer (DPO) through the following channels:

• DPO Email: [email protected] (subject: Privacy Inquiry)
• Live Chat: Available 24/7 within your yes55 account — state "Privacy" to be routed to the right team.
• Response time: We aim to respond to all privacy inquiries within 3 business days.

If you are not satisfied with our response to your privacy complaint after going through our internal process, you have the right to refer the matter to the Malaysian Personal Data Protection Commissioner or the relevant regulatory body under applicable law.