Yes66 Privacy Policy — Your Data Protection

At yes66, we understand how important privacy is to each of our members. Your trust is the foundation of everything we do, and we are committed to ensuring your personal information is handled with full responsibility, transparency, and security. This Privacy Policy applies to all services offered through the yes66.pro website, the iOS and Android mobile apps, and all official yes66 communication channels.

1Personal Information We Collect

Yes66 collects your personal information through several different means depending on how you interact with our platform. In general, the types of information collected include:

Account Registration Information:

• Full name as it appears on your official identity document
• Date of birth for age verification (18 and above)
• Active email address for communication and account verification
• Mobile phone number for two-factor authentication and notifications
• Residential address including postcode and state
• Chosen username and password (stored in hashed form — we do not store your original password)

KYC (Identity Verification) Information:

• A copy of your identity card (MyKad) or valid passport
• Recent bank statement or utility bill as proof of residential address
• Any other supporting documents requested during the verification process

Financial Information:

• Bank account or e-wallet details used for deposits and withdrawals
• Transaction history including deposits, withdrawals, and wagering
• Credit or debit card information (stored in encrypted token form)

Platform Usage Information:

• IP address, device type, operating system, and browser used
• Game and betting activity logs including time, date, and amount
• Game preferences and platform usage patterns
• Country- or state-level geolocation data (not precise location)

2How We Use Your Information

The personal information we collect is used solely for lawful and necessary purposes in operating the yes66 platform. Below is a summary of how we use your data:

Yes66 will not use your data for any purposes other than those listed above without notifying you in advance and, where required, obtaining your renewed consent.

3Information Sharing with Third Parties

Yes66 takes an extremely cautious approach to data sharing. We does not sell, does not rent, and does not disclose your personal information to external parties for profit or marketing purposes. However, there are limited situations where data sharing is necessary and legally permitted:

• Payment service providers: Minimum required transaction information is shared with licensed payment processors to enable deposits and withdrawals to be processed securely.
• Game software providers: Certain game session data is shared with licensed game providers (such as Evolution, Pragmatic Play) solely to enable gameplay functionality.
• Regulatory authority: When required by law or by direction of a legitimate regulatory authority, we will disclose the necessary information.
• Financial crime investigators: If there is reasonable suspicion of fraudulent activity or money laundering, relevant information may be shared with the competent authorities.
• Independent auditors: For compliance and audit purposes, anonymised or minimised data may be shared with accredited auditing firms.

4Data Security Measures

Yes66 continuously invests in the latest cybersecurity infrastructure to protect the personal data of all members. The key security measures we employ are as follows:

• 256-bit SSL/TLS Encryption for all data in transit between your device and our servers
• Encryption of data at rest (AES-256) for all sensitive records stored in our databases
• Next-Generation Firewall (NGFW) that monitors and filters all incoming and outgoing traffic
• Intrusion Detection & Prevention System (IDS/IPS) operating 24 hours a day, 7 days a week
• Two-factor authentication (2FA) available to all member accounts as an additional layer of protection
• Role-based access control (RBAC) ensuring only authorised personnel with a legitimate business need can access member data
• Regular security audits by an accredited independent cybersecurity firm
• Encrypted data backups at a secondary data centre for disaster recovery

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. In the event of a data breach affecting your personal information, we will notify you within 72 hours of becoming aware of it, in accordance with international breach notification standards.

5Cookies & Tracking Technologies

Yes66 uses cookies and similar tracking technologies to ensure the platform functions properly and to deliver a better user experience. The following are the categories of cookies we use:

• Essential Cookies: Required for core platform functions such as maintaining your login session and remembering language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: Helps us understand how members use the platform so we can improve the user experience. Data collected is anonymised and aggregated.
• Functional Cookies: Remembers your preferences such as display theme, language, and notification settings to deliver a more personalised experience.
• Security Cookies: Used to detect suspicious login attempts and protect your account from unauthorised access.

You may manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the yes66 platform.

6Your Privacy Rights as a yes66 Member

As a yes66 member, you have the following rights regarding your personal information. All requests will be processed within 7 business days:

7Data Retention Period

Yes66 only retains your personal information for as long as necessary for the stated purposes or as required by law. The following are general retention period guidelines:

• Active account data: Retained for the duration of your active membership
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial legal requirements
• KYC documents: Retained for a minimum of 5 years after account closure
• Support communication logs: Retained for 3 years
• Inactive account data: Deleted or anonymised after 3 consecutive years of inactivity
• Security logs: Retained for 12 months for digital forensics purposes

When data is no longer needed and there is no legal obligation to retain it, we will securely delete or anonymise it using methods that comply with international data security standards.

8Cross-Border Data Transfers

In the course of platform operations, your personal data may be transferred to and stored on servers located outside Malaysia. Such transfers only occur under the following circumstances:

• Data recipients are located in countries recognised as providing an adequate level of data protection
• Appropriate data transfer agreements have been executed, including standard data protection clauses
• The transfer is necessary to fulfill the contract between you and yes66

9Children's Privacy

The yes66 platform is strictly for individuals aged 18 and above. We do not intentionally collect or process personal information from anyone under the age of 18. If we discover that we have inadvertently collected personal information from a minor, we will promptly delete that information and close the associated account.

If you believe someone under the age of 18 has registered an account on yes66, please contact our support team immediately so that prompt action can be taken.

10Changes to This Privacy Policy

Yes66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or service improvements. When material changes occur:

• You will be notified via your registered email or in-app notification at least 7 days before any changes take effect
• The "Last Updated" date at the top of this document will be updated
• Previous versions of the Privacy Policy will be retained and available upon request

Your continued use of the yes66 platform after a change takes effect constitutes your acceptance of the updated terms. If you disagree with any changes, you have the right to close your account before the effective date.

11Contact Our Privacy Officer

If you have any questions, concerns, or wish to exercise any of your privacy rights, please contact the yes66 Privacy & Data Protection team through the following channels:

• LiveChat 24/7 — click the chat icon at the bottom corner of the website or app
• Telegram and WhatsApp — details available in the yes66 app
• Email: [email protected]

All privacy-related requests will be acknowledged within 24 hours and resolved within 7 business days. For more complex issues, we will keep you informed of the investigation's progress on a regular basis.