YES88 Privacy Policy

This Privacy Policy ("Policy") describes how YES88 ("we", "us", "our", "the Operator", "the Platform") collects, uses, stores, discloses, and otherwise processes personal information relating to users ("you", "Member", "User") of the YES88 online gaming platform accessible at https://yes88.click.

YES88 is committed to protecting the privacy and personal data of every individual who interacts with our platform. We handle all personal information entrusted to us responsibly and in accordance with applicable data protection principles. This Policy reflects our commitment to transparency and to treating your information with the care it deserves.

By registering a YES88 account, accessing the platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. This Policy should be read alongside our Terms & Conditions.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, email address, date of birth, identification document number, payment details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means YES88, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of YES88 under written instruction.
• "KYC Data" means identity and age verification documentation collected as part of the Know Your Customer process, including government-issued identification and proof of address.
• "Cookies" means small text files placed on your device by the YES88 website to enable certain platform functions and collect analytics data.
• "Sensitive Data" means a subset of Personal Data warranting heightened protection, including financial information, government identification numbers, and health-related information where relevant to responsible gambling.

YES88 collects personal data across the following categories, limited to what is necessary for the stated purposes:

YES88 collects personal data through the following channels and mechanisms:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, set responsible gambling limits, or otherwise interact with the platform.
• Automatically through platform use: Technical data including IP addresses, browser fingerprints, device identifiers, session duration, and navigation patterns are collected automatically when you access the YES88 website.
• Through cookies and similar technologies: Session cookies, persistent cookies, and analytics tools collect data about your interaction with the platform. You may manage cookie preferences through your browser settings; however, disabling certain cookies may affect platform functionality.
• From third-party service providers: Our payment processors, KYC verification partners, and fraud prevention services may provide YES88 with data points relevant to your account as part of their services.
• From publicly available sources: In limited circumstances relating to fraud investigation or AML compliance, YES88 may refer to publicly available information where reasonable grounds exist to do so.

YES88 processes your personal data on the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as an account holder — including account management, payment processing, customer support, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC and anti-money laundering obligations, age verification requirements, and financial record-keeping duties.
• Legitimate interests: Processing conducted in pursuit of YES88's legitimate business interests, where those interests are not overridden by your rights — including fraud prevention, security monitoring, platform improvement, and responsible gambling monitoring.
• Consent: Where you have provided express consent to specific processing activities — such as receiving optional marketing communications or participating in certain promotional features. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

YES88 uses the personal data we collect for the following specific purposes:

• Creating and managing your registered account, including authentication and access control
• Processing deposits and withdrawals via your registered payment methods (DuitNow, FPX, Maybank, CIMB, Touch 'n Go eWallet, Boost, GrabPay, and others)
• Conducting KYC age and identity verification to confirm your eligibility and meet compliance obligations
• Delivering customer support services in English, Bahasa Melayu, and Mandarin across all available channels
• Monitoring gaming activity for responsible gambling indicators and delivering appropriate intervention tools where necessary
• Detecting, investigating, and preventing fraud, collusion, money laundering, and other prohibited conduct
• Improving platform performance, user experience, and feature development based on aggregated and anonymised usage patterns
• Communicating service notices, policy updates, and account-related notifications to you
• Resolving account disputes, processing complaints, and maintaining audit records
• Meeting anti-money laundering, financial crime prevention, and other regulatory compliance obligations

YES88 does not use your personal data for automated individual decision-making that produces significant legal or similarly significant effects without human oversight, except where required by law or you have provided explicit consent.

YES88 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:

• Payment processors: Financial data shared with payment service providers (including FPX operators, eWallet providers such as Touch 'n Go and Boost, and banking partners including Maybank, CIMB, and Public Bank) solely for the purpose of processing your transactions.
• KYC and identity verification providers: Identity documents and related data shared with certified third-party KYC verification partners for age and identity confirmation.
• Fraud prevention and security services: Technical and behavioural data shared with fraud detection service providers to protect the integrity of the platform and the security of all members' accounts.
• Regulatory and law enforcement authorities: YES88 will disclose personal data to regulatory bodies, law enforcement agencies, or courts where required by applicable law, a valid legal order, or to protect the rights and safety of YES88 and its members.
• Professional advisers: Personal data may be shared with legal counsel, auditors, or financial advisers on a confidential basis where required for professional advice relevant to YES88's operations.
• Business succession: In the event of a merger, acquisition, or sale of the YES88 business or its assets, personal data held by YES88 may be transferred to the relevant successor entity, subject to the same privacy protections.

All third parties who process personal data on YES88's behalf are required to do so only under written instruction and subject to confidentiality obligations consistent with this Policy.

The YES88 website uses cookies and similar tracking technologies to enable essential platform functions, improve user experience, and collect analytics data. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Essential for the operation of the platform — including session management, login authentication, and security functions. These cannot be disabled without significantly impairing platform functionality.
• Performance & Analytics Cookies: Collect anonymised data about how visitors interact with the platform, including which pages are visited most frequently, how long sessions last, and how users navigate between features. This data is used exclusively to improve platform performance.
• Functional Cookies: Remember your preferences such as language selection and display settings to provide a more personalised experience on return visits.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and unauthorized account access attempts.

You may manage your cookie preferences through your browser settings at any time. Most modern browsers allow you to block or delete cookies. Please note that blocking strictly necessary cookies will impair your ability to use the platform normally. YES88 does not use advertising or cross-site tracking cookies.

YES88 retains personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your registered account plus a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years following the completion of the verification process or account closure, as required by applicable regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction for financial compliance and audit purposes.
• Customer support communications: Retained for up to three (3) years from the date of the interaction for quality assurance and dispute resolution purposes.
• Technical and security logs: Retained for up to twelve (12) months from the date of collection for security monitoring and fraud investigation purposes.

Where personal data is no longer required for any legitimate purpose and no legal retention obligation applies, YES88 will securely delete or anonymise the data in a manner that prevents reconstruction or re-identification.

YES88 implements appropriate technical and organisational security measures designed to protect your personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encryption of sensitive data at rest, including financial records and identity documents
• Role-based access controls ensuring personal data is accessible only to authorised personnel with a documented need
• Regular penetration testing and security audits conducted by independent third-party security specialists
• Multi-factor authentication requirements for platform administrative access
• Continuous security monitoring and automated anomaly detection for access to member data

Notwithstanding these measures, no method of data transmission or storage is completely infallible. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, YES88 will notify affected members and relevant authorities in accordance with applicable breach notification requirements.

As a YES88 member, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and your registered account email address.

All data rights requests will be acknowledged within five (5) business days and completed within thirty (30) calendar days. Where a request cannot be fulfilled — for example due to legal retention obligations — YES88 will provide a clear written explanation of the reason.

YES88 is strictly an adult platform. Our services are intended solely for individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21 and do not direct any part of our platform or communications toward minors.

If YES88 becomes aware that personal data has been collected from a person under the age of 21 — whether through failure of age verification controls, misrepresentation, or any other means — we will immediately suspend the account in question, securely delete all associated data, and forfeit any associated balance in accordance with ourTerms & Conditions.

If you are a parent or guardian and believe your child may have accessed or registered on the YES88 platform, please contact our support team immediately at [email protected]. We will investigate and take appropriate action within 24 hours of receiving notification.

YES88 operates as an online platform serving members across Malaysia and may utilise service providers located in other jurisdictions for specific operational purposes, including cloud storage, payment processing, and KYC verification. Where personal data is transferred to a service provider located outside Malaysia, YES88 takes appropriate steps to ensure that adequate protections are in place.

Such protections may include contractual clauses requiring the recipient to maintain data protection standards consistent with this Policy, or reliance on other lawful transfer mechanisms as applicable under relevant data protection law. YES88 does not transfer personal data to jurisdictions where adequate data protection safeguards cannot be established.

The YES88 platform may reference third-party services such as payment processors, eWallet providers, and responsible gambling support resources. This Privacy Policy applies solely to personal data collected and processed by YES88 directly. We are not responsible for the privacy practices of third-party service providers, and we encourage you to review the privacy policies of any third-party services you interact with in connection with your YES88 account.

All payment processing on the YES88 platform is handled by certified payment service providers subject to their own applicable regulatory obligations, including those applicable to Malaysian payment services. YES88 does not store full credit or debit card numbers on its own infrastructure.

YES88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. The effective date of the current version is displayed at the top of this page.

Where changes to this Policy are material — meaning they meaningfully affect how we collect, use, or protect your personal data — YES88 will provide advance notice through the platform or by email to your registered address. Your continued use of the YES88 platform following any amendment constitutes acceptance of the revised Policy.

We encourage you to review this Policy periodically to stay informed of how YES88 handles your personal data. Prior versions of this Policy are available upon request by contacting [email protected].

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a privacy-related complaint, please contact the YES88 data support team through the following channels:

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 on the YES88 platform — average response under 5 minutes
• WhatsApp: Available 24/7 — contact details available within the platform
• Languages: English, Bahasa Melayu, and Mandarin (中文)

All privacy enquiries will be acknowledged within five (5) business days. Formal data rights requests will be responded to within thirty (30) calendar days. Where a request cannot be fulfilled as submitted, YES88 will provide a clear written explanation and, where possible, offer an alternative resolution.

If you are not satisfied with YES88's handling of a privacy complaint after raising it with us directly, you may have the right to escalate the complaint to a relevant data protection authority in your jurisdiction.