Privacy Policy yes33 — Malaysia Member Data Protection

Yes33 is an online gaming and wagering platform committed to protecting the privacy of every member. We understand that your trust in us depends not only on a quality gaming experience, but also on how responsibly we handle your personal information.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. We follow a data minimisation principle — meaning we only collect information that is genuinely necessary to provide you with the best service.

Every time you use the yes33 platform — whether to register an account, make a deposit, play games, or contact our support team — you interact with a system specifically designed to ensure your data is managed securely and transparently. None of your information is shared, sold, or misused without your knowledge and consent.

Yes33 collects various categories of information to ensure the platform operates smoothly and that the services we provide are relevant and secure for you. Below is a summary of the types of data we collect:

Each of the data categories above is collected for a legitimate and clearly defined purpose. yes33 does not collect sensitive information such as medical data, political views, or religious information unless voluntarily provided by you in the context of a specific application.

Yes33 collects your information through several transparent and lawful channels. You are always aware of when and how your data is collected, as all data collection processes are conducted openly:

• Account registration: When you register as a new yes33 member, you are required to provide basic information such as your name, phone number, and email address.
• KYC Process: To meet legal requirements and ensure platform security, we require a copy of your identity document and proof of address once you reach certain transaction thresholds.
• Financial transactions: Every time you make a deposit or withdrawal via FPX, DuitNow, or a supported e-wallet, transaction details are automatically recorded for financial record-keeping purposes.
• Platform usage: Technical data such as IP addresses, device types, and usage patterns are collected automatically when you use the yes33 website or mobile app.
• Cookies and tracking technologies: yes33 uses cookies and similar technologies to enhance the user experience, remember your preferences, and maintain the security of your login session.
• Direct communications: When you contact our support team via live chat, email, or Telegram, information shared during that session is recorded for follow-up and service improvement purposes.

Yes33 uses collected information solely for legitimate and meaningful purposes. We do not use your data beyond the scope stated below without first obtaining your additional consent:

• Account management: Verifying your identity, processing registration, managing passwords, and ensuring only you can access your account.
• Transaction processing: Processing deposits and withdrawals accurately and securely using your preferred payment methods.
• Security and fraud prevention: Detecting suspicious activity, preventing unauthorized access, and protecting the platform from misuse.
• Legal compliance: Fulfilling obligations under Malaysia's PDPA, anti-money laundering (AML) requirements, and other applicable regulations.
• Customer support: Providing technical assistance and resolving issues faster based on your interaction history with the platform.
• Platform improvement: Analyzing usage patterns in aggregate (without identifying individuals) to improve the features, design, and performance of the yes33 platform.
• Marketing communications: Sending promotional offers, platform updates, and relevant bonus information — only if you have consented to receive such communications.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate support to members who need it.

Yes33 does not sell, rent, or disclose members' personal information to third parties for marketing or commercial purposes. Your information is only shared in the following limited circumstances:

• Service providers: Companies that assist us in operating the platform, such as payment processors, cloud infrastructure providers, and KYC verification firms. All such parties are bound by strict confidentiality agreements.
• Legal requirements: When required by a court, regulatory body, or law enforcement authority in Malaysia through valid legal process.
• Protection of interests: In situations where disclosure is necessary to protect the safety of other users, prevent financial crime, or defend yes33's legal rights.
• Business transfers: Should yes33 undergo corporate restructuring, a merger, or an acquisition, user information may be transferred as part of the business assets, subject to equivalent privacy protections.

Yes33 continuously invests in the latest security infrastructure to ensure your personal data is always protected against cyber threats, unauthorised access, and data breaches:

• 256-bit SSL encryption: All data transmitted between your device and yes33 servers is encrypted using the latest Transport Layer Security (TLS) technology, keeping your communications safe from interception.
• Two-factor authentication (2FA): Members are encouraged to enable 2FA to add an extra layer of protection to their account. Even if your password is compromised, 2FA prevents unauthorised access.
• 24/7 security monitoring: The yes33 security system operates around the clock to detect and respond to any suspicious activity in real time.
• Internal access controls: Only authorised staff who have undergone strict background checks may access members' personal data — and only to the extent necessary to carry out their duties.
• Separate data storage: Financial data and members' personal data are stored in separate systems with independent security layers to reduce the risk of data combination in the event of a security incident.
• Regular penetration testing: yes33 conducts regular security audits and penetration testing through independent cybersecurity firms to identify and address any system vulnerabilities.

Yes33 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law.

• Active account data: Retained for the duration your account remains active on the yes33 platform.
• Data after account closure: After an account is closed, core data is retained for a minimum of 7 years to fulfil financial record-keeping and AML compliance requirements in Malaysia.
• Financial transaction data: Records of all deposit and withdrawal transactions are retained for a minimum of 7 years in accordance with legal requirements.
• Communication logs: Customer support session records are kept for 2 years for reference and service improvement purposes.
• Technical data: Access logs and technical data are retained for 90 days unless related to an ongoing security investigation.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

The yes33 platform uses cookies and similar tracking technologies to enhance the user experience and ensure session security. Below are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login, gaming sessions, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting information about how you use the platform — pages visited, links clicked — to help us improve the user experience. All data is collected in aggregate and does not identify individuals.
• Functionality cookies: Remembering your preferences such as language, location, and display settings to provide a more personalized experience.
• Security cookies: Helping detect and prevent fraudulent activity, multiple account usage, and unauthorized login attempts.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the yes33 platform. Third-party cookies used by our analytics providers are subject to their respective privacy policies.

As a yes33 member and Malaysia resident, you have certain rights regarding your personal data under PDPA 2010. yes33 fully respects these rights and provides straightforward mechanisms for you to exercise them:

To exercise any of the above rights, please contact the yes33 privacy team by email at [email protected]. We will process your request within 30 calendar days of receipt.

The yes33 platform is strictly limited to users aged 18 and above. yes33 does not knowingly collect any personal information from individuals under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that information and close the associated account. If you become aware that a child has registered an account on the yes33 platform, please notify us immediately through our support channels.

Parents and guardians concerned about their children's use of online platforms are encouraged to use parental control software and discuss good internet safety practices with their children.

Yes33 reserves the right to update this Privacy Policy from time to time to reflect changes in legislation, technology, or our business practices. Any significant amendments will be communicated to members via:

• Email notification to the address registered in your account
• A clear pop-up notice or banner on the yes33 platform when you log in
• Update the "Last Updated" date at the top of this document

We encourage you to review this Privacy Policy periodically. Continued use of the yes33 platform after any amendments take effect will be considered your acceptance of the latest version of this policy. If you do not agree with any amendments, you have the right to close your account and stop using the platform.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us:

• Privacy email: [email protected] (subject: Privacy Inquiry)
• Live Chat: Available 24/7 on the yes33 platform — click the chat icon in the bottom corner
• Telegram: Contact a support agent via the official yes33 Telegram channel

Our team is committed to addressing every privacy-related inquiry thoroughly and within the stipulated timeframe. We value your trust and always prioritize the protection of yes33 members' personal information.