Privacy Policy

This Privacy Policy (hereinafter referred to as "this Policy") is published by YesWin (hereinafter referred to as "YesWin", "we", "us", or "the Platform") and applies to all personal data collected from individuals who access or use the YesWin website located at https://yeswin.cam, including all associated services, features, and communications.

YesWin is committed to protecting the privacy and security of every player's personal information. This Policy describes in clear, plain terms what data we collect, the purposes for which it is used, the lawful grounds on which processing is based, how data is stored and protected, and the rights available to you as a data subject.

By registering an account on YesWin, accessing the Platform, or submitting any personal information to us, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein. This Policy should be read in conjunction with our Terms & Conditions.

The following terms carry the meanings assigned below throughout this Policy:

• "Personal Data" — Any information that identifies or can reasonably be used to identify a living natural person, directly or in combination with other available data. This includes, but is not limited to, name, email address, phone number, date of birth, IP address, device identifiers, and financial information.
• "Processing" — Any operation performed on Personal Data, whether automated or manual, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — The entity that determines the purposes and means of Processing Personal Data. For the purposes of this Policy, YesWin acts as the Data Controller in respect of Player data.
• "Data Processor" — A third party that processes Personal Data on behalf of YesWin, under instruction and subject to contractual obligations.
• "Data Subject" — The individual to whom Personal Data relates; in this context, any registered Player or visitor to the Platform.
• "Consent" — A freely given, specific, informed, and unambiguous indication by the Data Subject that they agree to the Processing of their Personal Data for the stated purpose.
• "Cookie" — A small text file placed on a user's device by a web server, used to store session information, preferences, or analytics data.
• "KYC" — Know Your Customer; the identity and age verification process required before certain account functions (primarily withdrawals) are enabled.

YesWin collects the following categories of Personal Data from Players and Platform visitors:

We collect only the minimum data necessary to deliver the requested service and meet our legal obligations. Where a field is optional, it will be clearly indicated as such.

YesWin collects Personal Data through the following channels and mechanisms:

• Direct submission: Data you voluntarily provide when registering an account, completing KYC verification, submitting support queries, or updating your account profile.
• Automated technical collection: Data collected passively as you interact with the Platform, including through server logs, session tracking, and browser fingerprinting technologies used for security and fraud prevention.
• Cookies and similar technologies: Data collected via cookies, web beacons, and pixel tags placed on your device when you access the Platform. See Section 8 for full details of our Cookie Policy.
• Payment processors: Limited financial data returned from third-party payment providers (such as DuitNow gateway, FPX, or e-wallet operators including Touch 'n Go, Boost, and GrabPay) confirming transaction completion or failure.
• Third-party identity verification providers: Where YesWin uses authorised third-party KYC service providers to assist with identity and age verification, data from those processes is shared with YesWin under contractual data processing agreements.
• Referral data: Where a Player is referred to YesWin via a referral code, YesWin may receive limited information confirming the referral relationship from the referring player's account.

YesWin processes your Personal Data for the following clearly defined purposes:

• Account creation and management: To establish, maintain, and administer your YesWin Account, including processing your registration, verifying your identity, and managing your account preferences.
• Service delivery: To provide you with access to casino games, sports betting markets, live dealer tables, and all other Platform features and services.
• Financial transaction processing: To process deposits and withdrawals via your chosen payment method (including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, FPX, and Hong Leong), and to maintain accurate financial records.
• Regulatory compliance and AML: To comply with anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, sanctions screening, and any other applicable legal and regulatory duties.
• Customer support: To respond to your support enquiries, resolve disputes, and maintain records of support interactions for quality assurance purposes.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, unauthorised access, and other prohibited conduct on the Platform.
• Responsible gambling: To monitor for signs of problem gambling behaviour, apply self-exclusion or account restrictions where requested or where required by our Responsible Gambling obligations, and deliver responsible gambling communications.
• Marketing communications: To send you promotional offers, bonus notifications, and news about YesWin — but only where you have provided your consent to receive such communications. You may withdraw marketing consent at any time via your Account settings.
• Platform improvement and analytics: To analyse aggregate usage patterns, improve Platform features, optimise user experience, and inform product development decisions. Analytics data is anonymised or pseudonymised wherever practicable.

YesWin processes your Personal Data on one or more of the following lawful bases:

• Contractual necessity: Processing required to perform the contract between you and YesWin — primarily account management, game access, and payment processing.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including AML obligations, KYC verification, and regulatory reporting.
• Legitimate interests: Processing carried out in pursuit of YesWin's legitimate business interests, including fraud prevention, Platform security, and service improvement — provided such interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. Where consent is the legal basis, you retain the right to withdraw it at any time without detriment.

YesWin does not sell your Personal Data. We may share your data with third parties only in the limited circumstances set out below, and only to the extent necessary for the stated purpose:

• Payment service providers: Financial data is shared with payment processors (including but not limited to DuitNow gateway operators, FPX, and e-wallet platforms such as Touch 'n Go, Boost, and GrabPay) solely for the purpose of executing your requested financial transactions.
• Identity verification providers: Identity and document data may be shared with contracted KYC and AML compliance service providers for the purpose of verifying your identity and age, and for sanctions screening.
• Game software providers: Usage data may be shared in aggregate or pseudonymised form with game studios that supply content to YesWin, for the purpose of technical support, RTP verification, and game integrity monitoring.
• IT and infrastructure providers: Technical data may be accessible to contracted cloud hosting, cybersecurity, and IT infrastructure providers who support YesWin's Platform operations, subject to strict confidentiality and data processing obligations.
• Regulatory and law enforcement authorities: YesWin may disclose Personal Data to competent regulatory, law enforcement, or judicial authorities when required to do so by applicable law, court order, or as part of AML/fraud investigation obligations.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of YesWin's assets, Personal Data held may be transferred to the relevant acquiring entity, subject to equivalent privacy protections.

All third parties with whom Personal Data is shared are required to process such data strictly in accordance with YesWin's instructions and are prohibited from using your data for any purpose beyond those specified in the relevant data processing agreement.

YesWin uses cookies and similar tracking technologies to deliver, secure, and improve the Platform experience. The following categories of cookies may be placed on your device:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection tokens, and load balancing cookies. These cannot be disabled without impairing Platform functionality.
• Performance and analytics cookies: Used to collect anonymised data about how visitors interact with the Platform — including pages visited, session duration, and navigation paths — to help us improve the user experience.
• Functional cookies: Used to remember your preferences such as language settings, odds format, and display preferences across sessions.
• Security cookies: Used for fraud detection, bot identification, and suspicious activity monitoring to protect the integrity of the Platform and all Player accounts.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impact Platform functionality. Non-essential cookies may be declined without affecting your core access to YesWin's services.

YesWin retains Personal Data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, or reporting obligations. Specific retention guidelines are as follows:

• Account data (active accounts): Retained for the duration of the account relationship, plus a minimum of five (5) years following account closure, to comply with AML and financial record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later, in compliance with AML regulatory standards.
• Transaction records: Financial transaction data is retained for a minimum of five (5) years from the date of each transaction.
• Support and communication records: Live chat transcripts, email correspondence, and support ticket records are retained for three (3) years from the date of the last interaction.
• Technical and usage data: Log data and usage analytics are retained for up to twenty-four (24) months in identifiable form, after which they are anonymised or deleted.
• Marketing data: Where consent is the legal basis, marketing preference data is retained until you withdraw consent or for a maximum of three (3) years from the last consent renewal, whichever comes first.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. We will not retain data "just in case" — our retention is purpose-driven and time-bounded.

YesWin implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS 1.3) encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records.
• Role-based access controls ensuring that only authorised personnel can access Player Personal Data, and only to the extent required by their specific function.
• Regular independent security audits, penetration testing, and vulnerability assessments of the Platform and supporting infrastructure.
• Intrusion detection and prevention systems monitoring for anomalous access patterns and potential breaches.
• Two-factor authentication (2FA) available to all Players and mandated for administrative Platform access.
• Documented incident response procedures in place for the event of a data security incident.

As a Data Subject, you hold the following rights in relation to your Personal Data held by YesWin. These rights are exercisable at any time by contacting our support team:

• Right of Access: You have the right to request confirmation of whether we hold Personal Data about you and, if so, to receive a copy of that data along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data we hold about you. You may update certain data directly in your Account profile at any time.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other legal basis exists. Note that certain data must be retained to comply with regulatory obligations and cannot be deleted on request alone.
• Right to Restriction of Processing: You may request that we limit the processing of your Personal Data in certain circumstances, such as where the accuracy of the data is contested or where processing is unlawful but you do not wish for the data to be deleted.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes. You may opt out of marketing communications at any time via your Account settings or by contacting support.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact YesWin's support team via live chat or email. We will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days. For complex requests, this period may be extended by a further 60 days with notification.

YesWin's services are strictly available to individuals aged 21 years and above. YesWin does not knowingly collect, store, or process Personal Data from individuals under the age of 21. Age verification is a mandatory component of the KYC process and must be completed before withdrawal access is granted to any Account.

If YesWin becomes aware that an Account has been registered by or on behalf of a person under the age of 21, that Account will be immediately suspended, any funds will be held pending investigation, and all Personal Data associated with the underage Account will be deleted from our systems as soon as practically possible in accordance with applicable legal requirements.

YesWin operates on an international basis and may process or transfer Personal Data to servers and service providers located outside of Malaysia. Where such transfers occur, YesWin takes appropriate steps to ensure that your Personal Data receives an adequate level of protection consistent with the standards described in this Policy.

Safeguards applied to international transfers may include contractual clauses with third-party processors requiring them to maintain data protection standards equivalent to those applied by YesWin, and the selection of processors located in jurisdictions with recognised data protection frameworks.

YesWin reserves the right to amend this Privacy Policy at any time. We will notify registered Players of material changes via the email address associated with their Account, no less than fourteen (14) days prior to the change taking effect — except where an immediate amendment is required for legal, regulatory, or security reasons.

The "Last Updated" date at the top of this Policy reflects the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

Archived versions of previous Privacy Policy documents are available upon request by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by YesWin, please contact us through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available directly on the Platform, 24/7, in English, Bahasa Melayu, and Mandarin Chinese. Our average live chat response time is under 5 minutes.
• WhatsApp: Available via the Platform's support hub after login. Supported in English and Bahasa Melayu.

For data subject access requests, deletion requests, or formal privacy complaints, please clearly identify the nature of your request in your message and include your Account username to assist our team in routing your query correctly. We will acknowledge your request within 48 hours.