Updated: 1 January 2026

Yes2Win Privacy Policy – Protecting the Personal Data of Our Malaysian Players Comes First

At Yes2Win, your privacy is more than a legal obligation — it is part of our commitment to every player. This document clearly explains what data we collect, how we use it, who can access it, and what rights you have as a Yes2Win member regarding your personal data.

SSL 256-bit
PDPA Compliant
No data sold to third parties
Your Data Is Protected by the Yes2Win security infrastructure
AES-256 Encryption
Secure Storage
Never Sold
Your Full Rights

256-bit SSL Encryption

All data transmitted between your browser and the Yes2Win platform is fully protected with industry-standard 256-bit SSL encryption. Your personal information, account details, and transaction data never travel in unencrypted form.

Strict Access Controls

Personal data belonging to Yes2Win members is accessible only to staff with a legitimate business need who have undergone rigorous data security training. All access is logged and audited on a regular basis to ensure there is no misuse.

Data Not Sold

Yes2Win never sells, rents, or transfers members' personal data to any third party for marketing or commercial purposes. Your data belongs to you, and we fully respect the trust you place in us.

Malaysia PDPA Compliance

Yes2Win operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We collect only the data that is necessary, store it securely, and give you full rights to access and update your information.

Secure Data Storage

All member data is stored on servers protected by multi-layered firewalls, real-time intrusion detection systems, and regularly encrypted backups. Our infrastructure is designed to ensure the availability and security of your data at all times.

Your Rights, Guaranteed

As a Yes2Win member, you have the right to access your personal data, request corrections to inaccurate information, or request account deletion at any time. We process all such requests within 14 business days.

1

Introduction

This Privacy Policy ("Policy") describes how Yes2Win ("we", "platform", "us") collects, uses, stores, protects and discloses your personal data when you use the website https://yes2win.wine, our mobile application, or any related services we offer.

Yes2Win is committed to protecting the privacy of every member and user of our platform. We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. By registering an account or using the Yes2Win platform, you agree to the data collection and usage practices described in this Privacy Policy.

We encourage you to read this Policy in full. If you have any questions after doing so, the Yes2Win support team is available to assist you in Bahasa Malaysia via 24/7 live chat or by email at support@yes2win.wine.

Important Note: This Privacy Policy was last updated on 1 January 2026. We recommend reviewing this page periodically to stay informed of the latest amendments regarding the protection of your personal data at Yes2Win.

2

Personal Data We Collect

Yes2Win only collects personal data that is strictly necessary to provide you with online betting and entertainment services. We do not collect excessive or irrelevant information. The data we collect falls into the following categories:

Registration & Identity Data:

  • Full name (as per Malaysian MyKad or passport);
  • Date of birth for age verification;
  • An active Malaysian mobile phone number;
  • Email address;
  • Password (stored in hashed form — we do not store passwords in plain text);
  • Identity verification documents (MyKad or passport) when required for the KYC process.

Financial & Transaction Data:

  • Deposit and withdrawal records, including amounts, dates, and payment methods;
  • EWallet account numbers (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay) or the FPX bank account number used for transactions;
  • Complete transaction history for financial accountability and legal compliance purposes.

Platform Activity Data:

  • Gaming and betting records, including dates, times, amounts, and outcomes;
  • Game preferences and activity patterns within the platform;
  • Login and logout session logs;
  • Interactions with the customer support team.

Technical Data:

  • The IP address of the device used to access the platform;
  • Web browser type and operating system version;
  • Cookie data and device identifiers (see Section 5 for details);
  • Technical error logs for system maintenance purposes.
3

How We Use Your Personal Data

Yes2Win uses the personal data it collects solely for legitimate and necessary purposes. Every use of data is grounded in one or more legal bases recognised under the Malaysian PDPA. The purposes for which data is used are as follows:

  • Account management: Registering, verifying and managing your Yes2Win account, including the login and identity verification process;
  • Transaction processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, FPX and other methods, as well as withdrawals to your eWallet or Malaysian bank account;
  • Service provision: Providing access to all slots, Sports Betting, e-sports, Live Casino and Roulette games on the Yes2Win platform;
  • Customer support: Responding to enquiries, resolving complaints, and providing technical assistance via live chat or email;
  • Security & compliance: Detecting and preventing fraud, money laundering, and system abuse;
  • Age verification: Ensuring that only individuals aged 18 and above use the Yes2Win platform;
  • Marketing (with consent): Sending promotional information, new bonuses and platform updates only to members who have opted in to receive such communications;
  • Platform improvements: Analysing aggregated and anonymised usage patterns to improve the Yes2Win interface and user experience;
  • Legal compliance: Comply with legal reporting requirements, respond to court orders, or fulfil requests from legitimate authorities.

Minimisation Principle: Yes2Win uses your data solely for the purposes stated above. We will not use your data for any other purpose without first obtaining your fresh consent.

4

Data Sharing & Disclosure

Yes2Win does not sell, rent, transfer, or disclose your personal data to third parties for their own marketing or commercial purposes. We only share your data in the following limited situations, and strictly to the extent necessary:

  • Payment Providers: Transaction information is shared with eWallet providers such as Touch 'n Go, GrabPay, or banks supporting FPX solely for the purpose of processing your deposits and withdrawals. These providers have their own privacy policies and are subject to Malaysian financial regulations;
  • Game Providers: Required game session data is shared with slots and Live Casino game providers (such as Pragmatic Play and PG Soft) to enable gameplay. This data is technical in nature only and does not include full personal identity information;
  • Regulatory Authority: Yes2Win may disclose personal data when required to do so by law, court order, or a valid request from Malaysian government authorities. We will notify you of any such request where we are permitted to do so by law;
  • Audit & Security Partners: Periodic independent security audits may involve limited access to system data by third-party auditors who have signed strict confidentiality agreements with Yes2Win.

Our Commitment: In all of the data-sharing situations described above, Yes2Win imposes strict contractual obligations on all data recipients to ensure your data is protected to the same standard — or higher — than we apply ourselves.

5

Cookies & Tracking Technologies

Like most websites and online platforms, Yes2Win uses cookies and similar tracking technologies to enhance the functionality and user experience of our platform. Below is an explanation of the types of cookies we use:

  • Essential Cookies (Required): Required for core platform functions such as maintaining your login session, saving language preferences, and ensuring session security. These cookies cannot be disabled without affecting platform functionality;
  • Performance Cookies: Collecting anonymised information about how you use the platform (pages visited, time spent) to help us improve Yes2Win's performance and user experience;
  • Functional Cookies: Remembering your preferences such as display settings, game preferences, and saved login details (if you choose to save them) to deliver a more personalised experience;
  • Analytics Cookies: Used to understand overall platform usage patterns in aggregate. This data is processed anonymously and cannot be linked to any specific individual.

You can control and manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality and experience of using the Yes2Win platform. For more information on managing cookies, refer to the documentation for your web browser.

6

Data Security

Yes2Win continually invests in the latest security technologies and procedures to protect the personal data of all our members. The technical and organisational security measures we apply include:

  • 256-bit SSL/TLS Encryption: All communications between your device and Yes2Win servers are encrypted using the latest version of the TLS (Transport Layer Security) protocol;
  • Data Encryption at Rest: Personal data stored in our databases is encrypted using AES-256 for an additional layer of protection, even in the event of a physical breach;
  • Hashed Passwords: Your password is never stored in plain text — it is stored as a one-way hash using an irreversible algorithm;
  • Firewall & IDS: Our server infrastructure is protected by multi-layered firewalls and an intrusion detection system (IDS) that monitors network traffic 24/7;
  • Role-Based Access Control: Yes2Win staff only have access to the data necessary to carry out their specific duties — no staff member has full access to all data;
  • Regular Security Audits: The Yes2Win platform undergoes regular security audits by independent third parties to identify and address any vulnerabilities;
  • Incident Response Plan: Yes2Win has a comprehensive security incident response procedure in place. In the event of a data breach, we will notify affected members within the timeframe required by law.

Shared Responsibility: While we take all reasonable steps to protect your data, data security is a shared responsibility. Please ensure your Yes2Win account password is strong, unique, and not shared with anyone.

7

Data Retention Period

Yes2Win retains your personal data for as long as is necessary for the purposes set out in this Privacy Policy, or for as long as required under applicable Malaysian law. General data retention guidelines are as follows:

  • Active Account Data: For as long as your account remains active on Yes2Win, plus a defined period after the account becomes inactive;
  • Financial Transaction Records: A minimum of 7 years from the date of transaction in accordance with Malaysian financial and tax regulatory requirements;
  • KYC (Identity Verification) Records: A minimum of 5 years from the date of verification or account closure, whichever is later, in compliance with anti-money laundering legislation;
  • Support Communication Logs: 2 years from the date of interaction for quality control and dispute resolution purposes;
  • Technical Data (Server Logs): 90 days for technical troubleshooting and security purposes.

Once the required retention period has lapsed, your personal data will be securely deleted or anonymised so that it can no longer be linked to you. The deletion process employs methods that ensure the data cannot be recovered.

8

Your Personal Data Rights

As a Yes2Win member and an individual protected under Malaysia's PDPA, you have the following rights with respect to your personal data:

  • Right of Access: You have the right to request a copy of the personal data we hold about you. We will process this request within 14 working days;
  • Right to Rectification: You have the right to request correction of any personal data that is inaccurate, incomplete, or out of date. You can update some of your profile information directly through your Yes2Win account;
  • Right to Erasure: In certain circumstances, you may request the deletion of your personal data. However, we may be unable to fulfil such a request in full if we are under a legal obligation to retain that data;
  • Right to Restriction of Processing: You may request that we restrict how we use your data in certain circumstances, for example while you are verifying the accuracy of your data;
  • Right to Withdraw Consent: Where data processing is based on your consent (such as for marketing purposes), you may withdraw that consent at any time without affecting the validity of any processing that took place prior to withdrawal;
  • Right to Object: You have the right to object to the processing of your personal data for specific purposes, including direct marketing.

To exercise any of the rights above, please contact the Yes2Win data protection team by email at support@yes2win.wine, specifying the right you wish to exercise and providing sufficient information for us to identify your account. We will respond within 14 business days.

9

Children's Data

The Yes2Win platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. Our registration process requires date of birth verification, and we apply age verification procedures to enforce this policy.

Should we become aware that personal data belonging to a child under the age of 18 has been collected without verified parental or guardian consent, we will take immediate steps to delete that data and close the associated account.

To Parents & Guardians: If you discover that your child under the age of 18 has registered an account on Yes2Win, please contact us immediately at support@yes2win.wine. We will close the account and delete all associated data without delay.

10

Cross-Border Data Transfers

In the course of its operations, Yes2Win may need to transfer or process your personal data outside Malaysia — for example, for data redundancy purposes at overseas data centres or when using international cloud infrastructure services.

Any cross-border data transfer carried out by Yes2Win is subject to the following conditions:

  • The recipient country or region has data protection laws equivalent to or more stringent than the Malaysian PDPA;
  • There is a contractually binding data transfer agreement between Yes2Win and the recipient that ensures an equivalent level of protection;
  • All transferred data remains encrypted both in transit and at rest at the recipient's location.

We do not transfer your personal data to countries or territories without adequate data protection without first putting in place appropriate additional safeguards.

11

Amendments to This Privacy Policy

Yes2Win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to our services. When we make material changes, we will:

  • Updating the "Updated" date at the top of this page;
  • Displaying a clear notice on the Yes2Win platform regarding the changes;
  • Sending a notification to your registered email address where the changes are significant and directly affect your rights.

We encourage you to review this Privacy Policy page periodically. Your continued use of the Yes2Win platform after any changes take effect will be considered your acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account by contacting our support team.

12

Contact Us About Privacy

If you have any questions, concerns or complaints about how Yes2Win handles your personal data, or if you wish to exercise any of the rights set out in this Privacy Policy, please contact us through the following channels:

  • Data Protection Email: support@yes2win.wine (please state "Privacy Enquiry" in the email subject line);
  • Live Chat: Available 24/7 directly on the Yes2Win platform;
  • Target Response Time: 14 business days for all personal data-related enquiries;
  • Support Languages: Full Bahasa Malaysia support for all privacy-related enquiries.

We take every privacy enquiry seriously and will provide a clear, transparent response to each one we receive. Your trust is Yes2Win's most valuable asset, and we are committed to maintaining it through responsible and transparent privacy practices.

Third-Party Complaints: If you are not satisfied with our response to your privacy enquiry, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) or the relevant regulatory authority.


Your Rights as a Yes2Win Member

We fully respect and uphold your privacy rights under Malaysia's PDPA

Right to Data Access

Request a copy of all personal data we hold about you. We will process your request within 14 business days.

Right to Rectification

Update inaccurate or outdated data. Some information can be updated directly through your account settings.

Right to Erasure

Request the deletion of your data under certain circumstances, subject to our legal data retention obligations.

Right to Object

Object to the processing of your data for direct marketing or any other purposes you have not consented to.

Withdraw Consent

Withdraw marketing consent at any time without affecting any processing that took place prior to withdrawal.

Right to Restriction

Request that we limit how your data is used in certain circumstances, such as while you are verifying the accuracy of your data.

How to Exercise Your Rights

Contact us at support@yes2win.wine with the subject line "Privacy Enquiry" and state the right you wish to exercise. We will respond within 14 business days.


Yes2Win Security Measures

The latest technologies and procedures to keep your data secure on our platform at all times

SSL 256-bit Full encryption in transit
AES-256 Data Encrypted at Rest
Firewall Multi-layered protection
24/7 Monitoring Real-time threat detection
Password Hashing Never stored in plain text
Periodic Audits Independently verifiable by third parties

FAQ – Yes2Win Privacy Policy

Frequently asked questions from members about privacy and data protection at Yes2Win

No — Yes2Win does not sell, rent, or share your personal data with third parties for marketing or commercial purposes. We only share data in strictly limited and necessary situations: with payment providers such as Touch 'n Go or GrabPay to process your transactions, with game providers to enable the technical functioning of games, and with authorities where required by Malaysian law. In all such cases, we impose strict confidentiality agreements on all data recipients.

You may request access to your personal data by emailing support@yes2win.wine with the subject line "Data Access Request". Please include your full name and the phone number registered to your Yes2Win account so we can accurately identify your account. We will process your request within 14 business days and send a data report to your registered email address in a readable format. No fee is charged for the first data access request within any 12-month period.

When you close your Yes2Win account, we will retain your data for the period required under Malaysian law — typically between 5 and 7 years depending on the type of data. This is a legal requirement related to financial records, anti-money laundering prevention, and tax compliance. Once the mandatory retention period expires, your data will be securely deleted or anonymised. You need not worry about your data being used for any marketing purpose after your account is closed — all marketing communications will cease immediately upon account closure.

Your financial information is protected by multiple layers of security at Yes2Win. First, all financial data transmissions are encrypted with 256-bit SSL in transit. Second, financial information stored in our database is encrypted with AES-256. Third, Yes2Win staff do not have access to your full eWallet or bank account numbers — we only retain a masked version for transaction record purposes. All payments are processed through certified payment gateways and not directly through Yes2Win's internal systems.

Yes — you can opt out of marketing emails from Yes2Win at any time in one of two ways. First, click the "Unsubscribe" link found at the bottom of any marketing email we send. Second, log in to your Yes2Win account, go to Account Settings, and disable the marketing communications preference. Changes will take effect within 48 hours. Please note that even after opting out of marketing emails, you will continue to receive important transactional emails such as transaction confirmations, security notices, and necessary account updates.

Yes2Win has a comprehensive Incident Response Plan for data breach situations. Should an incident occur that may affect your personal data, we will take the following steps: first, identify and contain the incident as quickly as possible; second, assess the scope and impact of the incident; third, notify affected members by email within the timeframe required under Malaysia's PDPA; fourth, report to the relevant authorities; and fifth, implement remediation measures to prevent recurrence. We believe in transparency and will provide clear, accurate information to all affected parties.

Why Privacy is a Priority at Yes2Win

When you register an account on Yes2Win and begin using our platform, you entrust us with deeply personal information — your name, phone number, financial details, and your activity patterns on the platform. That trust is not something we take lightly. For us at Yes2Win, protecting your personal data goes beyond legal compliance — it is the foundation of the relationship we have built with over 380,000 members across Malaysia.

In today's digital age, we are all becoming more aware of just how valuable personal data is. Many companies collect user data and sell it to advertisers or third parties without users even knowing. At Yes2Win, our approach is entirely different. We believe that an ethical business model is one that respects its users' privacy — not one that exploits it. Your data is not a product we sell. It is information we need in order to provide the services you request from us, and we use it for that purpose alone.

How Malaysia's PDPA Protects You

Malaysia's Personal Data Protection Act 2010 (PDPA) grants individuals certain rights over their personal data. The PDPA requires organisations that collect personal data to have a lawful purpose, obtain appropriate consent, and take reasonable steps to protect that data. Yes2Win operates in full compliance with the PDPA — though we regard compliance as a minimum baseline only, and we strive to go beyond PDPA requirements across many aspects of our privacy practices.

As a Malaysian player using the Yes2Win platform, you are protected under the provisions of the PDPA. This means you have the right to know what data we hold about you, to request corrections if there are errors, and in certain circumstances, to request deletion of your data. We respect and facilitate the exercise of these rights for all our members.

The Data We Collect Is There to Protect You

There are sound reasons why we need to collect some of the data we request from you. The identity verification (KYC) process — which may seem like an administrative burden — is actually there to protect you. It ensures no one else can register an account in your name, prevents financial fraud, and guarantees that any withdrawal can only be made to a verified account in your name.

The same applies to transaction record retention — this is not merely a legal requirement, but also protects you should any dispute arise relating to your transactions at Yes2Win. With complete and accurate records, we can resolve any dispute quickly and fairly based on clear evidence.

Our Ongoing Commitment

The cybersecurity threat landscape is constantly evolving, and Yes2Win is committed to keeping our security measures up to date in line with these developments. We undergo periodic security audits by independent third parties, proactively update our systems, and train our staff on data security best practices. Every ringgit you deposit into your Yes2Win account via Touch 'n Go, GrabPay or any other method is our responsibility to safeguard — and we take that responsibility seriously at all times.

Privacy is not static. It requires ongoing commitment and consistent effort. At Yes2Win, we pledge to keep improving our privacy practices, to be more transparent about how we use data, and to always place our members' privacy interests at the forefront of every decision we make. Your trust is the foundation of everything we do.

Your Data Is Safe — Start Enjoying Yes2Win

Yes2Win protects your privacy with 256-bit SSL and full PDPA compliance. Register free today, claim your 200% Welcome Bonus up to RM300, and enjoy over 500 slots, Sports Betting, e-sports and Live Casino games safely and securely.

SSL 256-bit  |  PDPA Compliant  |  support@yes2win.wine

Bahasa Melayu