Privacy Policy yes2 —
Your Personal Data Protection

1. Introduction

Welcome to the yes2 Privacy Policy. This document has been prepared to provide full transparency to all yes2.onl platform members and users regarding how we handle your personal information. yes2 takes our responsibility as custodian of your data seriously, and we want to ensure you are comfortable with every aspect of the data protection we offer.

This Privacy Policy applies to all services offered by yes2, including the web platform at yes2.onl, the yes2 mobile app, and all communication and customer support channels we operate. By registering and using any yes2 service, you acknowledge that you have read, understood, and agreed to this policy.

Yes2 is your data controller as defined under Malaysia's Personal Data Protection Act 2010 (PDPA). We are fully responsible for the processing of your personal data and are committed to complying with all relevant legal requirements.

2. Personal Data We Collect

Yes2 collects various types of personal data depending on the nature of your interaction with our platform. Below is a summary of the data categories we collect and their respective purposes:

We also collect data you voluntarily provide, such as feedback, reviews, and personal preference information, for service improvement purposes. We do not collect special category data such as health information, religious beliefs, or biometric data unless specifically required by law.

3. How We Use Your Personal Data

Yes2 uses your personal data only for legitimate, transparent, and clearly stated purposes. The following are the primary purposes for which your data is used:

• Account management: Creating, verifying, and managing your member account, including the KYC process and age verification.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
• Platform security: Detecting and preventing fraudulent activity, hacking, money laundering, and other security threats.
• Customer support: Responding to enquiries, resolving complaints, and providing the technical assistance you need.
• Service improvement: Analysing usage patterns to improve platform features, user experience, and gaming offerings.
• Marketing communications: Sending promotional information, special offers, and platform updates — only if you have consented to receive them.
• Legal compliance: Complying with applicable legal requirements, regulations, and court orders.
• Responsible gaming: Monitoring gameplay patterns to identify members who may need responsible gambling support.

4. Sharing Data with Third Parties

Yes2 does not sell, rent, or share members' personal data with third parties without your consent, except in the limited situations outlined below:

• Payment service providers: FPX, Touch 'n Go, Boost, GrabPay, local banks, and cryptocurrency platform providers that process your transactions. They are bound by strict confidentiality agreements.
• Game software providers: Licensed game provider partners who need to verify your gaming session. Only the minimum required data is shared.
• IT service providers: Companies supporting yes2's technical infrastructure, such as cloud services and cybersecurity. All are subject to data protection agreements.
• Regulatory bodies & law enforcement: Where required by law, court order, or direction from a legitimate regulatory authority.
• Parties in a business transfer: If yes2 is involved in a merger, acquisition, or asset sale, data may be transferred as part of that transaction with notification to members.

In all data sharing situations, yes2 ensures that recipients are bound by data protection obligations equal to or stricter than our own standards.

5. Cookies and Tracking Technologies

Yes2 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.

The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled.
• Performance cookies: Collecting information on how you use our platform to help us improve our services. Data is collected anonymously.
• Functional cookies: Remembering your preferences such as language, layout, and personal settings for a better experience.
• Analytics cookies: Helping us understand overall platform usage patterns, most visited pages, and session duration.

You can manage your cookie settings through your internet browser. However, disabling certain cookies may affect platform functionality. Please refer to your browser's help documentation for instructions on how to manage cookies.

6. Data Security

Yes2 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, modification, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between clients and servers.
• Encryption at rest for all sensitive information stored in our databases.
• Role-based access control — only authorized staff who require access to specific data for their job responsibilities are permitted.
• Two-factor authentication (2FA) for all yes2 internal staff accounts.
• Regular security audits conducted by independent cybersecurity specialists.
• 24/7 monitoring to detect suspicious activity or intrusion attempts.
• Mandatory data security training programme for all yes2 staff.

While we take all reasonable precautions, no digital system can be guaranteed 100% secure. If you suspect any suspicious activity on your account, please contact the yes2 support team immediately.

7. Data Retention Period and Deletion

Yes2 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following are general data retention period guidelines:

• Active account data: Retained for the duration your account is active and for 5 years following account closure.
• Financial transaction records: Retained for a minimum of 7 years as required by Malaysian financial and anti-money laundering laws.
• Support communication records: Retained for 3 years from the date of last communication.
• Technical log data: Retained for a maximum of 12 months for security and troubleshooting purposes.

Once the retention period expires, your personal data will be securely deleted or anonymised using methods that ensure it cannot be recovered. You may request early deletion by contacting us, subject to legal obligations that require us to retain certain data.

8. Your Privacy Rights

As a yes2 member, you have the following rights regarding your personal data under Malaysia's PDPA:

To exercise any of the above rights, please contact the yes2 customer support team via live chat on the platform or by emailing us. We will verify your identity before processing any data-related request to ensure the security of your account.

9. Links to Third-Party Sites

The yes2 platform may contain links to third-party websites or services, such as game provider websites or payment partners. This Privacy Policy does not apply to those third-party websites or services. yes2 is not responsible for the privacy practices or content of third-party websites. We encourage you to read the privacy policy of any website you visit.

10. Changes to This Privacy Policy

Yes2 reserves the right to update or modify this Privacy Policy at any time. Any material changes will be communicated to you via your registered email or a prominent notice on the platform at least 14 days before the changes take effect. Continued use of the platform after the effective date of such changes constitutes acceptance of the updated Privacy Policy.

The "Last Updated" date at the top of this document will always reflect the latest version of the Privacy Policy currently in effect. You are encouraged to review this page from time to time.

11. Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the yes2 privacy team is ready to assist you: