ye55 Privacy Policy – How We Handle Your Personal Data

1.1 ye55 is committed to protecting the privacy and personal data of all players who use the ye55 platform. This Policy applies to all personal data collected through ye55.win, including data collected during account registration, identity verification, deposit and withdrawal transactions, gameplay activity, and customer support interactions.

1.2 This Policy should be read alongside the ye55 Terms & Conditions, which govern the overall use of the platform. In the event of a conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy shall prevail.

1.3 ye55 operates under applicable international gaming regulation and processes personal data in accordance with recognised data protection standards. Malaysian players are entitled to the privacy rights described in this Policy.

2.1 For the purposes of this Policy, ye55 is the data controller in respect of personal data collected through the ye55 platform. As data controller, ye55 determines the purposes and means of processing your personal data.

2.2 If you have questions about how your personal data is processed, you may contact us using the details provided in Section 15 of this Policy.

3.1 ye55 collects personal data through various touchpoints on the platform. The categories of data we collect, and the circumstances under which we collect them, are set out in the table below.

3.2 ye55 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data beyond what is strictly necessary for identity verification purposes.

4.1 ye55 uses your personal data for the following purposes:

• To create and manage your ye55 account and authenticate your identity at login;
• To process financial transactions, including deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks, and withdrawals to your registered payment method;
• To verify your identity and comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations under applicable regulation;
• To provide customer support, handle complaints, and manage disputes;
• To monitor gameplay activity for the purposes of fraud detection, responsible gaming enforcement, and platform security;
• To send you service-related communications, including transaction confirmations, security alerts, and policy updates;
• To send you promotional communications about ye55 bonuses and offers, where you have provided your consent to receive such communications;
• To improve the ye55 platform through aggregate analytics of usage patterns — this analysis uses anonymised or aggregated data that does not identify individual users;
• To comply with applicable laws, regulatory requirements, and lawful orders from competent authorities.

5.1 ye55 processes your personal data on the following legal bases:

• Contract performance: Processing that is necessary to register your account, process transactions, and provide the services you have requested under the ye55 Terms & Conditions;
• Legal obligation: Processing required to comply with KYC, AML, and other regulatory obligations to which ye55 is subject;
• Legitimate interests: Processing for fraud prevention, platform security, and aggregate analytics, where ye55's interests are balanced against your privacy rights;
• Consent: Processing for direct marketing communications, where consent has been expressly given and may be withdrawn at any time.

6.1 ye55 does not sell, rent, or trade personal data. We may share personal data with the following categories of recipients in limited circumstances:

• Payment processors and financial institutions: To execute your deposit and withdrawal transactions via Touch 'n Go, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Connect;
• Identity verification service providers: To conduct KYC checks and validate identity documents you submit;
• Game software providers: Licensed studios whose games are integrated into the ye55 platform receive the minimum technical data necessary to deliver gameplay (e.g., session tokens, bet amounts);
• Regulatory and law enforcement authorities: Where disclosure is required by applicable law, court order, or regulatory mandate;
• Fraud prevention networks: Where sharing is necessary to detect or prevent financial crime or account abuse.

6.2 All third parties with whom ye55 shares personal data are required to process that data only for the specified purpose and in accordance with confidentiality and security standards consistent with this Policy.

7.1 As an internationally regulated gaming platform, ye55 may transfer personal data to servers or service providers located outside Malaysia. Where such transfers occur, ye55 takes appropriate safeguards to ensure the data receives a comparable level of protection to that afforded under this Policy.

7.2 By using the ye55 platform, you acknowledge that your data may be processed in jurisdictions outside Malaysia. ye55 will not transfer your data to jurisdictions that do not maintain adequate data protection standards without implementing appropriate contractual or technical safeguards.

8.1 ye55 retains personal data for as long as your account remains active and for a period thereafter as required to comply with legal and regulatory obligations. The following general retention periods apply:

• Account and identity data: retained for a minimum of five (5) years following account closure, as required under AML and gaming regulatory standards;
• Financial transaction records: retained for a minimum of five (5) years from the date of each transaction;
• Customer support communications: retained for a minimum of two (2) years following resolution of the relevant interaction;
• Marketing consent records: retained until consent is withdrawn, and for a period thereafter sufficient to evidence the consent history.

8.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the individual's identity.

9.1 ye55 uses cookies and similar technologies on the ye55 platform for the following purposes:

• Essential cookies: Required for the platform to function correctly, including session management, login authentication, and security features. These cannot be disabled without impairing core platform functionality;
• Analytics cookies: Used to collect aggregate, anonymised data on how users navigate the platform, enabling ye55 to improve performance and user experience. These do not identify individual users;
• Preference cookies: Used to remember your language and display preferences across sessions.

9.2 ye55 does not use advertising cookies or permit third-party advertising networks to place tracking cookies on the ye55 platform. You may manage cookie preferences through your browser settings at any time.

10.1 ye55 implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and ye55's servers;
• Encrypted storage of sensitive personal data, including identity documents and financial details;
• Two-factor authentication (SMS OTP) available for all accounts;
• Access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security assessments and penetration testing of the ye55 platform infrastructure.

10.2 Notwithstanding the above, no method of electronic transmission or storage is entirely secure. ye55 cannot guarantee absolute security and shall not be liable for breaches caused by circumstances beyond its reasonable control.

11.1 As a player on the ye55 platform, you have the following rights in respect of your personal data:

• Right of access: You may request a copy of the personal data ye55 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data, subject to ye55's legal retention obligations;
• Right to restrict processing: You may request that ye55 restrict the processing of your data in certain circumstances;
• Right to data portability: You may request a copy of your data in a structured, machine-readable format where processing is based on consent or contract;
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11.2 To exercise any of the above rights, contact us using the details in Section 15. ye55 will respond to all valid requests within thirty (30) days. Complex or numerous requests may require an extension, of which you will be notified.

12.1 The ye55 platform is not directed at individuals under the age of 21. ye55 does not knowingly collect personal data from individuals below this age. If ye55 becomes aware that a registered account belongs to a person under 21 years of age, the account will be closed and any personal data deleted in accordance with our retention policy.

12.2 If you have reason to believe that a minor has registered on the ye55 platform, please contact us immediately using the details in Section 15.

13.1 The ye55 platform does not contain links to third-party websites for advertising purposes. Where operational links to third-party services exist (such as payment gateways), those services operate under their own privacy policies. ye55 is not responsible for the privacy practices of third-party services.

14.1 ye55 reserves the right to update this Privacy Policy at any time. Where changes are material, ye55 will notify registered players via email or a prominent notice on the platform prior to the changes taking effect.

14.2 Continued use of the ye55 platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the platform and request account closure in accordance with the Terms & Conditions.

15.1 For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ye55, please contact our support team via live chat (available 24 hours a day, 7 days a week on Malaysia time) or by email at [email protected].

15.2 ye55 will acknowledge all privacy-related correspondence within two (2) business days and provide a substantive response within thirty (30) days.