Yes2 Privacy Policy – Personal Data Protection for Malaysia Members

Yes2 is an online betting and entertainment platform built specifically for Malaysian players. We understand that trust is the foundation of our relationship with every member, and that trust starts with being transparent about how we handle your personal data.

This Privacy Policy clearly and thoroughly explains:

• The types of personal information we collect when you use the yes2 platform.
• The purpose and legal basis for each category of data processing we carry out.
• Who your data may be shared with and under what circumstances.
• The security measures we take to protect your data.
• Your rights as a data subject under Malaysian law.
• How to reach us regarding any privacy-related matters.

This policy applies to all services offered by yes2, including Sports Betting, Live Casino, slots, sports, lottery, and all other products available on yes2.best. It also applies to all our communication channels, including live chat, email, and any written correspondence.

Yes2 only collects information that is genuinely necessary to operate the platform and deliver the best service to our members. The following are the categories of data we collect:

Yes2 uses collected personal data solely for legitimate, stated purposes. We do not use your data for any unrelated purpose without your consent. The following are the primary purposes for which yes2 uses your data:

• Account Management: Creating, verifying, and managing your yes2 account, including the login process, identity verification (KYC), and account recovery.
• Transaction Processing: Processing deposits and withdrawals via local Malaysian e-wallets such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX internet banking from Maybank2u, CIMB Clicks and other Malaysian banks.
• Service Operations: Allows you to access and enjoy all games on yes2, including football, Live Casino, slots, sports and lottery.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, duplicate accounts and any misuse of the yes2 platform.
• Customer Support: Helps you resolve issues, answers your questions and provides assistance via yes2 live chat and email.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and offering appropriate support to yes2 members who may need it.
• Legal Compliance: To fulfil legal obligations under applicable Malaysian law, including anti-money laundering (AML) requirements.
• Service Communications: Sending important updates regarding platform changes, policy updates or any information relevant to your yes2 account.
• Marketing (with consent): Sending promotional offers, bonuses and updates about new games on yes2 — only where you have given consent to receive marketing communications.

Yes2 will not use your data for any purpose beyond what is stated above without first obtaining your consent through the appropriate channels.

Yes2 does not sell, rent or trade member personal data to any third party for their own marketing purposes. However, to operate the platform effectively, yes2 may need to share certain data with the following parties:

• Payment Service Providers: E-wallet and online banking providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and Malaysian banks that support FPX — solely for processing your deposit and withdrawal transactions.
• Game Providers: Third-party gaming software providers that supply slots, Live Casino and other games on the yes2 platform. They receive only the data necessary to operate the games.
• Technology Providers: Companies that provide technical services such as server hosting, analytics, and cybersecurity to help maintain yes2 platform operations.
• Malaysian Authorities: Regulatory bodies, law enforcement agencies and courts in Malaysia when yes2 is legally required to do so by law or court order — including investigations related to money laundering or fraud.
• Business Partners: In the event of a business merger, acquisition or sale of yes2 assets, data may be transferred to the new entity, which will remain bound by this Privacy Policy.

The security of members' personal data is yes2's highest priority. We continually invest in security infrastructure to ensure your data is always protected against unauthorised access, loss, alteration or unintended disclosure.

The key security measures we have in place at yes2 include:

• Data Encryption in Transit: All communications between your browser and the yes2 platform are secured with TLS 1.3 protocol using AES-256 encryption — the highest security standard available.
• Data Encryption at Rest: Sensitive information such as passwords is stored using strong one-way hashing algorithms. No one, including yes2 staff, can read your password in its original form.
• Two-Factor Authentication (2FA): yes2 offers an additional layer of security through 2FA for member accounts. We encourage all members to enable this feature.
• 24/7 Security Monitoring: The yes2 security team monitors the platform around the clock to detect and respond to any suspicious activity or intrusion attempts.
• Internal Access Controls: Only staff who require access to specific data to carry out their duties are permitted to do so. All internal access is logged and audited on a regular basis.
• Regular Security Testing: yes2 conducts regular security assessments and penetration testing to identify and remediate any vulnerabilities within its systems.

While yes2 takes all reasonable precautions, no security system is 100% foolproof. We encourage members to play their part in keeping their accounts secure — use a strong password, enable 2FA and never share your login details with anyone.

Yes2 uses cookies and similar technologies to enhance the user experience, maintain platform security, and understand how members use our services. Cookies are small text files stored in your browser.

The following are the types of cookies used by yes2:

You can manage your cookie preferences through your web browser. Please note that disabling certain cookies may affect the functionality of the yes2 platform and your gaming experience. For guidance on managing cookies, refer to the settings of your web browser.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have specific rights regarding the personal data yes2 holds about you. We respect and facilitate the exercise of these rights:

To exercise any of the above rights, contact the yes2 team via live chat or email at support@yes2.best. Please include your yes2 account username and the details of your request. We will process your request within 14 working days.

Yes2 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required under applicable Malaysian law.

• Active Account Data: For as long as your yes2 account remains active, we retain your profile information and preferences to ensure a seamless experience on the platform.
• Financial Transaction Records: yes2 retains records of all deposit and withdrawal transactions for a minimum of 7 years as required under Malaysian financial and anti-money laundering laws.
• Gaming Activity History: Betting data and gaming activity are retained for a minimum of 5 years for security purposes, dispute resolution and regulatory compliance.
• Communication Records: Live chat transcripts and support emails are retained for 2 years for service quality purposes and the resolution of any complaints that may arise.
• After Account Closure: When a yes2 account is closed at your request, we will delete or anonymise your personal data within a reasonable timeframe, except for records that must be retained to meet legal obligations.

Yes2 has a strict policy on the protection of children and underage users. The yes2 platform is intended solely for users aged 18 years of age and above only, without any exceptions.

Yes2 does not knowingly collect personal data from individuals under the age of 18. If we become aware that a user under 18 has registered an account, we will:

• Immediately suspending and deleting the account.
• Deleting all personal data associated with that account from our systems.
• Voiding all associated transactions and winnings.
• Where appropriate, reporting the incident to the relevant authorities in Malaysia.

Parents and guardians who suspect their child has accessed the yes2 platform are urged to contact us immediately via live chat or email at support@yes2.best so that we can take the necessary action.

Yes2 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, Malaysian law, or relevant industry developments. All changes are intended to enhance your privacy protections, not diminish them.

When significant changes are made to this Privacy Policy:

• The "Updated" date at the top of this page will be revised to reflect the date of the latest amendment.
• For significant changes that affect your rights, yes2 will send a notification via email or an in-platform notice to all active members.
• Continued use of the yes2 platform after changes take effect constitutes your acceptance of the amended Privacy Policy.

We encourage you to review this Privacy Policy page periodically to stay informed about how yes2 protects your information. A version history of the Privacy Policy is available upon request — contact us if you would like to view a previous version.

If you have any questions, concerns, or requests relating to this Privacy Policy or how yes2 handles your personal data, we encourage you to get in touch. The yes2 team is ready to assist in Bahasa Melayu.

When contacting us regarding a privacy rights request, please include:

• Your yes2 account username (where applicable).
• The type of request you are making (data access, rectification, deletion, etc.).
• Any additional relevant information that may help us process your request more efficiently.

Yes2 aims to respond to all privacy-related enquiries within 14 working days. For more complex cases requiring further investigation, we will keep you informed of the progress of your request within that period.