yes88 Privacy Policy

1. About This Policy

1.1 This Privacy Policy applies to all personal data processed by yes88 in connection with the operation of the yes88 Platform, including but not limited to account registration, payment processing, customer support interactions, and marketing communications.

1.2 This Policy should be read together with the yes88 Terms & Conditions, which govern the use of the Platform as a whole. Terms not defined in this Policy carry the meanings given in the Terms & Conditions.

1.3 yes88 acts as the data controller in respect of personal data collected through the Platform. Where yes88 engages third-party service providers to process data on its behalf, those providers act as data processors under written agreements that impose equivalent data protection obligations.

2. Data We Collect

yes88 collects personal data in the following categories:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification document details (e.g., MyKad number, passport number).
• Contact Data: Email address, mobile phone number, and residential address (including postcode and state within Malaysia, or internationally where applicable).
• Financial Data: Payment method details including e-wallet identifiers (Touch n Go eWallet, Boost), bank account information (Maybank, CIMB, Public Bank), and cryptocurrency wallet addresses where used. yes88 does not store full card numbers where card payments are used — these are tokenised by the payment processor.
• Transaction Data: Records of all deposits, withdrawals, bets placed, game play history, and promotional bonus activity on your yes88 account.
• Technical Data: IP address, browser type and version, device identifiers, operating system, time zone, and session duration data collected automatically when you access the Platform.
• Usage Data: Information about how you navigate and interact with the yes88 Platform, including pages visited, features used, and preferences recorded.
• Communications Data: Records of your communications with yes88 support staff, including Live Chat transcripts and email correspondence.

3. How We Use Your Data

yes88 uses the personal data we hold for the following purposes:

• To create and administer your yes88 account, including identity and age verification (21+ requirement).
• To process deposits and withdrawals through your selected MYR payment methods.
• To provide and personalise the gaming and betting experience on the Platform.
• To comply with our obligations under our operating licence, including anti-money laundering (AML) checks, responsible gaming monitoring, and reporting obligations.
• To detect, investigate, and prevent fraud, cheating, and other prohibited activities.
• To send you transactional communications relating to your account, including deposit confirmations, withdrawal notifications, and security alerts.
• To send you promotional communications about yes88 offers and bonuses, where you have consented to receive such communications or where we have a legitimate interest in doing so.
• To improve the Platform through analysis of usage patterns and technical performance data.
• To comply with any applicable law, regulation, or lawful order from a regulatory or law enforcement authority.

4. Legal Basis for Processing

4.1 Contract performance: Processing that is necessary to provide the Platform services you have registered for, including account management, payments, and gameplay.

4.2 Legal obligation: Processing required to comply with our obligations under our gaming licence and applicable financial regulations, including AML and KYC requirements.

4.3 Legitimate interests: Processing for fraud prevention, platform security, and the improvement of our services, where these interests are not overridden by your fundamental rights and freedoms.

4.4 Consent: Processing for optional marketing communications and non-essential cookies, where your express consent has been obtained and may be withdrawn at any time.

5. Data Sharing

5.1 yes88 does not sell, rent, or trade personal data to third parties for their own marketing or commercial purposes.

5.2 yes88 shares personal data with third parties only in the following circumstances:

• Service providers: Payment processors, identity verification providers, fraud detection services, cloud hosting providers, and customer support platform operators engaged to support Platform operations. All such providers are contractually bound to handle data in accordance with this Policy.
• Game providers: Where you access third-party games on the Platform (e.g., Pragmatic Play, Evolution Gaming), limited session and gameplay data may be shared with those providers for game delivery and RNG integrity purposes.
• Regulatory authorities: yes88 may be required to disclose player data to licensing authorities, financial intelligence units, or law enforcement bodies under applicable legal obligations. Such disclosures are made only to the extent required by law.
• Business transfers: In the event of a merger, acquisition, or transfer of yes88's business or assets, personal data held by yes88 may be transferred to the acquiring entity, subject to equivalent data protection obligations.

6. Cookies & Tracking

6.1 yes88 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, and analyse platform usage. Cookies are small text files stored on your device by your browser.

6.2 Essential cookies are required for the Platform to function and cannot be disabled. These include session authentication cookies and security tokens.

6.3 Analytics cookies help us understand how players use the Platform. These are only set with your consent.

6.4 You may manage or disable non-essential cookies through your browser settings at any time. Disabling certain cookies may affect the functionality of some Platform features.

7. Data Retention

7.1 yes88 retains personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law.

7.2 Account data and transaction records are retained for a minimum of five (5) years following account closure in compliance with anti-money laundering regulations applicable under our operating licence. Identity verification documents are retained for the same period.

7.3 Marketing consent records are retained for as long as consent is active and for a reasonable period thereafter to demonstrate compliance. Marketing data is deleted within 30 days of a withdrawal of consent.

7.4 Technical and usage data is retained in anonymised or aggregated form for analytical purposes after the relevant account has been closed.

8. Your Rights

As a data subject, you have the following rights in respect of your personal data held by yes88:

• Right of access: You may request a copy of all personal data yes88 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to our legal retention obligations.
• Right to restrict processing: You may request that yes88 limits the processing of your data in certain circumstances.
• Right to data portability: You may request a machine-readable copy of data you have provided to yes88.
• Right to object: You may object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact yes88 support via Live Chat or email at [email protected]. We will respond to verified requests within 30 days.

9. Data Security

9.1 yes88 implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures include SSL/TLS encryption for all data in transit, encryption of sensitive data at rest, role-based access controls limiting staff access to personal data on a need-to-know basis, and regular security assessments.

9.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, yes88 will notify affected Members and relevant authorities in accordance with applicable breach notification obligations.

9.3 You are responsible for maintaining the confidentiality of your yes88 Login credentials. yes88 will never ask you for your password via email, Live Chat, or any other channel.

10. International Data Transfers

10.1 yes88 operates servers and engages service providers in multiple jurisdictions. In some cases, this may result in the transfer of your personal data outside of Malaysia. Where such transfers occur, yes88 takes steps to ensure that appropriate safeguards are in place, including contractual clauses that require the recipient to protect your data to an equivalent standard.

11. Minors

11.1 The yes88 Platform is strictly for adults aged 21 years and above. yes88 does not knowingly collect personal data from individuals under this age. If yes88 becomes aware that personal data has been collected from a person under 21 years of age, that account will be closed immediately and the data erased or returned, subject to any applicable legal obligation to retain it for regulatory purposes.

11.2 If you believe that a minor has registered on the Platform, please contact yes88 support immediately via Live Chat or at [email protected].

12. Third-Party Links

12.1 The yes88 Platform may contain references to third-party services or organisations (such as responsible gaming bodies or game providers). yes88 is not responsible for the privacy practices of third-party websites or services and encourages you to read their respective privacy notices independently.

13. Changes to This Policy

13.1 yes88 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered Members via the Platform or by email. The effective date at the top of this page will be updated accordingly.

13.2 Continued use of the yes88 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should cease using the Platform and may close your account.

14. Contact Us

For questions, concerns, or to exercise your data subject rights, please contact the yes88 data protection team via:

• Live Chat: Available 24/7 directly on the yes88.bio Platform.
• Email: [email protected] (plain text — not a clickable link).

We aim to acknowledge all data-related enquiries within 48 hours and to resolve them within 30 days of receipt. For responsible gaming concerns, please visit our dedicated Responsible Gaming page.