Privacy Policy yes918 — We Protect Your Data

1 Introduction and Scope of This Policy

Yes918 is an online betting platform committed to protecting the privacy and data security of every member who uses our services. This Privacy Policy details how we handle your personal data — from the point of collection through to storage and deletion.

This policy applies to all users of the yes918 platform, covering the official website at yes918.app, iOS and Android mobile apps, and all related communication channels. It also applies to individuals who visit our website without registering as a member.

By using the yes918 platform, you consent to the collection and use of your personal data as described in this policy. If you do not agree, please discontinue use of our platform and contact us to request deletion of any data already collected.

2 Types of Personal Data We Collect

Yes918 collects your personal data through several means depending on your interactions with the platform. The data collected falls into the following categories:

Data you provide directly:

• Full name as stated in your official identification document.
• Date of birth for age verification purposes.
• Identity card number (MyKad) or passport number.
• Active email address and mobile phone number.
• Bank account or digital wallet details for deposit and withdrawal purposes.
• KYC supporting documents including copies of identification cards and proof of address.

Data collected automatically:

• IP address and associated geographic location information.
• Device type, operating system, and web browser version used.
• In-platform gaming activity logs and transaction history.
• Usage data such as pages visited, session duration, and links clicked.
• Cookie information and device identifiers for security verification.

3 How yes918 Uses Your Data

Personal data collected is used solely for legitimate purposes necessary for the operation of the yes918 platform. The following are the primary purposes for which your data is used:

• Identity Verification: Verifying your identity during registration and the KYC process to ensure account security and meet regulatory requirements.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions accurately and securely.
• Account Management: Maintaining your account, sending important notifications, and providing effective customer support.
• Platform Security: Detecting and preventing fraudulent activity, money laundering, and other security threats.
• Experience Personalisation: Tailoring game recommendations, promotions, and platform content to your preferences and usage patterns.
• Marketing Communications: Sending information about promotions, bonuses, and exclusive offers — subject to your consent.
• Legal Compliance: Fulfilling reporting and compliance obligations set by the relevant authorities.
• Analytics and Improvement: Analysing usage patterns to improve platform performance, stability, and user experience.

4 Sharing Data with Third Parties

Yes918 does not sell, rent, or disclose member personal data to third parties for commercial purposes. However, there are limited situations where data sharing is necessary for platform operations:

• Payment Providers: Required transaction information is shared with licensed payment providers to securely process your deposits and withdrawals.
• Game Providers: Basic game session data is shared with game software providers to ensure games function properly.
• KYC Services: Identity verification documents are shared with trusted KYC service providers to expedite the verification process.
• Legal Requirements: Data may be disclosed to authorities or law enforcement agencies when required by court order or applicable regulations.

All third parties who receive yes918 member data are bound by strict confidentiality agreements and are required to handle that data in accordance with protection standards equal to or higher than this policy.

5 Use of Cookies and Tracking Technologies

Yes918 uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as secure login, session verification, and account security. These cookies cannot be disabled.
• Performance Cookies: Collecting statistical data on how users interact with the platform to help us identify and resolve technical issues.
• Functional Cookies: Remembering your preferences such as language, display settings, and other options for a more comfortable experience.
• Analytics Cookies: Used to understand aggregated platform usage patterns for continuous improvement purposes.

You can manage cookie usage through your web browser settings. However, disabling essential cookies may affect certain functions of the yes918 platform, including the ability to log in to your account.

6 Data Security Measures

Yes918 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL encryption for all data transmitted between your device and our servers.
• Stored data encryption using AES-256 algorithm for all sensitive information.
• Two-factor authentication (2FA) is available and recommended for all member accounts.
• 24/7 security monitoring by an experienced cybersecurity team.
• Periodic penetration testing conducted by independent security firms.
• Strict internal access controls — only authorised staff may access member data.
• Detailed incident response procedures to address any security breach swiftly.

7 Data Retention Period

Yes918 retains your personal data only for as long as necessary for the purposes stated in this policy or as required by applicable law. General retention period guidelines are as follows:

• Active Account Data: Retained for the duration your account remains active, plus an additional 5 years after account closure for compliance purposes.
• Transaction Records: Retained for a minimum of 7 years in line with financial reporting and anti-money laundering requirements.
• KYC Documents: Retained for 5 years after the date of last verification or account closure, whichever is later.
• Communication Logs: Retained for 2 years for dispute resolution and service quality control purposes.
• Cookie Data: Validity periods are set according to cookie type — ranging from the current session only to a maximum of 12 months.

Once the designated retention period has lapsed, your data will be securely deleted or anonymised so that it can no longer be linked to any individual.

8 Your Rights Under PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by yes918:

To exercise any of the above rights, please contact the yes918 customer support team via live chat or email. yes918 will process your request within 14 business days and provide a written response.

9 Child Data Protection

Yes918 does not accept registrations or data collection from individuals under 18 years of age. This platform is designed exclusively for adult users.

Should yes918 discover that personal data of a minor has been collected without our knowledge, we will take immediate action to delete that data and close the associated account. Parents or guardians who believe their child may have registered on our platform are urged to contact us immediately.

10 Amendments to This Privacy Policy

Yes918 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Whenever this policy is amended, the "Updated" date at the top of this page will be revised accordingly.

For amendments that materially affect how we use your personal data, yes918 will provide clearer notice via:

• In-account notifications when you log in to the platform.
• Email to the registered address at least 7 days before the amendment takes effect.
• Clear notices on the yes918 website homepage.

Continued use of the yes918 platform after the effective date of any amendments constitutes your acceptance of the revised policy. If you do not agree, please close your account before the effective date.

11 Contact Our Data Protection Officer

Yes918 has appointed a Data Protection Officer responsible for ensuring compliance with the PDPA and the platform's privacy policy. For any enquiries, concerns, or requests regarding your personal data, you may contact us via:

• Live Chat: The fastest way — available 24/7 directly within the yes918 platform.
• Email: [email protected] — dedicated to privacy and data protection enquiries.
• General Support: [email protected] — for general enquiries related to your account and services.
• FAQ: Visit FAQ page us for answers to common privacy questions.

Yes918 commits to responding to all privacy-related enquiries within 14 working days. For more urgent issues related to account security, please use live chat for an immediate response.