Yes666 Privacy Policy — Data Security & Information Protection You

01Information We Collect

Yes666 collects personal information from you only when you interact with our platform — whether during account registration, the KYC process, financial transactions or day-to-day platform use. We only collect data that is genuinely necessary to provide a safe and seamless service.

Information collected during registration:

• Full name as per identity card or passport
• Identity card number (MyKad) or passport number
• An active, verifiable email address
• Mobile number registered in Malaysia
• Date of birth for age verification
• Account username and password (stored in an unreadable hashed format)

Information collected during the KYC process:

• Copy of ID card or passport (front and back)
• Proof of current address (utility bill or bank statement not older than 3 months)
• Selfie with identification card for facial verification (if required)
• Bank account information for fund withdrawal purposes

Automatically collected information:

• IP address and general location information (state/city)
• Device type, operating system, and web browser used
• Platform activity logs (login, wagering, deposits, withdrawals)
• Cookie and user session data for security purposes
• Mobile device information (phone model, OS version) for app users

02How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. yes666 does not use your data for unrelated purposes without your consent. Below is the complete list of how your data is used within our platform:

We do not use your data to make automated decisions that materially affect your rights without human oversight. Any significant decisions, such as account closures or withdrawal rejections, will be reviewed by our team before being carried out.

03Sharing Information with Third Parties

Yes666 does not sell, rent or disclose your personal data to third parties for marketing purposes. However, there are certain situations where data sharing is necessary and legally permissible:

• Payment processors: Our financial partners — including FPX, Touch 'n Go, GrabPay and Boost providers — receive only the transaction information necessary to process your deposits and withdrawals. They are bound by strict confidentiality agreements.
• KYC verification providers: Trusted third-party identity verification services are used to process document checks securely and efficiently.
• Legal Authority: yes666 will disclose required information to law enforcement agencies, courts or regulatory bodies when mandated by applicable Malaysian law.
• Independent audit: Appointed independent auditors may access data required for compliance and security audit purposes, subject to confidentiality agreements.
• Infrastructure service providers: Hosting and cloud infrastructure providers used by yes666 may process data on our behalf, but are not permitted to use it for their own purposes.

04Data Security & Encryption

Yes666 continuously invests in the latest security infrastructure to ensure your data is always kept in the most secure environment. Our security systems are designed to prevent unauthorised access, data breaches and cyberattacks.

05Cookies & Tracking Technologies

Yes666 uses cookies and similar tracking technologies to deliver a smooth, secure and personalised user experience. Cookies are small text files stored on your device when you visit our platform.

Types of cookies we use:

• Session Cookies (Required): Required to maintain your login session and ensure the platform functions correctly. Cannot be disabled without affecting core functionality.
• Preference Cookies: Saves your language, theme, and display preferences so you do not have to reconfigure them each time.
• Security Cookies: Used to detect suspicious login attempts, verify device identity, and prevent unauthorised access.
• Analytics Cookies (Anonymous): Helps us understand how players use the platform for continuous improvement purposes. This data is not linked to your personal identity.

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect platform functionality. The yes666 mobile app uses local storage methods similar to cookies for the same purposes.

06Your Rights as a yes666 Player

As a registered yes666 player, you have clear rights over your personal data. yes666 fully respects and facilitates the exercise of these rights. Here are your rights and how to exercise them:

To exercise any of the above rights, submit a written request to the yes666 compliance team via our support email. Include your account number and clearly state the details of your request. We will respond within 14 business days.

07Data Retention & Deletion

Yes666 only retains your personal data for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal requirements. Below are our data retention guidelines:

• Active account data: Retained for the duration of account activity and up to 7 years after account closure for financial compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years after a transaction occurs in accordance with Malaysian legal requirements.
• KYC Documents: Retained for the duration of account activity plus a 7-year period following account closure.
• Support communication logs: Retained for 3 years for dispute resolution purposes.
• Cookie and session data: Automatically deleted between 30 minutes and 12 months depending on the cookie type.
• Anonymous analytics data: May be retained longer as it contains no personally identifiable information.

Once the retention period expires, your data will be securely deleted using methods that meet industry security standards, or fully anonymised so it can no longer be linked to your identity.

08Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding yes666's privacy policy or how we handle your personal data, our compliance team is ready to assist you.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia in accordance with the Personal Data Protection Act 2010 (PDPA).