yes666 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how yes666 ("we", "us", "our", "the Platform") collects, processes, stores, and shares personal data relating to individuals who visit the yes666 website at yes666.one, register as members, or otherwise interact with the yes666 platform and its services ("you", "the User").

yes666 is committed to protecting the privacy and security of all Users. We process personal data in accordance with applicable data protection legislation and this Policy. By creating a yes666 account or using the Platform in any capacity, you acknowledge that you have read and understood this Policy and agree to the processing of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions, which govern your use of the yes666 Platform generally. In the event of any inconsistency between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail.

2. Data Controller

For the purposes of applicable data protection law, yes666 acts as the data controller in respect of personal data collected and processed through the Platform. As the data controller, yes666 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable law.

If you have any questions or concerns about how yes666 processes your personal data, or wish to exercise any of your data protection rights, please contact us using the details provided in Section 14 of this Policy.

3. Data We Collect

yes666 collects personal data in the following categories:

3.1 Registration & Account Data

• Full legal name, date of birth, and nationality;
• Residential address (including city, state, and postcode);
• Email address and mobile phone number;
• Username and encrypted account password;
• Preferred language and currency (MYR).

3.2 Identity Verification (KYC) Data

• Government-issued identification documents (e.g., Malaysian MyKad, passport);
• Proof of address documentation (e.g., utility bill, bank statement);
• Selfie or biometric verification data where required by compliance procedures.

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records;
• Payment method details (e-wallet account identifiers, bank account details where applicable);
• Account balance and transaction history;
• Bonus claim and wagering activity records.

3.4 Gaming Activity Data

• Game session logs, bet history, and game outcome records;
• Game preferences and product usage patterns;
• Sports betting selections and live betting activity.

3.5 Technical & Device Data

• IP address and geolocation data;
• Device type, operating system, browser type and version;
• Cookie identifiers and session tokens;
• Platform access logs including login timestamps and session duration.

3.6 Communications Data

• Records of your correspondence with yes666 customer support;
• Feedback, survey responses, and complaint records;
• Live chat transcripts and email correspondence.

4. How We Use Your Data

yes666 processes your personal data for the following purposes:

• Account administration: Creating, maintaining, and managing your yes666 member account;
• Service delivery: Providing access to casino games, sports betting, payments, and all Platform features;
• Identity verification & KYC: Verifying your identity and age (21+) in compliance with applicable anti-money laundering and responsible gaming regulations;
• Payment processing: Processing deposits and withdrawals via supported Malaysian payment methods including Touch 'n Go eWallet, Boost, DuitNow, FPX, and banking partners;
• Fraud prevention & security: Detecting, preventing, and investigating fraud, money laundering, abuse, and other illegal activities;
• Regulatory compliance: Fulfilling our obligations under applicable gaming authority regulations, anti-money laundering laws, and data protection legislation;
• Personalisation: Tailoring game recommendations, promotions, and Platform content to your preferences and activity;
• Marketing communications: Sending promotional offers, bonus notifications, and product updates to members who have consented to receive such communications;
• Customer support: Responding to your queries, complaints, and support requests;
• Responsible gaming: Monitoring gaming behaviour to identify potential problem gambling indicators and applying responsible gaming interventions where appropriate;
• Platform improvement: Analysing usage data to improve the performance, design, and features of the yes666 Platform.

5. Legal Basis for Processing

yes666 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the services you have requested and to fulfil our obligations under the Terms & Conditions;
• Legal obligation: Processing required for compliance with applicable laws, including KYC, anti-money laundering obligations, and gaming authority regulations;
• Legitimate interests: Processing for fraud prevention, platform security, service improvement, and responsible gaming monitoring, where such interests are not overridden by your rights and interests;
• Consent: Processing for direct marketing communications, where you have given explicit consent. You may withdraw consent at any time by updating your account notification preferences or contacting support.

6. Data Sharing & Disclosure

yes666 does not sell, rent, or commercially trade your personal data to third parties. We may share your data only in the following limited circumstances:

• Service providers: Third-party vendors who process data on our behalf (e.g., payment processors, KYC verification providers, cloud hosting partners, customer support platforms). All such providers are bound by data processing agreements requiring them to protect your data;
• Game providers: Game software providers (e.g., Pragmatic Play, PG Soft) may receive anonymised session and technical data necessary to deliver game content. No directly identifiable personal data is shared with game providers beyond what is technically required;
• Regulatory authorities: We may be required to disclose data to gaming regulators, financial intelligence units, law enforcement agencies, or courts where required by applicable law or valid legal order;
• Business transfers: In the event of a merger, acquisition, or sale of all or part of yes666's business, personal data may be transferred as part of that transaction, subject to equivalent data protection commitments;
• Fraud prevention: We may share data with anti-fraud networks and identity verification agencies to protect the integrity of the Platform and all users.

7. Cookies & Tracking Technologies

yes666 uses cookies and similar tracking technologies to improve your experience on the Platform. Cookies are small text files stored on your device that help us recognise returning users, remember preferences, and analyse Platform usage.

We use the following categories of cookies:

• Essential cookies: Required for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without impacting Platform functionality;
• Functional cookies: Remember your language preferences, display settings, and login state;
• Analytics cookies: Collect anonymised data about how users navigate the Platform, which pages are most visited, and how sessions flow. This helps us improve the yes666 experience;
• Marketing cookies: Track your interactions with yes666 promotions and may be used to show you relevant offers within the Platform.

You can manage cookie preferences through your browser settings. Disabling essential cookies may impair your ability to use the yes666 Platform.

8. Data Retention

yes666 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to longer retention periods required by law. Specifically:

• Active accounts: Data is retained for the duration of your yes666 membership and for a minimum of five (5) years following account closure, in compliance with anti-money laundering and gaming authority record-keeping requirements;
• KYC documents: Retained for a minimum of five (5) years following the end of the business relationship;
• Transaction records: Retained for a minimum of seven (7) years for financial regulatory compliance purposes;
• Support communications: Retained for three (3) years from the date of the last interaction;
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter as evidence of compliance.

Upon expiry of the applicable retention period, data will be securely deleted or anonymised.

9. Data Security

yes666 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the yes666 Platform;
• Encrypted storage of sensitive personal data and authentication credentials;
• Access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security assessments and vulnerability testing of the Platform infrastructure;
• Two-factor authentication (2FA) available to members for additional account protection;
• Anomaly detection systems to identify and respond to suspicious login activity.

While we take all reasonable precautions, no data transmission or storage system is entirely secure. In the unlikely event of a data breach affecting your rights and freedoms, yes666 will notify affected users and relevant authorities in accordance with applicable law.

10. Your Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data held by yes666:

• Right of access: You may request a copy of the personal data yes666 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data in certain circumstances, subject to legal retention obligations;
• Right to restriction: You may request that we restrict the processing of your data in certain circumstances;
• Right to data portability: You may request a copy of your data in a structured, machine-readable format;
• Right to object: You may object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the yes666 support team. We will respond to all valid requests within 30 days. Some rights may be limited where the data is required for legal or regulatory compliance purposes.

11. International Data Transfers

yes666 primarily serves users in Malaysia. Some of our service providers and technical infrastructure may be located in other countries. Where personal data is transferred outside Malaysia, yes666 ensures that appropriate safeguards are in place — including contractual protections and data processing agreements — to ensure your data receives an equivalent level of protection to that provided under applicable Malaysian and international data protection standards.

12. Children's Privacy

The yes666 Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. If we become aware that we have inadvertently collected data from an underage individual, we will immediately suspend the associated account, delete all personal data collected, and forfeit any associated balances. Parents or guardians who believe that a minor has accessed the yes666 Platform should contact us immediately at the details in Section 14.

13. Changes to This Policy

yes666 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will provide reasonable advance notice via the Platform or by email to your registered address. The "Last updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the yes666 Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by yes666, please contact our support team:

• Live chat: Available 24/7 directly on the yes666 Platform (English and Bahasa Malaysia);
• Email: [email protected] (plain text — not a clickable link).

We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them within 30 calendar days. For complaints that remain unresolved, you may refer the matter to the relevant data protection authority or gaming regulatory body applicable to your jurisdiction.