Privacy Policy ye55 — Our Commitment to Protecting Player Data Malaysia

1Introduction & Scope of ye55's Privacy Policy

This Privacy Policy is published by ye55 ("we", "the platform", or "ye55") and applies to all users who access or use the ye55 online casino platform via ye55.best or any of our other official channels. This document clearly outlines ye55's commitment to protecting your personal data as a user of our platform in Malaysia.

Ye55 takes its responsibilities as a data controller seriously. This means we determine the purposes and means by which your personal data is collected and processed — and we are accountable for ensuring that all processing is carried out in accordance with applicable law, specifically Malaysia's Personal Data Protection Act 2010 (PDPA).

This Privacy Policy should be read in conjunction with ye55's Terms & Conditions, which form part of the overall agreement between you and our platform. By registering a ye55 account, you confirm that you have read and understood this Privacy Policy and agree to the way we handle your personal data as described herein.

2Types of Personal Data We Collect

Ye55 collects your personal data through several channels — directly from you during registration and platform use, automatically via tracking technologies as you browse our website, and in certain cases, from legitimate third-party sources for verification purposes.

Data you provide directly to ye55:

• Personal Identification Information: Full name, MyKad or passport number, date of birth, gender — collected during registration and the KYC process.
• Contact Information: Email address, Malaysian mobile number, and current residential address — for communication and account verification purposes.
• Financial Information: Your e-wallet account number (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) or FPX details (Maybank2u, CIMB Clicks) used for deposits and withdrawals — stored in encrypted format.
• KYC Verification Documents: A copy of your MyKad or passport, along with proof of address (a recent utility bill or bank statement), submitted for the identity verification process.
• Communications: Live chat conversation records, emails you have sent to our support team, and any feedback or complaints you have submitted.

Data collected automatically when you use the ye55 platform:

• Platform Usage Data: Games played, bet amounts, wins and losses, session dates and times, bonuses used — for account administration and fraud detection purposes.
• Technical Data: IP address, device type, operating system, browser type, screen resolution, and network data — to optimise the platform experience and detect suspicious access.
• Cookie Data: Session information, language preferences, and usage analytics data — to improve the functionality and usability of the ye55 platform (see section 6 for further details).

3How We Use Your Personal Data

Ye55 uses the personal data we collect solely for lawful, necessary purposes that are directly related to the provision of our online casino platform services. The following are the primary purposes for which data is processed at ye55:

• Account Opening and Management: Processing your registration, verifying your identity through the KYC process, managing account settings, and providing secure access to the ye55 platform.
• Financial Transaction Processing: Processes deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX; processes withdrawals to verified payment methods; and maintains complete transaction records in Malaysian Ringgit (MYR).
• Gaming Service Provision: Managing your gaming sessions, recording betting history, coordinating bonuses and promotions you are eligible for, and managing your VIP programme membership.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering (AML), unauthorised access, and any misuse of the platform — these are legal obligations we cannot disregard.
• Customer Support: Providing technical support and customer service, processing complaints, and resolving disputes related to your account or transactions.
• Service Communications: Sending important account-related notifications — including deposit confirmations, withdrawal updates, password changes, and security alerts. This is separate from marketing communications, which you may opt out of at any time.
• Legal Compliance: Fulfilling reporting obligations to regulators, tax authorities, and Malaysian law enforcement bodies where required by law.
• Platform Improvements: Analysing usage patterns in aggregate (without identifying individuals) to improve the user experience, identify technical issues, and develop new features.

If ye55 wishes to use your data for a new purpose not stated above and incompatible with the original purpose of collection, we will seek your consent before proceeding with such processing.

4Sharing Your Data with Third Parties

Ye55 does not sell your personal data to any third party. However, in the course of operating the platform, there are situations where we need to share your data with certain parties for legitimate and necessary purposes. The circumstances are as follows:

All third parties with whom we share data are bound by data processing agreements that require them to protect your data to a standard equal to or higher than that of ye55. ye55 is responsible for ensuring that all processing carried out by third parties on our behalf complies with applicable data protection laws.

5Data Protection Measures at ye55

Ye55 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The key protective measures we have in place are as follows:

• Data Encryption in Transit: All communications between your device and ye55's servers use TLS 1.2 or above with 256-bit SSL certificates — meaning no third party can intercept or read your data in transit.
• Data Encryption at Rest: Sensitive data such as financial information and KYC documents is stored in encrypted format on our servers — even in the event of a physical breach, your data cannot be read without the appropriate encryption key.
• Internal Access Controls: Only ye55 staff with a legitimate business need and who have undergone appropriate background checks are permitted to access user data — strictly on a need-to-know basis.
• 24/7 Security Monitoring: An automated monitoring system continuously tracks all platform activity and data access to detect suspicious patterns or intrusion attempts, and alerts our security team immediately.
• Regular Security Testing: ye55 conducts regular vulnerability assessments and penetration testing by independent cybersecurity experts to identify and address any system weaknesses before they can be exploited.
• Incident Response Procedures: ye55 has a clearly defined and well-practised incident response procedure to handle any data breaches swiftly and effectively — including notification procedures for affected users and the relevant authorities where required by law.

While ye55 takes all reasonable steps to protect your data, no security system can guarantee complete protection under all circumstances. You also play an important role in keeping your data safe — always use a strong, unique password for your ye55 account and never share your login credentials with anyone.

6Cookies, Tracking Technologies & Your Choices

Ye55 uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and help us understand how players interact with our website. The following are the types of cookies we use:

Cookies categorised as "Essential" cannot be disabled, as they are required for the core functions of the ye55 platform. For analytics and functional cookies, you can manage your preferences through your web browser settings. Please note that disabling certain cookies may affect your experience on the platform.

7Children's Data Protection

The ye55 platform is strictly for individuals aged 18 and above. ye55 does not knowingly collect, store, or process the personal data of anyone under the age of 18.

Ye55 applies age verification measures during the registration and KYC process to ensure that only adults are able to use our platform. If we discover that a user under the age of 18 has successfully registered an account, we will immediately close the account, delete all associated data, and where appropriate, report the matter to the relevant authorities.

8Cross-Border Data Transfers

Ye55 operates primarily for the Malaysian market and prioritises processing data within environments that comply with Malaysian law. However, in the course of running the platform, there are situations where your data may be transferred to or processed outside of Malaysia — for example, when our international game providers or technology infrastructure providers operate in other countries.

In all cross-border data transfer situations, ye55 ensures that:

• Transfers are only made to countries or entities that provide a level of data protection equivalent to or greater than that required under Malaysia's PDPA.
• Legally binding data transfer agreements are established to ensure your data is protected to the appropriate standards.
• Data transfers only occur when strictly necessary for the delivery of services you use on the ye55 platform.

You may contact us at support@ye55.best to find out more about the cross-border data transfer mechanisms we use for specific use cases.

9Your Rights Under Malaysia's PDPA

As a ye55 user who is a Malaysian citizen or resident, you are entitled to rights guaranteed under the Personal Data Protection Act 2010 (PDPA). ye55 is committed to making it easy for you to exercise these rights:

• Right of Access: You have the right to request and receive a copy of the personal data we hold about you. ye55 will provide this information in a readable format within 21 business days of receiving a valid request.
• Right to Rectification: If you find that the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. ye55 will update the information within a reasonable timeframe once the accuracy of the correction has been verified.
• Right to Erasure (Right to be Forgotten): Under certain circumstances, you have the right to request that we delete your personal data — for example, if the data is no longer needed for the purpose it was originally collected. However, this right is subject to legal record-keeping obligations that require us to retain certain records for a minimum period as prescribed by Malaysian law.
• Right to Object to Processing: You may object to the processing of your data for direct marketing purposes at any time — we will cease such processing immediately upon receiving your valid request.
• Right to Withdraw Consent: Where the processing of your data is based on your consent, you have the right to withdraw that consent at any time — however, withdrawal does not affect the validity of any processing that took place prior to it.

To exercise any of the rights above, please contact us by email at support@ye55.best with the subject line "Personal Data Rights Request" and clearly state the nature of your request. ye55 may require identity verification before processing your request to ensure your data is not disclosed to unauthorised parties.

10Data Retention Period

Ye55 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable laws and regulations. Our key data retention schedule is as follows:

• Active Account Data: Retained for the duration of your active account on the ye55 platform, plus any minimum period required by law following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date in line with Malaysia's tax and AML legal requirements — this includes records of deposits, withdrawals, bonuses, and winnings in MYR.
• KYC Documents: Retained for a minimum of 5 years after account closure or the date of the last business transaction between you and ye55, in accordance with Malaysia's AML legal requirements.
• Support Communication Records: Retained for 2 years after the closure of the relevant support ticket — useful as a reference in the event of disputes or follow-up complaints.
• Technical Log Data: Retained for 90 days to support security monitoring, fraud detection, and technical troubleshooting.
• Closed Account Data: Once the minimum legally mandated retention period has expired, data belonging to closed accounts will be anonymised or securely deleted.

11Amendments to the ye55 Privacy Policy

Ye55 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, developments in Malaysian data protection law, or changes to the services we offer. The date of the most recent amendment is always clearly stated at the top of this document.

For material changes to how we process your data, ye55 will provide reasonable advance notice — at least 30 days before the changes take effect — via email to your registered address and/or through a prominent notification within your ye55 platform.

For minor changes or editorial corrections that do not materially affect your rights, ye55 may update this policy without providing separate notice — however, the update date at the top of this page will always be kept current for your reference.

12Contact Us About Data Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ye55 handles your personal data, please do not hesitate to reach us through any of the following channels:

• Privacy Email: support@ye55.best — use the subject line "Data Privacy" to ensure your request is routed to the appropriate team.
• Live Chat: Available 24/7 within the ye55 platform in Bahasa Melayu — for general enquiries about our privacy policy or to report any data security concerns promptly.

Ye55 will endeavour to respond to all privacy-related enquiries within 3 business days. For formal data rights requests (access, rectification, erasure), please allow up to 21 business days for processing as stipulated by Malaysia's PDPA.

We value the trust you place in ye55 and are committed to maintaining the highest standards of privacy protection for all users of our platform in Malaysia.