Privacy Policy yes33 —
Malaysia Player Data Protection

This Privacy Policy explains how yes33 ("us", "Platform", or "yes33.pro") collects, uses, discloses, and protects your personal information when you use our website and services. We operate on principles of transparency and accountability in all aspects of data handling.

By registering or using the yes33 platform, you agree to the collection and use of your information as described in this Privacy Policy. This policy should be read together with the Terms and Conditions and the Responsible Gaming us.

Yes33 collects various types of information to enable us to provide a secure, personalised, and high-quality service to every player. The following are the categories of information we collect:

Collected information is used responsibly and only for legitimate purposes. yes33 uses your data for the following:

• Verify your identity and securely process new account registrations through a transparent KYC process.
• Process your deposits, withdrawals, and all financial transactions accurately and securely.
• Personalise your gaming experience — including relevant game recommendations based on your preferences.
• Send important account-related notifications such as transaction confirmations, security updates, and bonus alerts.
• Monitor account activity to detect and prevent fraud, money laundering, and platform abuse.
• Ensure compliance with responsible gaming requirements, including monitoring for concerning wagering patterns.
• Continuously improve the performance, usability, and security of the yes33 platform.
• Comply with applicable legal and regulatory obligations in Malaysia.

Yes33 does not sell player personal data to any party. However, in certain limited and lawful circumstances, we may share your information with the following parties:

• Payment Service Provider: Financial information required to process deposits and withdrawals is shared with approved payment providers such as DuitNow, FPX, and e-wallet providers integrated with our platform.
• Identity Verification Provider: KYC information is shared with trusted third-party identity verification services for the purpose of authenticating your documents.
• Regulatory Authority: yes33 will disclose information as required by Malaysian law, including upon valid requests from law enforcement agencies or court tribunals.
• Technical Service Provider: Technical partners who assist in operating the platform (such as cloud services and infrastructure providers) are bound by strict confidentiality agreements and are prohibited from using your data for any other purpose.
• Game Provider: Minimum technical information necessary to provide access to games may be shared with licensed game providers integrated with yes33.

Yes33 uses cookies and similar tracking technologies to enhance user experience and platform security. The following are the types of cookies used:

• Essential Cookies: These cookies are required for the platform's core functions, such as login authentication and session security. They cannot be disabled as the platform will not operate properly without them.
• Performance Cookies: Gather information on how players use the platform — including the most frequently visited pages and any error messages — to help us improve the user experience.
• Functional Cookies: Save user preferences such as language, display settings, and personal preferences so you do not need to reset them each time you log in.
• Analytics Cookies: Help us understand platform usage patterns in an aggregated and anonymised manner for the continuous improvement of yes33 services.

You can manage your cookie settings through your web browser settings at any time. However, disabling essential cookies may affect platform functionality.

Yes33 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law.

• Active account data is retained for the duration your account is active and for 5 years following account termination for legal compliance purposes.
• Financial transaction records are retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements.
• Customer support communication logs are retained for 3 years for reference and dispute resolution purposes.
• Technical data and security logs are retained for 12 months for security incident investigation purposes.
• Once the retention period expires, data will be securely deleted or anonymised in accordance with yes33's standard procedures.

As a yes33 player, you have the following rights regarding your personal data. We are committed to processing all privacy rights requests within 30 business days:

Yes33 implements a comprehensive range of technical and organisational security measures to protect your personal data from unauthorised access, loss, or misuse:

• All data in transit is protected with TLS 1.3 protocol and 256-bit SSL encryption — the same standard used by Malaysia's leading commercial banks.
• Data stored in our databases is encrypted using the AES-256 algorithm with strict key management and regular audits.
• Access to player data in our internal systems follows the principle of least privilege — only staff who genuinely need access to perform their duties are permitted.
• All yes33 staff who handle player data undergo comprehensive data security training and sign binding confidentiality agreements.
• Our systems undergo regular penetration testing by independent security experts to identify and address vulnerabilities before they can be exploited.
• We store encrypted data backups at geographically separate locations to ensure service continuity and disaster recovery.

The yes33 platform is integrated with several third-party services required for operations, including licensed game providers and approved payment processors. However, this Privacy Policy applies solely to the yes33 platform itself.

• Yes33 is not responsible for the privacy practices of third-party services accessed through our platform. Please review their respective privacy policies before using their services.
• Payment providers such as DuitNow, FPX, Touch 'n Go eWallet, and GrabPay have their own privacy policies governing how they handle your transaction information.
• Game providers that supply slots, live casino, and other game content may collect minimum technical data required to deliver the games — this is subject to each provider's own terms.

Yes33 is an adult entertainment platform that strictly prohibits individuals under the age of 18 from using our services. We take the protection of minors extremely seriously.

• Yes33 does not intentionally collect or store any personal information from individuals under the age of 18.
• If we discover that personal data of an individual under the age of 18 has been collected, we will promptly delete that data and terminate the account in question.
• Parents or guardians who believe their child has registered an account at yes33 are requested to contact our support team immediately for prompt action to be taken.

Yes33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. We are committed to informing you of any significant changes.

• Any significant amendments will be notified to players via their registered email or in-account notice at least 7 days before the changes take effect.
• The "Last Updated" date at the top of this page will be revised each time an amendment is made.
• Continued use of the yes33 platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy.
• Previous versions of this Privacy Policy are kept in our archives and can be requested through our customer support team.

If you have any questions, concerns, or wish to submit a request relating to your privacy rights, the yes33 team is ready to assist you at any time.

• For general privacy enquiries, contact our customer support team via Live Chat available 24/7 on the yes33 platform.
• For formal requests regarding data rights (access, correction, deletion), please state "Data Privacy Request" in your message so it can be routed to the correct team.
• We are committed to responding to all privacy-related enquiries within 3 working days and formal data rights requests within 30 working days.
• Email address for privacy enquiries: [email protected] — please use your registered email to speed up the verification process.