Official Policy

Yes365 Privacy Policy – Member Personal Data Protection

Yes365 is committed to protecting your privacy. Find out exactly how we collect, use, and safeguard your personal data.

Updated: January 2026 Applicable to users in Malaysia SSL 256-bit
Latest version: January 2026

1. Introduction

At yes365, we believe privacy is not merely a legal obligation — it is the foundation of trust between the platform and our members. This Privacy Policy clearly and thoroughly explains how yes365 collects, processes, stores, and protects your personal information every time you use our platform.

This document is drafted to comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practice standards for the online gaming industry. By registering for or continuing to use yes365 services, you agree to the collection and use of your information as described herein.

Our Commitment to You yes365 has never sold your personal data to third parties for marketing purposes. Every piece of information you provide is used solely to enhance your gaming experience and account security.

If you have any questions about how we manage your data, the yes365 privacy team can be reached by email at [email protected] or via the Live Chat function available 24/7 on the platform.

2. Personal Data We Collect

Yes365 collects various types of information to ensure the platform operates securely and delivers the best experience to every member. Below are the categories of data we collect:

Data Category Example Information Primary Purpose
Personal Identity Full name, date of birth, MyKad / passport number KYC verification & fraud prevention
Contact Information Email address, phone number, residential address Account communications & customer support
Financial Data Bank account number, bank name, transaction history Deposit & withdrawal processing
Technical Data IP address, device type, web browser, operating system Account security & fraud detection
Game Data Betting history, wins, session duration, favourite games Responsible gaming monitoring & personalisation
Communication Data Support chat records, emails, submitted complaints Service improvements & audit records
Minimum Data Collection Principle yes365 only collects data that is strictly necessary for the stated purposes. We do not collect sensitive information such as biometric data, medical records, or your political views.

3. How We Use Your Data

Every piece of information we collect is used responsibly and for legitimate purposes only. Here are the key ways we use your personal data:

  • Identity Verification (KYC): Ensuring every member is a real individual aged 21 and above, in accordance with Malaysian legal requirements.
  • Account Management: Allowing you to log in, manage your profile, change your password, and securely access your account history.
  • Transaction Processing: Verifying and processing fund deposits and withdrawals through local payment channels such as FPX, Touch 'n Go, DuitNow, and others.
  • Fraud Prevention: Monitoring suspicious activity, detecting unauthorised access attempts, and protecting your account from external exploitation.
  • Customer Support: Enabling our team to provide accurate and relevant assistance based on your account context.
  • Responsible Gaming: Monitoring gameplay patterns to identify early signs of problem gambling and provide appropriate support.
  • Legal Compliance: Fulfilling reporting obligations to the relevant authorities in accordance with applicable Malaysian law.
  • Platform Improvements: Analysing aggregated usage data (without identifying individuals) to improve platform performance, design, and features.
Direct Marketing yes365 may send you promotional information and bonus offers via email or in-app notifications. You may unsubscribe from marketing communications at any time by updating your notification settings in your account.

4. Data Storage & Encryption

Yes365 invests seriously in data security infrastructure to ensure your personal information is always protected at all times — both in transit and at rest.

  • 256-bit SSL Encryption: All data transmitted between your device and yes365 servers is encrypted using TLS 1.3 protocol with 256-bit keys — the same standard used by leading banking institutions.
  • Password Storage: Your account password is never stored in plain text. We use the bcrypt hashing algorithm with a random salt for every password.
  • Secure Server: Data is stored in certified data centres equipped with active DDoS protection, multi-layered firewalls, and 24/7 security monitoring.
  • Data Segregation: Financial data is separated from general profile data using a dedicated database architecture to minimise the risk of exposure.
  • Retention Period: Personal data is retained for the duration of the active account plus 7 years after account closure, in compliance with Malaysian legal requirements.
  • Restricted Access: Only authorised yes365 staff who have undergone background checks may access members' personal data — and only to the extent required to carry out their duties.
Data Backup & Recovery All yes365 data is automatically backed up daily to geographically separate server locations. Data recovery procedures are tested regularly to ensure continuity of service.

5. Sharing Data With Third Parties

Yes365 does not sell, rent, or disclose your personal data to any third party for their own marketing purposes. However, there are certain situations where limited data sharing is necessary:

  • Payment Service Providers: Transaction information is shared with approved payment processors (such as FPX, DuitNow, and eWallet providers) solely to complete your transactions.
  • Game Providers: Limited game session data is shared with game software providers (such as Pragmatic Play, Microgaming) to enable smooth gameplay.
  • Identity Verification Services: KYC information is shared with trusted third-party identity verification providers to authenticate your documents.
  • Legal Authorities: yes365 will disclose personal data when required by a court order, search warrant, or lawful request from a Malaysian law enforcement agency.
  • Business Transfer: In the event of a merger, acquisition, or sale of yes365 assets, your personal data may be transferred to the successor entity, and you will be notified accordingly.

All third parties we work with are bound by strict data protection agreements and are audited regularly to ensure compliance with yes365 privacy standards.

6. Cookies & Tracking Technologies

Yes365 uses cookies and similar tracking technologies to enhance your experience, maintain session security, and understand how our platform is used.

  • Necessary Cookies (Essential Cookies): These cookies are required for the platform's core functions — including login authentication, session management, and CSRF security. They cannot be disabled.
  • Performance Cookies: Collecting information on how you use the platform (pages visited, time spent, errors encountered) to help us improve the user experience.
  • Functional Cookies: Remembering your preferences such as language, display settings, and login details for your convenience.
  • Analytics Cookies: We use anonymised analytics tools to understand overall platform usage patterns without identifying individuals.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of the yes365 platform.

7. Your Rights Regarding Personal Data

As a yes365 member and an individual protected under Malaysia's Personal Data Protection Act 2010, you have the following rights:

Right of Access

Request a copy of all personal data we hold about you at any time.

Right to Rectification

Request correction of inaccurate or incomplete personal data held in our records.

Right to Erasure

Request the deletion of your personal data, subject to legally binding obligations applicable to us.

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

Receive your data in a structured, machine-readable format for transfer to another platform.

Right to Restrict Processing

Request that we restrict the processing of your data under certain circumstances provided by law.

How to Submit a Data Rights Request To exercise any of the above rights, contact our privacy team via email at [email protected] or via Live Chat on the platform. We will process your request within 30 business days and may require identity verification before taking action.

8. Children's Data Protection

Yes365 maintains a zero-tolerance policy against registration by underage individuals. Our platform is for adult members aged 21 years and above only. We do not knowingly collect any personal information from individuals who are underage.

  • All new accounts are required to complete age verification through a strict KYC process before gaining full access to the platform.
  • If we discover that personal data of an individual under the age of 21 has been collected inadvertently, that data will be deleted immediately and the account will be closed.
  • Parents or guardians who believe their child has registered an account at yes365 are urged to contact us immediately at [email protected] for prompt action.
Child Protection Warning Use of the yes365 platform by minors is strictly prohibited. Any attempt to bypass age verification will result in immediate account closure and reporting to the relevant authorities.

9. Changes to This Privacy Policy

Yes365 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. Whenever significant changes are made, we will:

  • Updating the "Last Updated" date shown at the top of this document.
  • Sending notifications to all active members via their registered email or in-platform notices.
  • In the event of highly material changes, we will request your renewed consent before the changes take effect.

We encourage you to review this Privacy Policy periodically. Your continued use of the yes365 platform after any changes take effect will be deemed acceptance of the latest version of the Privacy Policy.

10. Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the yes365 Data Protection Officer (DPO):

  • Privacy Email: [email protected] (responded within 3 business days)
  • General Support Email: [email protected]
  • Live Chat: Available 24/7 directly within the yes365 platform
  • Service Language: Bahasa Melayu and English

If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the provisions of PDPA 2010.

Why Your Privacy Is Safe at yes365

Military-Grade Encryption

Your data is protected with 256-bit SSL encryption and TLS 1.3 protocol — the same technology used by leading banks worldwide to secure financial transactions.

Advanced KYC

The yes365 identity verification process uses an integrated AI system that verifies documents in under 2 minutes, ensuring only genuine members gain access.

No Data Sales

Yes365 has never sold or rented your personal data to third-party advertisers or data brokers. Your information belongs to you — we are simply its custodian.

Malaysia PDPA Compliance

Yes365 operates in full compliance with Malaysia's Personal Data Protection Act 2010. We conduct regular data compliance audits to ensure the highest standards are maintained.

Analytics Data Anonymisation

Usage data analysed for platform improvements is always anonymised first — we look at overall patterns, not your individual activity.

Real-Time Security Notifications

Every new login, password change, or significant transaction will be notified to you directly via email and in-app notifications for your peace of mind.

FAQ – yes365 Privacy Policy

No. yes365 does not share your personal data with any other gaming platforms or third parties without your consent. Limited data sharing only occurs with payment service providers and identity verification providers who are bound by strict confidentiality agreements to process your transactions.

Yes, you may request data deletion via email at [email protected]. However, yes365 is required by Malaysian law to retain financial transaction records and KYC information for a minimum of 7 years after account closure. Data beyond those legal obligations will be deleted within 30 business days of receiving your request.

Once your account is closed, your data enters a mandatory retention period of 7 years in accordance with Malaysia's financial regulations. During this period, your data will not be used for any marketing or gaming purposes. After this period expires, all your personal data will be permanently deleted from our systems.

You may opt out of promotional emails at any time by clicking the "Unsubscribe" link at the bottom of any marketing email, or by updating your notification settings in your yes365 account under "Communication Preferences". Your request will be processed within 5 business days. Please note that account security and transaction-related emails cannot be disabled as they are essential for protecting your account.

yes365 does not store full credit or debit card numbers on our servers. All card transactions are processed directly through a PCI-DSS certified payment gateway. We only retain bank account information for withdrawal purposes (bank name, account holder name, and encrypted account number) to enable fast and secure fund transfers to you.

Ready to Play Safe & Trusted?

Join millions of yes365 members who have enjoyed a safe, fair, and exciting gaming experience. Your privacy has been our priority from day one.

Bahasa Melayu