Official Documents

Privacy Policy yes2 — Member Personal Data Protection

Yes2 is committed to protecting the privacy and data security of every member. This Privacy Policy transparently explains how we collect, use, store, and protect your information when you use the yes2 platform.

Updated: 1 January 2026 256-bit SSL Malay

Yes2's Six Data Protection Principles

Your privacy is not merely a legal obligation to us — it is a responsibility we take seriously in every operational decision made on the platform.

End-to-End Data Encryption

All your personal and financial data is encrypted using 256-bit SSL technology at all times. Information transmitted between your device and yes2 servers cannot be read by any unauthorized third party.

Minimum Data Collection

Yes2 only collects data that is genuinely necessary to provide the services you use. We do not collect irrelevant or excessive information, in line with the principle of data minimization.

Full Control in Your Hands

You have the right to access, correct, download, or request deletion of your personal data at any time. The yes2 privacy team will process each request within the stipulated timeframe.

No Sale of Data to Third Parties

Yes2 does not sell, rent, or trade members' personal data to any third party for marketing purposes without your consent. Your data belongs to you, not to us as a business commodity.

Strict Internal Access Controls

Only yes2 staff with a legitimate business need are permitted to access member personal data. All access is logged and audited regularly to ensure no misuse occurs.

Regular Reviews & Updates

The yes2 Privacy Policy is reviewed and updated periodically to ensure it remains relevant to technological developments, legislative changes, and the latest best practices in data protection.


This Privacy Policy describes yes2's data handling practices and applies to all members using the yes2 platform. By registering or continuing to use our platform, you agree to the terms of this Privacy Policy. Please read this document carefully.

1 Introduction & Scope of Privacy Policy

Yes2 ("we", "the yes2 platform") takes seriously our responsibility as the controller of our members' personal data. This Privacy Policy is prepared in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards for the protection of personal information.

This policy applies to all personal information collected by yes2 through our online platform, mobile app, customer support channels, and any other point of contact between you and yes2. It also applies to data collected from authorised third parties for identity verification (KYC) and fraud prevention purposes.

If you have any concerns about how yes2 handles your personal data, you may contact our privacy team using the contact information provided at the end of this document. We are committed to responding to every enquiry transparently and promptly.

2 Types of Personal Data Collected

Yes2 collects various categories of personal data depending on the type of services you use. The following is a summary of the types of data we collect:

Data Category Example Information Primary Purpose
Identity Information Full name, date of birth, identification card number KYC verification, account registration
Contact Information Email address, phone number Communications, account notifications
Financial Information Bank account number, bank name, transaction history Processing deposits and withdrawals
Technical Data IP address, device type, web browser, operating system Security, fraud detection
Usage Data Gaming history, game preferences, session duration Service improvements, responsible gaming
Supporting Documents Copy of identification card, bank statement (if requested) AML/KYC Compliance

Yes2 does not collect sensitive data categories such as medical records, biometric information, or political affiliations unless there is a specific legal requirement compelling us to do so.

3 How yes2 Uses Your Personal Data

The personal data we collect is used solely for legitimate and transparent purposes. The following are the primary purposes for which yes2 uses your data:

  • Account Management: Creating, verifying and maintaining your yes2 account, including the KYC process required by law.
  • Transaction Processing: Processing deposits, withdrawals and any other financial transactions you carry out through the platform.
  • Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering and any misuse of the platform.
  • Service Communications: Sending important account-related notifications, security updates and customer support responses.
  • Responsible Gaming: Monitoring gaming habits to identify signs of potential problems and provide appropriate support.
  • Platform Improvements: Analysing aggregate usage data to improve user experience and our services.
  • Legal Compliance: Fulfilling reporting and compliance obligations to the relevant regulatory authorities.

Yes2 will not use your data for any other purpose not stated above without first obtaining your consent.

4 Data Sharing & Disclosure

Yes2 does not sell or trade your personal data. However, there are limited situations where we may need to share your data with certain third parties:

  • Payment Processors: Verified payment service providers enabling deposit and withdrawal transactions to be processed securely.
  • KYC Verification Providers: Third-party identity verification services that help us meet legal compliance requirements.
  • Technology Providers: Software and infrastructure companies supporting the technical operations of the yes2 platform, bound by strict confidentiality agreements.
  • Legal Authorities: Law enforcement agencies or regulatory bodies when required by law or court order.

All third parties receiving yes2 data are bound by strict data processing agreements and must comply with data protection standards equal to or exceeding yes2's own standards.

5 Data Security Measures

Yes2 continuously invests in security infrastructure to ensure your personal data remains safe. The technical and organizational measures we implement include:

  • 256-bit SSL/TLS encryption for all data transferred between your device and yes2 servers.
  • Passwords are stored using strong hashing algorithms — we do not store your password in plain text.
  • Two-factor authentication (2FA) is available and encouraged for all yes2 member accounts.
  • Round-the-clock security monitoring by the yes2 cybersecurity team to detect unusual activity.
  • Separating the production data environment from the testing environment to prevent exposure of real data.
  • Regular security audits by independent third parties to assess and strengthen the platform's security posture.
  • Role-based access control (RBAC) ensuring only authorised staff can access sensitive data.

That said, no security system can be guaranteed one hundred percent secure. In the event of a data security incident involving your information, yes2 will notify you within the timeframe required by applicable law.

6 Data Retention Period

Yes2 retains your personal data for as long as necessary to fulfill the purposes stated in this Privacy Policy, or as required by applicable law. The general principles of our data retention periods are as follows:

  • Active Account Data: Retained for the duration your account remains active and for a minimum of five (5) years following account closure to meet AML compliance requirements.
  • Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with applicable accounting and tax legal requirements.
  • Communication Logs: Retained for three (3) years for dispute resolution and service quality review purposes.
  • Technical & Log Data: Retained for twelve (12) months before being anonymised or automatically deleted.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in accordance with the data deletion procedures established by yes2.

7 Your Rights as a Data Owner

As a yes2 member, you have the following rights regarding the personal data we hold about you:

Right of Access

Requesting a copy of the personal data yes2 holds about you.

Right to Rectification

Correcting inaccurate or incomplete data.

Right to Erasure

Requesting the deletion of data that is no longer required.

Right to Portability

Receiving your data in a machine-readable format.

Right to Object

Objecting to data processing for direct marketing purposes.

Right to Restriction

Restricting data processing under certain circumstances.

To exercise any of the above rights, please contact the yes2 privacy team. We will process your request within thirty (30) calendar days from the date of receipt. Certain rights may be subject to specific legal limitations, which will be explained to you during the processing of your request.

8 Cookies, Tracking & Similar Technologies

Yes2 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The types of cookies we use are as follows:

  • Essential Cookies: Required for core platform functions such as login authentication and session management. These cookies cannot be disabled.
  • Performance Cookies: Collecting information on how you use the platform to help us improve performance and usability.
  • Functional Cookies: Saving your preferences such as preferred language and display settings for a more personalised experience.
  • Analytics Cookies: Helping us understand aggregate usage patterns for the continuous improvement of the yes2 platform.

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect the functionality of the yes2 platform. Continued use of the platform is considered your consent to the use of cookies as described.

9 Cross-Border Data Transfers

As a platform operating internationally, your personal data may be processed or stored on servers located outside Malaysia. yes2 ensures that any cross-border data transfer is carried out with adequate safeguards, including:

  • Transfers only to countries with a level of data protection equivalent to or higher than Malaysia.
  • Use of approved standard contractual clauses as a lawful transfer mechanism.
  • Binding data processing agreements with all vendors and partners involved in data transfers.

All cross-border data transfers by yes2 are carried out in accordance with Malaysia's PDPA requirements and relevant international standards to ensure your data remains protected regardless of where it is stored.

10 Child Protection

The yes2 platform is intended exclusively for adults aged 18 and above. yes2 does not knowingly collect or process personal data of minors. If you have reason to believe that someone under the age of 18 has provided personal data to yes2, please contact us immediately.

Once verified, yes2 will take immediate steps to delete the relevant data and close any associated accounts. yes2 also applies age verification during the registration process to minimize the risk of registration by underage individuals.

Parents and guardians are advised to monitor their children's internet usage and use appropriate parental control software to prevent unauthorised access to online gambling platforms.

11 Amendments to the Privacy Policy

Yes2 reserves the right to modify this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or technological developments. For any material amendments, we will:

  • Sending notifications to your registered email address at least seven (7) days before changes take effect.
  • Displaying clear notices on the yes2 platform homepage throughout the notice period.
  • Updating the "Last Updated" date at the top of this document.

Your continued use of the yes2 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. You are encouraged to review this page periodically to stay informed of how we handle your data.

12 How to Contact the yes2 Privacy Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or how yes2 handles your personal data, please contact us through the following channels:

  • Privacy Email: [email protected] — for specific inquiries related to personal data.
  • Live Support: 24/7 live chat is available on the yes2 platform for general inquiries.
  • Support Email: [email protected] — for complaints or requests to exercise data rights.
  • FAQ: Visit the FAQ us for answers to frequently asked questions related to privacy.

The yes2 privacy team is committed to responding to every enquiry within twenty-four (24) business hours. For formal data rights requests, please clearly state the type of request, your full name and registered email address to expedite the review process.

Yes2 is committed to resolving every privacy complaint fairly and transparently. If you are not satisfied with our response, you have the right to refer your complaint to the Personal Data Protection Commissioner of Malaysia.


Your Data is Safe, Your Games are Fun

Yes2 ensures your privacy is protected at every step. Register your account today and enjoy a safe, fair, and responsible online entertainment experience alongside millions of yes2 members in Malaysia.

Bahasa Melayu