Yes77 Privacy Policy — Malaysia Player Data Protection

Yes77 collects your personal data only when there is a legitimate and clear need — whether to enable you to use the platform fully, meet legal compliance requirements, or enhance your gaming experience. We do not collect data beyond what is required for those purposes.

The categories of data we collect include:

We may also receive your information from legitimate third-party sources such as identity verification providers, payment service providers, and fraud prevention agencies — all within a strict data protection framework.

Every piece of data we collect has a clear and legitimate purpose. yes77 does not process your data for any purpose outside the defined scope without first obtaining additional consent from you. Here is how we use your information:

• Account Management: Creating, maintaining, and protecting your account, including all personal preference settings you have configured
• Transaction Processing: Verifying and processing deposits, withdrawals, and any financial activity you carry out on our platform
• Service Communications: Sending important notifications related to your account, security, promotions you have subscribed to, and service updates
• Legal Compliance: Meeting reporting obligations to relevant authorities regarding anti-money laundering (AML) and counter-terrorism financing (CFT)
• Fraud Prevention: Detecting and blocking suspicious activity, unauthorised access attempts, and multiple-account usage
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate intervention when necessary
• Service Improvement: Analysing usage patterns in aggregate and anonymised form to improve platform quality and user experience
• Customer Support: Enabling our support team to access the context needed to resolve your issues efficiently and accurately

Yes77 processes your personal data on the basis of one or more valid legal grounds. This ensures all our data processing complies with internationally recognised data protection principles. These grounds are:

• Contract Performance: Processing required to fulfil the terms of the agreement between you and yes77, including account management and financial transaction processing
• Legal Obligation: Processing required to comply with applicable laws, including KYC, AML, and financial reporting requirements to relevant authorities
• Legitimate Interests: Processing for fraud prevention, network security, service improvement, and responsible gaming monitoring — provided it does not override your fundamental rights
• Consent: For optional processing such as marketing communications and advanced analytics, we will obtain your explicit consent and allow you to withdraw that consent at any time.

Every data processing activity we carry out is documented in our internal processing activity records and reviewed periodically by our data protection officer to ensure ongoing compliance.

Yes77 does not sell, does not rent, and does not trade your personal data to any third party for marketing or commercial purposes. However, there are certain situations where we need to share your information with others to keep the platform operating securely and in compliance with the law:

• Payment Service Providers: FPX, DuitNow, TnG eWallet, GrabPay, and Boost receive only the minimum transaction information required to process your payment — they are bound by strict confidentiality agreements.
• Identity Verification Provider: Approved third-party KYC partners receive your identification documents for verification purposes only, and are not permitted to use that data for any other purpose
• Game Providers: Third-party game studios may receive anonymized player IDs for technical purposes — no personally identifiable information is shared directly
• Authority: yes77 will disclose required information when mandated by a court order, regulatory directive, or legitimate legal requirement
• Fraud Prevention Agency: In cases of suspected serious fraud, relevant information may be shared with the appropriate authorities to protect other players and the financial system.

The security of your personal data is yes77's highest technical priority. We consistently invest in security infrastructure to ensure your information is protected against unauthorised access, loss, destruction, or accidental disclosure.

The security measures we employ include:

• 256-bit SSL Encryption: All data transmitted between your device and yes77 servers is encrypted using TLS 1.3, the latest and most secure encryption protocol available today
• Stored Data Encryption: Sensitive data such as financial information and KYC documents are encrypted at rest using AES-256.
• Strict Access Controls: The principle of least privilege is applied — only staff who genuinely need access may view specific data categories, and all access is logged
• 24/7 Monitoring: Threat detection and anomaly monitoring systems operate continuously to detect and respond to any suspicious activity in real time
• Periodic Penetration Testing: Independent security assessments (penetration testing) are conducted periodically by certified third parties to identify and address system vulnerabilities before they can be exploited
• Data Backup: Encrypted data backups are performed on a regular basis and stored at geographically separate locations to ensure service continuity

While we take all reasonable precautions, no system can guarantee 100% absolute security. In the event of any data security incident affecting your information, we are committed to notifying you within 72 hours of confirming the incident.

Yes77 uses cookies and similar tracking technologies to ensure the platform functions correctly, enhance the user experience, and understand how players interact with our platform. There are several types of cookies we use:

Essential cookies cannot be disabled as they are required for the platform to function. Other cookies can be managed through your browser settings or the privacy settings panel in your account. Please note that disabling certain cookies may affect specific platform features.

As a yes77 platform user, you have certain rights regarding your personal data. yes77 respects and facilitates the exercise of these rights. The following are your key rights:

To exercise any of the rights above, contact our support team through the available channels on the platform. We will verify your identity before processing any request to ensure no other party can access or modify your data.

Yes77 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with legal obligations. When data is no longer needed, it will be securely deleted or anonymised.

Once the applicable retention period has ended, your data will be securely deleted using industry-recognized deletion methods, or fully anonymized so that it can no longer be personally linked to you.

Yes77 reserves the right to update or amend this privacy policy from time to time to reflect changes in our data handling practices, new legal requirements, or service improvements. We are committed to implementing these amendments transparently.

• Significant changes will be communicated via in-platform notifications and registered email at least 14 days before it takes effect
• The "Updated" date at the top of this page will always reflect the most current version of the policy
• Continued use of the platform after any amendments take effect constitutes your acceptance of the revised policy
• Previous versions of the privacy policy will be retained and can be requested by players who wish to compare the changes made

If you have any questions, concerns, or requests regarding this privacy policy or the handling of your personal data, our team is ready to assist. We encourage you to contact us directly before filing any formal complaint with a supervisory authority.

• Support Email: [email protected] — we will respond within 2 business days
• Live Chat: Available 24 hours a day, 7 days a week via the in-platform chat icon
• Response Time: Personal data requests will be resolved within 30 business days from the date of valid receipt
• Data Protection Officer: For inquiries related to data protection compliance, you may reach our officer via the same email with the subject line "DPO Request"

Yes77 values the trust you place in us. Every privacy inquiry will be handled with seriousness, full confidentiality, and within the specified timeframe. We are here to ensure you always feel secure and in control of your personal information.