yes666 Privacy Policy

1. Data Controller

yes666, operating the Platform at https://yes666.win, is the data controller responsible for the personal data processed under this Policy. yes666 determines the purposes and means of processing personal data collected through the Platform and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.

For all privacy-related queries and data subject requests, please contact yes666 via the contact details set out in Section 14 of this Policy.

2. Personal Data We Collect

yes666 collects the following categories of personal data from Players:

3. How We Collect Your Data

yes666 collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or updating your account profile.
• Automated collection: Technical and usage data collected automatically as you interact with the yes666 Platform, including through cookies, log files, and session tracking technologies.
• Third-party sources: Identity and address verification data from KYC and anti-fraud service providers; payment verification data from our payment processing partners; fraud detection signals from industry data-sharing schemes where applicable.

4. Purposes & Legal Bases for Processing

yes666 processes your personal data for the following purposes, each underpinned by a lawful basis:

• Account management & contract performance: To create and maintain your yes666 account, process deposits and withdrawals, and deliver the gaming services you have contracted for.
• KYC & regulatory compliance: To verify your identity and age (21+), comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations, and meet yes666's obligations to its licensing authority.
• Fraud prevention & platform integrity: To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, collusion, and other prohibited conduct on the yes666 Platform.
• Responsible gaming: To monitor for indicators of problem gambling, enforce deposit limits and self-exclusion requests, and fulfil yes666's responsible gaming obligations.
• Customer support: To respond to and resolve your support queries, complaints, and account-related requests.
• Marketing communications: To send promotional offers, bonus notifications, and relevant updates to Players who have opted in to marketing communications. You may withdraw consent at any time by updating your notification preferences in your yes666 account settings.
• Platform analytics & improvement: To analyse aggregated usage data to improve the yes666 Platform, game selection, and user experience.

5. Cookies & Tracking Technologies

yes666 uses cookies and similar tracking technologies on the Platform. Cookies are small data files stored on your device that help yes666 recognise returning Players, maintain session security, and collect usage analytics. The main categories of cookies used on yes666 include:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens and security cookies. These cannot be disabled without rendering the Platform inoperable.
• Functional cookies: Enable the Platform to remember your preferences, such as language settings and display options.
• Analytics cookies: Collect aggregated, anonymised data about how Players use the Platform to enable yes666 to identify usage patterns, diagnose technical issues, and improve platform performance.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the yes666 Platform, including login and gaming functionality.

6. Disclosure of Personal Data

yes666 does not sell, rent, or trade your personal data to third parties for marketing purposes. yes666 may disclose your personal data to the following categories of recipients, strictly on a need-to-know basis:

• KYC & identity verification providers: To verify your identity, age, and payment method ownership as required by yes666's compliance obligations.
• Payment processors: Including e-wallet operators (Touch n Go, Boost) and banks (Maybank, CIMB, Public Bank) to process deposits and withdrawals on your behalf.
• Game providers: Limited technical data (e.g., session tokens) may be shared with third-party game providers to enable game delivery on the yes666 Platform. Game providers are bound by data processing agreements prohibiting use of data beyond game delivery.
• Fraud prevention & analytics services: Aggregated or pseudonymised data may be shared with fraud detection partners to protect Platform integrity.
• Regulatory & law enforcement authorities: Where required by applicable law, regulatory directive, or lawful court order. yes666 will notify affected Players of such disclosures to the extent permitted by law.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of yes666's assets, your personal data may be transferred to the relevant successor entity, subject to equivalent data protection commitments.

7. International Data Transfers

As an online platform serving Malaysian players, yes666 may process or store certain personal data on servers located outside Malaysia. Where such transfers occur, yes666 ensures that appropriate safeguards are in place — including contractual data protection clauses consistent with recognised international standards — to protect your personal data to a standard at least equivalent to that applicable within Malaysia.

8. Data Retention

yes666 retains personal data for the period necessary to fulfil the purposes described in this Policy, including:

• Account and transaction data: for the duration of account activity plus a minimum of 5 years following account closure, to meet AML and regulatory record-keeping obligations.
• KYC documentation: for the period required by applicable licensing and AML regulations.
• Support communications: for up to 3 years following resolution, to assist with dispute resolution.
• Analytics data: in aggregated and anonymised form, indefinitely.

Upon expiry of applicable retention periods, yes666 will securely delete or anonymise personal data in accordance with its data management procedures.

9. Data Security

yes666 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the yes666 Platform;
• Cryptographic hashing of account passwords — yes666 staff cannot access your password in readable form;
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need;
• Regular security assessments and penetration testing of Platform infrastructure;
• Automated fraud detection and anomalous login monitoring systems.

No data transmission or storage system can be guaranteed to be 100% secure. In the unlikely event of a data breach affecting your rights and freedoms, yes666 will notify affected Players in accordance with its obligations under applicable data protection law.

10. Your Rights

Subject to applicable law, you may have the following rights in respect of personal data yes666 holds about you:

• Right of access: To request a copy of the personal data yes666 holds about you.
• Right to rectification: To request correction of inaccurate or incomplete personal data.
• Right to erasure: To request deletion of your personal data, subject to yes666's legal retention obligations.
• Right to restriction: To request that yes666 restrict processing of your personal data in certain circumstances.
• Right to object: To object to processing of your personal data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact yes666 via the details in Section 14. yes666 will respond to all valid requests within a reasonable timeframe. Certain rights may be limited where yes666 is required to retain data by applicable law or regulatory obligation.

11. Children & Minors

The yes666 Platform is strictly for individuals aged 21 years and above. yes666 does not knowingly collect personal data from persons under the age of 21. Where yes666 discovers that personal data has been collected from a person under 21, the relevant Account will be immediately closed, all associated data deleted to the extent permitted by AML retention obligations, and any deposits returned where possible. If you believe a person under 21 has registered on yes666, please notify us immediately at the contact details in Section 14.

12. Third-Party Links

The yes666 Platform may contain references to third-party services. yes666 is not responsible for the privacy practices of any third-party websites or services. This Policy applies solely to personal data processed by yes666 in connection with the yes666 Platform. Players who access third-party services do so at their own risk and are encouraged to review the privacy policies of any third-party platforms independently.

13. Amendments to This Policy

yes666 reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to registered Players by email or prominent notice on the Platform prior to the change taking effect. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of yes666 following notification of any amendment constitutes your acceptance of the revised Policy.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data yes666 holds about you, please contact the yes666 Data & Privacy team:

• Live Chat: Available 24/7 on the yes666 Platform
• Email: [email protected]

Please include your registered Account username or email address and clearly describe your request to ensure prompt handling.