Privacy Policy yes77 — Our Commitment to Protecting Your Data

1Information We Collect

When you register and use the yes77 platform, we collect several categories of information to ensure our services run smoothly, securely, and in line with your needs as a Malaysian player. This data collection is carried out transparently and solely for the purposes stated in this policy.

The following are the types of data we collect:

Technical information such as IP address, device type, operating system, and browser type is automatically collected when you browse the yes77 platform. This data is used solely for security, fraud detection, and user experience improvement — not to be sold or shared with advertisers.

Identity documents submitted during the KYC verification process — such as a copy of your MyKad or passport — are stored in an encrypted system accessible only by authorised yes77 staff. These documents will not be shared with any external party unless required by law.

2How We Use Your Data

The data we collect is used for specific and limited purposes. yes77 operates on the principle that every piece of data you provide to us has a clear and legitimate purpose.

The following are the primary purposes for which your data is used:

• Account management: Creating and maintaining your account, processing registrations, and verifying identity through the KYC process.
• Transaction processing: Handling deposits, withdrawals, and all financial transactions in your account securely and promptly.
• Customer support: Responding to inquiries, resolving complaints, and providing technical assistance when needed.
• Platform security: Detecting and preventing fraud, money laundering, unauthorized access, and activities that violate yes77's terms.
• Service improvement: Analyzing usage patterns to improve the platform's interface, performance, and overall experience.
• Important communications: Sending account-related notifications, terms changes, security updates, and relevant bonus information.
• Legal compliance: Fulfilling compliance obligations to the relevant authorities under applicable anti-money laundering (AML) laws.

Yes77 will not use your data for purposes not stated in this privacy policy without first obtaining fresh consent from you. If we wish to use your data for a new purpose, we will inform you and request the appropriate permission.

3Information Sharing

Yes77 understands that your trust depends on the assurance that your personal information will not be misused. As such, we uphold a strict policy on data sharing.

We only share your data in the following situations:

• Trusted service providers: Third parties that assist us in operating the platform — such as payment gateway providers, KYC verification companies, and technical infrastructure providers — are bound by strict confidentiality agreements and are only permitted to use your data for the specified purposes.
• Legal requirements: If required by a court order, law enforcement authority, or a competent regulatory body, yes77 may be required to disclose certain information in accordance with valid legal procedures.
• Protection of our interests and users: In cases of fraud, money laundering, or serious security threats, the necessary information may be shared with the relevant authorities for further action.

All third-party partners working with yes77 are required to comply with data protection standards equally as stringent as our internal standards. Comprehensive data processing agreements are signed before any data sharing takes place.

4Data Security

Protecting your data from unauthorized access, loss, or damage is among yes77's highest priorities. We continuously invest in the latest security technologies and practices to keep your data safe at all times.

The security measures we have implemented include:

• 256-bit SSL encryption: All communications between your browser and yes77 servers are encrypted using the latest TLS protocol, rendering data unreadable to unauthorised parties.
• Data segregation: Sensitive data such as payment information and KYC documents are stored separately in a more restricted-access environment.
• Layered access control: Only staff with a legitimate operational need are permitted to access user data, and every access is recorded in an audited log that is monitored.
• Regular penetration testing: yes77 conducts regular security testing by independent experts to identify and patch any vulnerabilities before they can be exploited.
• Two-factor authentication (2FA): An additional security layer is available for your account to ensure only you can log in, even if your password is compromised.

5Cookies & Tracking Technologies

Yes77 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit a website.

Types of cookies used by yes77:

• Essential cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled as the platform will not function without them.
• Performance cookies: Helping us understand how visitors interact with the platform — such as which pages are visited most frequently — so we can keep improving.
• Functional cookies: Remembering your preferences such as language, region, and display settings so you don't need to reconfigure them every time you log in.

You can control and manage cookies through your browser settings. However, please note that disabling certain cookies may affect the functionality and user experience on the yes77 platform. Continuing to browse yes77 after receiving our cookie notice is considered your consent to the use of cookies as described.

6Your Rights

As a yes77 user, you have clear rights regarding your personal data. yes77 fully respects these rights and provides straightforward mechanisms for you to exercise them.

• Right to Access

  You have the right to know what personal data we hold about you and to request a copy at any time.

• Right to Rectification

  If any data we hold is inaccurate or outdated, you have the right to request an immediate correction.

• Right to Erasure

  You may request the deletion of your personal data, subject to record-keeping obligations under applicable law.

• Right to Restrict Processing

  You may request that we restrict the processing of your data in certain circumstances while a dispute or review is in progress.

• Right to Data Portability

  You have the right to receive your personal data in a machine-readable format for transfer to another service provider upon request.

• Right to Object

  You may object to the processing of your data for direct marketing purposes at any time, and we will stop immediately.

7Data Retention & Deletion

Yes77 retains your personal data only for as long as necessary to fulfil the original purpose of collection and related legal obligations. We do not store data longer than required.

• Active account data: Stored for as long as your account is active on yes77.
• Transaction data: Stored for a minimum of 5 years after the transaction occurs, to fulfil AML compliance and tax law requirements.
• KYC documents: Stored for 5 years after account termination or the date the last document was submitted, whichever is later.
• Support communication logs: Stored for 2 years after the case is closed.
• Login and session data: Stored for 90 days for security and investigation purposes where required.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered. If you close your account, we will initiate the data deletion process within 30 days, subject to the minimum retention obligations stated above.

8Children's Privacy

The yes77 platform is exclusively for individuals aged 18 years and above. We do not intentionally collect or process personal data of individuals under the age of 18.

Should yes77 discover that data belonging to an individual under the age of 18 has been collected without our knowledge, we will take immediate steps to:

• Deleting all data related to that individual from our systems.
• Closing the relevant account immediately.
• Returning any available funds where applicable and necessary.

9Links to Other Sites

The yes77 platform may contain links to third-party websites such as game providers or partner payment platforms. The yes77 privacy policy applies solely to the yes77 platform and does not cover the privacy practices of those third-party websites.

Yes77 is not responsible for the content, privacy policies, or security practices of any third-party websites. We encourage you to read the privacy policy of every website you visit, especially before providing any personal information.

10Privacy Policy Changes

Yes77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. The "Updated" date at the top of this page will always indicate the latest version in effect.

When significant changes are made to this policy, yes77 will:

• Displaying a clear notice on the platform's home page for a minimum of 14 days.
• Sending notification emails to all registered members informing them of major changes.
• Maintaining an archive of previous versions of the privacy policy for your reference.

Continued use of the yes77 platform after the effective date of any amendment is considered your acceptance of the latest version of this Privacy Policy. If you disagree with the changes made, you may close your account and request data deletion in accordance with the procedure described in Section 6.

11Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how yes77 handles your personal data, our team is ready to assist you.