Privacy Policy

This Privacy Policy ("Policy") sets out the basis on which yes55 ("we", "us", "our", "the Platform") collects, processes, stores, and discloses personal data relating to individuals ("you", "User", "Data Subject") who access or use the yes55 online casino and sports betting platform at https://yes55.cam and any related services.

yes55 operates primarily for the Malaysian market, serving registered players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions of Malaysia. As such, our data practices are shaped in part by the personal data protection framework applicable to our operations and the reasonable expectations of Malaysian users regarding the handling of their personal information.

By registering an Account with yes55, accessing the platform, or submitting personal information to us in any form, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. If you do not agree with any part of this Policy, you should not use the yes55 platform.

The following terms carry the meanings set out below throughout this Policy:

• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, whether directly (e.g., full name, national ID number) or indirectly (e.g., IP address in combination with other identifiers).
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, erasure, and any combination thereof.
• "Data Controller" — yes55, as the entity that determines the purposes and means by which personal data is processed.
• "Data Processor" — a third party that processes personal data on behalf of yes55 under a contractual arrangement, such as a payment gateway provider or cloud hosting service.
• "KYC Data" — identity and address verification documents and information collected for Know Your Customer compliance purposes.
• "Cookies" — small data files placed on your device by a website that store certain information about your browsing session or preferences.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement to the processing of your personal data.

yes55 collects the following categories of personal data in connection with the operation of your Account and the delivery of our services:

yes55 collects personal data through the following channels:

• Direct Submission: Information you provide when registering an Account, completing KYC verification, making deposits or withdrawal requests, or contacting our support team via live chat or email.
• Automated Technical Collection: Data automatically gathered as you use the platform, including IP address, device identifiers, browser characteristics, session logs, and gameplay records — collected via server logs, cookies, and analytics tools.
• Payment Service Providers: Transaction confirmation and status data received from our payment partners, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-participating banks (such as Maybank, CIMB, Public Bank, and Hong Leong Bank), and cryptocurrency network confirmations.
• Identity Verification Services: Where we engage a third-party KYC verification provider, we may receive verification results and associated identity confirmation data from that provider.
• Fraud Prevention Services: Risk signals and fraud scores from third-party detection services used to protect both the platform and our users.

yes55 processes your personal data only where a lawful basis exists for doing so. The following table identifies our processing purposes and the corresponding legal basis:

yes55 does not sell, rent, or trade personal data to any third party for commercial marketing purposes. We share personal data only in the following circumstances and with the following categories of recipient:

• Payment Service Providers: We share the minimum data necessary to process deposits and withdrawals with our payment partners, including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and partnered Malaysian banks. These providers operate under their own privacy policies and are bound by contractual data protection obligations.
• Identity Verification Partners: Where third-party KYC verification is required, we share identity documents and relevant personal data with our appointed verification service provider for the sole purpose of completing the verification process.
• Technology Service Providers: Cloud hosting, platform infrastructure, analytics, and security services may involve data processing by contracted third-party providers. All such providers are subject to data processing agreements requiring them to handle your data only on our documented instructions.
• Legal and Regulatory Authorities: We may disclose personal data to competent governmental or regulatory authorities where required by applicable law, court order, or to protect the legal rights of yes55 or other users.
• Fraud Prevention Networks: Certain identity and device risk signals may be shared with industry fraud prevention services to identify and prevent fraudulent account activity across the online gaming sector.

yes55 retains personal data for the period necessary to fulfil the purposes for which it was collected, and in compliance with applicable legal retention obligations. The following general retention guidelines apply:

• Active Account Data: Retained for the duration of your active relationship with yes55 and for a minimum period of five (5) years following Account closure, in compliance with applicable AML and financial record-keeping obligations.
• KYC and Identity Documents: Retained for the legally required minimum period following Account closure, typically five (5) years, or longer where required by applicable law or where a legal dispute remains unresolved.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Communications and Support Records: Retained for three (3) years following the close of the relevant support interaction or dispute.
• Technical and Usage Data: Typically retained in identifiable form for up to twelve (12) months, after which it may be anonymised and retained for aggregated analytics purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

yes55 implements appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss, or destruction. Our security framework includes the following measures:

• 256-bit TLS/SSL encryption for all data transmitted between your browser and the yes55 servers;
• Encrypted storage of sensitive data fields including passwords (stored as salted hashes, never in plain text) and payment method identifiers;
• Role-based access controls ensuring that staff access to personal data is limited to those with a legitimate operational need;
• Regular security audits and penetration testing by qualified third-party providers;
• Multi-factor authentication available to all users and required for internal staff access to production systems;
• Incident response and breach notification procedures designed to identify, contain, and report data security incidents promptly.

While yes55 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is entirely secure. You are responsible for maintaining the confidentiality of your Account credentials. We will never ask you to share your password with us or with any third party.

yes55 uses cookies and similar tracking technologies on the platform. Cookies allow the platform to function correctly, remember your preferences, and help us understand how users interact with the site so we can improve the experience.

We use the following categories of cookie:

• Strictly Necessary Cookies: Essential for the platform to operate. These include session authentication cookies, CSRF protection tokens, and load balancing cookies. These cannot be disabled without significantly degrading the platform experience.
• Functional Cookies: Remember your language preference, display settings, and other personalisation choices across sessions.
• Analytical Cookies: Collect aggregate, anonymised information about how users navigate the platform — for example, which pages are visited most frequently and where users encounter errors. This data is used solely for platform improvement.
• Security Cookies: Used for fraud detection and risk assessment, including device fingerprinting to identify suspicious login patterns.

You may adjust your browser settings to block or delete cookies. Please note that disabling strictly necessary cookies will impair the functionality of the yes55 platform, including your ability to log in and place bets.

The yes55 platform is operated for the Malaysian market and we endeavour to ensure that the primary processing of your personal data occurs within appropriate jurisdictions. However, as is common with cloud-hosted services, some data processing activities may involve servers or service providers located outside Malaysia.

Where personal data is transferred to a country or territory outside Malaysia, yes55 ensures that appropriate safeguards are in place to protect that data to a standard at least equivalent to that provided under applicable Malaysian data protection law. These safeguards include contractual data protection clauses with all international service providers.

By using the yes55 platform, you acknowledge and consent to such international transfers where they are necessary for the operation of the platform and the provision of services to you.

Subject to applicable law, you hold the following rights in relation to the personal data that yes55 holds about you. To exercise any of these rights, please contact us using the details provided in Section 14.

yes55 will respond to all valid rights requests within 30 days of receipt. In certain complex cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

We will not charge a fee to process rights requests unless a request is manifestly unfounded or excessive — in which case we may charge a reasonable administrative fee or decline to act on the request, subject to applicable law.

The yes55 platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21 years.

If you are under 21 years of age, you must not use the yes55 platform, create an Account, or submit any personal information to us. If yes55 discovers or is notified that personal data has been collected from an individual under 21 years of age, we will:

• Immediately suspend the associated Account;
• Delete all personal data associated with that Account as promptly as legally and technically possible;
• Forfeit any balance held in the Account in accordance with our Terms & Conditions; and
• Where required by applicable law, report the matter to the relevant authority.

If you are a parent or guardian and have reason to believe that a minor in your care has registered an Account on yes55, please contact us immediately at the address provided in Section 14.

yes55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. The "Last Updated" date at the top of this page indicates when the Policy was most recently revised.

Material changes to this Policy — meaning changes that affect how we use your personal data in a way that may impact your rights or reasonable expectations — will be communicated to registered Users by email or by a prominent on-platform notification at least 14 days before the changes take effect.

Your continued use of the yes55 platform after the effective date of any amendment constitutes acceptance of the revised Policy. If you do not agree with the changes, you should cease using the platform and may request Account closure by contacting our support team.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data yes55 holds about you, please contact our data protection team through the following channels:

• Email: [email protected] (plain text only — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, via the chat widget accessible on any page of the yes55 platform
• Support Hours: Specialist privacy and data support available 8:00 AM – 12:00 AM MYT daily
• Response Commitment: Privacy-related queries will receive a substantive response within 5 business days; formal data subject rights requests will be processed within 30 calendar days of receipt

When contacting us about a data subject rights request or a privacy concern, please include your full registered name, Account email address, and a clear description of your query or request. This will allow us to locate your data and respond as efficiently as possible.