Privacy Policy yeswin – Malaysian User Data Protection

01 Introduction

Yeswin values the privacy of every user who trusts our platform. This Privacy Policy explains in detail how we collect, use, store and protect your personal information when you use the yeswin platform at yeswin.onl.

We operate on a simple principle: we only collect data that is genuinely necessary to deliver the best service, and we will never sell or rent your information to any third party for marketing or commercial purposes.

By registering a yeswin account or continuing to use our platform after the effective date of this policy, you agree to be bound by all provisions stated herein. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.

02 Data Collected

Yeswin collects personal information from users through several methods — including account registration, daily platform usage, communications with our support team and the identity verification (KYC) process. The following are the categories of data we collect:

We do not collect sensitive information such as biometric data, medical records or religious information unless specifically required by applicable law.

03 How Data Is Used

The personal information we collect is used exclusively for purposes related to the provision, improvement and security of yeswin's services. We do not use your data for any purpose beyond the scope stated below:

• Account Management: To create, verify and securely maintain your user account, including the required KYC and identity verification processes.
• Transaction Processing: To accurately and securely process deposits, withdrawals and all financial transactions you carry out on the platform.
• Platform Security: To detect and prevent fraud, multi-account usage, money laundering and other security threats against the platform and other users.
• Customer Support: To help you resolve any technical issues, account enquiries or service-related complaints through our support channels.
• Service Communications: To send important notifications related to your account, such as transaction confirmations, security alerts and policy updates.
• Responsible Gaming: To monitor usage patterns in order to identify signs of problem gambling and provide appropriate assistance to users who need it.
• Legal Compliance: To fulfil our obligations under anti-money laundering (AML) laws, tax compliance requirements and other applicable regulations.
• Platform Improvements: To analyse usage patterns in aggregate (not individually) in order to improve the functionality, performance and user experience of the yeswin platform.

04 Data Sharing

Yeswin does not sell, rent or disclose users' personal information to third parties for marketing, advertising or commercial purposes. However, in certain limited situations, we need to share data with the following parties for operational purposes:

• Payment Processing Providers: Transaction information is shared with approved payment service providers (such as FPX and e-wallet providers) solely to process your deposits and withdrawals.
• KYC Service Providers: Identity verification documents are shared with trusted third-party identity verification partners to ensure an accurate and secure KYC process.
• IT Service Providers: Cloud computing and technical infrastructure service providers that support platform operations may have limited access to user data in their technical capacity.
• Legal Authorities: In situations where we are required by law, court order or a legitimate request from a regulatory authority to disclose certain information.
• Fraud Prevention: Relevant data may be shared with trusted fraud prevention agencies or industry consortiums to identify and prevent fraudulent activity across platforms.

05 Security & Encryption

Protecting your personal and financial information is our highest priority. yeswin continually invests in the latest security technologies to ensure your data is always protected from unauthorized access, loss or misuse.

• Encryption in Transit: All data transmitted between your device and yeswin servers is protected with SSL/TLS 256-bit encryption. The padlock icon in your browser confirms that your connection is always secure.
• Encryption at Rest: All sensitive data stored in our databases is protected with AES-256 encryption, the same standard used by financial institutions and government agencies worldwide.
• Access Controls: Internal access to user data within yeswin is restricted on a need-to-know basis. Only staff who require access to specific data to perform their duties are authorised to do so.
• Periodic Security Audits: The yeswin platform undergoes regular security testing and vulnerability assessments by independent third parties to identify and address any potential security risks.
• Two-Factor Authentication: yeswin users are recommended to enable two-factor authentication (2FA) on their accounts as an effective additional layer of protection against unauthorized access attempts.
• Continuous Monitoring: Our automated monitoring system operates 24/7 to detect any suspicious activity or unauthorised access attempts against our systems.

06 Cookies & Tracking Technologies

Yeswin uses cookies and similar tracking technologies to enhance user experience, maintain session security and understand how users interact with our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session management and security. These cookies cannot be disabled and are a condition of using the platform.
• Preference Cookies: Stores your settings and preferences such as language, time zone and display options to deliver a more personalized experience on every visit.
• Analytics Cookies: Helps us understand how users navigate the platform for continuous improvement. Analytics data is collected in aggregate form and does not personally identify individuals.
• Security Cookies: Used to detect and prevent fraudulent activity, device verification and to maintain the integrity of user sessions.

07 Data Storage & Retention

Yeswin retains users' personal data only for as long as necessary to fulfil the purpose of collection or to comply with applicable legal requirements. We do not retain data longer than necessary.

• Active Account Data: As long as your account is active and operating on the yeswin platform, your account information will be retained to ensure smooth and uninterrupted service.
• Data After Account Closure: After account closure, we retain transaction records and identity data for the minimum period required by anti-money laundering and applicable tax laws — typically between 5 and 7 years.
• Communication Records: Customer support communication logs are retained for 2 years after case resolution for quality improvement purposes and reference in the event of any dispute.
• Technical Log Data: Technical logs and security data are retained for a maximum of 12 months before being automatically deleted, unless required for an ongoing security investigation.
• Post-Retention Deletion: Once the defined retention period expires, your data will be securely deleted or anonymised using industry-standard deletion methods.

08 Your Rights as a User

Yeswin recognises and respects users' rights regarding their personal data. You have the following rights, which you may exercise at any time by contacting our support team:

09 Children's Data

The yeswin platform is strictly for individuals aged 18 and above. We do not knowingly collect, store or process any personal information from individuals under the age of 18.

The yeswin registration process requires age verification through KYC as part of our protection measures. If we find that an account has been registered by an underage individual, the account will be closed immediately and all related data will be promptly deleted.

10 Privacy Policy Amendments

Yeswin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements or platform service improvements.

• Amendment Notice: For material amendments, we will notify active users via in-platform notifications and/or email at least 14 days before the changes take effect.
• Effective Date: Each version of this policy displays the latest update date at the top of the page, indicating when the policy was last revised.
• Implied Acceptance: Continued use of the yeswin platform after the effective date of any amendment constitutes acceptance of the updated terms.
• Legacy Version Archive: Previous versions of this Privacy Policy are available upon request by contacting our support team via live chat.