yes2 Official Data Protection

Yes2 Privacy Policy — Malaysia Member Personal Data Protection

At yes2, your privacy is not merely a legal obligation — it is our sincere commitment to every member. This document clearly explains how we collect, use, store and protect your personal data across every aspect of your platform experience.

Last Updated: 1 January 2026 SSL 256-bit PDPA Compliant

Commitment yes2 Privacy

Six core pillars that underpin how yes2 protects your personal information at all times

Layered Encryption

All data transmitted between your device and yes2 servers is protected by 256-bit SSL encryption. Sensitive information such as passwords and payment details is stored in encrypted form that cannot be read by anyone.

Secure Data Storage

Your personal data is stored on servers protected by multi-layered firewalls, intrusion detection systems, and strict access controls. Only authorised personnel may access member data for operational purposes.

No Data Sales

Yes2 has never and will never sell, rent or disclose your personal data to third-party advertisers for marketing purposes without your explicit consent. Your data belongs entirely to you.

Full Member Control

You have full control over your personal data. Through your yes2 account settings, you can update your information, manage communication preferences, request a copy of your data, or submit a deletion request at any time.

Data Minimisation

Yes2 only collects data that is strictly necessary for platform operations and to fulfil legal requirements. We do not collect excessive or irrelevant information beyond the services you use.

Timely Notifications

In the event of any security incident affecting your data, yes2 is committed to notifying affected members within the timeframe required by applicable data protection laws.


Rights Your Privacy

As a yes2 member, you are protected by the following rights under our privacy policy

Right of Access

You may request a copy of all personal data we hold about you at any time.

Right to Rectification

You may request correction of any inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data, subject to applicable legal requirements.

Right to Restriction

You may request that we restrict the processing of your data under certain circumstances.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another platform.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.


This Privacy Policy describes yes2's privacy practices regarding the collection, use, storage and protection of your personal data when using our platform at yes2.pro and our mobile app. By registering and using yes2 services, you agree to the terms set out in this policy. Please read carefully before proceeding.

This Privacy Policy applies to all registered yes2 members in Malaysia and covers all services offered through our website and app.

1Information We Collect

Yes2 collects your personal data from various sources as you interact with our platform. This collection is carried out transparently and only for legitimate purposes. The following are the main categories of information we collect:

a) Information You Provide Directly

  • Full name, date of birth, and identification card number (for KYC verification)
  • Email address, phone number and residential address
  • Bank account details, credit/debit card numbers, or e-wallet information (Touch 'n Go eWallet, GrabPay, DuitNow) for deposit and withdrawal purposes
  • Identity verification documents such as a copy of your national ID or passport
  • Your written communications with our customer support team

b) Information Collected Automatically

  • IP address and general location data
  • Device type, operating system and web browser version
  • Login history, session times and in-platform activity
  • Betting data, game history and financial transaction records
  • Cookie data and device identifiers for security and user experience purposes
yes2 does not collect biometric data, health data or any sensitive information unrelated to platform operations and legal compliance requirements.

2How We Use Your Data

The personal data we collect is used solely for platform operations and to deliver the best experience to our members. Below is a summary of our data usage:

Purpose of Use Data Types Involved
Account registration & verification (KYC) Name, IC, date of birth, identification documents
Deposit & withdrawal processing Bank details, e-wallet, transaction records
Account security & fraud prevention IP address, device data, login history
Customer support & complaint resolution Email, phone number, communication records
Legal compliance & regulatory reporting All data required by the relevant authorities
Personalised gaming experience Game history, game preferences
Marketing communications (with consent) Email, phone number

Yes2 will not use your data for any purpose not stated above without first obtaining your consent. You may withdraw consent for marketing communications at any time through your account settings.

3Legal Basis for Data Processing

Yes2 processes your personal data based on one or more valid legal grounds under Malaysia's Personal Data Protection Act 2010 (PDPA):

  • Consent: When you register a yes2 account and agree to this Privacy Policy, you give your consent to the processing of your personal data.
  • Contract Fulfilment: Processing required to provide the services you have requested, including payment processing and account management.
  • Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) laws and KYC requirements.
  • Legitimate Interest: Processing for the purposes of fraud prevention, maintaining platform security, and improving our services, provided these interests do not override your fundamental rights.

4Data Sharing with Third Parties

Yes2 does not sell, rent or disclose your personal data to third parties for marketing purposes. However, we may share your information with the following parties under limited and controlled circumstances:

  • Payment Service Provider: Financial institutions, card processors, DuitNow operators and e-wallet providers that help us process your financial transactions securely.
  • Game Provider: Licensed game software providers that supply gaming content on the yes2 platform, which may require basic session information for technical purposes.
  • Identity Verification Service: Third-party KYC service providers that assist us in verifying member identities to comply with legal requirements.
  • Authorities & Law Enforcement: When required by court order, applicable law, or a legitimate request from a competent authority.
  • Technology Infrastructure Provider: Companies that provide cloud computing, cybersecurity and technical operations services for our platform.

All third parties we work with are required to sign strict data protection agreements and comply with security standards equal to or higher than those we apply.

5Cookies & Tracking Technologies

Yes2 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

  • Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
  • Performance Cookies: Collects information on how you use the platform to help us improve the user experience. All data is collected anonymously.
  • Functional Cookies: Saves your preferences such as language and display settings to ensure a more personalised experience.
  • Security Cookies: Helps detect suspicious activity and protect your account from unauthorised access.

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the yes2 platform.

6Data Retention Period

Yes2 retains your personal data for as long as your account is active and for the period required by law or legitimate operational needs. The following are our data retention guidelines:

  • Active Account Data: Retained for the duration that your account remains active and in use.
  • Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with financial and tax reporting legal requirements.
  • KYC Documents: Retained for a minimum of five (5) years after account closure in accordance with anti-money laundering legal requirements.
  • Security Logs: Retained for twelve (12) months for security incident investigation purposes.
  • Closed Account Data: Upon account closure, personal data will be deleted or anonymised once the mandatory retention period has expired.
yes2 conducts regular reviews of stored data and deletes or anonymises data that is no longer needed in accordance with our internal procedures.

7Data Security

Your data protection is yes2's highest priority. We implement comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or disclosure:

  • 256-bit SSL/TLS encryption for all transmitted data
  • Encryption of data at rest using AES-256 algorithm
  • Two-factor authentication (2FA) for all member and staff accounts
  • Continuous security monitoring 24 hours a day, 7 days a week
  • Regular penetration testing by independent security experts
  • Strict role-based access controls for internal staff
  • Security awareness training programme for all yes2 staff
  • Incident response plan that is regularly tested and updated

While we take all reasonable precautions, no security system is completely impenetrable. We encourage you to also take protective measures such as using a strong, unique password and enabling 2FA on your yes2 account.

8International Data Transfers

In the course of its operations, yes2 may transfer your personal data to servers or service providers operating outside Malaysia. Any such transfer is carried out in compliance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA), and adequate safeguards have been implemented, including:

  • Data transfer agreements with approved standard contractual clauses
  • Ensuring recipient countries maintain an equivalent level of data protection
  • Use of recognised protection mechanisms such as Binding Corporate Rules

Your data will not be transferred to countries without adequate legal protections without obtaining your consent or appropriate contractual safeguards.

9Children's Privacy

The yes2 platform is exclusively for individuals aged 18 and above. We do not knowingly accept registrations or collect personal data from individuals under the age of 18. Should we discover that a child's personal data has been collected without proper age verification, we will take immediate steps to delete that data and close the relevant account.

If you become aware that someone under the age of 18 has registered a yes2 account, please notify our support team immediately so that appropriate action can be taken.

10Privacy Policy Amendments

Yes2 reserves the right to amend this Privacy Policy from time to time to reflect changes in applicable laws, industry practices or our platform's operations. When significant changes occur, we will:

  • Publishing the latest version of our Privacy Policy on our website with a clear update date
  • Sending notifications to members via registered email or in-app notifications
  • Providing a minimum of seven (7) days' notice before significant amendments take effect

Your continued use of the yes2 platform after amendments take effect constitutes your acceptance of the updated Privacy Policy. We recommend reviewing this page periodically to stay informed of the latest updates.

11Contact Us

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact the yes2 Data Protection Officer (DPO) through the following channels:

  • Email: [email protected]
  • Live Chat: Available 24/7 via the chat icon at the bottom corner of the yes2 platform
  • Response Time: We aim to respond to all privacy-related enquiries within 72 hours on business days

You also have the right to lodge a complaint with the relevant data protection authority in Malaysia if you believe your privacy rights have been violated and we have not resolved your complaint to your satisfaction.

Frequently Asked Questions About yes2 Privacy

yes2 does not sell or share your data with third parties for marketing purposes. We only share necessary information with payment service providers, licensed game providers, and authorities when required by law. All third parties are bound by strict data protection agreements.

You may submit a data access or deletion request by contacting the yes2 support team via live chat or email at [email protected]. We will process your request within 30 business days. Please note that some data may need to be retained to fulfil legal obligations even after account closure.

Yes. yes2 uses 256-bit SSL encryption and does not store your full bank card details on our servers. All financial transactions are processed through PCI-DSS certified payment gateways, the highest security standard in the global payments industry. We also conduct real-time fraud monitoring to protect your transactions.

You can manage cookies through your web browser settings. However, essential cookies required for login and security functions cannot be disabled without affecting your experience on the platform. Optional cookies such as analytics and performance cookies can be disabled without affecting core platform functionality.

Upon account closure, yes2 will retain your data for the period required by law (for example, financial transaction records are kept for 7 years). Once the mandatory period has expired, your personal data will be permanently deleted or anonymised so it can no longer be associated with you.

A Secure Platform That You Can Trust

Your personal data is protected with the latest encryption technology. Join over 500,000 trusted yes2 Malaysia members today and enjoy a safe and enjoyable gaming experience.

SSL 256-bit PDPA Compliant Licensed & Trusted 24/7 Support

Bahasa Melayu