Privacy Policy yes77 – Malaysian Player Data Security

Yes77 collects personal data from you only when it is necessary to provide our platform services safely and efficiently. We do not collect data beyond what our operations require.

Yes77 does not collect sensitive data categories such as medical information, religious beliefs, or political views, except in very specific circumstances and with your explicit consent. Financial data collected is limited to what is necessary to process transactions — yes77 does not store your full credit card numbers or complete banking details.

Yes77 uses the personal data collected for legitimate purposes related to platform operations and the delivery of services to you. The following are the primary purposes for which your data is used.

• Account Management: Creating and maintaining your yes77 account, verifying your identity at login, and enabling access to all platform features.
• Transaction Processing: Processing your deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX, and processing your winnings withdrawals to your registered account.
• Identity Verification (KYC): Verifying your identity to meet legal compliance requirements and to ensure the security of financial transactions.
• Customer Service Provision: This allows the yes77 support team to verify your identity and assist you in resolving any issues or queries you have in Bahasa Malaysia.
• Fraud Prevention & Security: Detecting and preventing fraud, money laundering, bonus abuse, and other security threats against the yes77 platform and its members.
• Platform Improvements: Analyses usage patterns in aggregate (not individually) to improve the features, performance, and user experience of the yes77 platform.
• Service Communications: Sending important account-related notifications such as transaction confirmations, security alerts, and terms of service updates.
• Responsible Gaming: Monitors gameplay patterns to identify players who may require responsible gaming support and to enforce limits set by the players themselves.

Yes77 will not use your data for third-party marketing purposes or sell your usage profile to advertisers. Marketing communications from yes77 itself are only sent if you have given your consent, and you may withdraw that consent at any time.

Yes77 does not sell or trade your personal data. However, in operating the platform, we may need to share certain data with selected third parties. All data sharing is limited to the minimum necessary and is subject to binding confidentiality agreements.

• Payment Processors: Information required to process transactions is shared with approved payment providers (such as FPX operators, Touch 'n Go, and GrabPay). This is limited to the minimum information needed to verify and complete transactions only.
• Game Software Providers: Certain account information is shared with game providers such as Evolution Gaming and Pragmatic Play to enable access to their games on the yes77 platform. This data is limited to anonymised player IDs and is used for technical purposes only.
• Technical Service Providers: yes77 uses cloud computing, cybersecurity, and technical infrastructure service providers that may process data in the course of performing their functions. All such providers are subject to strict data processing agreements.
• Regulatory Authorities & Law Enforcement: yes77 will disclose information to Malaysian authorities when required by law, court order, or for the purposes of a legitimate financial crime investigation.
• Business Transfers: Should yes77 be involved in any merger, acquisition, or asset sale, user data may be transferred as part of that transaction. You will be notified in advance and given choices regarding your data.

In all of the above situations, yes77 ensures that any third party receiving your data is bound by data protection obligations equal to or greater than the standards required under Malaysia's PDPA.

Yes77 implements multiple layers of technical and organisational safeguards to keep your personal data secure at all times. Data security is an ongoing investment that we take very seriously.

• 256-bit SSL Encryption: All communications between your device and yes77 servers are encrypted using TLS/SSL protocol with 256-bit keys, making any intercepted data unreadable to unauthorised parties.
• Data-at-Rest Encryption: Sensitive data stored in yes77's databases — including passwords and financial information — is stored in encrypted format. Your password is never stored in plain text.
• Tiered Access Controls: Access to user data within yes77's internal systems is restricted on a need-to-know basis. Only staff with a legitimate operational requirement may access specific data, and all access is automatically logged.
• Two-Factor Authentication (2FA): yes77 recommends and supports two-factor authentication for all member accounts as an added layer of security beyond passwords.
• Regular Security Audits: The yes77 platform undergoes periodic independent security audits conducted by third-party cybersecurity experts. Audit findings are used to identify and address any vulnerabilities before they can be exploited.
• 24/7 Threat Monitoring: yes77's security monitoring system operates around the clock to detect and respond to any intrusion attempts, DDoS attacks, or other suspicious activity.
• Incident Response Plan: yes77 has clear procedures in place for handling data breach incidents, including timelines for notifying affected users and the relevant authorities in line with PDPA requirements.

Yes77 uses cookies and similar tracking technologies to ensure the platform functions correctly, enhance user experience, and analyse platform performance. This section explains the types of cookies we use and how you can manage them.

• Session Cookies: Session cookies required to keep you logged in during your active session on yes77. These cookies are automatically deleted when you close your web browser.
• Preference Cookies: Remembers your preferences and settings on yes77, such as your display language and game display settings. This means you won't need to reconfigure your preferences every time you log in.
• Security Cookies: Used to authenticate users, prevent unauthorised use of credentials, and protect user data from unauthorised parties.
• Analytics Cookies: Helps yes77 understand how users interact with the platform – including the most visited pages, time spent, and navigation patterns. This data is used in aggregate to improve the platform and is not used to identify individual users.

You can manage or delete cookies through your web browser settings. Please note, however, that disabling or blocking certain cookies may affect the functionality of the yes77 platform — particularly the auto-login feature and your saved preferences.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding personal data held by yes77. We are committed to respecting and facilitating the exercise of these rights.

To exercise any of the rights above, contact the yes77 support team by email at support@yes77.best with the subject line "PRIVACY RIGHTS REQUEST", including your account number and a description of your request. yes77 will respond within 21 business days. For urgent privacy matters, reach us via live chat, available 24/7.

Yes77 does not retain your personal data indefinitely. Data retention periods are determined based on the purpose of collection, operational requirements, and applicable legal obligations.

• Active Account Data: For as long as your yes77 account remains active, we retain all data necessary to operate your account and provide services to you.
• Financial Transaction Data: Financial transaction records are retained for a minimum of 7 years in accordance with Malaysian accounting and anti-money laundering legal requirements. This includes deposit and withdrawal history in MYR.
• KYC (Identity Verification) Data: Identity verification documents are retained for a minimum of 5 years from the date of verification or until the account closure date, whichever is later, in accordance with PDPA requirements and anti-money laundering regulations.
• Closed Account Data: After account closure, yes77 will delete or anonymise personal data that is no longer needed for legal or legitimate business purposes within 30 days. Data required for regulatory purposes will be retained only for the minimum period necessary.
• Technical Logs: Technical logs such as access logs and security logs are retained for 90 days for security and troubleshooting purposes.

Once the retention period expires, yes77 will delete or anonymise your personal data in a secure and irreversible manner. You may request further information about the retention period for specific data categories by contacting the yes77 support team.

If you have any questions or concerns, or wish to exercise your privacy rights, the yes77 team is here to help. We treat every privacy-related enquiry seriously and will respond promptly.

If you believe yes77 has failed to handle your privacy complaint satisfactorily, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) or the relevant authority. yes77 is committed to cooperating fully with any investigation conducted by the relevant regulatory authority.