Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how yes66 ("yes66", "We", "Us", or "Our") collects, uses, stores, discloses, and protects personal information obtained from individuals ("Members", "Users", or "You") who access or use the yes66 website at https://yes66.co and all associated services, games, and features (collectively, the "Platform").

yes66 is committed to protecting the privacy and security of the personal information you provide to us. We handle personal data responsibly, transparently, and in accordance with applicable international gaming authority data protection requirements and recognised data protection standards.

By registering a yes66 account or using the Platform in any manner, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the yes66 Platform.

2. Personal Data We Collect

yes66 collects personal data through various means, including data you provide directly, data generated through your use of the Platform, and data received from third-party service providers. The categories of personal data we collect include:

2.1 Registration and Identity Data

When you create a yes66 account, we collect: full legal name; date of birth; email address; mobile phone number; residential address; and, as part of KYC (Know Your Customer) verification, copies of government-issued identity documents and proof of address.

2.2 Financial and Transaction Data

To process deposits and withdrawals, yes66 collects payment method details including FPX bank account references, Touch 'n Go eWallet identifiers, Boost account references, and transaction histories within the Platform. yes66 does not store full card numbers or complete bank account credentials — payment processing is handled by PCI-compliant third-party payment processors.

2.3 Usage and Gaming Data

yes66 automatically records your activity on the Platform, including: bet history, stake amounts, winnings and losses; game session data; login times and session durations; pages visited and features accessed; and device and browser information.

2.4 Technical Data

We collect technical data including IP address, device type, operating system, browser type and version, screen resolution, and referral source. This data is used for security monitoring, fraud detection, and platform optimisation.

2.5 Communications Data

When you contact yes66 support via live chat or email, we retain records of those communications for quality assurance, training, dispute resolution, and regulatory compliance purposes.

3. How We Use Your Personal Data

yes66 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your yes66 account, including processing registration, verifying your identity through KYC procedures, and managing account settings.
• Service Delivery: To provide access to the Platform's gaming products (Sportsbook, Casino, Slots), process bets and game outcomes, and credit winnings to your account.
• Payment Processing: To facilitate deposits and withdrawals via your registered payment methods (FPX, Touch 'n Go eWallet, Boost), and to reconcile financial transactions.
• Legal and Regulatory Compliance: To fulfil our obligations under applicable international gaming authority regulations, including Anti-Money Laundering (AML) requirements, KYC verification, and regulatory reporting obligations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct on the Platform.
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling and to enforce responsible gaming controls including deposit limits, session limits, and self-exclusion requests as required by our regulatory obligations.
• Customer Support: To respond to your enquiries, resolve disputes, investigate complaints, and provide technical assistance.
• Platform Improvement: To analyse usage patterns, diagnose technical issues, test new features, and improve the overall quality and performance of the yes66 Platform.
• Marketing Communications: Where you have provided consent or where we have a legitimate interest, to send you information about yes66 promotions, bonuses, and new products. You may opt out of marketing communications at any time by contacting our support team.

4. Legal Basis for Processing

yes66 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — including account management, service delivery, and payment processing — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable laws and gaming authority regulations — including KYC verification, AML monitoring, and regulatory reporting — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring is carried out on the basis of yes66's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional marketing communications is carried out on the basis of your explicit consent, which you may withdraw at any time.

5. Data Sharing and Disclosure

yes66 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only as described below:

• Payment Processors: yes66 shares necessary payment data with regulated payment service providers (including FPX operators, Touch 'n Go, and Boost) solely for the purpose of processing your deposits and withdrawals.
• KYC and Identity Verification Providers: We engage regulated third-party identity verification services to assist with KYC compliance. These providers process your identity documents under contractual obligations of confidentiality and data protection.
• Game Content Providers: yes66 partners with game studios (including but not limited to Pragmatic Play, PG Soft, and other licensed providers) to deliver gaming content. Relevant session and RNG data is shared with these providers to the extent necessary for game operation and audit purposes.
• Regulatory Authorities: yes66 will disclose personal data to gaming regulators, law enforcement, or other government authorities where required by applicable law, court order, or regulatory direction.
• Fraud Prevention Agencies: Where there are reasonable grounds to suspect fraud, money laundering, or other financial crime, yes66 may share relevant data with fraud prevention and financial intelligence agencies.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of assets involving yes66, personal data held by yes66 may be transferred to the relevant successor entity, subject to equivalent data protection obligations.

6. Cookies and Tracking Technologies

yes66 uses cookies and similar tracking technologies on the Platform to provide core functionality, improve user experience, and support security and analytics. The categories of cookies we use include:

• Essential Cookies: Required for the Platform to function. These include session cookies that maintain your login state and security cookies that support fraud detection. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences (such as language settings and game lobby filters) to enhance your experience across sessions.
• Analytics Cookies: Used to collect aggregated, anonymised data about how members use the Platform — including pages visited, session duration, and click patterns — to support Platform improvement. Analytics data is not linked to individual member identities.
• Security Cookies: Used to detect and prevent fraudulent activity, including device fingerprinting and anomalous behaviour detection.

You may configure your browser to block or delete cookies. Please note that disabling essential cookies will impair your ability to log in to and use the yes66 Platform. Analytics and functional cookies may be disabled without affecting core Platform access.

7. Data Security

yes66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:

• TLS/SSL encryption for all data transmitted between your device and the yes66 Platform.
• AES-256 encryption at rest for all databases containing personally identifiable information.
• Role-based access controls limiting yes66 employee access to personal data on a strict need-to-know basis.
• Two-factor authentication (2FA) available for all member accounts.
• Continuous monitoring of Platform systems for intrusion attempts, anomalous access patterns, and security events.
• Regular third-party penetration testing and security audits of the yes66 Platform infrastructure.

While yes66 takes all reasonable and practicable steps to protect your personal data, no security system is completely impenetrable. In the event of a data breach that is likely to result in a risk to your rights and freedoms, yes66 will notify affected members and relevant authorities in accordance with applicable regulatory requirements.

8. Data Retention

yes66 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to applicable legal and regulatory retention requirements:

• Active Account Data: Retained for the duration of your membership and for a minimum period of five (5) years following account closure, in compliance with applicable AML and gaming regulatory requirements.
• Transaction Records: Financial transaction records are retained for a minimum of seven (7) years to meet financial regulatory and AML obligations.
• KYC Documents: Identity and address verification documents are retained for the duration required by applicable gaming authority regulations, typically five (5) years post account closure.
• Support Communications: Live chat and email support records are retained for three (3) years for dispute resolution and quality assurance purposes.
• Marketing Data: Marketing consent records and associated communications data are retained until consent is withdrawn and for a period sufficient to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, yes66 will securely delete or anonymise your personal data in accordance with our data destruction procedures.

9. Your Data Rights

Subject to applicable law and gaming regulatory requirements, yes66 members have the following rights in relation to their personal data:

• Right of Access: You have the right to request a copy of the personal data yes66 holds about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal and regulatory retention obligations that may require us to retain certain data.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances, such as while a rectification request is being reviewed.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact yes66 in writing via the channels described in Section 13. yes66 will respond to data rights requests within thirty (30) calendar days of receipt.

10. Children's Privacy

The yes66 Platform is strictly for adults aged 21 and above. yes66 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been provided by an individual under 21, we will immediately close the associated account, delete the personal data, and, where applicable, report the matter as required by applicable gaming authority regulations. If you believe that a minor has registered on the yes66 Platform, please contact our support team immediately.

11. Third-Party Links

The yes66 Platform may contain links to or integrations with third-party content providers (such as live game streaming services or game studios). This Privacy Policy applies solely to personal data collected and processed by yes66 in connection with the yes66 Platform. yes66 is not responsible for the privacy practices of third-party websites or services accessed via links from the Platform. We encourage you to review the privacy policies of any third-party services you access.

12. Updates to This Privacy Policy

yes66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When amendments are made, we will update the "Last Updated" date at the top of this page. Where amendments are material — that is, where they represent a significant change to how we handle your personal data — yes66 will make reasonable efforts to notify affected members via email or an in-platform notice at least fourteen (14) days before the amended Policy takes effect.

Your continued use of the yes66 Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. It is your responsibility to review this Policy periodically. If you do not accept a revised Privacy Policy, you should close your yes66 account before the effective date of the revision.

13. Contact and Data Requests

For any questions, concerns, or requests relating to this Privacy Policy or the personal data yes66 holds about you, please contact our team through the following channels:

• Live Chat: Available 24/7 through the yes66 Platform. For data rights requests, please specify your request type clearly at the start of the chat.
• Support Email: [email protected] — for formal data subject access requests, please include "Data Rights Request" in the subject line and provide your registered account email address for verification.

yes66 will acknowledge all data-related requests within five (5) business days and complete processing within thirty (30) calendar days, or notify you if additional time is required due to the complexity of the request.