Privacy Policy — How YES8MY Handles Your Data

YES8MY ("we", "us", "our", "the Company") is committed to protecting the personal information of every player who uses our platform. This Privacy Policy ("Policy") describes how YES8MY collects, stores, uses, shares, and safeguards personal data provided by users ("you", "User", "Player") when accessing the YES8MY website at https://yes8my.cam and all related services (collectively, the "Platform").

YES8MY serves players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other states and territories. We recognise our responsibility as custodians of your personal data and operate in a manner consistent with internationally recognised data protection principles.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference.

For the purposes of this Policy, the following terms have the meanings set out below:

YES8MY collects the following categories of Personal Data depending on your level of engagement with the Platform:

3.1 Registration and Identity Data

• Full legal name as it appears on your Malaysian MyKad, passport, or other government-issued identity document.
• Date of birth (to verify you are at least 21 years old).
• Malaysian identity card number, passport number, or equivalent.
• Nationality and country of residence.
• Gender (where provided during registration).

3.2 Contact Data

• Email address registered to your Account.
• Malaysian mobile number, including WhatsApp contact where used for support.
• Residential or mailing address, including postcode, city (e.g., Kuala Lumpur, Penang, Johor Bahru), and state.

3.3 Financial and Payment Data

• Bank account details (bank name, account number, account holder name) — for FPX, Maybank, CIMB, Public Bank, and Hong Leong transactions.
• E-wallet identifiers associated with Touch 'n Go eWallet, Boost, GrabPay, or DuitNow QR where used for deposits or withdrawals.
• Cryptocurrency wallet address where USDT TRC20 payments are used.
• Transaction records, deposit amounts in MYR, withdrawal requests, and balance history.

3.4 Gaming and Behavioural Data

• Wager history, game selections, bet amounts, win/loss records, and session durations.
• Sports betting markets accessed (EPL, Liga Super Malaysia, UFC, Mix Parlay, live football, etc.).
• Bonus and promotion uptake, wagering turnover, and VIP tier information.
• Responsible gambling tool settings, including deposit limits and self-exclusion status.

3.5 Technical and Device Data

• IP address, device type, browser version, and operating system.
• Geolocation data (at jurisdiction level) derived from IP address.
• Session timestamps, pages visited, referral sources, and clickstream data.
• Log files generated by Platform servers during your sessions.

3.6 Identity Verification (KYC) Documents

• Scanned or photographed copies of government-issued identity documents submitted for age and identity verification.
• Proof-of-address documents such as utility bills or bank statements dated within three months.
• Selfie images and liveness verification where required for enhanced due diligence.

YES8MY collects Personal Data through the following channels:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact customer support, or update your Account profile.
• Automatically via the Platform — through server logs, session monitoring, cookies, pixel tags, and similar technologies that record your device and browsing activity while on the Platform.
• From payment service providers — transaction confirmation data received from FPX, e-wallet operators, DuitNow, and cryptocurrency gateways when you transact through the Platform cashier.
• From identity verification partners — document and liveness check results returned by KYC service providers where YES8MY uses third-party verification technology.
• From fraud prevention and analytics tools — device fingerprinting, risk scoring, and anomaly detection services used to protect Platform integrity.

YES8MY processes Personal Data only for legitimate, specific purposes. The table below summarises the primary processing activities:

YES8MY relies on one or more of the following legal bases when Processing your Personal Data:

• Contractual necessity — Processing required to perform the services set out in the Terms & Conditions you accepted at registration, including account management, payments, and gameplay.
• Legal obligation — Processing required to comply with applicable licensing, anti-money laundering, age-verification, and responsible gambling obligations under our international operating framework.
• Legitimate interests — Processing carried out for fraud prevention, platform security, analytics, and operational improvement, where those interests are not overridden by your privacy rights.
• Consent — Processing for optional communications, personalised promotions, and non-essential tracking features, where you have explicitly opted in. Consent may be withdrawn at any time without affecting prior Processing.

YES8MY does not disclose Personal Data to external parties except in the circumstances described below. Where data is shared with a Data Processor, appropriate contractual safeguards are in place.

• Payment service providers — FPX operators, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and cryptocurrency gateway providers receive the minimum transaction data necessary to process deposits and withdrawals.
• Identity verification and KYC providers — Third-party document verification and liveness check services receive identity documents and images solely for verification purposes.
• Fraud prevention and cybersecurity services — Device and behavioural data is shared with risk-management providers to detect suspicious activity, collusion, and unauthorised access.
• Game content providers — Where required for game operation, session and account identifiers may be shared with licensed game software providers. These parties act as Data Processors under contractual instruction.
• Licensing and regulatory authorities — YES8MY may be required to disclose player data to regulatory bodies, law enforcement agencies, or courts under applicable licensing obligations or lawful order.
• Corporate transactions — In the event of a merger, acquisition, or restructuring, Personal Data may be transferred to a successor entity subject to equivalent privacy protections.

YES8MY retains Personal Data for as long as is necessary to fulfil the purpose for which it was collected, to maintain an accurate account record, and to comply with legal, licensing, and anti-money laundering obligations.

• Active Account records — Retained throughout the period your Account remains open and active.
• Closed Account records — Retained for a minimum of five years following Account closure to satisfy regulatory record-keeping requirements.
• KYC and identity documents — Retained for the applicable regulatory minimum, which is typically five years from the date of last transaction.
• Financial transaction records — Retained for a minimum of five years as required for anti-money laundering compliance.
• Support and communication records — Retained for a minimum of two years following resolution of the relevant enquiry or complaint.
• Technical log data — Generally retained for up to 12 months before routine deletion or anonymisation.

Following the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification.

The YES8MY Platform uses cookies and similar technologies to operate core functionality, remember your preferences, and analyse usage patterns. Cookies do not give YES8MY access to your device beyond what the browser exposes through standard web APIs.

The following categories of cookies are used:

• Strictly necessary cookies — Required for authentication, session management, security tokens, and load-balancing. These cannot be disabled without affecting Platform functionality.
• Functional cookies — Remember your language preferences, display settings, and recently visited game categories to improve navigation.
• Analytics cookies — Collect anonymised or pseudonymised data about page views, session durations, and feature engagement to help YES8MY improve the Platform.
• Marketing and attribution cookies — Used, with your consent, to track the source of your visit and measure the effectiveness of YES8MY promotional campaigns.

You may manage cookie preferences through your browser settings. Disabling certain cookies may limit Platform features. Strictly necessary cookies cannot be refused without preventing normal Platform operation.

YES8MY implements technical and organisational measures designed to protect Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• TLS encryption for all data transmitted between your browser and YES8MY servers.
• Encryption at rest for sensitive stored data, including identity documents and financial records.
• Role-based access controls that restrict staff access to Personal Data on a need-to-know basis.
• Two-factor authentication options for Player Accounts.
• Regular security assessments, penetration testing, and vulnerability management procedures.
• Incident response procedures designed to detect, contain, and notify affected parties in the event of a confirmed data breach.

Subject to applicable data protection law and the conditions set out in this Policy, you have the following rights in relation to your Personal Data held by YES8MY:

• Right of access — You may request confirmation of whether YES8MY holds Personal Data about you and a copy of that data.
• Right to rectification — You may request correction of inaccurate or incomplete Personal Data. Account holders can update basic contact details directly through their profile settings.
• Right to erasure — You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to restriction — You may request that YES8MY limits Processing of your data in certain circumstances, such as while an accuracy dispute is investigated.
• Right to data portability — Where Processing is based on consent or contract, you may request a structured machine-readable copy of Personal Data you provided to YES8MY.
• Right to object — You may object to Processing based on legitimate interests, including direct marketing. Objection to marketing will be actioned promptly.
• Right to withdraw consent — Where Processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of Processing carried out before withdrawal.

To exercise any of these rights, please contact YES8MY support with your full name, Account username, and a clear description of your request. We will respond within a reasonable timeframe and may need to verify your identity before processing the request.

YES8MY does not knowingly collect Personal Data from any person under the age of 21. Registration on the Platform is strictly limited to adults aged 21 and above. Age verification is a mandatory step in the registration and KYC process.

If YES8MY becomes aware that Personal Data has been collected from a person under 21 without appropriate age verification, the associated Account will be suspended and all Personal Data collected from that individual will be deleted unless retention is required for investigation, licensing, or regulatory purposes.

If you believe a minor has registered on YES8MY using falsified information, please contact our support team immediately at [email protected].

The YES8MY Platform may display references to third-party payment providers (such as Touch 'n Go eWallet, Boost, or FPX) and game software providers. When you interact with a third-party service — for example, by authenticating an e-wallet payment or entering a game environment hosted by an external provider — that provider's own privacy practices will apply to data collected through its systems.

YES8MY is not responsible for the privacy practices of third-party service providers beyond what is governed by data processing agreements between YES8MY and those parties. We encourage you to review the privacy notices of any payment or game providers you interact with directly.

YES8MY may update this Privacy Policy from time to time to reflect changes in our data practices, legal or regulatory requirements, payment methods, or Platform features. The revised Policy will be published at https://yes8my.cam/privacy-policy with an updated effective date.

For material changes that significantly affect how your Personal Data is used, YES8MY will provide reasonable advance notice through an Account notification or prominent Platform notice. Continued use of the Platform following the effective date of an updated Policy constitutes your acceptance of the revised terms.

You are encouraged to review this Policy periodically. If you disagree with a revision, please stop using the Platform and contact support to request Account closure.

For all privacy-related enquiries, data subject rights requests, consent withdrawals, or concerns about how YES8MY handles your Personal Data, please contact our support team. To help us locate your records efficiently, include your Account username and a concise description of your request. Do not include passwords or one-time security codes in correspondence.

The email address above is displayed as plain text only and is not a clickable link. For additional guidance, please visit our FAQ page.