Privacy Policy
yes666 Data Commitment

This Privacy Policy ("Policy") sets out the basis on which yes666 ("yes666", "the Platform", "we", "us", "our") collects, processes, stores, and protects personal data relating to individuals ("Players", "Users", "you") who register for and use the yes666 online casino and sports betting platform accessible at https://yes666.cam.

yes666 is committed to protecting your personal information and your right to privacy. We recognise that when you provide us with personal data — whether during registration, KYC verification, financial transactions, or general platform use — you are placing trust in us to handle that information responsibly. We take that responsibility seriously.

This Policy applies to all personal data processed by yes666 in connection with the operation of the Platform, including data collected from Malaysian players located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia more broadly.

By registering an Account on yes666 or by continuing to use the Platform following any update to this Policy, you acknowledge that you have read and understood the terms of this Policy and consent to the processing of your personal data as described herein.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information that relates to an identified or identifiable natural person. This includes your name, IC number, email address, phone number, date of birth, residential address, payment account details, and IP address.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure, and destruction.
• "Data Controller" means the entity that determines the purposes and means by which personal data is processed. For data collected through the yes666 Platform, yes666 is the Data Controller.
• "Third-Party Service Provider" means any external organisation engaged by yes666 to provide specific services — such as payment processing, KYC verification, fraud detection, or technical infrastructure — that may involve the processing of player data on yes666's behalf.
• "Cookies" means small text files placed on your device by the yes666 Platform for the purposes of session management, user preference storage, and anonymous usage analytics.

yes666 acts as the Data Controller for all personal data collected through the Platform. As Data Controller, yes666 determines the purposes for which personal data is collected and the means by which it is processed.

yes666 processes player data in accordance with this Privacy Policy and applicable data protection principles. If you have any questions regarding yes666's data processing activities or wish to exercise any of your data rights, you may contact us through the channels specified in Section 15 of this Policy.

yes666 collects personal data across several categories, each of which serves a specific operational or compliance purpose. The categories of personal data we may collect include:

yes666 collects personal data through the following channels and mechanisms:

• Direct Collection: Information you provide voluntarily when registering an Account, completing the KYC verification process, submitting deposit or withdrawal requests, contacting customer support, or responding to surveys and promotional communications.
• Automated Collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser information, session logs, and cookies. This data is collected through server logs, cookies, and similar tracking technologies as described in Section 9.
• Third-Party Verification: Data received from third-party KYC verification providers, payment processors, and fraud detection services engaged by yes666 to assist in identity verification and transaction monitoring. Such providers process data on yes666's instructions and are contractually bound to data protection obligations.
• Transaction Records: Data generated through your use of the Platform, including records of bets placed, games played, deposits made via Malaysian payment channels (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect), and withdrawals processed.

yes666 processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms and Conditions you agreed to upon registration, including Account management, transaction processing, and customer support.
• Consent: Processing carried out on the basis of your explicit consent, including sending promotional communications and optional personalisation features. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Legal Obligation: Processing necessary to comply with applicable legal requirements, including KYC verification, anti-money laundering checks, record-keeping obligations, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing carried out for yes666's legitimate business interests, including fraud prevention, platform security, service quality improvement, and responsible gambling monitoring — provided such interests are not overridden by your fundamental rights and freedoms.

yes666 uses personal data collected from players for the following purposes:

• Account Management: Creating and maintaining your registered Account, processing login authentication, managing Account settings, and communicating Account-related updates to you.
• Identity & Age Verification: Conducting KYC checks to confirm your identity and verify that you meet the 21-year minimum age requirement for access to the Platform.
• Transaction Processing: Processing your deposit and withdrawal requests through approved Malaysian payment methods, including reconciliation of transactions and management of bonus fund allocations.
• Customer Support: Responding to support enquiries submitted via live chat or email, resolving Account disputes, and maintaining records of communications for quality assurance purposes.
• Fraud & Security: Detecting, investigating, and preventing fraudulent activity, account takeover attempts, money laundering, and other prohibited conduct as defined in our Terms and Conditions.
• Responsible Gambling Monitoring: Monitoring betting patterns and platform usage to identify potential signs of problem gambling behaviour, in order to trigger appropriate responsible gambling interventions and self-exclusion enforcement.
• Legal & Regulatory Compliance: Maintaining records required under applicable laws and regulations, responding to lawful requests from regulatory authorities, and cooperating with law enforcement investigations where required.
• Platform Improvement: Analysing anonymised and aggregated usage data to understand how players interact with the Platform, identify areas for improvement, and develop new features and services.
• Marketing Communications: Where you have provided explicit consent, sending you information about promotions, bonuses, and offers available on yes666 — including Deepavali seasonal promotions, sports betting offers tied to Liga Super Malaysia and EPL fixtures, and other targeted campaigns. You may opt out of marketing communications at any time.

yes666 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We may, however, share your personal data with the following categories of recipients where necessary and lawful:

• Payment Processors: Third-party payment service providers that facilitate your deposit and withdrawal transactions, including operators of e-wallet platforms (Touch 'n Go eWallet, Boost, GrabPay), DuitNow, FPX gateway providers, and relevant Malaysian banking institutions. These providers receive only the data necessary to process your specific transaction.
• KYC & Identity Verification Providers: Third-party identity verification and document authentication services engaged to assist with KYC compliance. Such providers act as data processors under instruction from yes666 and are subject to binding data protection agreements.
• Fraud Detection & AML Services: Specialist security and anti-money laundering service providers that assist yes666 in detecting and preventing fraudulent activity and financial crime. Data shared with such providers is strictly limited to what is necessary for risk assessment.
• IT & Infrastructure Providers: Cloud hosting, database management, and cybersecurity service providers that maintain the technical infrastructure on which yes666 operates. Such providers access player data only to the extent necessary to provide their contracted services.
• Regulatory Authorities & Law Enforcement: Where required by applicable law, court order, or legitimate regulatory request, yes666 may disclose personal data to relevant authorities without prior notice to the account holder.

yes666 uses cookies and similar technologies — including session tokens, local storage, and pixel tags — to operate and improve the Platform. The categories of cookies we use are described below:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as user authentication, session management, and security controls. These cookies cannot be disabled without preventing your access to the Platform.
• Functional Cookies: These cookies remember your preferences — such as language settings, preferred payment method, and responsible gambling settings — to provide a more personalised and consistent experience when you return to the Platform.
• Analytical Cookies: These cookies collect anonymised, aggregated data about how players navigate the Platform. This information is used solely for internal purposes to improve Platform performance, identify technical issues, and understand user journeys. We do not share analytical data with advertising networks.
• Security Cookies: These cookies support our fraud detection and security systems by helping us identify suspicious login patterns, unusual activity, and potential account compromise attempts. They are essential to the security of your Account.

You may control cookie behaviour through your browser settings. Please note that disabling certain categories of cookies — particularly strictly necessary and security cookies — may affect the functionality of the Platform and your ability to access your Account. yes666 does not use cookies to serve targeted advertising or to track your activity on websites not operated by yes666.

yes666 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The following retention periods apply as a general guide:

• Active Account Data: Personal data associated with an active Account is retained for the duration of the Account's active status and for a period of at least five (5) years following Account closure, in accordance with applicable record-keeping and AML compliance obligations.
• KYC Documentation: Identity verification documents are retained for a minimum of five (5) years from the date of submission, consistent with standard AML compliance requirements.
• Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years from the date of the transaction.
• Betting & Gaming Records: Records of bets placed and games played are retained for a minimum of five (5) years for regulatory compliance and dispute resolution purposes.
• Support Communications: Customer support interaction records are retained for a period of three (3) years following the date of last communication.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures. Anonymised data — from which you can no longer be identified — may be retained indefinitely for analytical and statistical purposes.

yes666 has implemented a comprehensive set of technical, organisational, and procedural security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, and destruction. Our security framework includes:

• Encryption in Transit: All data transmitted between your browser or device and yes666's servers is encrypted using 256-bit SSL/TLS protocols. This includes login authentication, financial transactions, KYC submissions, and all other data exchanges.
• Encryption at Rest: Sensitive personal data stored on yes666's servers — including KYC documentation, financial records, and authentication credentials — is encrypted using strong cryptographic standards.
• Access Controls: Access to personal data within yes666's systems is strictly controlled and limited to authorised personnel who require access to perform their specific job functions. Access rights are reviewed regularly.
• Intrusion Detection: yes666 operates continuous monitoring systems designed to detect and respond to unauthorised access attempts, unusual activity patterns, and potential security incidents in real time.
• Regular Security Reviews: We conduct periodic security assessments and vulnerability testing to identify and remediate weaknesses in our infrastructure before they can be exploited.

While yes666 applies rigorous security measures, no transmission of data over the internet and no system of data storage can be guaranteed to be completely secure. You are also responsible for maintaining the security of your Account credentials, as outlined in our Terms and Conditions.

As a player whose personal data is processed by yes666, you have the following rights with respect to your personal information. These rights apply subject to applicable law and any overriding legal obligations that may restrict their exercise in specific circumstances:

To exercise any of the above rights, please submit your request to yes666 via live chat on the Platform or by email at support@yes666.cam. yes666 will respond to data rights requests within a reasonable timeframe, and in any case within 30 calendar days of receipt of a valid request. We may require verification of your identity before processing a data rights request.

yes666 is strictly an adults-only platform. The Platform is not intended for, directed at, or available to individuals under the age of 21. yes666 does not knowingly collect or process personal data from individuals under the age of 21.

If yes666 becomes aware that personal data has been collected from an individual under 21 years of age — whether through underage registration, misrepresentation of age during registration, or any other means — we will take immediate steps to:

• Suspend and permanently close the relevant Account;
• Delete or anonymise all personal data associated with the underage Account from our systems; and
• Refund any real-money deposits made to the Account through the original payment method, subject to verification.

yes666 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing activities, updates to applicable law, or improvements to our data protection practices.

Where changes to this Policy are material — meaning they substantively alter how your personal data is collected, used, or shared — yes666 will provide advance notice by displaying a prominent notice on the Platform and, where possible, by notifying you via the email address registered on your Account.

The most current version of this Privacy Policy will always be accessible at https://yes666.cam/privacy-policy. The "Last Updated" date at the top of this document indicates when the most recent revision was made. Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you must discontinue your use of the Platform and may request Account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to yes666's handling of your personal data — including requests to exercise your data rights under Section 12 — please contact our support team through the following channels:

We welcome feedback on our privacy practices and take all enquiries seriously. Our support team is available around the clock to assist players across Malaysia, and all privacy-related communications are handled with confidentiality and professionalism.