Important Note: This Privacy Policy applies to all users of the y2win platform, including members who register through the website y2win.net and the official y2win mobile app. By using our platform, you agree to how we handle your personal data as described in this document.
1Introduction and y2win Privacy Commitment
Y2win understands that your trust is our most valuable asset. As an online entertainment platform serving hundreds of thousands of players across Malaysia, we treat every piece of personal information you provide with the highest standards of confidentiality and security.
This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards. We do not merely comply with existing law — we go further by implementing industry best practices to ensure your data is always safeguarded.
We believe transparency is the foundation of trust. That is why this document is written in plain, easy-to-understand language — not convoluted legal jargon. You have the right to know exactly what happens to your information, and we are committed to keeping you informed at all times.
y2win is a registered data trustee and bears full responsibility for protecting the personal information of all platform members.
2Types of Personal Data We Collect
Y2win only collects data that is strictly necessary to provide a safe, efficient, and legally compliant service. The following are the categories of data we collect:
| Data Category | Example Information | Purpose of Collection |
|---|---|---|
| Identity Information | Full name, MyKad number, date of birth, gender | Identity verification (KYC), fraud prevention |
| Contact Information | Email address, phone number, residential address | Account communications, customer support |
| Financial Information | Bank account number, bank name, transaction records | Deposit and withdrawal processing |
| Technical Data | IP address, device type, web browser, operating system | Account security, suspicious activity detection |
| Usage Data | Game history, betting records, active session duration | Responsible gaming compliance, platform analytics |
| Communication Data | Live chat logs, support tickets, incoming/outgoing emails | Complaint resolution, service quality improvement |
We never collect sensitive information such as your medical records, religious beliefs, or political views. Data collected is solely for legitimate platform operational purposes.
3How We Use Your Data
Every piece of data you provide to y2win has a clear and legitimate purpose. We do not use your data beyond what is necessary to deliver the platform's services.
- Account Management: Creating, verifying, and maintaining your account so you can log in securely at all times.
- Transaction Processing: Ensuring every deposit and withdrawal is processed accurately and securely to the correct account.
- KYC Verification: Meeting Malaysia's legal requirements to verify user identity and prevent money laundering.
- Platform Security: Detecting and preventing unauthorised access, fraud, and illegal activities that could compromise your account.
- Customer Support: Providing accurate and personalised assistance whenever you contact the y2win support team.
- Service Communications: Sending important notifications related to your account, transactions, and platform policy updates.
- Marketing (with consent): Sending promotional offers, bonuses, and the latest y2win news to members who have opted in to receive them.
- Platform Improvement: Analysing usage data in aggregate to improve user experience and platform performance.
You may withdraw consent for marketing communications at any time through your account settings or by contacting our support team. Withdrawing this consent does not affect core platform services.
4Information Sharing and Disclosure
Y2win does not sell, rent, or trade your personal data to any third party for their own commercial purposes. This is a commitment we do not compromise on.
However, there are certain situations where we may share your information with the following parties, solely for the stated purposes:
- Payment Providers: Information required to process deposit and withdrawal transactions is shared with recognised payment providers such as banks and digital wallet operators. All such providers are bound by strict confidentiality agreements.
- Game Providers: Minimal game data is shared with licensed game providers to ensure a smooth and fair gaming experience.
- Law Enforcement: y2win will disclose required information when mandated by a court order, warrant, or directive from a legitimate Malaysian authority.
- Fraud Prevention: Information may be shared with recognised fraud prevention agencies to protect the platform and all its users.
- Technical Service Providers: Cloud infrastructure and cybersecurity providers that help operate our platform are bound by strict data processing agreements and may not use your data for any other purpose.
In all data-sharing instances, y2win ensures that an equivalent or higher level of protection than the standards we apply to ourselves is upheld by all receiving parties.
5Data Storage and Security Measures
Your data security is not merely a slogan for y2win — it is an ongoing investment we take very seriously. Here are the security layers protecting your information at all times:
- 256-bit SSL Encryption: All data transmitted between your device and y2win's servers is encrypted using the latest TLS 1.3 protocol, ensuring no third party can intercept your data in transit.
- Data-at-Rest Encryption: Personal and financial data stored in our databases is protected with military-grade AES-256 encryption.
- Layered Access Control: Only authorised personnel with a genuine need may access users' personal data, with every access logged and monitored.
- Regular Security Scanning: Our systems undergo independent penetration testing and security audits on a quarterly basis.
- 24/7 Monitoring: The y2win cybersecurity team monitors all system activity around the clock to detect and respond to any threats promptly.
Data Retention Period: y2win retains your personal data for as long as your account is active, and for any additional period required by Malaysian law — typically seven (7) years after account closure for financial records. Data that is no longer needed is securely deleted using irreversible methods.
y2win's primary servers are hosted in ISO 27001-certified data centres with comprehensive redundancy and disaster recovery systems.
6Cookies, Tracking, and Similar Technologies
Y2win uses cookies and similar tracking technologies to enhance your experience on our platform. Understanding how we use them helps you make informed choices about your privacy.
Types of cookies we use:
- Essential Cookies (Required): These cookies are required for core platform functions such as login, session security, and language preferences. Without them, the platform will not function properly.
- Performance Cookies: Collecting anonymous information about how users interact with the platform, helping us identify areas for improvement.
- Functional Cookies: Saving your preferences such as display settings, preferred language, and login details for a more convenient experience next time.
- Analytics Cookies: Helping us understand platform usage patterns in aggregate to make better development decisions.
You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of some areas of the y2win platform.
7Your Rights as a Data Owner
Under Malaysia's Personal Data Protection Act 2010, you have certain rights regarding your personal data that y2win is obligated to respect. We encourage you to familiarise yourself with these rights:
To exercise any of the above rights, contact the y2win Data Protection Officer (DPO) team via Live Chat or email at [email protected]. We will process your request within 30 business days.
8Child Data Protection
The y2win platform is intended exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.
The y2win registration system is equipped with an integrated age verification mechanism to prevent access by minors. Should we discover that personal data of an underage individual has been collected inadvertently, we will take immediate action to:
- Immediately deleting all related data from our systems.
- Closing the associated account and returning any remaining balance.
- Reporting the case to the relevant authorities if necessary.
If you become aware that a minor has registered a y2win account, please contact us immediately at [email protected] so that we may take prompt action.
9Third-Party Links and Services
The y2win platform may contain references to third-party services such as game providers, payment processors, and marketing partners. It is important that you understand the following:
- The y2win Privacy Policy applies solely to the y2win platform itself, not to any third-party services that may be linked.
- Each third-party game provider has its own privacy policy governing how they handle data.
- Y2win carefully selects third-party partners and only works with companies that maintain strong data protection standards.
- We recommend that you read the privacy policy of any third party you interact with directly.
Y2win conducts regular reviews of all third-party partners to ensure they continue to comply with the data protection standards set out in our mutual contractual agreements.
10Amendments to This Privacy Policy
The technology landscape and legal environment are constantly evolving, and our Privacy Policy will be updated from time to time to reflect those changes. y2win is committed to informing you of any material changes that affect how we handle your data.
When a material amendment occurs, we will:
- Updating the "Last Updated" date at the top of this document.
- Displaying a clear notice on the platform upon your next login.
- Sending notification emails to the address registered on your account.
Continued use of the y2win platform after any amendments take effect will be considered your acceptance of the updated Privacy Policy. If you do not agree with the amendments, please contact us to discuss further or to close your account.
11Contact Our Data Protection Officer
If you have any questions, concerns, or complaints regarding how y2win handles your personal data, we encourage you to contact us directly. Our Data Protection Officer (DPO) team is ready to assist.
- DPO Email: [email protected] (response within 5 business days)
- General Support: [email protected]
- Live Chat: Available 24/7 via the chat icon on the y2win platform
If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the regulatory body responsible under the Personal Data Protection Act 2010.
Why Your Privacy Is Safe with y2win
Military-Grade Encryption
Your data is protected with 256-bit SSL and AES-256 encryption — the same security technology used by leading financial institutions worldwide.
Integrated & Secure KYC
Our identity verification process is carried out through an integrated and secure system. Your documents are processed in strict confidence and are never shared without your consent.
No Data Sales
Y2win has never and will never sell your personal data to advertisers or other companies. Your data belongs to you — we are only its responsible trustee.
Malaysia PDPA Compliance
Our privacy policy is developed in full compliance with Malaysia's Personal Data Protection Act 2010 and is overseen by a certified Data Protection Officer.
24/7 Security Monitoring
Our cybersecurity team monitors our systems around the clock and responds to any threats in real time to protect your account.
Full Control in Your Hands
You can access, amend, or delete your data at any time. Full control stays in your hands — not ours.