Yes66 takes your privacy seriously. This policy explains transparently how we collect, use, store and protect your personal information as a registered yes66 platform member in Malaysia.
Yes66's six core commitments to protecting the personal data of every Malaysian member
Every bit of data that travels between your device and yes66's servers is protected by 256-bit SSL encryption — the same level of security used by Malaysia's major banks. Your identity card details, bank account information, and RM transaction history never travel in plain text.
Yes66 never sells, rents, or commercialises your personal data to any advertiser or third-party data broker. Your information — name, phone number, address, gaming history — belongs to you and is used solely for the operation of the yes66 platform.
Within the yes66 organisation, access to members' personal data is strictly limited to staff who require that information to perform their duties. All staff sign confidentiality agreements and complete data protection training before being granted any access.
You have the right to access, update, correct or request the deletion of your personal data at yes66 at any time. Requests can be submitted through yes66 support and will be processed within 14 business days — at no charge and without unnecessary questions.
Every promotional email, SMS notification, or WhatsApp marketing message from yes66 includes a working unsubscribe link. You can opt out of marketing communications at any time without affecting your yes66 account or core services.
Yes66 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. Our privacy compliance programme is reviewed regularly by both our internal legal team and external advisors to ensure continued adherence.
This Privacy Policy is issued by yes66 and applies to all personal information collected, processed and stored by yes66 in connection with the use of the yes66 platform, accessible via the website https://yes66.best and the official yes66 mobile application, by registered Malaysian members.
Yes66 is fully committed to protecting the privacy of every member who uses our platform. We believe that transparency is the foundation of trust — which is why this Privacy Policy is written in plain, straightforward language rather than confusing legal jargon. We want every yes66 member to genuinely understand what happens to their data, not simply click "Agree" without reading.
This Privacy Policy explains:
By registering an account with yes66, accessing the platform or using any yes66 services, you confirm that you have read and agreed to this Privacy Policy. This Privacy Policy forms part of yes66's Terms & Conditions and should be read alongside that document. If you do not agree, please do not use the yes66 platform.
Yes66 collects various categories of personal information depending on how you interact with our platform. Below is a detailed breakdown of each category:
A. Registration & Identity Data
B. Financial Transaction Data
C. Technical & Usage Data
D. Communication Data
Important Note: yes66 never stores your credit or debit card number directly on our servers. All card payment processing is handled entirely by PCI DSS-compliant third-party payment processors. yes66 receives only a transaction token — never your actual card data.
Yes66 uses collected personal data solely for legitimate, stated purposes. Below is a full table of data usage purposes together with the types of data involved:
| Purpose of Use | Data Categories Involved |
|---|---|
| Registration & account management | Identity data, contact data |
| Identity verification (KYC) | Identity data, KYC documents |
| Processing RM deposits & withdrawals | Financial data, transaction data |
| Provision of gaming services | Usage data, game history |
| 24/7 customer support | Identity data, communication data |
| Fraud prevention & AML | All data categories |
| Responsible gambling | Game history, usage data |
| Marketing communications (with consent) | Contact details, preferences |
| Platform improvement & analytics | Technical data, usage data (anonymised) |
| Legal & Regulatory Compliance | All relevant data categories |
Yes66 will not use your data for any purpose other than those stated above without first obtaining fresh consent from you, unless required to do so by law.
Yes66 processes your personal data on one or more of the following legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection laws:
Yes66 does not sell, rent or disclose your personal data to third parties for their commercial gain. However, in order to operate a safe and compliant platform, yes66 may share your data with the following categories of third parties under limited and controlled circumstances:
All third parties who receive personal data of yes66 members are required to sign a Data Processing Agreement (DPA) that binds them to data protection standards at least as stringent as our own. yes66 conducts periodic reviews of these third parties to ensure ongoing compliance.
Yes66 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. This is not merely a slogan — it is a real investment in infrastructure that safeguards your data at all times.
Technical Measures:
Organisational Measures:
If You Suspect a Security Breach: Contact the yes66 support team immediately via Live Chat or email support@yes66.best if you suspect your account has been accessed without authorisation, receive suspicious emails or messages claiming to be from yes66, or notice any unrecognised activity in your account.
Yes66 retains your personal data for as long as necessary to fulfil the original purpose of collection and to comply with applicable legal obligations. Below is a guide to retention periods for key data categories:
| Data Category | Retention Period | Reason |
|---|---|---|
| Active account identity data | Lifetime of account + 7 years | AML & audit requirements |
| Financial transaction records in RM | 7 years from the date of transaction | Tax & financial legal obligations |
| Gaming history | 5 years from the date of the game | Disputes & responsible gaming |
| Support communication logs | 3 years after conversation | Dispute resolution |
| Technical data & access logs | Rolling 12 months | Security & Forensics |
| KYC records & identification documents | 7 years after account closure | AML & licensing requirements |
Once the retention period expires, your data will be securely deleted using data erasure methods that meet NIST 800-88 standards, or fully anonymised so that it can no longer be linked back to your identity. You may request early deletion (subject to any overriding legal retention obligations) through the channels set out in Section 9.
In the course of its operations, yes66 may need to transfer your personal data to other countries — for example, for cloud services, technical support, or integration with international game providers. Personal data of Malaysian members may be processed on servers located outside Malaysia.
When such data transfers occur, yes66 ensures adequate protection by:
Data transfers never take place for third-party sales or marketing purposes. You have the right to ask yes66 which countries your data may be processed in and to obtain information about the safeguards in place.
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection principles, you have the following rights regarding the personal data yes66 holds about you. yes66 is committed to facilitating the exercise of these rights without unnecessary obstacles.
You have the right to request a copy of all personal data yes66 holds about you. yes66 will provide a copy in a readable format within 14 business days of receiving a valid request.
If the personal data yes66 holds about you is inaccurate or incomplete, you have the right to request immediate correction. Log in to your yes66 account and update your profile, or contact our support team for changes that require verification.
You may request that yes66 delete your personal data when it is no longer needed for its original purpose, when you withdraw your consent, or when the data has been processed unlawfully. This right is subject to legal retention obligations that override such requests.
In certain circumstances — for example, when you are disputing the accuracy of your data or objecting to its processing — you may request that yes66 restrict the processing of your data while the matter is being resolved.
You have the right to receive the personal data you have provided to yes66 in a structured, machine-readable format (JSON or CSV) so that you can transfer it to another service provider if you wish.
You may object to the processing of your data where it is based on yes66's legitimate interests or for direct marketing purposes at any time. To opt out of marketing communications, use the unsubscribe link or contact yes66 support.
To exercise any of the above rights, contact the yes66 Privacy Officer by email at support@yes66.best with the subject line "Privacy Rights Request — [Request Type]", along with your full name, yes66 account number, and a description of your request. yes66 will verify your identity and respond within 14 business days. This service is completely free for all yes66 members.
Yes66 uses cookies and similar tracking technologies to ensure the platform functions properly, enhance user experience, and understand how members interact with our platform. Below is an explanation of the types of cookies used:
These cookies are required for the core functions of the yes66 platform — login authentication, session management, CSRF security, and platform stability. Without them, the yes66 platform cannot function. These cookies do not store any personally identifiable information beyond an encrypted session token.
Yes66 uses internal analytics tools to understand platform usage patterns in an aggregated and anonymised form — which pages are visited most, how long the average session lasts, and which features are most popular. This information helps us make informed product improvement decisions. Analytics data is not linked to your personal identity.
These cookies store your preferences on the yes66 platform — such as your preferred language, display theme, games-per-page setting, and notification preferences. Disabling them means you will need to reconfigure these preferences each time you visit the platform.
You can manage your cookie settings through the Privacy Settings panel in your yes66 account or via your browser settings. Please note that disabling essential cookies will significantly affect the functionality of the yes66 platform.
The yes66 platform is exclusively for individuals aged 18 and above. yes66 does not knowingly collect, process, or store personal data from individuals under the age of 18.
If yes66 discovers or has reasonable grounds to believe that personal data of a minor has been collected without valid consent, we will take immediate action to:
If you are a parent or guardian and have reason to believe that your underage child has registered a yes66 account, please contact us immediately at support@yes66.best so we can take prompt action.
Yes66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements, or changes to the services we offer. The "Updated" date at the top of this page will always reflect the latest version.
For material amendments — changes that significantly affect your privacy rights or how your data is used — yes66 will notify you through:
Continued use of the yes66 platform after an amendment notice has been issued and the stated effective date constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you have the right to close your account before the amendments take effect.
Yes66 has appointed a Data Protection Officer (DPO) responsible for overseeing data protection compliance within our organisation and serving as the first point of contact for all privacy-related enquiries, requests, and complaints from members.
You can reach the yes66 Privacy Officer through the following channels:
Yes66 commits to:
If you are not satisfied with how yes66 has handled your privacy request or complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia or the relevant data protection authority in your jurisdiction. yes66 encourages you to contact us first so that we can attempt to resolve the matter directly before that step is taken.
In today's digital age, almost everything we do online leaves a data trail. When you register a yes66 account, deposit via Touch 'n Go eWallet or GrabPay, place a bet on a Malaysia Super League match, or play blackjack at the live casino — all of these activities generate data. That data is valuable, and how a platform handles it reflects how seriously they respect their users.
At yes66, we do not treat members' personal data as a commercial asset to be monetised. We regard it as information entrusted to us for specific purposes — and that trust is a responsibility we take very seriously. This is one of the key reasons yes66 has built a community of over 120,000 active members in Malaysia within five years — players know their data is safe here.
Take a simple example: when you deposit RM 50 into your yes66 account via DuitNow, the transaction involves your banking details, phone number, and the amount transferred. All of this information travels through channels protected with end-to-end 256-bit SSL encryption. yes66 does not store your bank account number directly — only a unique token issued by the payment processor. This means that even in the highly unlikely scenario where our systems are compromised, an attacker cannot use that token to access your bank account.
Marketing communications are a privacy aspect that many other platforms overlook. yes66 takes a clear position: we will only send you marketing communications if you have given explicit consent to receive them. And when you decide to stop receiving promotional emails or yes66 SMS notifications, the unsubscribe link we provide takes effect immediately — not hidden behind an unreasonable "allow up to 30 days to process" clause.
Yes66 is also acutely aware of the sensitivity of gambling-related data. Your betting history, how much you have won or lost, which sports you follow — this is deeply personal information. We do not share these details with any party without a clear legal requirement to do so. The yes66 customer support team has access to basic account information to assist you, but they have no reason to review your detailed game history unless there is a dispute or a specific request from you.
In the Malaysian context, the Personal Data Protection Act 2010 (PDPA) provides the key legal framework for user data protection. yes66 fully complies with Malaysia's PDPA and treats it as a minimum standard — not a maximum. We continuously strive to exceed minimum compliance requirements and apply a "privacy by default" principle across all new product development.
Yes66's responsible gambling programme also carries an important privacy dimension. When you set daily deposit limits, loss limits or session time limits on your yes66 account, that information is entirely private and is not shared with any third party. Even within the yes66 team itself, access to members' personal gambling limit settings is strictly restricted and is only permitted for the purpose of ensuring those limits are properly enforced.
If you would like to know exactly what data yes66 holds about you at any time, you may submit a data access request by emailing support@yes66.best. yes66 will provide a full report within 14 business days — free of charge and without asking why you made the request. This is your right as a yes66 member and as a user protected under Malaysia's PDPA, and we respect that right in full.
The yes66 Privacy Policy is a living document that we update whenever our practices change or new legislation comes into effect. To view the history of changes or to ask about a specific amendment, contact us at support@yes66.best. For information on how we handle financial data, please also read Terms & Conditions yes66 ours.
Your responsible gambling data — limits you have set, self-exclusion periods, any interactions with support related to gambling concerns — is handled with the utmost confidentiality at yes66. This information is never shared with third parties and is used solely to protect your wellbeing. The yes66 platform is for individuals aged 18 and above only.
Yes66 protects your personal data with 256-bit SSL encryption, a transparent privacy policy, and full compliance with Malaysia's PDPA. Over 120,000 members have already trusted us — join them today with complete confidence.