Privacy Policy yes666 — Member Data Protection & Privacy

Yes666 collects the personal information necessary to provide a safe, responsible, and high-quality online casino service to all members. Data collection is carried out transparently and covers only information that is genuinely required for platform operations.

Information you provide directly:

• Full name as it appears on your official identification document (national ID or passport).
• Date of birth for age eligibility verification (18 years and above).
• An active email address for your personal use.
• Mobile phone number registered in your name.
• Bank account or e-wallet details for processing deposits and withdrawals.
• Identity verification documents (copy of national ID, passport, or utility bill) during the KYC process.

Automatically collected information:

• IP address and device information (device type, operating system, and web browser used).
• Access logs include the date, time, and pages visited within the platform.
• Game session data including wagering activity, game outcomes, and session duration.
• Yes666 mobile app usage data if you access the platform via the app.
• Cookie and similar tracking technology data used to improve the user experience.

The personal information we collect is used exclusively for lawful, defined purposes. yes666 does not use your data for any purpose unrelated to the delivery of platform services.

Yes666 uses your gaming session data to monitor gambling patterns for responsible gaming purposes. If our system identifies any concerning patterns, our team may reach out with appropriate support resources. This is part of our commitment to member well-being.

Yes666 does not sell, rent, or disclose members' personal information to third parties for commercial purposes. However, in the course of platform operations, we may share data with the following categories of parties under strict confidentiality agreements:

• Payment service providers: FPX, Touch 'n Go, GrabPay, and other e-wallet processors used to handle your financial transactions securely.
• Game providers: Casino and game software providers such as slot providers, Live Casino, and Fish Shooting Games operators running within the yes666 platform.
• Identity verification services: Third-party providers that assist us with the KYC process and member identity document verification.
• Cloud services and infrastructure: Server and cloud service providers that store and process platform data, subject to strict data processing agreements.
• Regulatory authorities and law enforcement: Only when required by applicable law, court order, or a legitimate law enforcement investigation.

All third-party partners are required to meet data protection standards equal to or stricter than those of yes666. We conduct regular reviews of our partners to ensure ongoing compliance.

Yes666 consistently invests in cutting-edge cybersecurity infrastructure to protect the personal data of all members. Our security approach is multi-layered, meaning that even if one layer of defence is compromised, the remaining layers continue to provide robust protection.

• Data encryption in transit: All communications between your device and yes666 servers use TLS 1.3 protocol with AES-256 encryption, ensuring no data can be intercepted in transit.
• Data encryption at rest: Sensitive data stored in our database is encrypted using strong asymmetric encryption, meaning the data remains unreadable even if the database is accessed without authorization.
• Role-based access control: Only specifically authorized personnel may access member personal data, and every access is automatically logged and audited.
• Two-factor authentication (2FA): All internal staff accounts with access to data systems are protected by mandatory two-factor authentication.
• Regular security testing: yes666 conducts regular penetration testing and security audits by independent experts to identify and address any system vulnerabilities.
• Real-time threat monitoring: Automated monitoring systems operate 24 hours a day to detect and respond to any suspicious activity on the platform.

Cookies are small text files stored on your device when you visit yes666.onl. We use cookies to enhance the user experience, maintain login sessions, and understand how members use our platform. Below are the cookie categories we use:

• Essential Cookies (Required): Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled as they govern basic website operations.
• Performance Cookies: Used to collect information on how the platform is used — most visited pages, page load times, and errors encountered — to help us improve the user experience.
• Functional Cookies: Allows the platform to remember your preferences such as preferred currency, game settings, and display preferences to deliver a more personalised experience.
• Analytics Cookies: We use internal analytics services to understand overall platform usage patterns for the purpose of continuous improvement.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality and your experience on the yes666 platform.

Yes666 respects and upholds your privacy rights. As a member of our platform, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the yes666 support team via 24/7 Live Chat or send an email to [email protected]. We will process your request within 30 business days.

Yes666 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law. Retention periods vary depending on the data category and legal requirements:

• Active account data: Retained for the duration your account remains active on the yes666 platform.
• Financial transaction records: Retained for at least 7 years after account closure in accordance with Malaysian financial legal requirements.
• KYC Documents: Retained for 5 years after account closure in accordance with anti-money laundering (AML) requirements.
• Customer support communication logs: Retained for 3 years after case resolution.
• Access and security log data: Retained for 12 months for security investigation purposes.

Once the defined retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered. Data that must be retained for legal purposes will be stored in isolated systems with restricted access.

Yes666 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform service improvements. Any amendments will be published on this page with a clear update date.

For material amendments — changes that significantly affect how we process your personal data — yes666 will provide at least 14 days' advance notice before the changes take effect, via:

• Email to the address registered to your account.
• In-platform notifications while you are logged in.
• A clear notice on the yes666.onl homepage.

Continued use of the yes666 platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy. If you do not agree with the proposed changes, you have the right to close your account before the amendment takes effect.

If you have any questions, concerns, or complaints regarding how yes666 handles your personal data, our privacy team is ready to assist you. We are committed to providing prompt and thorough responses to all privacy-related enquiries.

You can reach us via:

• Live Chat Platform: Available 24 hours a day, 7 days a week. Response time is typically under 2 minutes.
• Email: [email protected] — response within 24–48 business hours.

When contacting us about a privacy matter, please include your account number (if applicable) and a clear description of your request so our team can process it quickly and accurately.