Official Data Protection

Y2win Privacy Policy – Protection of Your Personal Data

Your privacy is our priority. This policy clearly explains how y2win collects, uses, stores and protects the personal information of every member in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last Updated: 1 January 2026
🔐
Encryption
256-bit SSL
🛡️
Compliance
PDPA 2010
🚫
Data Sales
None Whatsoever
Player Rights
Fully Licensed
⏱️
Complaint Response
≤ 14 Days

Commitment Privacy y2win

Six core pillars that form the foundation of personal data protection for every y2win member.

🔒
End-to-End Encryption

All data transmitted between your device and y2win's servers is protected by industry-standard 256-bit SSL encryption, ensuring no third party can intercept your information.

📋
Minimum Data Collection

Y2win only collects data that is strictly necessary for platform operations, legal compliance and identity verification. No excess data is collected without a clear purpose.

🚫
No Data Sales

Y2win has never and will never sell, rent or transfer your personal data to third parties for marketing or advertising purposes without your explicit consent.

⚖️
Malaysia PDPA Compliance

All data management operations at y2win comply with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring your rights as a local player are fully upheld at all times.

👤
Data Control in Your Hands

You have the right to access, correct, transfer, and request deletion of your personal data at any time through the y2win support centre, which operates 24/7.

🔍
Regular Security Audits

Y2win's security systems and privacy policy are reviewed regularly by our internal security team and independent third-party experts to ensure the latest protections remain active.

1 Personal Information We Collect

When you register and use the y2win platform, we collect several categories of information to ensure a smooth, secure gaming experience that complies with applicable legal requirements in Malaysia.

Information you provide directly:

  • Full name as shown on your official identification document
  • Active email address used for account communications
  • A valid Malaysian mobile phone number
  • Date of birth for age verification (18+ only)
  • Current residential address
  • Payment method details (bank account number, account holder name) for processing deposits and withdrawals
  • KYC documents: MyKad, passport, or other recognised identification documents

Information collected automatically:

  • IP address and general location data
  • Device type, operating system, and browser version
  • Login and logout session records
  • Game history, deposits, withdrawals and bonus activity
  • Cookie data and session identifiers for an improved user experience
y2win never directly collects credit card numbers or sensitive financial information. All transactions are processed through licensed payment gateways that maintain their own PCI-DSS security standards.

2 How We Use Your Data

The personal data we collect is used solely for legitimate and transparent purposes. y2win does not use your data for any purpose not stated in this privacy policy without obtaining your consent first.

Purpose of Use Types of Data Involved Legal Basis
Account management and verification Name, email address, date of birth Contract fulfillment
Deposit & withdrawal processing Banking details, transaction records Contract fulfillment
KYC verification & AML compliance Identification documents, address Legal obligation
Customer Support Email, session records, account history Legitimate interest
Fraud detection & security IP address, device, activity patterns Legitimate interest
Promotional communications (with consent) Email, phone number Your Consent
Platform improvement Anonymous usage data Legitimate interest

3 Sharing Information With Third Parties

Y2win takes a highly cautious approach to sharing your personal data. As a principle, we do not share your personal information with any third party except in the following circumstances:

  • Certified service providers: Payment gateways, gaming software providers, and cloud infrastructure providers bound by confidentiality agreements and strict security standards with y2win.
  • Legal requirement: When required by a court, regulatory body, or Malaysian law enforcement agency pursuant to a valid order.
  • AML Compliance: Certain transaction information may need to be shared with relevant authorities as part of anti-money laundering efforts in compliance with Malaysian law.
  • With your consent: In all other circumstances, we will obtain your written consent before sharing any personal data.
Our Commitment: y2win never sells, rents or trades members' personal data to advertising companies, data brokers or any other commercial parties. This is our absolute commitment to every player.

4 Security & Data Protection

Y2win continuously invests in the latest security infrastructure to ensure every member's personal data is protected at all times. The key security measures we employ are as follows:

  • 256-bit SSL Encryption: All data communication between your device and y2win's servers is secured by the latest TLS 1.3 protocol.
  • Database encryption: Sensitive data such as passwords and financial information is stored in encrypted form (hashed and encrypted) — no one, including y2win staff, can read your password in its original form.
  • Tiered access control: Only specifically authorized personnel may access player personal data, and every access is logged for audit purposes.
  • 24/7 Monitoring: An intrusion detection system operates around the clock to detect and prevent any unauthorised access attempts.
  • Secure data backup: Data is regularly backed up to multiple server locations to ensure service continuity and disaster recovery.
While y2win takes all reasonable measures to protect your data, no digital system can be guaranteed 100% secure. You are also responsible for keeping your account password and login credentials confidential.

5 Use of Cookies

Y2win uses cookies and similar tracking technologies to enhance the user experience, maintain login session security and understand how players interact with our platform.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login session authentication and security. These cookies cannot be disabled.
  • Performance Cookies: Collects anonymous data about how you use the platform to help us improve the overall user experience.
  • Functional Cookies: Remembers your preferences such as language, display format, and other settings to streamline future sessions.
  • Analytics Cookies: Helps us understand platform traffic and usage patterns through internal analytics tools.

You can manage or delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the y2win platform.

6 Data Retention Period

Y2win retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by applicable Malaysian law. The following are general data retention period guidelines:

  • Active account data: Retained for the duration of the active account and up to 5 years after account closure for legal compliance purposes.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian accounting and AML legal requirements.
  • KYC documents: Retained for the period specified by the relevant regulatory body, typically 5–7 years.
  • Support communication logs: Retained for 2 years for service reference and dispute resolution.
  • Anonymous analytics data: May be retained longer as it contains no personally identifiable information.
Once the retention period expires, your personal data will be securely deleted or anonymized using procedures that ensure the data cannot be recovered or re-identified.

7 Your Rights as a Data Subject

As a y2win member residing in Malaysia, you have the following rights under the Personal Data Protection Act 2010 (PDPA). We fully respect and facilitate the exercise of these rights:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request the correction of any inaccurate or outdated personal data in our records.

Right to Erasure

You may request the deletion of your personal data, subject to applicable legal retention obligations.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You may request your data in a structured format that can be transferred to another service provider.

Right to Restriction of Processing

You may request that we restrict the processing of your data in certain situations as provided by law.

To exercise any of the above rights, please contact the y2win privacy team via live chat or our support email. We will process your request within 14 business days.

8 Children's Data Protection

The y2win platform is strictly for individuals aged 18 and above. We do not knowingly collect or process any personal data from children or minors under the age of 18.

Should we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that information and close the account in question. Parents or guardians who become aware that their child has registered an account on y2win are urged to contact us immediately through our support centre.

y2win enforces strict age verification during the registration and KYC process. Any attempt to circumvent this age check constitutes a serious violation of our Terms & Conditions.

9 Links to Third-Party Platforms

The y2win platform utilises certain third-party services for more efficient operations, including internationally licensed game software providers and recognised payment processors. While we select these partners carefully, y2win is not responsible for their individual privacy policies or data management practices.

Third-party services used by y2win are limited to:

  • Licensed game software providers that maintain their own privacy policies and security standards
  • Licensed payment gateway compliant with PCI-DSS standards
  • Cloud infrastructure provider with international security certifications
  • Internal analytics tools for platform performance monitoring

All third-party providers we engage are bound by data processing agreements that ensure they handle your information in accordance with the standards set by y2win and applicable law.

10 Amendments to This Privacy Policy

Y2win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in operational practices, legal requirements or how we handle personal data. Members will be notified of any material amendments via:

  • Email notification sent to your registered email address
  • Notices prominently displayed on the y2win platform homepage
  • Update the "Last Updated" date displayed at the top of this page

Your continued use of the y2win platform after the effective date of any amendment will be deemed your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your privacy.

11 Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how y2win handles your personal data, please do not hesitate to contact us. Our privacy and support team is available to assist you 24 hours a day, 7 days a week.

💬
Live Chat
The fastest way to get help. Click the live chat button at the bottom corner of the y2win platform.
📧
Support Email
Reach us at [email protected] for more detailed privacy enquiries.
We are committed to responding to all privacy-related inquiries within 14 working days. For urgent account security issues, please use live chat for an immediate response.

Your Privacy is Protected with y2win

Create a y2win account today and enjoy a safe, private, and fun online gaming experience alongside hundreds of thousands of Malaysian players who already trust us.

Data protected · PDPA 2010 · SSL 256-bit · 18+ only

Bahasa Melayu