Privacy Policy y2win

1. Introduction and Scope of Privacy Policy

This Privacy Policy explains how y2win collects, uses, stores, and protects your personal information when you use our platform at y2win.onl. This document applies to all registered players, platform visitors, and anyone who interacts with y2win services via any device.

By registering or using the y2win platform, you confirm that you have read and fully understood this Privacy Policy. We encourage you to read this document thoroughly before providing any personal information to us. If you have any questions, the y2win support team is available to assist you via Live Chat, operating 24/7.

Y2win takes personal data protection seriously. Our platform is built on a foundation of trust — without player trust, we would not exist. That is why every data management decision we make puts your interests and privacy first.

2. Types of Personal Data Collected

Y2win collects various categories of personal information depending on how you interact with the platform. Below is a full list of the data we collect and its purpose:

3. How y2win Uses Your Data

All information you provide to y2win is used for clear and legitimate purposes. We do not use your data for purposes unrelated to platform operations without your explicit consent. Data usage purposes include:

• Registering and securely verifying your player account
• Processing deposits and withdrawals accurately and promptly
• Verifying your identity through the required KYC process
• Detecting and preventing fraudulent activity, money laundering, and unauthorized account access
• Sending important notifications related to your account, transactions, and promotions
• Providing effective and responsive customer support
• Improving platform features and services based on aggregated usage patterns
• Ensuring compliance with applicable legal and regulatory requirements
• Supporting responsible gaming tools such as deposit limits and self-exclusion

Y2win will not use your data to make automated decisions that negatively impact you without human involvement in the review process. Any major decisions such as account suspension are always reviewed by our management team.

4. Data Sharing with Third Parties

Y2win understands that your trust depends on how we handle data sharing. We do not sell your personal data to any party. However, to operate the platform effectively, we may share your data with the following categories of third parties under limited circumstances:

• Payment processing providers (DuitNow, FPX, Touch 'n Go, Boost, GrabPay) — to process your financial transactions
• Gaming software providers supplying games on the y2win platform — to verify game outcomes
• KYC and identity verification service providers — to meet platform security requirements
• Government authorities or law enforcement bodies — only when required by law
• Technology infrastructure and cloud computing providers — bound by strict confidentiality agreements

5. Data Retention Period

Y2win retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Below are our data retention guidelines:

• Active account data — retained for the duration your account remains active with y2win
• Financial transaction records — retained for a minimum of 7 years for financial audit purposes
• KYC documents — retained for 5 years after account closure
• Security activity logs — retained for 2 years for investigation purposes
• Cookies and session data — automatically deleted after the session period ends
• Support communication data — retained for 3 years for customer service reference

Once the retention period ends, your data will be securely deleted using non-recoverable deletion methods. y2win does not retain data longer than necessary.

6. Player Rights Regarding Personal Data

As a y2win player, you have the following rights regarding your personal data. All requests will be processed within 30 working days:

To exercise any of the above rights, contact the y2win support team via Live Chat or email at [email protected]. We will verify your identity before processing any request to protect the security of your account.

7. Security and Technical Protection

Y2win continuously invests in the latest security infrastructure to ensure your personal data is always protected. Our technical security measures include:

• 256-bit SSL encryption on all data traffic between you and y2win's servers
• AES-256 encryption for sensitive data stored in our database
• Two-factor authentication (2FA) is available for all player accounts
• 24/7 threat monitoring system that detects suspicious activity in real time
• Enterprise-grade network segmentation and firewall protection
• Regular security audits by independent third parties
• Clear incident response procedures in the event of any data breach

8. y2win Cookies Policy

Cookies are small text files stored on your device when you visit the y2win platform. We use cookies to enhance your experience and ensure the platform runs smoothly. y2win uses three main categories of cookies:

• Essential Cookies — required for core platform functions such as login authentication and session security. Cannot be disabled
• Performance Cookies — collects aggregated and anonymised usage data to help us understand how players use the platform and make improvements
• Functional Cookies — saves your preferences such as language, display settings, and game choices so you do not need to reconfigure them each time

You can manage your cookie settings through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some platform features. y2win does not use third-party cookies for advertising purposes.

9. International Data Transfers

Y2win's primary servers operate in secure data centres. In some cases, your personal data may be processed outside Malaysia, for example when we use cloud computing services or international technology providers. In all such cases, y2win ensures that:

• Data transfers are made only to countries or entities with an equivalent level of data protection
• Binding and comprehensive data protection agreements are signed with all data recipients
• The same encryption and security standards are applied regardless of where your data is processed
• Data transfers are limited to the minimum necessary for operational purposes only

10. Privacy Policy Updates

Y2win reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. Any material changes will be communicated to you via:

• In-platform notifications while you are logged in to your y2win account
• Email notification to your registered address at least 7 days before changes take effect
• Updates the "Last Updated" date at the top of this document

Continued use of the y2win platform after any changes to the Privacy Policy take effect will be considered your acceptance of the updated terms. We encourage you to review this page periodically. If you disagree with any changes, you have the right to close your account and request deletion of your personal data.