ybet99 Privacy Policy

SECTION 01

Introduction

This Privacy Policy ("Policy") is issued by ybet99 ("we", "us", "our" or the "Platform") and governs the collection, processing, storage and disclosure of personal information relating to users ("you", "your" or "User") of the ybet99 online sports betting and casino entertainment service accessible at ybet99.casa.

ybet99 operates primarily for Malaysian users and handles personal data in a manner consistent with applicable data protection principles. The Platform is intended exclusively for adults aged 21 and above. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and that you consent to the processing activities described herein.

This Policy should be read alongside the ybet99 Terms and Conditions and the Responsible Gambling Policy. Where there is any conflict between this Policy and those documents on a privacy matter, this Policy shall take precedence.

SECTION 02

Definitions

The following terms carry the meanings assigned below throughout this Policy unless the context clearly requires otherwise.

Term	Meaning
Personal Data	Any information that identifies or could reasonably identify a living individual, directly or in combination with other data held by ybet99.
Processing	Any operation performed on personal data, including collection, recording, storage, use, disclosure and deletion.
Data Controller	ybet99, which determines the purposes and means of processing personal data provided through the Platform.
Third Party	Any entity other than the User and ybet99 that receives or processes personal data in connection with Platform services.
KYC	Know Your Customer — the identity and address verification process required by ybet99 prior to withdrawal authorisation.
Cookies	Small text files stored on your device by the Platform or associated third-party tools to support functionality, analytics and security.
MYR	Malaysian Ringgit — the primary transactional currency of the Platform.

SECTION 03

Data We Collect

ybet99 collects personal data through several channels, including account registration forms, KYC verification submissions, payment transactions and ongoing Platform activity. The categories of data collected are described below.

3.1 Registration and Identity Data

When you create a ybet99 account, we collect your full legal name, date of birth, residential address, email address and a chosen username. This information is required to establish your account, verify that you meet the minimum age requirement of 21 years and comply with identity verification obligations.

3.2 Verification Documents

As part of our KYC process, you may be asked to provide scanned or photographed copies of government-issued identity documents such as a Malaysian national identification card (MyKad), passport or driving licence, together with proof of residential address such as a utility bill or bank statement issued within the preceding three months.

3.3 Financial and Payment Data

We collect information relating to deposits and withdrawals processed through supported Malaysian payment channels including Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow and FPX. This includes transaction amounts in MYR, payment method references, transaction timestamps and outcomes. Full payment card numbers, if applicable, are handled by our payment processing partners and are not stored directly by ybet99.

3.4 Usage and Activity Data

We collect information about how you interact with the Platform, including betting history, game activity, session durations, login timestamps, device identifiers, browser type, IP address and general geographic region. This data is used to maintain account security, detect suspicious activity and improve the overall Platform experience.

3.5 Communication Records

Where you contact our support team via live chat, email or other permitted channels, we retain records of those communications together with the contact details you provide. These records are used to manage your enquiry, maintain service quality and comply with any relevant dispute or audit obligations.

SECTION 04

How We Use Your Data

Personal data collected by ybet99 is used for the following stated purposes. We do not use your data for any purpose incompatible with those listed below without providing separate notice and, where required, obtaining your consent.

Purpose	Description
Account management	Creating, maintaining and supporting your registered ybet99 account throughout its lifecycle.
Identity verification	Confirming that you meet the minimum age requirement and satisfy applicable KYC standards before withdrawal of funds.
Payment processing	Facilitating MYR deposits and withdrawals via supported Malaysian banking and e-wallet channels.
Security and fraud prevention	Detecting and investigating suspicious activity, unauthorised account access and potential breaches of our Terms and Conditions.
Regulatory compliance	Meeting obligations relating to anti-money laundering, responsible gambling and any other applicable compliance requirements.
Customer support	Responding to account enquiries, transaction questions and responsible gambling support requests submitted through our 24/7 support channels.
Service improvement	Analysing aggregated and anonymised usage patterns to improve Platform performance, navigation and user experience.
Marketing communications	Sending eligible Users promotional information about ybet99 offers where you have consented to receive such communications. You may withdraw consent at any time.

SECTION 05

Legal Basis for Processing

ybet99 processes your personal data on the following legal bases depending on the nature of the activity involved:

• Contractual necessity — processing required to operate your account and deliver the services you have requested, including account registration, MYR payment processing and bet settlement.
• Legal obligation — processing required to comply with applicable anti-money laundering, identity verification and responsible gambling regulations.
• Legitimate interests — processing undertaken for fraud prevention, Platform security, dispute management and service quality improvement, where these interests are not overridden by your fundamental rights and freedoms.
• Consent — processing for marketing communications, non-essential cookies and other activities where we have sought and obtained your express permission. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

SECTION 06

Data Sharing and Disclosure

ybet99 does not sell, rent or otherwise trade your personal data. We may share personal data with carefully selected third parties in the following limited circumstances:

6.1 Payment Service Providers

To process MYR transactions, we share relevant financial and identity data with licensed payment processors operating in Malaysia, including those facilitating DuitNow, FPX, bank transfer and e-wallet services. These processors are bound by their own data protection obligations and are not permitted to use your data for unrelated purposes.

6.2 Identity Verification Partners

KYC documentation may be reviewed by specialist identity verification service providers. Access is limited to the information necessary for the verification assessment and is subject to confidentiality obligations.

6.3 Regulatory and Legal Authorities

We may disclose personal data to competent regulatory bodies, law enforcement authorities or courts where we are legally obliged to do so or where disclosure is necessary to protect the rights, safety or property of ybet99, our Users or others.

6.4 Group and Corporate Transactions

In the event of a corporate restructuring, merger, acquisition or asset sale involving ybet99, personal data may be transferred as part of that transaction. Affected users will be notified through the email address associated with their account prior to any change in data controller.

SECTION 07

Cookies and Tracking Technologies

ybet99 uses cookies and similar tracking technologies to support Platform functionality, maintain session security, analyse traffic patterns and deliver relevant content. The types of cookies used are described below.

• Strictly necessary cookies — required for the Platform to function correctly, including session management, login authentication and navigation. These cannot be disabled without impacting core Platform functionality.
• Analytical cookies — used to collect anonymised information about how Users interact with the Platform, enabling us to identify areas for improvement. Data collected through analytical cookies does not identify you personally.
• Functional cookies — used to remember your preferences such as language settings, display preferences and previously selected payment methods to improve your return visit experience.
• Marketing cookies — used, where you have consented, to deliver relevant promotional information about ybet99 offers. You may withdraw consent for marketing cookies at any time through the cookie preference settings.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. Disabling other categories will reduce personalisation but will not prevent basic account access.

SECTION 08

Data Retention

ybet99 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory guidance. The following general retention periods apply:

Data Category	Retention Period	Basis
Account registration data	Duration of account plus minimum 5 years post-closure	Regulatory compliance
KYC verification documents	Minimum 5 years from date of verification	Anti-money laundering obligations
Transaction records	Minimum 7 years from transaction date	Financial records obligations
Customer support records	3 years from date of last communication	Service quality and dispute management
Marketing consent records	Until consent is withdrawn plus 12 months	Evidence of lawful processing
Analytical and usage data	Up to 24 months in identifiable form	Legitimate interests — service improvement

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Where anonymisation is applied, the resulting data no longer constitutes personal data and may be retained for statistical purposes without a defined limit.

SECTION 09

Data Security

ybet99 implements a range of technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration or destruction. These measures include, but are not limited to, the following:

• Encrypted connections (HTTPS/TLS) for all data transmitted between your device and Platform servers
• Encrypted storage for sensitive personal data including identity documents and financial references
• Role-based access controls that limit staff access to personal data to those with a defined operational need
• Regular internal reviews of security configurations and access logs
• Incident response procedures for managing suspected data breaches, including notification to affected users where required

While ybet99 maintains these safeguards, no electronic transmission or storage system is entirely immune from risk. You are responsible for maintaining the security of your own account credentials. ybet99 will never ask you to share your password through email, live chat or any other communication channel.

SECTION 10

Your Data Rights

Subject to applicable law and certain regulatory exceptions, you hold the following rights with respect to personal data held by ybet99. Requests relating to these rights should be directed to our support team using the contact details in Section 14.

We will respond to all verified rights requests within a reasonable period and, in any event, no later than thirty calendar days from receipt. Where a request cannot be fulfilled due to a legal or regulatory exception, we will explain the basis for that limitation in our response.

SECTION 11

Children and Minors

The ybet99 Platform is strictly for persons aged 21 and above. We do not knowingly collect, store or process personal data relating to individuals below this age threshold. The registration process includes age verification measures designed to identify and decline applications from underage individuals.

If ybet99 becomes aware that personal data has been collected from a person under the age of 21, such data will be deleted promptly and the account will be closed in accordance with our Terms and Conditions. Parents or guardians who believe that a minor has registered an account on ybet99 are asked to contact our support team immediately so that appropriate action can be taken without delay.

We also encourage account holders to keep their login credentials secure and to prevent access by minors within their household. Parental control tools available through internet service providers in Malaysia may provide an additional layer of protection at the network level.

SECTION 12

International Data Transfers

ybet99 is designed for Malaysian users and processes personal data primarily within jurisdictions that offer an appropriate level of data protection. Where it is operationally necessary to transfer personal data to a third party located outside Malaysia — for example, to specialist identity verification or payment processing providers — we ensure that such transfers are subject to appropriate contractual safeguards.

These safeguards may include standard contractual clauses, binding corporate rules or reliance on adequacy determinations by relevant supervisory authorities. Where you have a question about the safeguards applied to a specific transfer, please contact our support team using the details in Section 14.

SECTION 13

Amendments to This Policy

ybet99 reserves the right to update this Privacy Policy at any time to reflect changes in our processing activities, applicable law or operational practices. Revised versions will be published on this page with an updated review date shown at the top of the document.

Where a material change is made to this Policy, ybet99 will notify registered Users by email to the address associated with their account or through an in-platform notification. Your continued use of the Platform following such notification constitutes acceptance of the revised Policy.

If you do not accept the revised Policy, you should cease use of the Platform and may request account closure by contacting our support team in accordance with the Terms and Conditions.

SECTION 14

Contact Us

If you have a question about this Privacy Policy, wish to exercise a data right, need to report a suspected data breach or wish to withdraw a consent previously given, please contact the ybet99 support team using the details below. We handle all privacy-related enquiries with appropriate care and confidentiality.

When contacting us on a privacy matter, please include your registered email address, the nature of your request and any relevant reference numbers so our team can locate your account and respond accurately. Privacy requests will not be fulfilled verbally and must be submitted in writing through the approved channel above.