ybet99 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how ybet99 ("ybet99," "we," "us," "our") collects, processes, stores, and protects personal data provided by or obtained in relation to individuals ("you," "Member," "user") who access or use the ybet99 Platform at ybet99.win and any associated services.

By registering an Account with ybet99 or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data in the manner described herein. If you do not agree to the terms of this Policy, you must not use the Platform.

This Policy should be read in conjunction with the ybet99 Terms & Conditions, which govern your use of the Platform and Services more broadly.

2 Who We Are

ybet99 is the operator of the online betting platform accessible at ybet99.win, licensed and operated under an international gaming authority. ybet99 acts as the data controller in respect of the personal data of its Members and Platform visitors — meaning we determine the purposes and means by which that personal data is processed.

For data-related enquiries, you may contact us at the email address provided in Section 15 of this Policy. We will respond to all data-related correspondence within 30 days of receipt.

3 Personal Data We Collect

ybet99 collects the following categories of personal data, to the extent necessary for the purposes described in this Policy:

4 How We Collect Your Data

ybet99 collects personal data through the following means:

• Direct provision: Data you provide when registering an Account, completing identity verification, making deposits or withdrawals, or contacting customer support;
• Automated collection: Technical data collected automatically through cookies, server logs, and similar technologies when you access and use the Platform;
• Third-party sources: Identity and fraud-risk data received from KYC verification providers, payment processors, and fraud detection services engaged by ybet99 to support compliance obligations;
• Publicly available sources: Where relevant to compliance obligations, ybet99 may cross-reference data against publicly available sanctions lists and politically exposed persons (PEP) databases.

5 Legal Bases for Processing

ybet99 processes personal data on the following legal bases:

• Contractual necessity: Processing necessary to perform the contract between ybet99 and a Member — including Account management, transaction processing, and Service delivery;
• Legal obligation: Processing required for compliance with applicable law, including anti-money laundering (AML) regulations, gaming licence conditions, and applicable data protection law;
• Legitimate interests: Processing necessary for ybet99's legitimate interests, including fraud prevention, platform security, service improvement, and responsible gaming monitoring — where these interests are not overridden by your data protection rights;
• Consent: Where ybet99 relies on your consent as the basis for processing (for example, in relation to certain optional communications), you may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

6 How We Use Your Data

ybet99 uses the personal data described in Section 3 for the following purposes:

• To register and maintain your ybet99 Account and verify your identity in accordance with our licensing obligations;
• To process deposits, withdrawals, and other financial transactions through your chosen Malaysian payment methods (including Touch 'n Go eWallet, Boost, DuitNow, FPX, and USDT TRC20);
• To provide, operate, and improve the ybet99 Platform and its Services, including Sportsbook, Casino, and Slots;
• To detect, investigate, and prevent fraudulent activity, money laundering, multiple account operation, and other prohibited conduct;
• To monitor your gaming behaviour for responsible gaming purposes, including identifying patterns that may indicate problem gambling behaviour, and applying any limits or restrictions you have set;
• To respond to your support queries and to maintain records of those communications for quality assurance and dispute resolution;
• To send you transactional and security notifications relating to your Account (these communications are not optional as they are necessary for Account operation);
• To comply with our obligations under applicable gaming licence conditions, anti-money laundering legislation, and other applicable regulatory requirements.

7 Data Sharing & Disclosure

ybet99 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following circumstances and only to the extent necessary for the specified purpose:

• Service providers and processors: Third-party companies engaged by ybet99 to provide operational services — including payment processing, KYC/identity verification, fraud detection, customer support platform, and cloud hosting — who process data on our behalf under data processing agreements;
• Game content providers: Where technically necessary, game providers may receive session data (such as anonymised Member identifiers and wager amounts) to facilitate game play and audit RNG integrity;
• Regulatory authorities: Disclosures required by ybet99's gaming licence, applicable law, or valid legal order from a competent authority (including anti-money laundering regulatory bodies);
• Law enforcement: Where required by applicable law or court order, or where we reasonably believe disclosure is necessary to prevent imminent harm, fraud, or financial crime;
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of ybet99's assets, Member data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

In all cases of international data transfer, appropriate safeguards — including contractual data protection clauses — are applied to ensure your data is protected to a standard equivalent to that described in this Policy.

8 Cookies & Tracking Technologies

ybet99 uses cookies and similar client-side technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function — including authentication session management, security tokens, and load balancing. These cannot be disabled;
• Functional cookies: Store your preferences (such as language or display settings) to improve your experience on return visits;
• Analytics cookies: Aggregate, anonymised usage data used to understand how Members navigate the Platform, identify technical issues, and improve service design. ybet99 uses first-party analytics only and does not use third-party advertising or cross-site tracking cookies.

Most browsers allow you to control cookie behaviour through browser settings. Disabling strictly necessary cookies may impair Platform functionality, including the ability to log in to your ybet99 Account.

9 Data Retention

ybet99 retains personal data for the following periods, or longer where required by law:

• Active Account data: Retained for the duration of your Account's active status plus the period required by applicable regulatory and AML record-keeping obligations following Account closure (typically five years from the date of the last transaction);
• KYC and identity verification data: Retained for the period mandated by applicable anti-money laundering legislation from the date of Account closure;
• Transaction records: Retained as required by applicable financial regulations and gaming licence conditions;
• Support communications: Retained for a period sufficient to support dispute resolution and quality assurance, typically two years from the date of the communication;
• Technical and log data: Retained for up to 12 months for security and fraud detection purposes.

Once the applicable retention period has expired and there is no longer a lawful basis for retaining your data, ybet99 will securely delete or anonymise it.

10 International Data Transfers

The ybet99 Platform is operated from servers located in jurisdictions that may be outside Malaysia. By using the Platform, you acknowledge that your personal data may be transferred to, stored, and processed in a country outside Malaysia. Where such transfers occur, ybet99 ensures that appropriate safeguards are in place, including contractual data protection clauses consistent with international best practice, to ensure your data is protected to the standard described in this Policy.

11 Your Data Rights

Subject to applicable law and certain exceptions, you have the following rights in relation to personal data ybet99 holds about you:

• Right of access: You may request a copy of the personal data ybet99 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data in certain circumstances — noting that this right may be limited where retention is required by law or for legitimate fraud prevention purposes;
• Right to restriction: You may request that ybet99 restrict processing of your data in certain circumstances;
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request a structured, machine-readable copy of data you provided to ybet99;
• Right to object: You may object to processing conducted on the basis of legitimate interests, subject to ybet99's right to demonstrate compelling grounds for continued processing.

To exercise any of the above rights, contact ybet99 at the email address provided in Section 15. We will respond within 30 days. Identity verification may be required before processing any data rights request.

12 Children & Minors

The ybet99 Platform is strictly for individuals aged 21 years and over. ybet99 does not knowingly collect personal data from individuals below the age of 21. If we become aware that a Member has provided personal data while under the age of 21, we will immediately suspend the Account, void all associated transactions, and securely delete the data in question.

If you have reason to believe that a minor has registered a ybet99 Account, please contact our support team immediately so that we can take prompt action.

13 Data Security Measures

ybet99 implements technical and organisational security measures designed to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and the ybet99 Platform;
• Encryption of sensitive data fields at rest within ybet99's database infrastructure;
• Access controls ensuring that personal data is accessible only to employees and contractors with a legitimate operational need;
• Regular security assessments and penetration testing of Platform infrastructure;
• Two-factor authentication availability for all Member Accounts, and mandatory 2FA for all administrative access to back-end systems;
• Documented incident response procedures for the identification, containment, and notification of data security incidents.

No data transmission over the internet is fully immune from interception. While ybet99 takes all reasonable measures to protect your data, you acknowledge that you transmit data to the Platform at your own risk and are responsible for maintaining the security of your Account credentials.

14 Changes to This Policy

ybet99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our Services. Where amendments are material, we will notify you by displaying a prominent notice on the Platform or by sending an email to your registered address prior to the amendment taking effect.

The most current version of this Privacy Policy will always be accessible at ybet99.win/privacy-policy. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the amended Policy, you must cease using the Platform and may request Account closure in accordance with the Terms & Conditions.

15 Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or to ybet99's handling of your personal data, you may contact us using the following channels:

• Data enquiries email: [email protected] — please include "Privacy / Data Request" in the subject line;
• Live chat: Available 24/7 through the ybet99 Platform for general support enquiries.

ybet99 will acknowledge receipt of all data enquiries within 5 business days and provide a substantive response within 30 days. Where a request is complex or numerous, we will notify you within the initial 30-day period if an extension is required, providing a reason for the extension and an estimated completion date.