YES8 Official Data Protection

Privacy Policy YES8 — Member Personal Data Protection

Yes8 takes the privacy and data security of every registered member seriously. This document transparently explains how we collect, use, store, and protect your information in accordance with the Personal Data Protection Act 2010 Malaysia.

Compliant with PDPA 2010 256-bit SSL Encryption No Data Sales
Last Updated: 1 January 2026

Commitment Privacy YES8

Six core principles that underpin how yes8 handles every member's personal data with full accountability and transparency.

Full PDPA 2010 Compliance

All personal data processing activities at yes8 are carried out in accordance with the provisions of the Personal Data Protection Act 2010 (PDPA) Malaysia. This is not merely a legal requirement — it is our moral commitment to every member who entrusts their data to us.

Advanced-Level Encryption

Your personal data and financial transactions are protected by 256-bit SSL encryption, the same technology used by leading banking institutions. No data is transmitted or stored without full end-to-end encryption.

Data Controls in Your Hands

As a yes8 member, you have the full right to access, correct, or request deletion of your personal data at any time. Personal data requests are processed within 14 business days at no charge.

No Sale of Data to Third Parties

Yes8 has never and will never sell, rent, or trade members' personal data to any third party for commercial purposes. Your data belongs to you — we hold it only in trust to provide the best possible service.

Secure & Protected Servers

Yes8 member personal data is stored on servers protected by enterprise-grade firewalls, real-time intrusion detection systems, and regular backups. Our data centres undergo independent security audits annually to ensure the highest standards are maintained.

Data Breach Notification

In the event of any security incident involving members' personal data, yes8 is committed to notifying affected members within 72 hours and reporting to the Department of Personal Data Protection as required by law.

1. Introduction & Scope of This Policy

Welcome to the yes8 Privacy Policy page. This document is an agreement between you ("Member") and yes8 ("Platform", "We") regarding how we handle your personal information. This Policy applies to all users who access the yes8 website, iOS and Android mobile apps, and all services offered under the yes8 brand.

We understand that privacy is a fundamental right. That is why yes8 is committed to ensuring your personal data is handled in the safest, most transparent, and most responsible manner. By registering for or using the yes8 platform, you consent to us processing your personal data in accordance with the terms set out in this document.

Legal Basis: This Privacy Policy is prepared in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and guidelines issued by the Department of Personal Data Protection Malaysia.

2. Types of Personal Data We Collect

Yes8 only collects personal data that is strictly necessary to provide a safe and responsible online casino platform service. The following are the categories of data we collect:

Data Category Example Information Primary Purpose
Identity Data Full name, date of birth, IC / passport number Account registration & KYC verification
Contact Data Phone number, email address, residential address Communication & account verification
Financial Data Bank account number, e-wallet details, transaction history Deposit & withdrawal processing
Technical Data IP address, browser type, operating system, device ID Security & fraud prevention
Usage Data Game history, activity logs, session time Service improvement & responsible gaming
Communication Data Live chat records, support emails, feedback Complaint resolution & quality improvement

We do not collect sensitive data such as medical information, religious beliefs, or political views. Should there be an exceptional need to collect data beyond the categories listed above, you will be informed separately and your explicit consent will be required.

3. How We Use Your Personal Data

Personal data you provide to yes8 is used solely for legitimate and transparent purposes. The following are the specific ways we use your information:

  • Account Management: Creating, verifying, and maintaining your yes8 account, including mandatory KYC processes.
  • Transaction Processing: Securely processing all deposits and withdrawals, verifying account holder identity, and preventing unauthorised transactions.
  • Platform Security: Detecting and preventing fraudulent activity, money laundering, and any other illegal activities using real-time data analytics systems.
  • Service Communications: Sending important account-related notifications, security alerts, terms updates, and transaction information.
  • Marketing (with consent): Sending promotional information, bonus offers, and yes8 updates exclusively to members who have given their explicit consent.
  • Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate assistance in line with our responsible gaming commitment.
  • Legal Compliance: Meeting reporting obligations to the relevant authorities as required by Malaysian law.
Data Minimisation Principle: yes8 only uses personal data for the purposes stated at the time of collection. Any new use that is inconsistent with the original purpose requires fresh consent from you.

4. Sharing Data with Third Parties

Yes8 does not sell your personal data to any third party. However, there are limited situations where we need to share certain information with trusted parties for platform operational purposes:

  • Payment Providers: FPX, DuitNow, Touch 'n Go, GrabPay, and other payment providers receive only the minimum transaction data required to securely process your deposits and withdrawals.
  • Game Software Providers: Game session data is shared with Live Casino and slot providers solely for game delivery purposes.
  • KYC Services: Identity information is shared with licensed identity verification partners for security screening purposes only.
  • Authorities: yes8 will disclose personal data to authorities or law enforcement bodies when required by court order or applicable Malaysian law.

All third parties working with yes8 are bound by data protection agreements that require them to handle your data to the same high standards as we do. We conduct regular compliance reviews of our partners.

5. Data Storage & Security Measures

Yes8 stores your personal data in a secure and controlled environment. Data retention periods are as follows:

  • Active account data is retained for the duration your account remains active and up to 7 years after account closure for legal compliance purposes.
  • Financial transaction records are retained for a minimum of 7 years in accordance with Malaysian anti-money laundering legal requirements.
  • Customer support communication records are retained for 3 years for complaint resolution purposes.
  • Technical log data is retained for 12 months for security and investigation purposes.

The technical security measures we employ include:

  • 256-bit SSL/TLS encryption for all data in transit.
  • AES-256 encryption for all data stored in the database.
  • Role-based access control (RBAC) — only authorised personnel may access personal data.
  • 24/7 threat monitoring with automated incident detection and response systems.
  • Independent security audits conducted twice a year by a certified cybersecurity firm.
  • Regular data backups with tested disaster recovery procedures.

6. Use of Cookies & Tracking Technologies

Yes8 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login verification, session security, and language preferences. These cookies cannot be disabled.
  • Performance Cookies: Collecting anonymised data on how visitors use our website to help us improve platform performance.
  • Functional Cookies: Saving your preferences such as language, theme, and game settings for a more personalised experience.
  • Analytics Cookies: Helping us understand aggregated usage patterns for the continuous improvement of the yes8 platform.

You can manage your cookie settings through your browser settings at any time. Please note that disabling certain cookies may affect platform functionality. yes8 does not use third-party cookies for advertising purposes.

Cookie Controls: You can review and manage your cookie settings through the Privacy Settings section in your yes8 account after logging in.

7. Your Rights Under PDPA 2010

As a data subject under PDPA 2010, you have the following rights regarding your personal data held by yes8:

Right of Access

You have the right to request a copy of all personal data we hold about you. Requests will be processed within 21 working days.

Right to Rectification

You may request correction of inaccurate or outdated personal data at any time via account settings or customer support.

Right to Erasure

You may request deletion of your personal data subject to our legal retention obligations. Requests are processed within 30 days.

Right to Restrict Processing

You may request that we restrict the processing of your data under certain circumstances, such as when you are disputing the accuracy of that data.

Data Portability Right

You may request your personal data in a structured, machine-readable format for transfer to another service provider.

Right to Object

You may object to the processing of your data for marketing purposes at any time by withdrawing your consent through your account settings.

To exercise any of the above rights, contact the yes8 Data Protection Officer (DPO) team via 24/7 live chat on the platform or our official email. We do not charge any fee for requests relating to your privacy rights.

8. Protection of Children's Data

The yes8 platform is intended exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. Should we discover that a child's personal data has been collected without our knowledge, the following actions will be taken immediately:

  • The associated account will be suspended immediately while an investigation is conducted.
  • All relevant personal data will be deleted from our systems within 48 hours.
  • Any related financial transactions will be reversed in accordance with established procedures.
  • Cases will be reported to the relevant authorities if required.
Shared Responsibility: If you believe a minor has registered a yes8 account, please contact our support team immediately via live chat so that prompt action can be taken.

9. Cross-Border Data Transfers

In operating the yes8 platform, some of your personal data may be processed or stored outside Malaysia, for example by cloud service providers or international game software providers integrated with our platform.

When such data transfers occur, yes8 ensures that:

  • The recipient country maintains a level of data protection equivalent to Malaysia, or
  • A legally binding data protection agreement has been executed with the data recipient, or
  • Other recognised protection mechanisms have been applied to safeguard your data.

Yes8 does not transfer Malaysian members' personal data to countries or territories that do not have adequate data protection legislation without appropriate additional safeguards.

10. Amendments to This Privacy Policy

Yes8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or technological developments. Whenever an amendment is made:

  • The "Last Updated" date at the top of this page will be updated.
  • Members will be notified via their registered email at least 14 days before any material changes take effect.
  • In-platform notifications will be displayed at your first login after the amendment.

Your continued use of the yes8 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request the deletion of your personal data.

11. Contact Our Data Protection Officer

Yes8 has appointed a Data Protection Officer (DPO) responsible for ensuring full compliance with PDPA 2010 and handling all member privacy-related inquiries. If you have any questions, concerns, or complaints regarding how we handle your personal data, please contact us through the following channels:

  • Live Chat: Available 24/7 on the yes8 platform — the fastest way to get an immediate response.
  • DPO Email: [email protected] — for privacy inquiries that require more detailed written clarification.
  • Response Time: All privacy complaints and inquiries are answered within 3 business days.

If you are not satisfied with our response, you have the right to file a complaint directly with the Department of Personal Data Protection Malaysia (JPDP).

Our Commitment: Privacy is more than a legal obligation for yes8 — it is part of our core values. Your trust is our most valued asset, and we are committed to protecting it at all times.
Safe & Trusted Platform

Your Data Safe Together YES8 — Register Now

Yes8 protects your privacy with the latest technology and fully complies with Malaysian law. Register a free account today and enjoy a safe, fair, and entertaining gaming experience.

Responsible Gaming

YES8 is committed to responsible gaming practices. Users must be 18 years of age or older. Never use money set aside for basic necessities as gaming funds. For more information, visit the Responsible Gaming page.

Bahasa Melayu