yes77 is committed to protecting the personal data of every player who uses our platform. This Privacy Policy explains precisely what information we collect, why we collect it, how we use it, and the rights you hold as a yes77 user under Malaysian data protection law.
yes77 ("yes77", "we", "our", "us") operates the online gaming and sports betting platform accessible at yes77.cam and its associated subdomains and mobile interfaces. We recognise that privacy is a fundamental right, and we are committed to handling your personal data responsibly, transparently, and in full compliance with applicable data protection laws.
This Privacy Policy ("Policy") describes how yes77 collects, uses, stores, discloses, and otherwise processes personal data obtained from individuals ("you", "User", "Player") who access or use the yes77 platform — including players from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia.
This Policy should be read alongside yes77's Terms & Conditions, which govern the overall contractual relationship between yes77 and its users. By registering an account or using the yes77 platform, you confirm that you have read and understood this Privacy Policy and consent to the data processing practices described herein.
Our commitment: yes77 does not sell your personal data to third parties. We collect only what is necessary, retain it only for as long as required, and protect it with industry-standard security measures at every stage of processing.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, financial data, IP address, and device identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data — in this context, yes77. |
| "Data Processor" | A third party that processes personal data on behalf of yes77 under a data processing agreement. |
| "PDPA" | The Personal Data Protection Act 2010 of Malaysia, which governs the processing of personal data in commercial transactions. |
| "KYC" | Know Your Customer — the identity verification process used to confirm a User's identity and comply with anti-money laundering obligations. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of a User's agreement to the processing of their personal data for a stated purpose. |
yes77 acts as the Data Controller in respect of all personal data collected through the yes77 platform. As Data Controller, yes77 determines the purposes for which your personal data is processed and the manner in which it is processed, and is responsible for ensuring that processing is carried out in accordance with applicable data protection law, including the PDPA.
Where yes77 engages third-party service providers — such as payment processors, KYC verification providers, fraud detection vendors, and analytics platforms — those parties act as Data Processors operating under binding data processing agreements that restrict their use of your data solely to the purposes for which it was shared.
yes77 collects the following categories of personal data from Users:
Sensitive Data: yes77 does not intentionally collect sensitive personal data as defined under the PDPA (such as health data, religious beliefs, or political opinions) unless specifically required for responsible gambling assessments or legally mandated compliance purposes, and only with your explicit consent where required.
yes77 collects personal data through the following means:
The majority of personal data yes77 holds is provided directly by you when you:
When you use the yes77 platform, certain technical and usage data is collected automatically through cookies, server logs, and similar tracking mechanisms. This includes IP address, device information, session duration, and navigation behaviour. See Section 8 for full details of our cookie practices.
yes77 may receive personal data about you from third parties in limited circumstances, including:
yes77 processes your personal data for the following purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and administering your yes77 player account, including authentication and security. |
| Service Delivery | Processing bets, settling wagers, managing your MYR wallet balance, and delivering the gaming services you access on the platform. |
| KYC & AML Compliance | Verifying your identity, age (21+), and source of funds in compliance with applicable anti-money laundering and counter-terrorism financing obligations. |
| Payment Processing | Processing deposits via DuitNow, FPX, Touch 'n Go, Boost, GrabPay, and other accepted methods, and executing MYR withdrawal requests. |
| Fraud Prevention | Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, and other prohibited conduct. |
| Customer Support | Responding to your queries, complaints, and support requests via live chat, WhatsApp, and email. |
| Marketing | Sending promotional offers, bonus notifications, and platform updates to your registered email or phone number, where you have consented to receive such communications. |
| Responsible Gambling | Monitoring gaming behaviour to identify potential problem gambling indicators and administering self-exclusion, deposit limit, and cooling-off requests. |
| Platform Improvement | Analysing aggregated usage data to improve platform performance, user experience, and product offerings. |
| Legal Compliance | Meeting applicable legal and regulatory obligations, including responding to lawful requests from authorities. |
yes77 processes your personal data on one or more of the following legal grounds:
yes77 uses cookies and similar tracking technologies (including local storage, session tokens, and pixel tags) on its platform for the purposes described below. A cookie is a small text file placed on your device by a web server when you visit a website.
You may manage or disable non-essential cookies through your browser settings or via yes77's cookie preferences tool. Please note that disabling certain cookies may affect the functionality and performance of the platform. Strictly necessary cookies cannot be disabled through the cookie tool as they are required for the platform to operate.
yes77 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with third parties only in the following circumstances:
No data selling: yes77 has never sold and will never sell User personal data to data brokers, advertisers, or other third parties for commercial exploitation. Your data is used exclusively for the purposes described in this Policy.
yes77's primary data processing infrastructure is located in Asia-Pacific data centres. In certain circumstances, personal data may be transferred to, stored in, or processed by systems located outside Malaysia — for example, where yes77 uses cloud infrastructure providers or KYC platforms with data centres in other jurisdictions.
Where such transfers occur, yes77 implements appropriate safeguards to ensure that your personal data receives a level of protection equivalent to that provided under Malaysian law, including through binding contractual clauses with data recipients and, where applicable, reliance on adequacy decisions or equivalent frameworks.
By using the yes77 platform and providing your personal data, you acknowledge and consent to the transfer of your data outside Malaysia where necessary for the purposes described in this Policy.
yes77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal minimum retention periods. The following general retention principles apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.
yes77 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes:
Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. Users are encouraged to use strong, unique passwords and to enable 2FA on their accounts. If you suspect your account has been compromised, please contact yes77 support immediately at [email protected].
Under the Malaysian Personal Data Protection Act 2010 (PDPA) and, where applicable, other data protection frameworks, you have the following rights in relation to your personal data held by yes77:
To exercise any of these rights, please submit a written request to yes77 at [email protected] with the subject line "Data Rights Request". yes77 will respond to all valid requests within thirty (30) calendar days. We may require identity verification before processing a data rights request to ensure we do not inadvertently disclose your personal data to an unauthorised party.
Marketing opt-out: To stop receiving marketing emails from yes77, click "Unsubscribe" in any marketing email, or contact support at [email protected] with the subject line "Marketing Opt-Out". Unsubscribe requests are processed within five (5) business days.
The yes77 platform is strictly intended for individuals aged 21 years and above. yes77 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If yes77 becomes aware that personal data has been collected from a person under 21 without appropriate verification, that data will be promptly deleted and the associated account will be closed.
If you are a parent or guardian and believe that a person under the age of 21 has provided personal data to yes77 without your consent, please contact us immediately at [email protected]. We will take prompt action to investigate and address the matter.
The yes77 platform may contain links to third-party websites or services (for example, payment provider portals or identity verification platforms accessed during the KYC process). yes77 is not responsible for the privacy practices or content of any third-party website or service. This Privacy Policy applies solely to data processed by yes77 on the yes77 platform.
We encourage you to review the privacy policies of any third-party services you access in connection with your use of yes77, including your bank's online platform (Maybank2u, CIMB Clicks, etc.) and any e-wallet provider (Touch 'n Go eWallet, Boost, GrabPay) you use for deposits or withdrawals.
yes77 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. Material amendments will be communicated to registered Users via email and/or by a prominent notice on the yes77 platform, with at least seven (7) calendar days' notice before the amended Policy takes effect, except where immediate amendment is required by law.
The "Last Updated" date at the top of this page will reflect the date on which the most recent version of the Policy was published. Your continued use of the yes77 platform following the effective date of any amendment constitutes acceptance of the updated Privacy Policy.
If you have any questions, concerns, or complaints regarding this Privacy Policy or yes77's data processing practices, please contact our Data Protection team through the following channels:
yes77 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days. For complex matters, we will keep you informed of progress throughout the review period.
If you are not satisfied with yes77's handling of your privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.
Data rights requests: To exercise your rights under the PDPA (access, correction, erasure, objection), email [email protected] with the subject line "Data Rights Request" and include your registered username and a brief description of your request. We will verify your identity before processing the request.
Privacy at yes77 is not a checkbox exercise — it is a genuine operational commitment backed by technical controls and a transparent policy you can read in full.
Every byte of data exchanged between your device and yes77's servers travels over a 256-bit SSL-encrypted connection — the same standard used by major banks and financial institutions in Malaysia.
yes77 has never sold User personal data and never will. Your information is used solely for the purposes described in this Privacy Policy — never passed to data brokers or third-party advertisers.
yes77 processes personal data in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). You have clear rights to access, correct, and request deletion of your data at any time.
We collect only the data we genuinely need to deliver our services, comply with legal obligations, and keep your account secure. If we don't need it, we don't ask for it.
Personal data is kept only for as long as legally required or operationally necessary. Once the retention period expires, data is securely deleted or irreversibly anonymised.
Every third-party service provider with access to yes77 User data — from KYC vendors to payment processors — is contractually bound to our data protection standards and subject to regular compliance reviews.
yes77 is built on a foundation of trust. If you have questions about how we handle your data, our support team is available around the clock — or explore our FAQ for quick answers.
For players aged 21 and above only. Please gamble responsibly. Visit our Responsible Gambling page for support resources.