Y200m Privacy Policy – Our Commitment to Member Data Protection

Welcome to the y200m Privacy Policy page. We, the management of y200m, understand that your trust is the most valuable asset we hold. We are therefore fully committed to managing every piece of personal information you share with us at the highest standards of security, transparency, and integrity.

This Privacy Policy details the data collection and handling practices of y200m in the context of our online gaming platform, covering the y200m.fun website and all associated applications and services we offer to members across Malaysia.

This document is to be read together with Terms and Conditions and Responsible Gaming Policy y200m. By registering for or using the y200m platform, you provide informed consent to the data handling practices described in this document.

Y200m collects your personal data through several channels — including during the account registration process, active platform usage, financial transactions, and interactions with our support team. Below are the categories of data we collect:

We only collect data that is strictly necessary for the stated purposes — a "data minimization" principle that is central to responsible privacy practices. y200m does not collect sensitive data such as your health information or political affiliations.

Every piece of data we collect has a clear and lawful purpose. y200m only processes your personal data for the following purposes:

• To provide, manage, and improve y200m platform services including slot games, sports, bingo, betting, and other categories you participate in.
• To process deposit and withdrawal transactions securely and promptly through registered payment channels.
• To verify your identity (KYC) in fulfillment of AML (Anti-Money Laundering) and counter-terrorism financing (CFT) compliance requirements.
• To detect and prevent fraud, account abuse, and suspicious activity that could compromise your security or that of the platform.
• To send account-related communications including security notifications, transaction alerts, and important policy updates.
• To support our responsible gaming program by monitoring usage patterns and providing assistance to members who may need support.
• To comply with legal obligations, court orders, or requests from lawful authorities in Malaysia.
• To send marketing communications related to y200m promotions — only if you have given explicit consent to receive such communications.

Y200m takes an extremely cautious approach to sharing members' personal data. We do not sell, rent, or trade your personal information under any circumstances. Data sharing only occurs in the following limited situations:

• Payment Service Providers: Information required to process deposits and withdrawals is shared with our FPX, e-wallet, and partner bank providers. These providers are bound by strict confidentiality agreements and PCI-DSS standards.
• Gaming Technology Providers: The gaming software providers we use may receive minimal technical data necessary to ensure games run smoothly and fairly.
• Legal Authorities: y200m will disclose required information to the police, Bank Negara Malaysia, courts, or other government bodies when mandated by law or a valid court order.
• Identity Verification Service Providers: The third-party KYC verification platform used to verify your identity documents is bound by a data processing agreement that complies with PDPA.

Y200m uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use and their functions:

• Essential Cookies: Required for core platform functionality — including login authentication, session security, and language preferences. These cookies cannot be disabled as they affect core functionality.
• Performance & Analytics Cookies: To help us understand how members use the platform so we can improve its design and functionality. Data collected is aggregated and does not directly identify individuals.
• Functional Cookies: To save your preferences such as currency, notification settings, and preferred layout to deliver a more personalized experience on every visit.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage or delete cookies at any time through your browser settings. However, disabling essential cookies may affect the functionality of the y200m platform. For specific guidance on managing cookies in your browser, refer to your browser's documentation.

Y200m retains your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or for as long as required by Malaysian law. Below are our data retention period guidelines:

• Active Account Data: Retained for the duration your account is active and for 5 years after account closure to meet audit and AML compliance requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• KYC Documents: Retained for the duration the account is active plus 5 years. Documents will be securely deleted in accordance with established procedures upon expiry of the retention period.
• Technical & Security Logs: Retained for 90 days for security investigation and technical troubleshooting purposes.
• Support Communication Records: Retained for 2 years to enable our team to provide consistent support and resolve any disputes that may arise.

Once the retention period expires, your data will be securely deleted or permanently anonymised using methods that ensure it cannot be recovered or re-linked to your identity.

As a y200m member and data subject under Malaysia's Personal Data Protection Act 2010, you have the following important rights regarding your personal data:

Y200m continuously invests in comprehensive security infrastructure to protect your personal data from unauthorised access, modification, disclosure, or destruction:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored in our databases — including financial information and KYC documents.
• Multi-layered firewall and 24/7 active intrusion detection and prevention system (IDS/IPS).
• Two-factor authentication (2FA) is available for all member accounts and is mandatory for all internal administrative access.
• Regular vulnerability scanning and penetration testing conducted by accredited independent security teams.
• Strict role-based access controls (RBAC) ensure that staff can only access data relevant to their specific responsibilities.
• A tested and prepared incident response plan to ensure we can respond swiftly in the event of any security breach.

In the event of a serious data breach involving your personal data, y200m will notify you and the relevant authorities within the timeframe required by law, along with details of the incident and the remedial actions taken.

Y200m strictly prohibits use of the platform by individuals under the age of 18. Our platform is exclusively for adults and we maintain a zero-tolerance policy against underage use.

• y200m does not intentionally collect any personal data from individuals under the age of 18. Our KYC process is specifically designed to detect and reject registrations by minors.
• If we discover that personal data belonging to a minor has been collected unintentionally, we will delete that data immediately and close the associated account.
• Parents or guardians who discover that their child has registered on the y200m platform are requested to contact our support team immediately for data deletion and account closure.
• y200m fully supports the Responsible Gaming and provides parental control tools and game limit options to help adult members manage their gaming activity responsibly.

Y200m reserves the right to update or amend this Privacy Policy at any time to reflect changes in our business practices, new legal requirements, or improvements in data protection.

• You will be notified of any material amendments via email to your registered address at least 7 days before the changes take effect.
• In-platform notices will also be displayed to ensure all active members are aware of any changes taking place.
• The "Last Updated" date at the bottom of this document will always reflect the latest version of the Privacy Policy currently in effect.
• Continued use of the y200m platform after the effective date of any amendment constitutes your acceptance of the updated terms.
• If you disagree with the amendments, you have the right to close your account before the amendments take effect, without any penalty.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, the y200m Data Protection Officer (DPO) team is always ready to assist you.