365yes Commitment to
User Privacy

Privacy is more than a legal compliance benchmark for us — it is the foundation of trust we build with every 365yes user.

Multi-Layer Data Encryption

All personal data and financial transactions transmitted between your device and 365yes servers are protected by 256-bit SSL encryption — the same standard used by leading Malaysian banking institutions.

No Sale of Data to Third Parties

365yes has never and will never sell, rent, or commercialise users' personal data to any third party for advertising or marketing purposes without your explicit consent.

Malaysia PDPA Compliance

Our privacy policy is fully aligned with Malaysia's Personal Data Protection Act (PDPA) 2010, ensuring all data processing adheres to the country's highest legal standards.

Data Controls in Your Hands

You have the full right to access, correct, and request deletion of your personal data. Requests can be made through 365yes customer support at any time.

Transparent Use of Cookies

365yes uses cookies solely to enhance user experience and for internal analytics purposes. We do not use third-party cookies to track your activity on other websites.

Limited Data Retention

Personal data is retained only for as long as necessary for the stated purposes or as required by law. After that, data will be securely deleted from our systems.

Your Rights as a
365yes Users

Under PDPA 2010, you have legally protected rights regarding your personal data. 365yes respects and upholds all of these rights.

👁️
Right of Access

Request a copy of your personal data that we hold

✏️
Right to Rectification

Correct any inaccurate or outdated data

🗑️
Right to Erasure

Request that we delete your data under certain circumstances

Right to Object

Object to the processing of your data for specific purposes

📦
Right to Portability

Receive your data in a usable format

⏸️
Right to Restrict

Restrict how we process your data

This Privacy Policy document ("Policy") explains how 365yes ("Platform", "We") collects, uses, discloses, and protects the personal information you provide or that we collect when you use our platform and services.

We take your privacy seriously. As a platform serving Malaysian users, we fully comply with the requirements of the Personal Data Protection Act (PDPA) 2010 Malaysia and relevant international data protection standards.

Important Note: By registering or continuing to use the 365yes platform, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree, please discontinue use of the platform.
1

Introduction & Data Controller

365yes acts as the personal data controller for all information collected from registered users and visitors to our website. We are fully responsible for ensuring your data is processed lawfully, fairly, and transparently.

This policy covers all 365yes platform channels, including the official website, Android and iOS mobile apps, and any other digital touchpoints associated with the 365yes brand. When you register an account, you directly enter into a data processing relationship with us.

We have appointed an internal Data Protection Officer (DPO) who is responsible for ensuring ongoing compliance with PDPA 2010 and handling any privacy-related enquiries or complaints from our users.

2

Personal Data We Collect

365yes only collects data that is strictly necessary to provide you with a safe and quality service. The following are the categories of data we collect:

Data Category Example Information Primary Purpose
Identity Data Full name, date of birth, ID number Age verification (KYC)
Contact Data Email, phone number, address Account communications
Financial Data Bank account number, transaction records Deposit & Withdrawal
Technical Data IP address, device type, browser Security & analytics
Usage Data Game records, activity logs Platform improvements

We do not collect sensitive data such as medical information, religious beliefs, or political views. Biometric data such as fingerprints or facial recognition is used solely on your own device for login verification and is not transmitted to or stored on our servers.

3

How We Use Your Data

The personal data we collect is used solely for the following purposes:

  • Account management: Creating, verifying, and maintaining your user account
  • Transaction processing: Processing deposits, withdrawals, and all financial activity in your account
  • Identity verification (KYC): Verifying your age and identity in line with legal compliance requirements
  • Platform security: Detecting and preventing fraud, money laundering, and other illicit activities
  • Customer support: Providing technical support and resolving account issues
  • Service communications: Sending important notifications about your account, transactions, and policy updates
  • Product enhancements: Analysing usage patterns to improve the overall platform experience
  • Legal compliance: Fulfilling the reporting and compliance obligations set by the relevant authorities
Marketing Communications: We will only send you promotional communications if you have opted in to receive them during registration or in your account settings. You may withdraw this consent at any time through the notification settings in your account.
4

Lawful Basis for Data Processing

Under Malaysia's PDPA 2010, 365yes processes your personal data on the basis of one or more of the following lawful grounds:

  • Contract performance: Processing required to operate the account and services you have requested
  • Legal compliance: Processing required under Malaysian law including PDPA, AMLA, and related financial regulations
  • Legitimate interests: Processing for security purposes, fraud prevention, and platform improvement
  • Consent: For marketing communications and optional purposes that require your explicit consent
5

Data Sharing with Third Parties

365yes does not sell your personal data. However, in the course of platform operations, we may share data with select third parties under strictly limited circumstances:

  • Payment providers: Banks, digital wallet providers, and payment gateways required to process your financial transactions
  • Technology service providers: Vendors managing technical infrastructure such as cloud computing, analytics, and cybersecurity
  • Game providers: Gaming companies that need to receive certain data to provide their games on our platform
  • Legal authorities: When required by court order, authority investigation, or mandatory reporting obligations

All third parties we work with are bound by strict confidentiality and data protection agreements. They are only permitted to use shared data for the specific agreed purposes and may not use it for their own needs.

International Data Transfers: Some of our service providers may operate outside Malaysia. In such cases, we ensure that data protection equivalent to Malaysia's PDPA standard is upheld through binding data processing agreements.
6

Data Security Measures

365yes continuously invests in security infrastructure to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The technical and organisational measures we implement include:

  • End-to-end encryption (SSL/TLS 256-bit) for all communications between your device and our servers
  • Encryption of data at rest for all sensitive records including financial details and verification documents
  • Role-based access control (RBAC) that restricts employee access to customer data to only those who require it
  • 24/7 Monitoring by our internal cybersecurity team to detect any suspicious activity
  • Regular penetration testing by independent third parties to identify and address system vulnerabilities
  • Regular data backups at secure data centres to ensure service continuity

While we take all reasonable steps to protect your data, no method of transmission over the internet is completely secure. We encourage you to enable two-factor authentication and keep your password confidential.

Data Breach Notification: In the event of a data breach that may affect your information, 365yes will notify you and the relevant authorities within the timeframe required by law, along with the steps we have taken and are taking in response.
7

Data Retention Period

365yes retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by Malaysian law.

  • Active account data: Retained for the duration your account is active and for 7 years after account closure for financial record and legal compliance purposes
  • Transaction records: Retained for a minimum of 7 years in line with Malaysia's Companies Act and tax law requirements
  • Support communication logs: Retained for 2 years for reference purposes and service quality improvement
  • Analytics data: Stored in anonymised form after 12 months and cannot be linked back to any individual

Once the applicable retention period has expired, your data will be securely deleted using methods that ensure it cannot be recovered.

8

Cookie Policy

The 365yes website and app use cookies and similar tracking technologies. Cookies are small text files stored on your device to enhance your user experience.

  • Essential cookies (required): Required for core platform functions such as login authentication and session security — cannot be disabled
  • Performance cookies: Collecting information on how you use the platform to help us improve the overall user experience
  • Functional cookies: Remembering your preferences such as language, display settings, and login details for your convenience

365yes does not use third-party tracking cookies to follow your activity on other websites. You can control and delete cookies through your browser settings, although this may affect the functionality of certain parts of the platform.

9

How to Exercise Your Privacy Rights

To exercise any of your privacy rights, contact the 365yes customer support team via live chat on the platform or our official email. We will process your request within 30 calendar days of receipt.

  • Clearly state the type of right you wish to exercise
  • Provide sufficient proof of identity for us to verify your request
  • Provide sufficient information to help us identify the relevant data

Some rights are subject to certain exemptions under the PDPA 2010 — for example, we cannot delete data we are legally required to retain. In such cases, we will clearly explain why a request cannot be fully fulfilled.

10

Children's Data Protection

The 365yes platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18 years of age.

If we discover that someone under the age of 18 has provided us with personal data, we will immediately delete that information and close the account in question. Parents or guardians who believe their child may have provided us with personal information are encouraged to contact the 365yes support team immediately.

11

Amendments to the Privacy Policy

365yes reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. When significant amendments are made, we will:

  • Updating the "Last Updated" date at the top of this document
  • Sending notifications to registered users via email or in-app notifications
  • Displaying a clear notice on the platform's home page for a minimum of 14 days

Continued use of the 365yes platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.

12

Contact Us about Privacy

If you have any questions, concerns, or complaints regarding how we handle your personal data, we encourage you to contact us first before taking any other action.

  • Live Chat: The fastest method — available 24/7 via the chat icon on the 365yes platform
  • Privacy Email: [email protected] — for more formal written enquiries

If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection (JPDP) Malaysia — the PDPA regulatory authority in Malaysia.

Our Commitment: We are committed to responding to all privacy-related enquiries within 5 business days and resolving valid complaints within 30 calendar days. For issues requiring further investigation, we will keep you updated on progress regularly.

For more information on the rights and responsibilities of users on our platform, please refer to Terms and Conditions and Responsible Gaming.

Your Data Is Safe With
365yes

Join over 500,000 Malaysian users who trust 365yes as their digital entertainment platform — with privacy and security that is never compromised.

Compliant with Malaysia PDPA 2010  |  Terms & Conditions  |  Responsible Gaming

Bahasa Melayu