Privacy Policy yoyo88 — Your Data, Our Responsibility

Yoyo88 collects personal information solely for purposes related to platform operations and delivering the best service to our members. We only collect data that is genuinely necessary — nothing more, nothing less. The following are the categories of information we collect:

Account Registration Information

Identity Verification Information (KYC)

• Copy of official identification document (MyKad or passport).
• Recent bank or utility statement as proof of address.
• Bank account or digital wallet details for payment processing purposes.
• A facial photo or selfie with your identification document (if requested for additional verification).

Platform Usage Information

• Your gaming history, deposits, and withdrawals within your account.
• IP address, device type, operating system, and web browser used.
• Geographic location data based on IP address (not precise to street or property level).
• Login and logout timestamps, and gaming session durations.
• Settings and preferences within your account.

Communication Information

• Live chat session recordings with our customer support team.
• Email correspondence sent to or received from yoyo88.
• Feedback, complaints or suggestions you submit to us.

The personal data we collect is used exclusively for the following purposes. We do not use your data for any other purpose without first obtaining your explicit consent:

• Account Management: To create, verify and maintain your member account on the yoyo88 platform.
• Financial Transaction Processing: To process your deposits and withdrawals accurately and securely to your account.
• Identity Verification (KYC): To verify your identity in compliance with applicable legal and regulatory requirements.
• Platform Security: To detect and prevent fraud, account abuse, illegal activity and other security threats.
• Customer Support: To respond to enquiries, resolve technical issues and provide the assistance you need.
• Service Improvement: To analyse usage patterns on an aggregated (non-individual) basis in order to improve platform features and experience.
• Account-Related Communications: To send important notifications relating to your account, security and changes to our terms.
• Marketing (with your consent): To inform you of promotions, bonuses and exclusive offers — only if you have consented to receive them.
• Responsible Gaming: To monitor gaming patterns in order to identify early signs of gambling problems and offer appropriate assistance.
• Legal Compliance: To fulfil reporting obligations to the relevant regulatory authorities when required by law.

Yoyo88 processes your personal data based on one or more valid legal grounds under Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant privacy laws:

• Consent: You have given explicit consent to the processing of your data for specific purposes, such as receiving marketing communications.
• Contract Performance: Processing is necessary to fulfil the agreement between you and yoyo88 — including providing gaming services, processing deposits and withdrawals.
• Legal Obligation: Processing is required to comply with legal obligations applicable to yoyo88, including KYC requirements and financial reporting.
• Legitimate Interest: Processing is necessary for the legitimate interests of yoyo88 or third parties, such as preventing fraud and ensuring platform security — provided those interests do not override your fundamental rights and freedoms.

Where data processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the validity of any processing carried out before the withdrawal.

Yoyo88 does not sell or transfer your personal data to third parties for their own commercial purposes. However, we may share necessary information with the following categories of third parties, strictly for platform operational purposes:

• Payment Service Providers: Financial institutions, banks and digital wallet providers that process your deposit and withdrawal transactions. They receive only the information necessary to complete the relevant transaction.
• Identity Verification Service Providers: Companies that assist us in carrying out KYC and age verification processes. Data shared is limited to information required for verification only.
• Gaming Platform Providers: Game developers and software providers supplying game content to the yoyo88 platform. Data sharing is limited and protected by strict confidentiality agreements.
• Regulatory Authorities and Law Enforcement: When required by law or a valid court order, yoyo88 will disclose the necessary personal data to the relevant authorities.
• Professional Advisors: Lawyers, accountants, auditors, and consultants providing professional services to yoyo88 — subject to strict professional confidentiality obligations.

All third parties receiving personal data of yoyo88 members are required to uphold data protection standards equal to or higher than our own. A valid data processing agreement is signed with each third party before any data sharing takes place.

Yoyo88 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by law. The following are the general data retention periods we observe:

• Active Account Data: For as long as your account is active and you remain a yoyo88 member.
• Closed Account Data: A minimum of 5 years from the account closure date, to satisfy applicable legal and regulatory requirements.
• Financial Transaction Records: A minimum of 7 years from the transaction date, in line with applicable accounting and tax legal requirements.
• Customer Support Communication Logs: 2 years from the date of last interaction, for quality control and dispute resolution purposes.
• Marketing Data (consent-based): Until you withdraw your consent or request data deletion.

When data is no longer needed and there is no legal requirement to retain it, yoyo88 will securely delete or anonymise it using industry-recognised methods.

Protecting your personal data is yoyo88's highest priority. We implement multiple layers of technical and organisational security controls to ensure your data remains safe at all times:

• Data Encryption in Transit: All communications between your browser and yoyo88 servers are protected with TLS 1.3 protocol and 256-bit SSL encryption.
• Stored Data Encryption: Sensitive data such as financial information and KYC documents are encrypted at rest using AES-256 standards.
• Role-Based Access Control: Access to member data is restricted to staff who require it solely to perform their duties.
• Two-Factor Authentication (2FA): yoyo88's internal systems are protected with multi-factor authentication to prevent unauthorised access.
• Continuous Security Monitoring: Our IT security team monitors systems 24 hours a day, 7 days a week to detect any suspicious activity.
• Regular Penetration Testing: We conduct regular independent security testing by external experts to identify and patch any system vulnerabilities.
• Incident Response Plan: yoyo88 has a comprehensive security incident response procedure. In the event of a data breach, we will notify affected members and the relevant authorities within the timeframe required by law.

The yoyo88 platform uses cookies and similar tracking technologies to enhance your experience. The following are the types of cookies we use:

• Essential Cookies (Required): These cookies are required for core platform functions, such as maintaining your login session and remembering your language preference. They cannot be disabled as the platform will not function without them.
• Performance & Analytics Cookies: To help us understand how members use the platform through aggregated, anonymous data — such as the most frequently visited pages and time spent in each section.
• Functional Cookies: To remember your preferences and settings for a more personalised experience, such as your favourite game settings.
• Marketing Cookies (with consent): Used to display more relevant ads and promotions based on your interests. These cookies are only activated with your explicit consent.

You can manage your cookie settings through your web browser's options. Please note that disabling certain cookies may affect some features of the yoyo88 platform. For more details, refer to your web browser's documentation.

As a yoyo88 member, you have the following rights under applicable data protection laws. We are committed to processing every request carefully within 30 business days from the date the request is received:

• Right to Access Data: You have the right to request and obtain a copy of the personal data we hold about you, along with information on how it is used.
• Right to Rectification: If any of your personal data is inaccurate or outdated, you have the right to request an immediate correction at no charge.
• Right to Erasure: Under certain circumstances, you have the right to request deletion of your personal data — for example, when it is no longer needed for its original purpose or when you withdraw your consent.
• Right to Restrict Processing: You may request that we temporarily suspend processing of your data while a correction or objection request is being handled.
• Data Portability Rights: You have the right to receive the data you provided to us in a structured, machine-readable format, and to transfer it to another service provider if you wish.
• Right to Object: You may object to the processing of your personal data where it is based on our legitimate interests, including processing for direct marketing purposes.

To exercise any of the rights above, please contact the yoyo88 customer support team via live chat or email our privacy address. We may need to verify your identity before processing your request for security purposes.

In the course of its operations, yoyo88 may transfer your personal data to other countries outside Malaysia, including to servers located abroad. Such transfers are only made once we have ensured that adequate protections are in place, including:

• The recipient country has data protection laws that are equivalent to or stricter than those of Malaysia.
• A valid data transfer agreement has been signed, including internationally recognised Standard Contractual Clauses.
• The data recipient holds a recognised security certification such as ISO 27001 or SOC 2 Type II.

You may request further information about the safeguards used for cross-border data transfers by contacting our privacy team.

The yoyo88 platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we discover that a minor's personal data has been collected without proper age verification, we will promptly delete that data and close the account in question.

If you are a parent or guardian and become aware that your child has registered an account at yoyo88, please contact us immediately so we can take the appropriate action without delay.

Yoyo88 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, current legal requirements, or platform improvements. When significant changes are made, we will:

• To publish an updated version on this page with a new effective date.
• To send notifications to all active members via email or in-platform notifications.
• To maintain an archive of previous versions of the Privacy Policy for your reference.

We encourage you to review this page periodically so you remain informed about how we protect your personal data. Your continued use of the yoyo88 platform after a policy change takes effect will be considered your acceptance of that change.

If you have any questions, concerns or wish to exercise your privacy rights, the yoyo88 team is ready to assist you. We are committed to responding to all privacy-related enquiries within 3 business days.

• Live Chat: Available 24 hours a day, 7 days a week directly on the yoyo88 platform — the fastest way to get immediate assistance.
• Email: [email protected] — for detailed privacy inquiries or requests that require written documentation.
• Response Time: General enquiries are resolved within 24 hours; data rights requests are resolved within 30 business days.