Y700 Privacy Policy – Personal Data Protection for Malaysian Members

01 How y700 Collects Your Personal Information

Y700 collects personal information through several different channels. Understanding how your data is collected is important so you can make informed decisions about the information you share with our platform.

Direct collection occurs when you voluntarily provide information to y700, including:

• When completing the y700 account registration form with your name, email, and phone number
• When completing identity verification by uploading a copy of your MyKad or other supporting documents
• When contacting the y700 customer support team via live chat or email
• When completing feedback forms or satisfaction surveys sent by y700
• When submitting a withdrawal request or making an account-related enquiry

Automatic collection occurs while you are using the y700 platform, where our systems automatically record technical data including your IP address, device type, browser used, pages visited, and session duration. This data is collected via cookies, server logs, and other industry-standard tracking technologies.

Collection from trusted third parties is sometimes necessary — for example, when y700 verifies payment information through payment service providers such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX via Maybank2u and CIMB Clicks. Information received from these third-party providers is limited strictly to what is needed to process your financial transactions.

02 How Your Personal Data Is Used

Y700 uses your personal data only for legitimate, relevant purposes that align with the consent you have provided. The following are the primary purposes for which data is used on the y700 platform:

• Account Management: Creating and managing your y700 account, processing logins securely, and recovering your account when needed
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX, as well as handling winning withdrawals quickly and securely
• Identity Verification: Ensuring that only eligible individuals (aged 18 and above and residing in Malaysia) use the y700 platform, and preventing fraud and unlawful activity
• Gaming Services Provision: Operating games such as slots, live casino, and fishing games on y700 fairly and transparently
• Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance to y700 members
• Platform Security: Detecting and preventing fraud, money laundering, and unauthorised access to y700 accounts
• Responsible Gambling: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate support to players who need assistance
• Service Communications: Sending you important notifications regarding your account, terms changes, bonus promotions, and security information
• Platform Improvements: Analysing usage data in aggregate (not individually) to improve the overall y700 user experience
• Legal Compliance: Meeting the reporting and compliance requirements set out under Malaysian law, including PDPA 2010

03 Data Sharing With Third Parties

Y700 does not sell or rent members' personal data to any third party for marketing or other commercial purposes. However, in the course of operating the platform, y700 may need to share your personal data with certain parties in limited and controlled circumstances:

• Payment Service Providers: Transaction information required is shared with payment providers such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and banks via FPX (Maybank2u, CIMB Clicks) solely for the purpose of processing your deposits and withdrawals at y700.
• Game Service Providers: Game providers that operate slots, live casino, and other games on the y700 platform may receive the technical session data required to run those games, subject to strict confidentiality agreements.
• Technical Service Providers: Companies that provide y700 with hosting, security infrastructure, platform analytics, and technical support may have limited access to data in the course of performing their duties, and all are bound by strict data protection agreements.
• Legal Authorities: y700 is required to disclose information to the relevant Malaysian authorities when mandated by law, court order, or for the purpose of preventing financial crime.

All third parties that receive data from y700 are bound by data protection agreements ensuring they handle your information to a standard at least equivalent to y700's own data protection standards.

04 y700 Cookie Policy

Cookies are small text files stored on your device when you visit the y700 platform. We use cookies to enhance user experience, maintain session security, and understand how members use our platform. The following are the categories of cookies used by y700:

• Essential Cookies: These cookies are essential for the basic functionality of the y700 platform and cannot be disabled. They include login session cookies that keep you signed in while using the platform, security cookies that prevent cross-site request forgery, and language preference cookies.
• Performance Cookies: Collecting information on how you use the y700 platform — the pages you visit most frequently, time spent on each page, and any errors you encounter. This data is used in aggregate form to improve the performance and usability of the y700 platform.
• Functional Cookies: Saving your preferences such as language, display settings, and game preferences so you do not need to reconfigure them each time you log in to y700.
• Security Cookies: Helping y700 detect suspicious activity, multiple login attempts, and potential cyber attacks to keep your account protected.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the y700 platform, and you may be unable to log in or use certain features normally. y700 encourages you to keep essential cookies enabled for the best platform experience.

05 y700 Data Security Measures

Y700 invests seriously in data security technologies and procedures to ensure your personal information is protected at all times against unauthorised access, modification, disclosure, or deletion. The following are the key security layers we employ:

• 256-bit SSL Encryption: All data transmitted between your device and y700's servers is protected with 256-bit SSL encryption — the highest standard used in the financial and online banking industry.
• Data-at-Rest Encryption: Sensitive data stored in y700's databases, including passwords (stored in hashed form) and financial information, is protected with an additional layer of encryption, ensuring the data remains unreadable even in the event of a database breach.
• Strict Access Controls: Only y700 staff with a legitimate need to access specific data are permitted to do so. All access to player data is logged and regularly audited to detect any inappropriate use.
• 24/7 Monitoring: y700's systems are monitored around the clock by automated security tools capable of detecting and responding to threats in real time, before they can cause any harm to player data.
• Regular Security Audits: y700 conducts regular vulnerability assessments and penetration testing carried out by qualified independent cybersecurity firms to identify and patch potential weaknesses in its systems.
• Two-Factor Authentication: y700 encourages all members to enable two-factor authentication (2FA) on their accounts for a significant additional layer of protection against unauthorised access.

06 Your Rights Regarding Personal Data

As a y700 member and an individual protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you hold certain rights regarding your personal data that y700 is committed to respecting and facilitating:

• Right of Access: You have the right to request a copy of the personal data y700 holds about you. y700 will provide this information within a reasonable timeframe once your identity has been verified, to ensure data is not released to the wrong party.
• Right to Rectification: If any personal data held by y700 is inaccurate or out of date, you have the right to request an immediate correction. You may also update certain information yourself through your y700 account settings.
• Right to Erasure: Under certain circumstances provided for by law, you may request that y700 delete your personal data. Please note that this right may be limited by legal compliance requirements or active contractual obligations.
• Right to Restriction of Processing: You have the right to request that y700 restrict the processing of your data under certain circumstances — for example, when you are disputing the accuracy of your data or awaiting the outcome of a complaint investigation.
• Right to Object: You may object to the use of your personal data for direct marketing purposes at any time, and y700 will honour that objection without affecting the core services you receive.
• Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawing your consent will not affect the validity of any processing carried out prior to the withdrawal.

To exercise any of the rights above, please contact the y700 support team via email at [email protected]. We will process your request within 14 business days once your identity has been securely verified.

07 Data Retention & Deletion

Y700 does not retain your personal data indefinitely. We have a clear data retention policy to ensure your information is only kept for as long as necessary, in line with the purpose of collection and applicable legal requirements.

• Active Account Data: While your y700 account is active, we retain all relevant data to ensure you can use all platform services without interruption and that your account remains secure.
• Data After Account Closure: After an account is closed, y700 retains certain data for the period prescribed by Malaysian law for compliance purposes, including financial transaction records that may be required for audit or legal investigation.
• Technical Log Data: Access logs and technical data are typically retained for 90 days before being automatically deleted, unless required for an ongoing security investigation.
• Support Communication Records: Chat records with the y700 customer support team are retained for 12 months after a case is resolved, for quality control purposes and future reference should the same issue arise again.

Once the stipulated retention period has lapsed, y700 will delete or anonymise your data using secure, irreversible methods. If you would like to know the specific retention period for a particular data category, please contact the y700 privacy team for further information.

08 Changes to This Privacy Policy

Y700 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, Malaysian legal requirements, or the way we operate. We are committed to keeping you informed of any material changes to how we manage your personal data.

When significant changes are made to this Privacy Policy, y700 will provide appropriate notice through:

• In-platform notifications on y700 upon your next login
• Email to the address registered to your y700 account
• Announcements on the y700.my website with clearly stated update dates

The "updated" date displayed at the top of this page always reflects when the latest version of this Privacy Policy came into effect. We encourage you to review this page periodically. Your continued use of the y700 platform after any changes take effect will be considered acceptance of the updated Privacy Policy.

09 Contact the y700 Privacy Team

If you have any questions or concerns, or wish to exercise any of your personal data rights, the y700 privacy team is here to help. We take every privacy-related enquiry seriously and strive to provide a thorough, informative response as promptly as possible.

• Privacy Email: [email protected] — Please label your email subject as "Privacy Enquiry" to help us process your request faster
• Live Chat: Available 24 hours a day, 7 days a week through the y700 platform — the fastest option for general enquiries
• Response Time: We are committed to responding to all privacy-related enquiries within 14 business days

All privacy-related communications will be handled in Bahasa Malaysia by a team that is trained and well-versed in Malaysia's data protection requirements. y700 does not charge any fees to process requests relating to your data rights, except in cases of clearly excessive or repetitive requests, which may be subject to a reasonable fee.