Official Document Updated: January 2026

Y2w Privacy Policy – Malaysian User Personal Data Protection

Y2w takes every user's privacy seriously. This document details how we collect, use, store, and protect your personal data when you use our wagering platform. Please read carefully before registering or using y2w services.

Document Information
Version v3.1
Effective Date 1 Jan 2026
Compliance Malaysia PDPA
Data Encryption SSL 256-bit
y2w Privacy Commitment

Six core principles that guide how we handle your data

Advanced Data Encryption

All your personal data and financial information is protected with SSL 256-bit encryption. Every connection to the y2w platform is transmitted via secure HTTPS protocol, ensuring no third party can intercept your data.

No Data Sales to Third Parties

Y2w has never and will never sell, rent, or disclose your personal information to any third party for marketing purposes without your prior consent. Your data belongs entirely to you.

Full Control in Your Hands

You have the right to access, update, transfer or delete your personal data at any time. Data requests are processed within 14 business days through our support team.

Secure Data Storage

Your data is stored on protected servers in certified data centres with strict physical and digital access controls. Only authorised personnel may access user data within the scope of their duties.

Malaysia PDPA Compliance

The y2w privacy policy is fully compliant with the Malaysian Personal Data Protection Act 2010 (PDPA). We conduct regular privacy audits to ensure all data handling practices remain in line with current legislation.

Data Breach Notification

In the event of any security incident involving your data, y2w will notify you within 72 hours. We have a comprehensive incident response procedure and a cybersecurity team on duty 24/7.

This Privacy Policy applies to all users of the y2w platform, including website visitors, registered members and mobile app users. By using any y2w service, you agree to the terms set out in this document.

01Introduction

Y2w (y2w.pro) is an online wagering platform operating to provide casino, sports betting, live games and e-sports betting experiences to users in Malaysia. We understand that user trust is our most valuable asset, and privacy protection is a fundamental part of that trust.

This Privacy Policy details our practices for collecting, processing, storing and protecting your personal data. It also explains your rights as a user and how you may exercise those rights. This document has been prepared in accordance with the requirements of the Personal Data Protection Act 2010 (PDPA) Malaysia.

Y2w is licensed and operates under a recognised regulatory framework. We have appointed a Data Protection Officer (DPO) responsible for ensuring all data handling practices comply with applicable laws and regulations. Any privacy-related inquiries can be directed to our team at any time.

y2w has passed an independent PDPA compliance audit. Our compliance records are available for review by relevant authorities upon request.

02Personal Data We Collect

Y2w only collects data necessary to deliver quality services and maintain platform security. The following are the categories of data we collect:

Data Categories Example Information Collection Method
Identity Information Full name, IC number, date of birth, gender Registration form, KYC
Contact Information Email address, phone number, mailing address Account registration
Financial Data Bank account number, eWallet details, transaction history Deposit/withdrawal process
Technical Data IP address, device type, browser, operating system Automated system logs
Usage Data Game history, wagering, login activity, session duration Platform activity
Communication Data Support chat records, emails, help tickets Support interactions

Y2w does not collect sensitive data such as health information, religious beliefs, or political views. For KYC verification, requested documents are limited to official identity cards and proof of current address only.

Data you provide during the KYC process is stored in a separate system with a higher level of security. Access to KYC data is restricted to the compliance team only and is not used for marketing purposes.

03Personal Data Usage Purpose

Y2w uses your personal data solely for legitimate and necessary purposes. We do not process your data for any other purpose without obtaining your consent first. The following are the primary purposes for which data is used:

  • Account Management: Creating, verifying, and managing your user account, including the login process and two-factor authentication (2FA).
  • Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and accurately using your chosen payment method.
  • Identity Verification (KYC): Verifying your identity to meet anti-money laundering (AML) legal requirements and ensure account security.
  • Customer Support: Providing technical assistance and resolving any issues or complaints you submit to our support team.
  • Platform Security: Detecting and preventing fraud, system abuse, and activities that violate the platform's terms of use.
  • Legal Compliance: Meeting regulatory obligations, reporting to authorities as required by law, and maintaining necessary audit records.
  • Service Improvement: Analyzing usage patterns in aggregate and anonymized form to improve platform performance and user experience.
  • Marketing Communications: Sending promotional information, bonuses, and special offers — only with your consent, and you may unsubscribe at any time.
y2w applies the principle of data minimisation — we only collect data that is strictly necessary for each stated purpose. Data that is no longer required will be deleted or anonymised in accordance with our data retention schedule.

04Data Sharing with Third Parties

Y2w does not sell or rent your personal data to any third party. However, there are specific situations where we need to share your information with the following parties, solely for platform operational purposes:

  • Payment Processors: Payment service providers such as banks, FPX operators, DuitNow, and eWallet providers to securely process your financial transactions.
  • Game Providers: Third-party game software providers that supply game content on the y2w platform, only to the extent necessary to enable the games to function.
  • Regulatory Authorities: Regulatory bodies, law enforcement agencies or courts when required by Malaysian law or a valid court order.
  • Technical Service Providers: Cloud infrastructure providers, cybersecurity services, and analytics partners that help us operate the platform — all bound by strict confidentiality agreements.

All third parties receiving data from y2w are bound by data processing agreements that require them to protect your information to a standard at least equivalent to our privacy policy. Cross-border data sharing is only carried out with adequate safeguards in line with PDPA requirements.

If you receive any communication claiming to be from y2w that requests your personal information or password via email or message, please report it to us immediately. y2w will never ask for your password through any communication channel.

05Data Storage & Security

Your personal data security is the absolute priority for y2w. We implement comprehensive technical and organizational security measures to protect your data from unauthorized access, loss, destruction, or disclosure.

Our technical security measures include:

  • Data encryption in transit using TLS 1.3 and at rest using AES-256.
  • Enterprise-grade firewall and intrusion detection system (IDS/IPS) active 24/7.
  • Regular penetration testing conducted by independent cybersecurity firms.
  • Real-time account activity monitoring to detect suspicious patterns.
  • Automatic data backup with tested disaster recovery procedures.
  • Role-based access control (RBAC) for y2w internal staff.

Data retention period: y2w retains personal data for as long as necessary for the stated purposes or as required by law. Financial transaction data is retained for a minimum of 7 years for AML compliance purposes. Closed account data is retained for 5 years before being securely deleted.

All y2w servers are housed in Tier-3 data centers with physical and cyber security certifications. Physical access to the data centers is restricted and monitored using biometric recognition systems.

06Your Rights as a User

Under the Malaysian PDPA and y2w's privacy policy, you have the following rights regarding your personal data. We are committed to making it easy for you to exercise these rights without any barriers:

Right to Access

You may request a copy of all personal data we hold about you. Requests will be processed within 14 business days.

Right to Rectification

If your data is inaccurate or outdated, you may request a correction through your account settings or our support team.

Right to Erasure

You may request deletion of your data when it is no longer required, subject to applicable legal obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time and we will respect your decision.

Right to Data Portability

You may request your data in a structured, machine-readable format for transfer to another service provider.

Right to Restriction of Processing

You may request a temporary restriction on the processing of your data while a dispute or investigation is ongoing.

To exercise any of the above rights, contact the y2w support team via live chat or email at [email protected]. We may need to verify your identity before processing your request in order to protect the security of your account.

07Cookies & Tracking Technologies

Y2w uses cookies and similar tracking technologies to enhance the user experience, analyse platform traffic, and ensure account security. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting basic functionality.
  • Performance Cookies: Collecting information on how you use the platform to help us identify and resolve technical issues. Data is collected in aggregate and anonymized form.
  • Functional Cookies: Saving your preferences such as language, time zone, and display settings to provide a more personalized experience.
  • Analytics Cookies: Helps us understand overall platform usage patterns for product improvement. No personally identifiable data is shared.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect platform functionality. All third-party cookies used on the y2w platform are subject to the respective provider's privacy policy and we conduct regular reviews to ensure their compliance.

08Children's Data

The y2w platform is strictly for individuals aged 18 years and above. We do not intentionally collect or process personal data from individuals under the age of 18.

Y2w employs a multi-layered age verification system during the registration process, including official identity document verification through the KYC process. If we find that a minor's personal data has been collected without valid parental or guardian consent, we will delete that data immediately and close the associated account.

If you believe that someone under the age of 18 has registered on the y2w platform, please contact us immediately at [email protected]. We will take immediate action to investigate and resolve the matter.

09Privacy Policy Amendment

Y2w reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or technology in use. The latest update date will always be displayed at the top of this document.

For amendments considered significant, y2w will provide users with advance notice via:

  • Via email to your registered email address at least 14 days before the changes take effect.
  • In-platform notification upon login.
  • A clear notice on the y2w.pro homepage.

Continued use of the y2w platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

10Contact Us About Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or how y2w handles your personal data, we are ready to assist through the following channels:

  • Live Chat: Available 24 hours a day, 7 days a week at y2w.pro.
  • Privacy Email: [email protected] — for specific inquiries related to personal data and PDPA.
  • General Support Email: [email protected] — for general inquiries about accounts and services.

Our Data Protection Officer (DPO) team will respond to all privacy-related inquiries within 3 business days. For official requests relating to user rights under the PDPA, a full response will be provided within 14 business days from the date the request is received.

y2w is committed to providing clear, honest, and timely responses to every privacy-related inquiry. Your trust is our priority, and we value all feedback that helps us strengthen the platform's privacy protection.
Secure & Trusted Platform

Your Data is Protected. Your Privacy is Respected.

Register a y2w account today and enjoy a secure betting experience on a platform that prioritises your privacy and data security at all times.

256-bit SSL Encryption  ·  PDPA Compliance  ·  24/7 Privacy Support

Bahasa Melayu