Official Documents

Privacy Policy y2w
Player Personal Data Protection

Y2w takes every player's privacy seriously. This document clearly explains how we collect, use, store, and protect your personal information while you use our platform.

Last Updated: 1 January 2026
y2w's Privacy Commitment Your privacy is not merely a legal obligation to us — it is the foundation of trust between y2w and every player. We are committed to handling your personal data with full integrity, transparency and accountability in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

1. Introduction

Welcome to the y2w Privacy Policy. This document outlines the privacy practices of the y2w platform, accessible via the website y2w.onl and all related services. By registering and using our platform, you agree to the terms set out in this Privacy Policy.

Y2w is an online entertainment platform offering slot games, live casino, sports betting, and a variety of other games exclusively for adult players in Malaysia. In operating these services, we need to collect and process certain personal information to ensure our services run smoothly, securely, and in compliance with legal requirements.

This Privacy Policy applies to all users of the y2w platform, including visitors browsing the website without registering an account, registered members who are actively playing, and former members whose accounts have been terminated. Please read this document carefully and contact our support team if you require further clarification on any section herein.

2. Personal Data We Collect

Y2w collects various categories of personal information for legitimate and specific purposes. We only collect data genuinely necessary to deliver our services effectively. The following are the main categories of data we collect:

2.1 Personal Identification Information

During account registration, we collect basic information required to verify your identity and meet legal requirements:

Full name MyKad / Passport number Date of birth Gender Residential address Phone number Email address

2.2 Financial Information

To process deposits and withdrawals securely, we require your financial information, which is fully encrypted during transmission and storage:

Bank account name & number E-wallet information Transaction history Deposit & withdrawal records

2.3 Gaming & Activity Data

To monitor your gaming experience and ensure game integrity, we automatically record your gameplay activity:

Game history Wagering records Play session duration Wins & losses records

2.4 Technical & Device Data

When you browse our platform, our systems automatically record technical information for security and service improvement purposes:

  • IP address and geographic location (state/city level only)
  • Device type, operating system and browser version
  • Platform access time and duration
  • Pages visited and actions taken within the platform
  • Cookie data and session identifiers
Data Accuracy Responsibility You are responsible for ensuring that all personal information provided to y2w is accurate, current, and complete. Inaccurate information may affect our ability to process transactions and meet KYC compliance requirements.

3. How We Use Your Data

Every piece of data we collect is used only for legitimate, specific, and transparent purposes. y2w never uses your data for purposes unrelated to platform operations without your explicit consent. The following are the primary purposes for data use:

3.1 Account Management & Identity Verification

Your personal identification data is used to create and manage your account, verify your identity through the KYC process as required by law, ensure only one active account exists per player, and securely process account recovery requests.

3.2 Financial Transaction Processing

Your financial information is used solely to process deposits and fund withdrawals, verify ownership of payment methods, comply with anti-money laundering (AML) requirements, and provide accurate transaction statements in your account.

3.3 Platform Security & Fraud Prevention

Technical and activity data is used on an ongoing basis to detect and prevent fraudulent activity, the use of bots or unauthorised automation software, unauthorised access attempts, and to ensure the integrity of all games offered on the platform.

3.4 Responsible Gaming

Your gameplay records are analysed to identify risky gaming patterns, enabling us to proactively reach out to players who may be experiencing gambling-related issues and to enforce the limits you set through our self-control tools.

3.5 Communication & Customer Support

Your contact information is used to send important account-related notices, respond to inquiries and complaints through support channels, deliver promotional information (with your consent), and notify you of any changes to platform policies.

4. Sharing Information with Third Parties

Y2w does not sell, rent, or transfer your personal data to any third party for marketing or commercial purposes without your explicit consent. However, in the context of legitimate operations, we may share your information with the following categories of parties:

4.1 Trusted Service Providers

We work with third-party service providers who help us operate the platform, including licensed payment processors, gaming software providers, customer support platforms and identity verification services. All providers are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.

4.2 Legal Requirements & Compliance

Y2w will disclose your personal information to the relevant authorities when required by law or court order, including law enforcement agencies, financial regulatory bodies, and financial crime investigation teams. Such disclosures are made solely to fulfil our legal obligations.

4.3 Business Transfers

In the event of a merger, acquisition, or transfer of platform assets, user data may be transferred as part of the business assets. In such situations, you will be notified in advance and the new entity will be bound by this Privacy Policy or one that offers equivalent protection.

Data Protection Guarantee y2w never sells your personal data to advertisers, data brokers, or any commercial party. Your data is used solely within the context of y2w operations.

5. Data Security and Protection

The security of your personal data is y2w's top priority. We continuously invest in industry-grade security infrastructure to ensure that every piece of information you entrust to us is protected against unauthorized access, breaches or misuse.

Data Encryption (SSL/TLS)256-bit
Two-Factor Authentication (2FA)Active
24/7 Security MonitoringOngoing
Regular Security AuditsEvery Quarter

5.1 Technical Measures

  • 256-bit SSL encryption for all data transmitted between your browser and our servers
  • AES-256 encryption for sensitive data stored in the database
  • Network segregation via layered firewalls and intrusion detection systems
  • Automatic data backups with full encryption stored at geographically separate locations
  • Real-time account activity monitoring to detect anomalies

5.2 Organisational Measures

  • Access to players' personal data is granted only to staff who require it for specific duties
  • All staff handling personal data are required to sign confidentiality agreements
  • Data security awareness training is conducted regularly for all staff
  • Documented cyber incident response procedures tested on a regular basis
Data Breach In the event of a data breach that may affect your rights or freedoms, y2w will notify you within 72 hours of becoming aware of it, in line with international data protection best practices.

6. Cookies and Tracking Technologies

Y2w uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how players interact with our platform. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
  • Performance Cookies: Collects information on how you use the platform to help us improve our services. Data is collected anonymously.
  • Functionality Cookies: Saves your preferences such as language and display settings to provide a more personalized experience.
  • Analytics Cookies: Helps us understand overall platform usage patterns for continuous improvement.

6.2 Managing Cookies

You can manage and delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality and security of the y2w platform. For more information on managing cookies, please refer to your web browser's help documentation.

7. Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international best privacy practices, you have the following rights regarding your personal data held by y2w:

Right of Access
Request a copy of the personal data we hold about you
Right to Rectification
Correct inaccurate or incomplete data
Right to Erasure
Request deletion of your personal data under certain circumstances
Right to Restriction
Restrict the processing of your data in certain situations
Right to Object
Object to the processing of your data for specific purposes
Right to Portability
Receive your data in a machine-readable format

To exercise any of the above rights, please contact our data protection team by email at [email protected] or via the live chat within the platform. We will process your request within 30 business days. In complex cases, this period may be extended to up to 60 business days with notice to you.

8. Data Retention Period

Y2w retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by law. Retention periods vary by data type:

  • Active account data: Retained for as long as your account is active and for 7 years after account closure for legal compliance and financial audit purposes.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian accounting and anti-money laundering legal requirements.
  • Gaming activity logs: Retained for 2 years for dispute resolution and game integrity audit purposes.
  • Support communication data: Retained for 3 years after case resolution for reference and quality improvement.
  • Technical data & access logs: Retained for 12 months for security and fraud detection purposes.

Once the designated retention period expires, your personal data will be securely deleted or anonymised using industry-recognised deletion procedures.

9. Changes to This Privacy Policy

Y2w reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform service improvements. Any material changes will be communicated to you via:

  • A prominent notice on the platform's home page at least 14 days before changes take effect
  • Email notification to the address registered on your account
  • In-account notification upon your next login

The "Last Updated" date at the top of this document will be updated whenever changes are made. Your continued use of the y2w platform after the effective date of those changes constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this page periodically to ensure you are always informed of how we handle your personal data.

10. Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how y2w handles your personal data, our Data Protection Officer (DPO) team is ready to assist you.

Contact the y2w Privacy Team For any enquiries regarding the Privacy Policy, data access requests, or privacy complaints, please contact us by email at [email protected] or via the 24/7 live chat available within the platform. We are committed to responding to all privacy enquiries within 3 business days.

You may also refer your complaint to the Department of Personal Data Protection (JPDP) Malaysia if you believe that the processing of your personal data has breached the provisions of PDPA 2010.

Six Core Principles Privacy Protection y2w

The y2w platform is built with privacy as a priority, not merely as a compliance checkbox.

Industry-Grade Encryption

All data transmitted between your device and y2w's servers is protected with SSL 256-bit encryption. Sensitive data such as financial information is stored fully encrypted using AES-256 standards.

Data Minimization Principle

Y2w collects only the data genuinely necessary to deliver its services. We do not collect excessive information and do not permit data processing for undisclosed purposes.

Full Control In Your Hands

You have the right to access, correct, download, or request deletion of your personal data at any time. Our privacy team is ready to process every request within the stipulated timeframe.

No Data Sales to Third Parties

Y2w never sells, rents, or transfers your personal data to advertisers, data brokers, or any commercial party. Your data belongs to you — not to our business.

Clear Retention Policy

Each data category has a clearly defined retention period. Once that period ends, your data is automatically deleted or anonymised using industry-recognised secure procedures.

Malaysia PDPA Compliance

Y2w operates in full compliance with the Malaysian Personal Data Protection Act 2010 (PDPA). We continuously monitor the latest developments in privacy legislation to ensure ongoing compliance.

FAQ About Privacy

Answers to the most frequently asked questions by players regarding privacy and data protection at y2w.

Absolutely not. y2w never sells, rents, or transfers players' personal data to any third party for commercial or marketing purposes. Your data is used solely within the context of y2w platform operations and shared only with service providers directly involved in our operations, under strict confidentiality agreements.

You may submit a data access request by emailing [email protected] or by contacting our support team via the platform's live chat. Please clearly state that you are making a data access request under your data subject rights. We will process your request within 30 business days and send a copy of your data in a readable format.

Following account closure, y2w will retain certain data for the period required by law — primarily financial transaction records for 7 years for anti-money laundering compliance and accounting purposes. Once that period expires, all your personal data will be securely deleted or anonymised.

You have the right to request deletion of your personal data. Please note, however, that certain data cannot be deleted immediately due to legal obligations — such as financial transaction records that must be retained for a period prescribed by Malaysian law. y2w will clearly inform you which data can be deleted immediately and which must be retained, along with the legal justification.

y2w may use your in-platform activity data to offer you more relevant promotions and deals internally within the platform. However, we do not share your data with third-party advertising networks or use it for targeted advertising outside the y2w platform. You may opt out of marketing communications by updating your notification settings in your account.
Secure & Trusted Platform

Your Privacy Is Assured.
Join y2w with Confidence

Register a y2w account today and enjoy a safe, fair, and personalised gaming experience — your privacy always protected to the highest security standards.

PDPA Compliant SSL 256-bit Data Not Sold 24/7 Support
Bahasa Melayu