256-bit SSL
No Data Selling
Secure Data
Clear User Rights
Privacy Principles

Six Principles Data Protection YesToto

These principles form the core of how yestoto handles your personal data at all times.

Full Transparency

We clearly inform you what data is collected, why it is collected, and how it is used — with no confusing language or hidden terms.

Minimal Collection

Yestoto only collects data that is strictly necessary to provide its services. We do not collect irrelevant or excessive data from our users.

Enterprise-Grade Security

All data is protected with 256-bit SSL encryption, strict access controls and a round-the-clock security monitoring system to prevent unauthorized access.

Control in Your Hands

You have the full right to access, correct, restrict, or delete your personal data. We make this process straightforward without requiring you to go through complex procedures.

No Sharing Without Consent

Your personal data will not be shared, sold or transferred to any third party for marketing purposes without your explicit consent.

Limited Retention

Your personal data is only retained for as long as necessary for service purposes or as required by law. Data that is no longer needed will be deleted or anonymised.

1

Introduction

This Privacy Policy explains in detail how yestoto (operating via https://yestoto.vu) collects, processes, stores and protects the personal information of our platform users. This document applies to all users who access the yestoto website, use our mobile app, or interact with any of the services we offer.

We understand that your trust in yestoto depends largely on how we handle your personal data. That is why we are committed to being consistently transparent, accountable, and proactive in protecting your privacy. If you have any questions about this policy, our team is ready to help.

By using the yestoto platform, you agree to the collection and processing of your personal data as described in this Privacy Policy. Please review this document periodically for the latest information.

2

Personal Data We Collect

Yestoto collects various types of personal data depending on how you interact with our platform. Below is a detailed breakdown of the data we collect:

Data You Provide Directly
Data Type Example Purpose
Identity Information Full name, date of birth, identification card number Account registration & KYC
Contact Information Email address, phone number Communication & Support
Financial Information Bank account details, transaction records Payment processing
Verification Documents Copy of ID card, bank statement Identity verification (KYC)
Account Information Username, account preferences Account management
Automatically Collected Data
  • IP address and geolocation data (country and region only)
  • Device type, operating system and browser used
  • Log data such as access times, pages visited and actions taken within the platform
  • Game session data including betting history and wins
  • Cookie data and similar tracking technologies (see section 7)
3

How We Use Your Data

The personal data we collect is used for the following purposes, all of which are directly related to delivering a quality and secure yestoto service:

  • Account Management: Creating, verifying, and managing your user account.
  • Transaction Processing: Processing deposits, withdrawals, and other financial transactions securely.
  • Identity Verification (KYC): Meeting compliance requirements and preventing fraud, money laundering, and other illegal activities.
  • Customer Support: Assisting you with any enquiries, technical issues, or complaints.
  • Platform Security: Detecting and preventing fraud, unauthorised access, and suspicious activity.
  • Service Improvement: Analysing usage patterns to improve platform performance and user experience.
  • Legal Compliance: Fulfilling applicable legal and regulatory obligations.
  • Responsible Gaming: Monitoring play patterns to identify signs of problem gambling and offer appropriate support.
4

Legal Basis for Data Processing

Yestoto processes your personal data on the basis of one or more of the following legal grounds:

  • Contract Performance: Processing required to deliver the services you request, such as managing your account and processing payments.
  • Legal Obligation: Processing required to comply with legal obligations such as KYC and anti-money laundering (AML) requirements.
  • Legitimate Interest: Processing for platform security purposes, fraud prevention, and service improvement.
  • Consent: For specific marketing purposes or optional data sharing, we require your explicit consent beforehand.
5

Data Sharing with Third Parties

Yestoto does not sell your personal data to any third party. However, we may share your data with the following parties under limited and controlled circumstances:

  • Payment Providers: To securely process your financial transactions via DuitNow, FPX, Touch 'n Go, Boost, GrabPay and others.
  • Identity Verification Providers: To carry out the KYC process as required by regulations.
  • Game Providers: Minimum data required to provide access to games from third-party providers.
  • Technology Service Providers: Companies that help manage our platform's technical infrastructure, bound by strict confidentiality agreements.
  • Authority: When required by law or a valid court order.

All third parties that receive your data are bound by strict data protection agreements and may only use that data for the stated purposes. We do not allow them to use your data for their own marketing purposes.

6

Data Security Measures

Yestoto takes data security seriously. We implement multiple layers of technical and organizational protection to safeguard your personal data against unauthorized access, disclosure, modification or destruction:

  • 256-bit SSL encryption for all communications between your device and our servers.
  • Encryption of data stored in our databases using the latest industry standards.
  • Strict access controls — only authorised staff have access to user personal data.
  • Continuous 24/7 security monitoring to detect and respond to any threats.
  • Periodic independent security audits to identify and address vulnerabilities.
  • Regular data security training for all staff who handle user data.

While we take reasonable steps to protect your data, no system is completely secure. If you suspect a security breach on your account, please contact our support team immediately.

7

Cookies and Tracking Technologies

The yestoto platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. Below are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login authentication and session security. Cannot be disabled.
  • Performance Cookies: Collecting information on how you use the platform to help us improve it.
  • Functional Cookies: Saving your preferences such as language and display settings for a more personalised experience.
  • Analytics Cookies: Helping us understand aggregate usage patterns to make better product development decisions.

You can manage cookie settings through your browser. Please note that disabling certain cookies may affect the functionality and user experience of the yestoto platform.

8

Your Rights as a User

You have certain rights regarding your personal data held by yestoto. We are committed to making it easy for you to exercise these rights:

Right to Access

You have the right to know what personal data we hold about you and to obtain a copy of it.

Right to Rectification

You have the right to correct inaccurate or incomplete personal data through your account settings.

Right to Erasure

Under certain circumstances, you have the right to request the deletion of your personal data from our systems.

Right to Restriction

You may request that we restrict the processing of your data in certain situations provided for by law.

Right to Data Portability

You have the right to receive your data in a structured, machine-readable format for transfer to another provider.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time without providing a reason.

To exercise any of the above rights, contact the yestoto support team via live chat or email at [email protected]. We will process your request within 30 business days.

9

Children's Data Protection

The yestoto platform is exclusively for users aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

If we discover that a child's personal data has been collected without our knowledge — for example through registration using false information — we will delete that data immediately and close the account in question.

If you believe that a minor has registered for or is using the yestoto platform, please notify our support team immediately so that appropriate action can be taken.

10

Amendments to the Privacy Policy

Yestoto reserves the right to update or amend this Privacy Policy from time to time in line with changes in law, technology or our business practices. Any material changes will be communicated to you via your registered email or a prominent notice on our website at least seven (7) days before they take effect.

It is your responsibility to review this page periodically. Continued use of the yestoto platform after any amendments are published constitutes your acceptance of the updated Privacy Policy.

11

Contact Us

If you have any questions, concerns or complaints regarding this Privacy Policy or how yestoto handles your personal data, please contact our team:

  • Live Chat: Available 24/7 via the chat icon in the corner of the yestoto website
  • Email: [email protected] (response within 1–2 business days)
  • FAQ Page: Visit our FAQ page for answers to frequently asked questions

We are committed to addressing every privacy-related complaint seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to refer the matter to the relevant data protection authority.

Your Data Is Safe at YesToto

Play with Complete Confidence at YesToto

With high-grade encryption, a transparent privacy policy and our commitment to user rights, you can enjoy your gaming experience without worrying about the security of your data.

Bahasa Melayu