Y2w Privacy Policy – Your Data Protection is Our Priority

1. Introduction

This Privacy Policy ("Policy") describes how y2w ("we", "our platform") collects, uses, discloses, and protects your personal information when you use the y2w.app website and all related services. This Policy applies to all registered users and visitors of the y2w website.

By using the y2w platform, you agree to the collection and use of information as described in this Privacy Policy. We encourage you to read this document carefully so you fully understand your rights and responsibilities regarding your data privacy.

Y2w complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable related regulations. In the event of any conflict between translations of this policy, the Bahasa Melayu version shall be definitive for users in Malaysia.

2. Types of Information We Collect

Y2w collects various types of information to enable us to provide you with a secure, seamless, and personalised service. The following are the categories of information we collect:

We only collect information that is strictly necessary for the stated purposes. y2w will not request information that is irrelevant or excessive beyond legitimate operational requirements.

3. How We Use Your Information

Information collected by y2w is used solely for platform operations and to enhance the user experience. The following are the primary purposes for which your data is used:

• To create and manage your user account on the y2w platform.
• To process deposits and withdrawals securely and in a timely manner.
• To carry out the identity verification (KYC) process as required by law.
• To detect and prevent fraudulent activity, money laundering, or platform abuse.
• To provide effective and responsive customer support.
• To send important notices relating to your account, transactions, and policy updates.
• To improve and develop new platform features based on usage patterns.
• To comply with applicable legal and regulatory obligations.
• To send relevant promotional offers and bonuses — only if you have consented to receive marketing communications.

Y2w does not use your data for automated profiling that could have significant legal effects on you without appropriate human review.

4. Information Sharing and Disclosure

Y2w takes seriously its responsibility not to disclose your personal information arbitrarily. Your information will only be shared in the following situations:

• Trusted Service Providers: Payment processing partners, technology providers, and cloud service providers bound by strict confidentiality agreements with y2w.
• Legal Requirement: When required by a court order, government authority, or valid and binding regulatory directive.
• Fraud Prevention: With industry bodies or law enforcement agencies where there is reasonable suspicion of serious illegal activity.
• Your Consent: In situations where you have given explicit consent for such disclosure.

5. Cookies and Tracking Technologies

Y2w uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
• Performance Cookies: To collect anonymised information on how users interact with the platform, helping us improve its performance.
• Functional Cookies: To save your preferences such as language and display settings, delivering a more personalised experience.
• Analytics Cookies: To help us understand aggregated, anonymised platform usage patterns for development purposes.

You can manage cookie settings through your web browser. Please note that disabling essential cookies may affect the functionality of the y2w platform. Continued use of the y2w platform is considered your consent to the use of cookies as described.

6. Data Security Measures

Y2w continually invests in the latest security infrastructure to ensure your data is always protected against cyber threats. The key security measures we implement include:

• 256-bit SSL/TLS encryption for all data transmitted between users and y2w servers.
• Two-factor authentication (2FA) system to protect user account access.
• Round-the-clock security monitoring by y2w's dedicated cybersecurity team.
• Regular penetration testing conducted by independent security auditors.
• Passwords are stored using strong hashing algorithms — your actual password is never stored in plain text.
• Enterprise-grade firewall and active intrusion detection system.
• Automatic and regular encrypted data backups.

While we take all reasonable measures, no security system can be guaranteed 100% safe. We encourage you to take personal precautions as well, such as using a strong password and never sharing your login credentials with anyone.

7. Data Retention Period

Y2w retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law.

• Active account data is retained for as long as your account remains active on the y2w platform.
• Financial transaction records are retained for a minimum of seven (7) years in accordance with legal requirements.
• KYC documents and identity verification records are retained for five (5) years after account termination.
• Activity logs and security data are retained for two (2) years for investigation purposes when required.
• Marketing and communications data is retained until you withdraw consent or request deletion.

Once the designated retention period has expired, your data will be securely deleted or anonymised in accordance with y2w's standard security procedures.

8. Your Rights as a y2w User

Under Malaysia's PDPA and y2w's internal policies, you have the following rights regarding your personal data that we hold: