Privacy Policy yyrr –
Personal Data Protection for Malaysia Users

1Introduction & Scope of This Policy

This Privacy Policy ("Policy") describes how yyrr ("we", "Platform") collects, uses, stores, and protects your personal information when you use the yyrr platform at yyrr.bar or through the yyrr mobile app.

By registering an account or using any yyrr service, you agree that your personal information will be handled in accordance with this Policy. If you do not agree, please discontinue use of the platform.

This Policy applies to all yyrr users in Malaysia and covers all service channels including the website, Android app, iOS app, and any written communications between users and the yyrr team.

2Types of Personal Data We Collect

Yyrr collects various types of information depending on how you interact with the platform. The following are the main categories of data we collect:

A) Identity Information

• Full name as per valid identification document
• Date of birth and gender
• Identity card number (MyKad) or passport number
• ID card image and selfie (for KYC process)

B) Contact Information

• Registration email address
• Mobile phone number
• Residential address (if requested for premium-level verification)

C) Financial Information

• Bank account number or e-wallet details for deposit and withdrawal processing
• Transaction history records within the yyrr platform
• Source of funds information (if required by anti-money laundering procedures)

D) Technical & Usage Data

• IP address and general location data
• Device type, operating system, and browser version
• In-platform activity log data (login, games played, session duration)
• Cookie data and similar tracking technologies

3How We Collect Data

Your personal data is collected through the following methods:

• Account Registration: Information you provide directly when registering a new account at yyrr.
• KYC Process: Documents and images you upload to fulfil identity verification requirements.
• Financial Transactions: Information shared by payment providers (DuitNow, FPX, e-wallet) when you make a deposit or withdrawal.
• Platform Usage: Data automatically generated when you use the yyrr website or app, including log data, cookies, and device information.
• Communications with Support: Information you share when interacting with the yyrr customer support team via live chat or email.
• Surveys & Feedback: Information you voluntarily provide through user satisfaction surveys or the yyrr feedback program.

4Purpose of Using Your Personal Data

Yyrr uses the personal data collected for the following purposes:

5Data Sharing & Disclosure

Yyrr does not sell, rent or trade users' personal data to third parties for commercial purposes. Your data is only shared in limited and controlled situations as follows:

• Payment Service Providers: Information required to process deposits and withdrawals is shared with payment providers such as banks and e-wallet operators you have selected. This sharing is limited to only the necessary information.
• Technical Service Providers: Server infrastructure providers, cloud services and other technical providers that help operate the yyrr platform — all subject to strict data confidentiality agreements.
• Regulatory Body & Law Enforcement: yyrr will disclose data when required by law, court order or direction from a lawful authority.
• Fraud Prevention: In cases where there are clear indicators of fraud or money laundering, relevant information may be shared with the appropriate authorities.

All third parties that receive yyrr user data are bound by data protection agreements and are prohibited from using that information for any purpose beyond what is specified in those agreements.

6Data Security Measures

Yyrr employs multiple layers of technical and organisational security to protect your personal data from unauthorised access, disclosure, alteration or destruction:

• Data Encryption in Transit: All communications between your device and yyrr servers are protected by 256-bit SSL/TLS encryption.
• Data Encryption at Rest: Sensitive data stored in the yyrr database is encrypted using industry-standard encryption algorithms.
• Role-Based Access Control: yyrr staff may only access data required for their specific tasks. Access is audited on a regular basis.
• Security Auditing: The yyrr system undergoes regular penetration testing and independent security audits.
• Real-Time Monitoring: A threat detection system operates 24 hours a day to identify and respond to any suspicious activity.
• Staff Training: All yyrr staff undergo regular data protection training and are bound by confidentiality agreements.

7Data Retention Period

Yyrr only retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law.

• Active Account Data: Retained for as long as your account is active and for a reasonable period after account closure.
• Financial Transaction Records: Retained for a minimum of five (5) years in accordance with financial and anti-money laundering legal requirements.
• KYC Documents: Retained for the period required by regulatory obligations, typically five (5) years after account closure.
• Technical Log Data: Retained for a period of 90 days to 12 months depending on security and diagnostic requirements.
• Customer Support Communications: Retained for two (2) years for reference and service quality purposes.

After the retention period expires, data will be securely deleted or anonymised so it can no longer be linked to any individual.

8Cookies & Tracking Technologies

The yyrr website and app use cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as login session authentication and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Helps us understand how users interact with the platform so we can make continuous improvements. Data is collected in aggregate and does not identify individuals.
• Functional Cookies: Stores user preferences such as display settings, preferred language and other choices for a more personalised experience.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect how the yyrr platform functions. For more information on managing cookies, refer to your web browser's help documentation.

9Your Rights as a User

You have certain rights regarding your personal data held by yyrr. These rights can be exercised by contacting the yyrr customer support team:

10Children's Data Protection

The yyrr platform is strictly for adults aged 18 and above. yyrr does not intentionally collect personal data from individuals under the age of 18.

If yyrr discovers that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the relevant account. If you are aware that someone under the age of 18 has registered a yyrr account, please contact our support team immediately.

11Amendments to the Privacy Policy

Yyrr reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements or technological developments. Any material amendments will be communicated to users via in-app notifications or registered email at least 14 days before the changes take effect.

The "Updated" date at the top of this document will always reflect the date of the latest revision. We encourage you to review this page periodically.

Your continued use of the yyrr platform after any amendments take effect constitutes your acceptance of the revised Privacy Policy.

12How to Contact Us About Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or the handling of your personal data by yyrr, please contact us through the following channels:

For requests related to data rights (access, correction, deletion), please clearly state the type of request and include sufficient information for us to verify your identity before processing.