Summary: yycoin collects only the personal data necessary to operate your account, process transactions, comply with anti-money-laundering obligations, and deliver a secure gaming experience. We do not sell your personal data to third parties for advertising purposes. You have the right to access, correct, and request deletion of your data at any time by contacting us at [email protected].
1. Introduction
yycoin ("we", "us", "our") operates the online gaming platform accessible at https://yycoin.cam (the "Platform"). We are committed to protecting the privacy and personal data of every individual who visits, registers with, or uses the yycoin Platform ("you", "Player", "User").
This Privacy Policy ("Policy") describes how yycoin collects, uses, stores, discloses, and protects your personal data in connection with your use of the Platform. It applies to all data collected through the Platform, including data submitted during account registration, identity verification, payment processing, customer support interactions, and passive technical collection through cookies and analytics tools.
This Policy forms part of and should be read alongside our Terms and Conditions. By registering an account on the Platform or continuing to use the Platform after this Policy has been updated, you acknowledge that you have read, understood, and agreed to the data practices described herein.
2. Definitions
- "Personal Data" means any information that identifies or can reasonably identify a natural person, whether directly or in combination with other data, including name, identification number, location data, online identifiers, or factors specific to the physical, economic, cultural, or social identity of that person.
- "Processing" means any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, erasure, or destruction.
- "Data Controller" means yycoin, the entity that determines the purposes and means of Processing Personal Data collected through the Platform.
- "Data Processor" means any third-party service provider that Processes Personal Data on behalf of yycoin under a binding data-processing agreement.
- "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the Processing of your Personal Data for a stated purpose.
- "KYC Data" means identity verification documents and supporting materials submitted by a Player to satisfy yycoin's Know Your Customer obligations, including government-issued ID, proof of address, and selfie photographs.
- "Cookie" means a small text file placed on your device by the Platform for the purposes of session management, preference storage, analytics, and security.
3. Personal Data We Collect
yycoin collects the following categories of Personal Data, depending on your interaction with the Platform:
3.1 Registration Data
- Full legal name
- Date of birth (to verify you are 21 or older)
- Email address
- Mobile phone number
- Residential address (city, province, postal code) — we primarily serve players in Jakarta, Surabaya, Bandung, Medan, Yogyakarta, Bali, and other Indonesian cities
- Username and encrypted password
3.2 Identity Verification (KYC) Data
- Government-issued photo ID (Indonesian National ID / KTP Nasional, or passport)
- Proof of residential address (utility bill, bank statement from BCA, BRI, BNI, Mandiri, or similar)
- Selfie photograph holding the submitted ID
- Source-of-funds documentation (where requested for high-value transactions)
3.3 Financial Data
- Bank account details for withdrawal purposes (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OCBC NISP)
- E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja account numbers or registered phone numbers)
- Transaction history — deposits, withdrawals, wagers, and bonus activations
- Account balance history
3.4 Technical and Usage Data
- IP address and approximate geolocation (country/city level)
- Device type, operating system, browser type, and version
- Session timestamps, page-view logs, and navigation paths on the Platform
- Game play logs (game titles accessed, bet amounts, session durations, win/loss outcomes)
- Cookie identifiers and session tokens
3.5 Communications Data
- Content of messages sent to yycoin customer support via email or live chat
- Feedback, complaints, and dispute correspondence
- Marketing communication preferences and opt-out records
4. How We Collect Your Data
yycoin collects Personal Data through the following channels:
- Directly from you: When you register an account, complete KYC verification, make deposits or withdrawal requests, contact our support team, or respond to surveys and promotions.
- Automatically through the Platform: Through cookies, session logs, server-side logging, and analytics tools that record your interactions with the Platform during each session.
- From payment providers: Transaction confirmation data, payment status, and bank/e-wallet identifiers provided by BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and other supported payment channels when you initiate a deposit or withdrawal.
- From identity verification partners: Third-party KYC verification services may provide enhanced validation results (e.g., document authenticity checks, facial recognition match scores) to supplement the documents you submit directly.
- From fraud prevention and compliance tools: Device fingerprinting, IP reputation databases, and anti-money-laundering screening services generate risk signals that we process alongside your account data.
5. Purposes of Processing
yycoin processes your Personal Data for the following purposes:
| Purpose | Data Categories Used |
|---|---|
| Account registration and management | Registration Data |
| Age and identity verification (KYC) | KYC Data, Registration Data |
| Processing deposits and withdrawals | Financial Data, Registration Data |
| Fraud prevention and anti-money-laundering compliance | All categories including Technical Data |
| Delivering games and sports betting services | Technical Data, Financial Data |
| Customer support and dispute resolution | Communications Data, Registration Data, Financial Data |
| Responsible Gaming monitoring and intervention | Technical Data, Financial Data, Game play logs |
| Marketing communications (with consent) | Registration Data, Communications preferences |
| Platform performance analytics and improvement | Technical and Usage Data (anonymized) |
| Legal and regulatory compliance obligations | All categories as required |
6. Legal Basis for Processing
yycoin processes your Personal Data on the following legal bases:
- Contract performance: Processing necessary to execute the agreement between you and yycoin, including account management, transaction processing, and game delivery.
- Legal obligation: Processing required to comply with anti-money-laundering, counter-terrorism-financing, and identity verification obligations under applicable international law.
- Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where these interests do not override your fundamental rights and freedoms.
- Consent: Processing for marketing communications, non-essential cookies, and certain profiling activities, where we have obtained your explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
7. Data Sharing and Disclosure
yycoin does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share your Personal Data only with the following categories of recipients, and only to the extent necessary for the stated purpose:
- Payment processors and banks: BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja receive the minimum financial data required to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by applicable financial-sector data protection regulations.
- KYC and identity verification partners: Specialist third-party verification services receive your KYC documents and registration data solely for the purpose of authenticating your identity. These partners are contractually prohibited from using your data for any other purpose.
- Game content providers: Studios including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Pocket Games Soft receive session identifiers and bet data necessary to deliver their game content through the Platform. They do not receive your full registration or financial data.
- Fraud prevention and compliance services: Anti-fraud platforms and AML screening tools receive transaction metadata and device signals to generate risk assessments. No unnecessarily identifying data is shared beyond what the risk assessment requires.
- Cloud infrastructure and hosting providers: yycoin's Platform is hosted on secure cloud infrastructure. Our hosting partners process data on our behalf under binding data-processing agreements that restrict their use of that data to infrastructure services only.
- Customer support platforms: Our live chat and email ticketing systems process the content of your support interactions. These tools are operated by vetted third-party providers under data-processing agreements.
- Legal and regulatory authorities: yycoin may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by a valid legal order, warrant, or regulatory directive. We will, where legally permitted, notify you of such disclosures.
No Sale of Data: yycoin does not and will not sell your Personal Data to data brokers, advertisers, or any other commercial third parties. Any data shared with third parties is strictly for the operational purposes described in this section.
8. International Data Transfers
yycoin serves players primarily based in Indonesia, and our principal operations are conducted within Western Indonesia Time (WIB, UTC+7). However, some of our third-party service providers — including cloud hosting providers, KYC verification partners, and game studios — may process data on servers located outside Indonesia.
Where Personal Data is transferred internationally, yycoin takes the following safeguards to ensure an adequate level of protection:
- Contractual clauses in all data-processing agreements that require recipient parties to maintain data protection standards equivalent to those described in this Policy.
- Transfer impact assessments conducted before any new international data-sharing relationship is established.
- Encryption of data in transit using TLS 1.2 or higher, and encryption of data at rest using AES-256, for all cross-border data flows.
By using the yycoin Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Indonesia, subject to the safeguards described above.
9. Data Retention
yycoin retains your Personal Data for as long as is necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods:
| Data Category | Retention Period | Reason |
|---|---|---|
| Registration Data | Duration of account + 5 years post-closure | AML / legal compliance |
| KYC Documents | Duration of account + 5 years post-closure | Regulatory obligation |
| Financial Transaction Records | Duration of account + 7 years post-closure | Financial record-keeping obligations |
| Game Play Logs | 2 years from session date | Dispute resolution / responsible gaming |
| Customer Support Records | 3 years from last interaction | Dispute resolution |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Proof of lawful processing |
| Technical / Session Logs | 90 days from session date | Security monitoring |
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Where data is anonymized, it may be retained indefinitely for aggregate statistical analysis without restriction, as it no longer constitutes Personal Data.
10. Security Measures
yycoin implements a layered security architecture to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:
- 256-bit SSL/TLS encryption on all data transmitted between your device and the Platform.
- AES-256 encryption at rest for all databases storing Personal Data and financial records.
- Role-based access controls that restrict access to Personal Data to authorized personnel with a documented operational need.
- Multi-factor authentication for internal administrative systems that handle Player data.
- Regular penetration testing conducted by independent third-party security firms to identify and remediate vulnerabilities.
- 24/7 intrusion detection monitoring with automated alerting for anomalous access patterns.
- Incident response procedures that specify notification timelines and remediation steps in the event of a confirmed data breach.
Your Role in Security: While yycoin implements robust technical safeguards, the security of your Account also depends on you maintaining a strong, unique password and not sharing your login credentials with any third party. Contact us immediately at [email protected] if you suspect unauthorized access to your Account.
11. Cookies and Tracking Technologies
The yycoin Platform uses cookies and similar tracking technologies to provide core functionality, enhance your experience, and analyze Platform usage. We use the following categories of cookies:
11.1 Strictly Necessary Cookies
These cookies are essential for the Platform to function. They manage your login session, maintain your Account state across pages, and protect against cross-site request forgery. These cookies cannot be disabled without breaking core Platform functionality.
11.2 Performance and Analytics Cookies
These cookies collect anonymized information about how Players navigate the Platform — which pages are visited most frequently, error messages encountered, and session duration patterns. This data helps yycoin identify and resolve performance issues and improve the overall user experience. No personally identifying information is collected through analytics cookies.
11.3 Functional Cookies
These cookies remember your preferences — such as your preferred language setting, most recently played game categories, and notification preferences — so that the Platform behaves consistently across sessions.
11.4 Managing Your Cookie Preferences
You may control non-essential cookies through your browser settings at any time. Disabling cookies may affect certain Platform features. Strictly necessary cookies cannot be disabled via browser settings as they are required for Platform operation. For questions about specific cookies used by the Platform, contact us at [email protected].
12. Your Privacy Rights
As a Player on the yycoin Platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, submit a written request to [email protected] with sufficient information to verify your identity. We will respond within 30 days of receiving a complete and verifiable request.
Right of Access
Request a copy of the Personal Data yycoin holds about you, along with information about how it is processed.
Right to Rectification
Request correction of any inaccurate or incomplete Personal Data held in your Account.
Right to Erasure
Request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
Right to Restrict Processing
Request that we limit our processing of your Personal Data in certain circumstances, such as while a dispute about data accuracy is being resolved.
Right to Data Portability
Request a machine-readable copy of the Personal Data you provided to yycoin, for transmission to another service provider.
Right to Object
Object to processing based on legitimate interests, including direct marketing communications and certain profiling activities.
Right to Withdraw Consent
Where processing is based on your consent, withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of prior processing.
Right Against Automated Decisions
Request human review of any significant decision made about you solely through automated processing, including automated Account suspensions.
Note on Retention Obligations: Certain deletion and erasure requests may be partially limited by yycoin's legal obligations to retain financial and KYC records for the periods specified in Section 9. Where a full deletion cannot be fulfilled, we will explain the specific legal reason and delete all data that is not subject to mandatory retention.
13. Minors and Age Restriction
The yycoin Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step during account registration, and KYC documents are required to confirm eligibility before any withdrawal is processed.
If yycoin discovers that Personal Data has been collected from an individual under 21, we will immediately suspend the associated Account, void any winnings generated, and permanently delete all associated Personal Data to the extent not otherwise required for fraud documentation purposes. If you believe a minor has registered on the Platform, please notify us immediately at [email protected].
Parents and guardians are encouraged to use parental-control software to prevent minors from accessing online gaming platforms. For guidance on responsible gaming tools available through yycoin, please visit our Responsible Gaming page.
14. Changes to This Privacy Policy
yycoin reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, we will publish the updated Policy on this page with a revised Effective Date and, where practicable, notify registered Players via their registered email address.
We encourage you to review this page periodically. Your continued use of the Platform after an updated Policy has been published constitutes your acceptance of the revised terms. If you do not agree with a material change to this Policy, you should discontinue use of the Platform and contact us to request Account closure and data handling in accordance with your rights under Section 12.
15. Contact and Data Enquiries
For all privacy-related enquiries, data subject access requests, consent withdrawals, or complaints regarding yycoin's data practices, please contact our Data Protection team through the following channel:
Data Protection Contact
Email: [email protected]
Please include "Privacy Request" in your subject line along with your registered username and a clear description of your request. Our team responds to all privacy enquiries within 2 business days and resolves substantive data requests within 30 days.