Y20 Privacy Policy — Personal Data Protection for Malaysian Users
This Privacy Policy explains how y20 collects, uses, stores, and protects your personal information as a user of our platform in Malaysia. We are committed to managing your data transparently, responsibly, and securely.
Effective date: 1 January 2026. This policy may be updated from time to time.
1. Information We Collect
Account Information
When you register with y20, we collect personal information required to create and manage your account. This includes your full name, date of birth, email address, phone number, and identity verification details (such as your ID card number) as required for Know Your Customer (KYC) purposes.
We also maintain records of account activity, including login history, password changes, and other security-related actions, to ensure your account remains secure at all times.
Payment Information
To process deposits and withdrawals in Malaysian Ringgit (MYR / RM), y20 collects transaction information including the payment method used, transaction amount, date and time, and transaction reference number. For payments made through local channels such as bank transfers and e-wallets, relevant payment account details may be recorded for verification purposes.
We do not store credit or debit card details directly on our servers — all card information is processed through secure payment providers that comply with industry security standards.
Device & Browser Information
When you access the y20 platform, our systems automatically record technical information including device type, operating system, browser type, IP address, and screen resolution. This information is used to optimise user experience, diagnose technical issues, and detect unauthorised access.
Usage Data
We record data on how you use the platform — including games played, betting markets browsed, session duration, usage frequency, and in-platform actions. This data helps us understand usage patterns, improve our services, and deliver more relevant recommendations to users.
2. How We Use Your Information
Y20 uses the information collected solely for legitimate and transparent purposes. The following are the primary purposes for which user data is used:
- Account Management: Creating, verifying, and maintaining registered user accounts in Malaysia.
- Transaction Processing: Processing MYR deposits and withdrawals securely and efficiently.
- Platform Security: Detecting and preventing fraud, account misuse, and suspicious activity.
- Service Improvements: Analysing usage patterns to improve platform quality, interface, and game selection.
- Communications: Sending important notifications related to your account, policy changes, or promotional information you have agreed to receive.
- Legal Compliance: Complying with applicable laws and regulations in Malaysia, including anti-money laundering requirements.
Y20 will not use user data for purposes beyond the scope outlined above without first obtaining consent from the user.
3. Cookies & Website Tracking
The y20 platform uses cookies and similar tracking technologies to enhance user experience, remember preferences and settings, and analyse website usage. Cookies are small text files stored on your device when you visit our platform.
Types of Cookies We Use
- Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
- Performance Cookies: Collecting information on how users interact with the platform to help us make improvements.
- Functional Cookies: Storing user preferences such as language settings and display preferences to deliver a more personalised experience.
You can manage cookie settings through your browser. However, disabling essential cookies may affect the functionality of the y20 platform. For more information on managing cookies, refer to your browser's settings.
4. Data Storage & Security
How We Protect Your Data
Y20 implements a range of technical and organisational security measures to protect users' personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:
- SSL encryption for all data communications between users' devices and our servers
- Strict access controls to ensure only authorised personnel can access sensitive data
- Continuous monitoring to detect any suspicious or unauthorised activity
- Regular, secure data backups to prevent data loss
Third-Party Sharing
Y20 does not sell, rent, or disclose users' personal information to third parties for marketing purposes without explicit consent. However, in certain circumstances, we may share data with:
- Payment service providers that process MYR transactions on our behalf
- Technology service providers that help operate our platform
- Relevant authorities where required under Malaysian law
All third parties are bound by confidentiality agreements and are required to uphold data protection standards comparable to those of y20.
5. User Rights & How to Contact Us
Your Rights as a y20 User
As a y20 user in Malaysia, you have the following rights regarding your personal data:
- Right to Access: You have the right to request a copy of the personal data we hold about you. This request can be submitted through y20 customer support.
- Right to Rectification: If you find that any information we hold is inaccurate or out of date, you have the right to request a correction. You may also update your basic profile information directly through your account settings.
- Right to Erasure: Under certain circumstances, you may request that we delete your personal data. Please note that some data may need to be retained for legal compliance purposes or to resolve outstanding disputes.
- Right to Object: You may object to the processing of your data for specific purposes, such as marketing communications. You can withdraw this consent at any time through your account notification settings.
Privacy Policy Updates
Y20 reserves the right to update this Privacy Policy from time to time in line with changes in legislation, technology, or platform operations. Users will be notified of any material changes via in-platform notifications or email. Continued use of the platform after changes take effect will be deemed acceptance of the updated policy.
We encourage you to review this page periodically to stay informed about how we manage your data.
Contact Our Privacy Team
If you have any questions or concerns, or wish to submit a request regarding your personal data, please contact us through the following channels:
Email: [email protected]
You may also submit enquiries through the in-platform support system after logging in to your y20 account.
We aim to respond to all privacy-related enquiries within a reasonable timeframe.
Still Have Questions About Your Data Privacy?
Visit our FAQ section for quick answers, or register for a y20 account to access direct user support.