At ym200, the privacy and security of your personal information is treated with the same seriousness as the security of your funds. This Privacy Policy explains precisely what data we collect from Indonesian members, why we collect it, how it is stored and protected, who it may be shared with, and what rights you hold over it. We encourage you to read this document in full before creating your ym200 account.
This Privacy Policy applies to all personal data collected and processed by ym200 in connection with your use of the ym200 platform accessible at ym200.net (the "Platform"), including all associated pages, services, customer support channels, and promotional communications. It applies to all registered Members and to any visitor who interacts with the Platform without completing full registration.
For the purposes of this Privacy Policy, ym200 acts as the data controller — meaning we determine the purposes and means by which your personal data is processed. All enquiries relating to data privacy should be directed to [email protected].
ym200 collects personal data through three primary channels: information you provide directly, information generated automatically through your use of the Platform, and information received from third parties such as payment processors and identity verification services.
| Category | Examples | When Collected |
|---|---|---|
| Registration Data | Full legal name, date of birth, email address, Indonesian mobile number, username, password (stored as a one-way hash) | At account creation |
| Identity Documents (KYC) | Scan or photograph of Indonesian National ID (KTP), passport, or other government-issued document; proof of address (e.g., BCA or BRI bank statement) | Before first withdrawal or when triggered by a compliance review |
| Financial Data | Bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal amounts and timestamps | When making a deposit or requesting a withdrawal |
| Communications Data | Content of live chat sessions, support emails, and any feedback or complaint submissions | When you contact ym200 support |
| Marketing Preferences | Your opt-in or opt-out status for promotional emails and SMS notifications | At registration and via Account Settings |
ym200 processes your personal data only where a valid legal basis exists. The legal bases we rely on are as follows:
ym200 uses the personal data it collects for the following specific purposes:
To create, maintain, and administer your ym200 account; to process deposits and withdrawals through your nominated Indonesian bank account or e-wallet; to authenticate your identity at login; to communicate important account-related notices such as password resets, withdrawal confirmations, and system updates.
To verify that you meet the ym200 eligibility requirements — including being a natural person aged 21 or older — and to satisfy KYC obligations before processing withdrawal requests. Your identity documents are compared against the information provided at registration and are reviewed by ym200's compliance team and, where applicable, by a third-party verification service.
To detect, investigate, and prevent fraudulent activity, unauthorised account access, multi-account abuse, money laundering, and any other conduct that violates the ym200 Terms & Conditions. This includes automated screening of transactions and behavioural patterns on the Platform.
To monitor playing patterns that may indicate problem gambling behaviour and, where appropriate, to apply protective measures such as prompting the Member to review their deposit limits or suggesting a cooling-off period. ym200 takes its responsible gaming obligations seriously and treats this processing as a priority use of Member data.
To respond to your enquiries, process complaints, and provide assistance via live chat and email. Support communications are retained to maintain an accurate record of the account relationship and to improve service quality.
Where you have given consent, to send you information about ym200 bonuses, promotions, new games, and seasonal offers. You can opt out of marketing communications at any time through Account Settings without affecting your ability to use the Platform.
To analyse aggregated, anonymised usage data for the purpose of understanding how Members interact with the Platform, identifying areas for improvement, and developing new features. Individual Member data is not used for this purpose in a way that produces decisions with legal or significant effects on the Member concerned.
ym200 does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. Personal data is shared only in the following limited and controlled circumstances:
ym200 uses cookies and similar technologies to ensure the Platform functions correctly, to keep you securely logged in, and to understand how the Platform is used so that we can improve it. The categories of cookies used are as follows:
| Cookie Type | Purpose | Retention |
|---|---|---|
| Strictly Necessary | Maintain your authenticated session, remember your login state, and prevent cross-site request forgery (CSRF). Cannot be disabled without impairing core Platform functionality. | Session duration |
| Functional | Remember your preferences such as language display settings, last-used game lobby, and responsible gaming reminder frequency. | Up to 12 months |
| Analytics | Collect anonymised data on page views, navigation paths, and feature engagement to support Platform improvements. No individual member is identified in analytics reports. | Up to 24 months |
| Security & Fraud | Device fingerprinting tokens used to detect suspicious login attempts, multi-account patterns, and automated abuse of the Platform. | Up to 12 months |
You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling analytics or functional cookies will not affect your ability to place wagers or make transactions, but certain personalisation features may not operate as expected.
ym200 retains personal data only for as long as is necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable compliance obligations. The following general retention periods apply:
At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not technically immediate (for example, data held in encrypted backup archives), ym200 ensures that such data is not accessed or processed for any operational purpose until it is permanently purged from all systems.
ym200 implements a layered security architecture designed to protect your personal data against unauthorised access, accidental loss, alteration, and disclosure. Our current security measures include:
As an ym200 Member, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request — [Your Username]". ym200 will acknowledge your request within 48 hours and provide a substantive response within 30 days.
Request a copy of all personal data that ym200 holds about you, including your registration information, transaction history, and KYC records.
Request correction of any inaccurate or incomplete personal data held about you. Some corrections may require re-verification of your identity.
Request deletion of your personal data where ym200 no longer has a lawful basis for retaining it. Note that data subject to mandatory compliance retention periods cannot be deleted before those periods expire.
Request that ym200 restricts the processing of your data while a rectification request or objection is under review, without requiring full deletion of the data.
Request a machine-readable export of the personal data you have provided to ym200, such as your registration details and transaction history, in a structured, commonly used format.
Object to processing of your personal data carried out on the basis of legitimate interest, including profiling for fraud prevention. ym200 will assess whether compelling grounds exist to continue the processing.
If ym200 becomes aware that personal data has been collected from a person under the age of 21 — whether through a false declaration at registration or any other means — that account will be immediately suspended, all associated wagers will be voided, any deposits will be returned to the originating payment method, and all personal data relating to that individual will be deleted from ym200's systems as soon as is technically practicable, except where retention is required for the purpose of establishing and documenting the underage access incident itself.
If you are a parent or guardian and believe that your child under the age of 21 has created an ym200 account, please contact us immediately at [email protected]. We will investigate and act on all such reports as a priority.
The ym200 Platform may contain references to third-party services, including but not limited to game studio platforms (Pragmatic Play, Evolution Gaming, Spribe, Pocket Games Soft, NetEnt, Microgaming), payment service interfaces (BCA, BRI, OVO, DANA), and sports data providers supplying odds or live match data for BRI Liga 1, EPL, Champions League, and other competitions covered by the ym200 Sportsbook.
When you access a third-party service via the ym200 Platform — for example, by launching a live casino game hosted on a studio's own infrastructure — you enter that third party's data environment. ym200 has no control over how third-party services collect, use, or store your personal data. We strongly recommend reviewing the privacy policies of any third-party service you interact with. ym200 is not responsible for the data practices of any third party.
ym200 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the services we offer. Where a material change is made — such as a new category of data being collected, a new purpose for processing being introduced, or a new category of third-party recipient being added — ym200 will notify registered Members by email to their registered address and by a notice displayed on the Platform, providing a minimum of fourteen (14) calendar days' advance notice before the change takes effect.
Minor, non-material amendments (such as clarifications of existing language, formatting corrections, or corrections of typographical errors) may be made without prior notice, although the "Last Updated" date at the top of this page will always reflect the date of the most recent change of any kind.
Your continued use of the ym200 Platform after the effective date of any amendment to this Privacy Policy constitutes your acknowledgment of the updated version. If you do not agree to the amended policy, you should cease using the Platform and contact support to request account closure.
For any questions, concerns, or requests relating to this Privacy Policy or to ym200's handling of your personal data, please contact us through the following channels:
Six principles that govern how ym200 handles your personal data every day.
Every byte of data transmitted between your device and the ym200 Platform is protected by TLS 1.2+ encryption. Your login credentials, financial details, and KYC documents never travel in plain text.
ym200 will never sell, rent, or trade your personal information to third-party advertisers or data brokers. Your data is used exclusively to operate and improve the ym200 service.
Access, correct, export, or request deletion of your personal data at any time by contacting our support team. Data rights requests are processed within 30 days, no questions asked.
Data collected for KYC purposes is used only for identity verification and compliance. It is never repurposed for marketing, analytics profiling, or any use beyond what is stated in this policy.
ym200 retains personal data only for as long as legally required or operationally necessary. Once the retention period expires, data is securely deleted or irreversibly anonymised.
Promotional emails and SMS notifications are sent only to Members who have actively opted in. Withdrawing your marketing consent takes effect immediately and requires no explanation on your part.
Our support team is available 24/7 to address any data privacy concerns. You can also explore our full legal documentation or get back to the games.