PRIVACY POLICY
Hr Millennium Pte Ltd (together with its subsidiaries, corporate affiliates, and managed entertainment concepts, including YIN Bar and YANG Club, collectively referred to as "the Company", "we", "us", or "our") is fully committed to protecting the privacy, confidentiality, and security of your personal data.
This Privacy Policy outlines how we collect, process, utilize, and safeguard your information in strict compliance with the Singapore Personal Data Protection Act 2012 ("PDPA"), the Spam Control Act 2007, and other applicable data protection regulations.
1. Scope of This Policy
This Privacy Policy applies to all personal data collected by or on behalf of the Company through your interactions with us, including but not limited to:
-
Accessing, browsing, or using our official website (www.yinyang.sg) and any related venue web pages.
-
Completing VIP table reservations, guestlist registrations, or ticket booking forms for premium nightlife, corporate parties, and entertainment events.
-
Participating in our loyalty frameworks, marketing distributions, promotional lucky draws, or customer feedback surveys.
-
Visiting our physical nightlife premises where safety surveillance or promotional media capturing may occur.
2. Personal Data We Collect
Depending on the nature of your interaction with YIN Bar and YANG Club, we may gather the following categories of information:
-
Identity and Contact Information: Full name, title, date of birth, age, gender, nationality, email address, mailing address, and mobile phone number.
-
Reservation and Nightlife Details: Specific booking parameters, including table tier selections, bottle service preferences, guestlist entries, event ticket acquisitions, and arrival timestamps.
-
Financial and Transaction Data: Credit card details, billing addresses, and transaction histories associated with table deposits, event tickets, or venue purchases.
-
Technical and Usage Data: IP addresses, browser types, operating systems, cookie identifiers, and analytical data regarding your interaction with our online platforms.
-
Media and Security Recordings: Photographs, video recordings, and CCTV footage captured during events or while visiting our physical venue space for security, operational management, and brand promotion.
-
Employment Application Data: Professional backgrounds, resumes, academic transcripts, employment histories, and references submitted through job application channels.
We enforce strict age verification requirements for venue entry. We do not knowingly collect personal data from individuals under the legal nightlife admission age. If you believe we have inadvertently gathered information from a minor, please contact our Data Protection Officer immediately.
3. Methods of Data Collection
We collect personal data through transparent and necessary channels:
-
Direct Interactions: When you secure a VIP table, join a guestlist, buy entry tickets online, sign up for newsletters, or contact our team via email, phone, or messaging applications.
-
Automated Technologies: As you browse our online platforms, we may utilize cookies, server logs, and tracking pixels to analyze site traffic and enhance user experiences.
-
Third Parties: We may receive data from external ticketing agents, independent event promoters, artist management houses, or concierge services acting on your explicit request.
4. Purposes for Processing Your Personal Data
We process your information based on your explicit consent, contractual requirements, legitimate business interests, or legal obligations. Primary purposes include:
-
Facilitating, managing, and confirming your VIP table bookings, guestlist placements, and event admission tickets.
-
Communicating with you regarding your enquiries, event table setups, customer feedback, or administrative updates.
-
Processing financial transactions, credit card verifications, and deposit accounting.
-
Verifying identity documents at the entrance to prevent fraud or underage entry.
-
Distributing marketing materials, upcoming party line-up announcements, flash ticket discounts, and loyalty program rewards (where you have opted-in to receive such communications).
-
Maintaining venue safety, crowd control, and asset protection through closed-circuit monitoring.
-
Reviewing and processing career applications and recruitment communications.
-
Complying with regulatory, legal, and nightlife licensing directives.
5. Sharing and Disclosure of Personal Data
We do not sell your personal profiles to external advertising brokers. To deliver our hospitality and nightlife services efficiently, your data may be shared with:
-
Internal business units, affiliated venues, and subsidiaries within our corporate portfolio to ensure service continuity and operational support.
-
Trusted third-party service providers, including reservation software hosts, ticketing engines, secure payment gateways, cloud storage providers, IT networks, and automated email distribution tools.
-
Professional advisors, including legal counsel, tax accountants, and corporate auditors.
-
Singapore statutory boards, judicial courts, and law enforcement agencies when required to maintain public safety or satisfy legal mandates.
We mandate that all third-party partners handle your personal data with strict confidentiality and implement appropriate security measures in line with the PDPA.
6. International Data Transfers
If your personal data is transferred outside of Singapore for cloud storage, data processing, or software vendor integration, we will implement appropriate safeguards. We ensure that receiving organizations provide a standard of protection to the transferred data that is at least comparable to the protections enforced under the PDPA.
7. Data Security and Safeguards
We implement robust administrative, technical, and physical security measures to protect your personal data from accidental loss, unauthorized access, alteration, disclosure, or misuse. These protections include secure server environments, encrypted payment handling, database firewalls, and restricted internal access permissions. However, please note that no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
8. Retention of Personal Data
Your personal data is retained only for as long as necessary to fulfill the original purposes for which it was collected, or as required to meet legal, accounting, tax, or operational obligations. Once the information is no longer deemed necessary, it will be securely anonymized or permanently destroyed.
9. Your Rights: Access, Correction, and Withdrawal
Under the provisions of the PDPA, you maintain specific rights regarding your personal data:
-
Access: You have the right to request a copy of the personal data we hold about you, alongside information regarding how it has been used or disclosed over the past calendar year.
-
Correction: You may request updates or corrections to any incomplete, outdated, or inaccurate personal information in our possession.
-
Withdrawal of Consent: You may withdraw your consent for the collection, use, or disclosure of your personal data at any time. Please note that withdrawing consent may limit our ability to provide certain services, manage your table bookings, or grant electronic guestlist privileges.
10. Cookies and Analytics Frameworks
Our digital domain utilizes cookies to keep our systems running smoothly, remember your site preferences, and track traffic patterns. You can choose to completely block or clear cookies via your personal browser preferences. Doing so, however, may cause parts of our online booking portals, ticket shopping carts, or website elements to load slowly or lose functionality.
11. Third-Party Websites and Hyperlinks
Our digital platforms may contain links to external websites, plug-ins, or media networks operated by third parties (such as artist portfolios, entertainment blogs, or external beverage sponsors). Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party platforms and are not responsible for their independent privacy standards. We strongly advise reviewing the privacy policy of every external website you visit.
12. Photography, Video Recording, and Media Release
YIN Bar and YANG Club operate high-energy public entertainment venues that frequently host media showcases, public activations, and nightlife promotions. By entering our premises, registering for a guestlist, or buying entry tickets, you acknowledge that photography, audio recording, and video recording may take place under our direction.
The Company may use these images, videos, and audio clips in digital marketing campaigns, social media channels, print publications, recap videos, or website galleries for promotional and commercial purposes. If you do not wish to be captured in promotional media, please explicitly notify our on-site media crews or venue supervisors upon arrival.
13. Intellectual Property Rights
All content displayed across our online platforms—including website text, graphics, logos, menu configurations, layout designs, images, and promotional media—is the exclusive property of the Company or its content suppliers and is protected by Singapore and international copyright, trademark, and intellectual property laws. Unauthorized reproduction, modification, distribution, or replication of any material without our explicit, written consent is strictly prohibited.
14. Data Accuracy and Your Obligations
We rely on the veracity and accuracy of the personal data you provide to deliver our services safely and effectively. You are responsible for ensuring that all information submitted to us is accurate, complete, and updated. If there are changes to your personal data (such as a change in your contact email or phone number), please notify our Data Protection Officer immediately so we can update our records.
15. Security Breach Notification Protocol
In the highly unlikely event of a data security incident involving unauthorized access, loss, or alteration of personal data, the Company maintains a strict incident response plan. In accordance with our obligations under the PDPA, if a data breach is assessed to cause, or be likely to cause, significant harm to affected individuals, or involves a scale that meets regulatory thresholds, we will notify the Personal Data Protection Commission (PDPC) and the impacted individuals as soon as reasonably practicable.
16. Disclaimer and Limitation of Liability
While we implement rigorous security measures to shield your personal data, the transmission of information via the internet carries inherent risks. To the maximum extent permitted by Singapore law, the Company, its directors, employees, and affiliates shall not be liable for any direct, indirect, incidental, consequential, or punitive damages arising out of unauthorized access, interception, data leakage, or misuse of your personal data by malicious third parties acting outside our reasonable control.
17. Indemnity
You agree to indemnify, defend, and hold harmless the Company, its subsidiaries, officers, directors, employees, and agents from and against any and all claims, liabilities, damages, losses, costs, or expenses (including legal fees on a full indemnity basis) arising out of or resulting from your breach of this Privacy Policy, your violation of any third-party rights, or your unlawful submission of personal data belonging to another individual without their prior consent.
18. Governing Law and Dispute Resolution
This Privacy Policy and our data management practices are governed exclusively by the laws of the Republic of Singapore. Any dispute, controversy, or claim arising out of or relating to this policy, including its validity, interpretation, or breach, shall first be referred to the Company's internal compliance channels for amicable resolution. If a resolution cannot be reached, the dispute shall be submitted to the exclusive jurisdiction of the courts of Singapore.
19. Severability
If any provision or part-provision of this Privacy Policy is found by a court or administrative body of competent jurisdiction to be invalid, illegal, or unenforceable, it shall be deemed modified to the minimum extent necessary to make it valid, legal, and enforceable. If such modification is not possible, the relevant provision or part-provision shall be deemed severed. The invalidity or unenforceability of any provision shall not affect the validity or enforceability of the remaining portions of this policy.
20. Language and Interpretation
In the event that this Privacy Policy is translated into languages other than English for promotional or accessibility purposes, the English language version shall remain the primary legal authority. In the case of any conflicts, ambiguities, or discrepancies in meaning between the English text and any translated version, the English text shall prevail.
21. Acknowledgement and Consent
By continuing to browse our websites, submitting reservation enquiries, confirming event bookings, or engaging with our venue services, you acknowledge that you have read and understood the terms of this Privacy Policy and explicitly consent to the collection, usage, disclosure, and processing of your personal data by Hr Millennium Pte Ltd in the manner described above.
22. Data Protection Officer (DPO) and Contact Information
For any questions, concerns, requests for data access or correction, or to file a complaint regarding our data handling practices, please contact our Data Protection Officer using the details below:
-
Entity Name: Hr Millennium Pte Ltd (UEN: 201623286G)
-
Venue Reference: YIN Bar & YANG Club
-
Postal Address: 3A River Valley Road, #01-02 Clarke Quay, Singapore 179020
-
Email Address: compliance@yinyang.sg (or enquiries@yinyang.sg)
-
Contact Number: +65 8879 0688
23. Policy Revisions
We reserve the right to modify, amend, or update this Privacy Policy at any time to reflect adjustments in legal frameworks, regulatory requirements, or internal operational policies. The latest version will always be published on our website with its respective effective date.
Last Updated: May 21, 2026