Privacy Policy Aladdin99 – Protection Your Personal Data

Aladdin99 understands that your trust is the foundation of our relationship. When you register an account, make a deposit, or simply browse our platform, you entrust us with valuable personal information. It is our responsibility to ensure every piece of that data is handled with full integrity, transparency, and in accordance with applicable laws in Malaysia.

This Privacy Policy is written to explain clearly and in plain language — without complicated legal jargon — how we collect, use, store, protect, and occasionally share your data. We encourage you to read this document in full so you fully understand the rights you hold.

1Information We Collect

Aladdin99 collects personal data from you in various ways as you interact with our platform. The type of information collected depends on the nature of that interaction.

A. Information You Provide Directly

• Full name as stated on your identity card or passport.
• Malaysian identity card number (MyKad) or passport number for KYC verification purposes.
• Your active email address and mobile phone number.
• Your residential address, including postcode and state.
• Bank account and e-wallet details used for deposits and withdrawals.
• Identity verification document images and proof of address uploaded during the KYC process.
• Account username and password.

B. Information Collected Automatically

• Your device's IP address at each login session.
• Device type, operating system, and web browser version used.
• Approximate location data based on IP address (country and region only).
• Game session records including game type, date, time, and outcome.
• Complete deposit and withdrawal transaction history.
• Platform interaction data including clicks, navigation, and session duration.
• Cookie and similar tracking technology data — explained further in Section 5.

2How We Use Your Data

Every piece of information we collect has a clear and lawful purpose. Below is a detailed breakdown of how your data is used by aladdin99:

We do not use your data for automated decision-making that materially affects your rights without human involvement. Any significant decisions such as account closures or withdrawal rejections are subject to manual review by our team.

3Sharing Information With Third Parties

Aladdin99 does not sell or trade your personal data. However, there are limited situations where we need to share your information with trusted third parties, and this is done solely to enable us to provide you with better service.

Third parties that may receive your data:

• Payment service providers — such as banks and e-wallet operators, to securely process your deposit and withdrawal transactions.
• Identity verification (KYC) service providers — companies that help us verify the authenticity of your identity documents in accordance with legal requirements.
• Game software providers — gaming technology companies that operate casino games, slots, and sports betting on our platform may receive necessary gameplay data.
• Regulatory authorities and law enforcement — when required by Malaysian law or a valid court order.
• Cloud and IT infrastructure service providers — which manage servers and databases under strict data protection agreements.

All third parties with whom we share data are bound by data protection agreements requiring them to safeguard your information and use it only for specified purposes. We conduct regular reviews of our vendors' privacy practices.

4Your Data Security

Protecting your data from unauthorised access, loss, or misuse is our most important responsibility. aladdin99 continuously invests in the most up-to-date cybersecurity infrastructure to ensure your information remains secure at all times.

Technical security measures we employ:

• Data in transit is encrypted using TLS 1.3 and 256-bit SSL protocols.
• Data at rest in databases is encrypted using AES-256.
• Two-factor authentication (2FA) is available for all member accounts.
• Strict role-based access control (RBAC) for all aladdin99 internal staff.
• Intrusion detection systems (IDS) and web application firewalls (WAF) active 24/7.
• Regular penetration testing conducted by independent security experts.
• Automatic data backup with tested disaster recovery.

Organisational measures:

• All staff with access to user data undergo mandatory privacy and data security training.
• Access to users' personal data is restricted to staff who require it solely to perform their designated duties.
• Every access to sensitive data is logged and audited on a regular basis.

5Cookies & Tracking Technologies

Aladdin99 uses cookies and similar tracking technologies to enhance your experience on our platform, understand how the platform is used, and deliver more relevant content.

Types of cookies we use:

• Essential Cookies: Required for basic platform operations such as maintaining your login session, saving language preferences, and ensuring session security. These cookies cannot be disabled without affecting core platform functionality.
• Performance & Analytics Cookies: Collecting anonymous information about how you use the platform — pages visited, time spent, and links clicked — to help us continually improve the overall user experience.
• Functionality Cookies: Saving your personal preferences such as display mode, betting limits, and game settings so you do not need to reconfigure them each time you log in.
• Security Cookies: Helps identify suspicious activity and protects your account from unauthorised login attempts.

You can manage cookies through your web browser settings. However, disabling essential cookies may limit your access to certain platform features. For more information on managing cookies, please refer to your web browser's documentation.

6Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and Aladdin99's internal policies, you have the following rights regarding your personal data:

• Right of Access: You have the right to request and receive a copy of all personal data we hold about you within 21 business days.
• Right to Rectification: If any information we hold is inaccurate or outdated, you have the right to request immediate correction.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data, subject to legal requirements and record-keeping obligations binding on us.
• Right to Object to Processing: You may object to the processing of your data for direct marketing purposes at any time, and we will honour that request without question.
• Right to Withdraw Consent: Where the processing of your data is based on your consent, you may withdraw that consent at any time without affecting the validity of prior processing.
• Right to Data Portability: You may request your data in a machine-readable format for transfer to another service provider.

To exercise any of the above rights, please contact our Data Protection Officer (DPO) team via email at [email protected] or via our platform's live chat. We are committed to responding to all requests within 14 business days.

7Data Retention Period

Aladdin99 retains your personal data only for as long as necessary to fulfil the original purpose of its collection, or as required by applicable Malaysian law. The following is a general guide to our retention periods:

• Active account data: Retained for the full duration that your account remains active and in use.
• Financial transaction data: Retained for a minimum of 7 years in accordance with financial reporting requirements and anti-money laundering legislation.
• KYC records and identity verification: Retained for 5 years after account closure or KYC completion date, whichever is later.
• Customer support communication logs: Retained for 3 years for quality assurance and dispute reference purposes.
• Anonymised analytics and usage data: May be retained indefinitely as it can no longer be identified as belonging to any specific individual.

When your data is no longer needed and there is no legal obligation to retain it, we will securely delete or anonymise it using industry-recognised methods.

8Children's Privacy

The aladdin99 platform is intended solely for individuals aged 21 and above. We do not knowingly collect, store, or process any personal data from individuals under the age of 21.

All prospective members are required to verify their age during the registration process, and this verification is reinforced during the KYC process, which requires valid identity documents. Should we discover that we have inadvertently collected data from an underage individual, we will take immediate action to delete that data from our systems and close the relevant account.

Parents or guardians who have reason to believe that a child under their care has registered on our platform without permission are advised to contact us immediately at [email protected] so that immediate action can be taken.

9Amendments to This Privacy Policy

Aladdin99 reserves the right to amend, update, or improve this Privacy Policy at any time to reflect changes in our business practices, technological requirements, or new legal obligations. The latest version of this Privacy Policy is always accessible on this page.

When we make material amendments — that is, changes that significantly affect how we process your data or your rights — we will:

• Updating the "Last Updated" date shown at the top of this page.
• Sending email notifications to your registered email address at least 14 days before amendments take effect.
• Displaying a clear banner notice on our platform throughout the notice period.

Your continued use of the aladdin99 platform after the effective date of any amendment will be deemed as your acceptance of the updated Privacy Policy. If you do not agree with any amendment, you have the right to close your account and request data deletion before the amendment takes effect.

10Contact Us About Privacy

For any inquiries, concerns, or requests relating to this Privacy Policy or your personal data, please contact our Data Protection Officer via the following channels:

You may also refer to the Frequently Asked Questions (FAQ) for quick answers to the questions most frequently asked by our members regarding privacy and account security.