aladin99 Privacy Policy

1. Overview & Scope

1.1 This Privacy Policy ("Policy") applies to all Personal Data processed by aladin99 in connection with your access to and use of the aladin99 platform at aladin99.asia, including all associated services, features, games, promotional programmes, and customer support interactions.

1.2 This Policy applies to registered Members, prospective registrants, visitors to aladin99.asia who have not yet registered, and former Members whose data is retained in accordance with applicable legal and regulatory obligations.

1.3 By using aladin99 or providing Personal Data to aladin99 in any context, you acknowledge that you have read and understood this Policy and consent to the processing of your Personal Data as described herein. If you do not agree with this Policy, you should not use the aladin99 platform.

1.4 This Policy is to be read alongside aladin99's Terms & Conditions, which govern the overall relationship between aladin99 and its Members. In the event of any conflict between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail.

2. Data Controller

2.1 aladin99 acts as the Data Controller in respect of all Personal Data collected directly from Members and visitors through the aladin99 platform. As Data Controller, aladin99 determines the purposes and means of processing Personal Data.

2.2 For enquiries relating to data protection matters, including requests to exercise data subject rights, please contact the aladin99 Data Protection team via email at [email protected] with the subject line "Data Protection Request".

3. Personal Data We Collect

3.1 aladin99 collects the following categories of Personal Data in the course of operating its platform and complying with applicable legal obligations:

3.2 aladin99 does not collect Special Category Data (sensitive personal data such as health information, political opinions, or biometric data) except where strictly required by applicable AML/KYC regulatory obligations and with explicit consent.

4. How We Collect Personal Data

aladin99 collects Personal Data through the following channels:

• Directly from you — when you register an account, complete KYC, make deposits or withdrawal requests, contact support, respond to surveys, or participate in promotions.
• Automatically — through cookies, server logs, and analytics tools that capture Technical and Usage Data as you navigate and interact with the aladin99 platform.
• From third parties — including identity verification service providers engaged for KYC processing, payment processors (for transaction confirmation), fraud detection services, and analytics partners operating under data processing agreements with aladin99.

5. Purpose & Legal Basis for Processing

5.1 aladin99 processes Personal Data for the following purposes and on the corresponding legal bases:

5.2 Where aladin99 relies on consent as the legal basis for processing, you have the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of marketing consent can be effected by contacting [email protected].

6. Data Sharing & Disclosure

6.1 aladin99 does not sell Personal Data to third parties. aladin99 may share Personal Data with the following categories of recipients only to the extent necessary for the described purposes:

• Game providers (e.g., Pragmatic Play, PG Soft, Microgaming) — limited Technical and Usage Data necessary to deliver game sessions and resolve game-level disputes.
• Payment processors and e-wallet providers (e.g., Touch n Go eWallet, Boost, GrabPay, FPX network banks) — Financial Data necessary to process MYR transactions.
• KYC and identity verification providers — Identity Data submitted during the verification process, processed under data processing agreements with aladin99.
• Fraud detection and AML screening services — aggregated or pseudonymised data for risk scoring; full data only as required by applicable AML obligations.
• Cloud infrastructure and hosting providers — acting as data processors under binding data processing agreements; access is limited and controlled.
• Regulatory and law enforcement authorities — where aladin99 is legally required to disclose information pursuant to a court order, regulatory directive, or mandatory reporting obligation.

6.2 All third parties with whom aladin99 shares Personal Data are required to implement appropriate technical and organisational security measures and are prohibited from using your Personal Data for any purpose other than those specified by aladin99.

7. International Data Transfers

7.1 aladin99's primary operations serve Malaysian players. Some of aladin99's service providers and infrastructure components may be located outside Malaysia. Where Personal Data is transferred to jurisdictions outside Malaysia, aladin99 ensures that appropriate safeguards are in place, including data processing agreements incorporating standard contractual clauses or equivalent transfer mechanisms recognised under applicable data protection law.

7.2 By using aladin99, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Malaysia where aladin99's service providers operate, subject to the safeguards described in this section.

8. Data Retention

8.1 aladin99 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations, whichever is longer.

8.2 The following minimum retention periods apply at aladin99:

• Account and KYC records: Minimum 5 years from account closure, in compliance with AML regulatory requirements applicable to licensed gaming operators.
• Financial transaction records: Minimum 7 years from the date of each transaction.
• Responsible gaming records: Duration of self-exclusion plus 5 years, to prevent circumvention of exclusion through re-registration.
• Support communications: 3 years from the date of last interaction, subject to extension where a dispute is ongoing.
• Marketing preferences and consent records: Until consent is withdrawn plus 1 year for audit purposes.

8.3 Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with aladin99's data disposal procedures.

9. Cookies & Tracking Technologies

9.1 The aladin99 platform uses cookies and similar tracking technologies to deliver and improve the platform experience, maintain login sessions, detect fraud, and analyse aggregate usage patterns. The following cookie categories are used:

• Strictly Necessary Cookies: Essential for platform functionality including login session management, security token handling, and game session continuity. Cannot be disabled without disrupting core platform functions.
• Analytical / Performance Cookies: Used to collect anonymised information about how visitors interact with aladin99 — pages visited, session duration, error events. Data is aggregated and does not identify individual players.
• Functional Cookies: Remember player preferences including language settings, display preferences, and bonus notification dismissals.
• Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, multi-accounting, and suspicious login behaviour on the aladin99 platform.

9.2 You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may impair the functionality of the aladin99 platform, particularly session-dependent features such as the game lobby and account wallet.

10. Security Measures

10.1 aladin99 implements a layered security architecture to protect Personal Data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your browser or mobile device and aladin99 servers is encrypted using TLS 1.2 / 1.3 (256-bit SSL), the same standard applied by Malaysian banking platforms such as Maybank2u and CIMB Clicks.
• Encryption at rest: Sensitive Personal Data including KYC documents, payment details, and authentication credentials are encrypted at rest using AES-256 encryption.
• Access controls: Access to Personal Data by aladin99 staff is strictly role-based and subject to the principle of least privilege. All internal access is logged and audited.
• Password security: Player passwords are stored as one-way cryptographic hashes using bcrypt. aladin99 staff cannot view or retrieve plain-text passwords.
• Infrastructure security: aladin99's platform infrastructure is protected by DDoS mitigation, Web Application Firewall (WAF), and intrusion detection systems.
• Regular audits: aladin99 undergoes periodic third-party security assessments and penetration testing.

10.2 Notwithstanding the measures above, no data transmission over the internet is completely secure. aladin99 cannot guarantee the absolute security of data transmitted to the platform. Players are encouraged to use strong unique passwords and enable two-factor authentication (2FA) on their aladin99 accounts.

11. Your Data Subject Rights

11.1 Subject to applicable law and the conditions described in this Policy, registered Members of aladin99 hold the following rights in respect of their Personal Data:

• Right of Access: You may request a copy of the Personal Data aladin99 holds about you, along with information about the purposes and legal bases for processing.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. For name and date of birth corrections, documentary evidence may be required.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where continued processing is no longer justified. This right is subject to aladin99's legal obligations to retain certain data — particularly AML and gaming regulatory retention requirements.
• Right to Restriction of Processing: You may request that aladin99 limit processing of your data in certain circumstances, for example where you contest the accuracy of the data.
• Right to Data Portability: You may request a machine-readable copy of Personal Data you provided to aladin99, where processing is based on consent or contract.
• Right to Object: You may object to processing based on legitimate interest, including direct marketing. Objection to marketing communications will be acted upon immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of prior processing.

11.2 To exercise any of the above rights, please contact aladin99 at [email protected] with subject line "Data Subject Request" and include your registered username and the nature of your request. aladin99 will respond within 30 days. Identity verification may be required before processing certain requests.

12. Minors & Age Restriction

12.1 The aladin99 platform is strictly restricted to individuals aged 21 years and above. aladin99 does not knowingly collect Personal Data from individuals under 21 years of age.

12.2 If aladin99 becomes aware that Personal Data has been collected from an individual under 21 years of age, the account will be immediately suspended, the data deleted (subject to any AML obligations requiring temporary retention), and any deposited Real Money returned to the originating payment method following identity verification.

12.3 Parents and guardians who believe their child has registered an aladin99 account should contact aladin99 support immediately at [email protected].

13. Third-Party Links

13.1 The aladin99 platform may contain links to third-party websites, including game provider demonstration pages or regulatory authority resources. aladin99 is not responsible for the privacy practices of third-party websites and this Policy does not apply to any third-party site.

13.2 aladin99 recommends that Players review the privacy policies of any third-party websites they visit independently of the aladin99 platform.

14. Changes to This Privacy Policy

14.1 aladin99 may update this Privacy Policy from time to time to reflect changes in applicable law, our data processing practices, or the structure of the aladin99 platform. Material changes will be communicated to registered Members via email and/or in-platform notification at least 7 days before taking effect.

14.2 The current version of this Policy, along with its effective date and version number, is always accessible at aladin99.asia/privacy-policy. Continued use of the aladin99 platform following the effective date of any update constitutes acceptance of the revised Policy.

15. Contact & Data Protection Enquiries

For all privacy-related enquiries, data subject requests, or concerns regarding aladin99's handling of your Personal Data, please use the following contact channels:

• Email (Data Protection): [email protected] — Subject: "Data Protection Request"
• Live Chat: Available 24/7 via the aladin99 platform — fastest response for urgent privacy concerns
• Response Commitment: aladin99 commits to acknowledging all data protection enquiries within 48 hours and providing a substantive response within 30 days.