Privacy Policy — Aladin99

This Privacy Policy ("Policy") is published by Aladin99 ("the Company", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at aladin99.cam ("the Platform"). This Policy describes how Aladin99 collects, processes, stores, shares, and protects personal data relating to individuals who access or use the Platform ("Users", "Players", "you").

Aladin99 is committed to handling your personal information with care, transparency, and in full compliance with applicable data protection principles. This Policy applies to all personal data we hold about you, regardless of how it was collected — whether through registration, account use, customer support interactions, or our website's technical infrastructure.

By registering an account on Aladin99 or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and may request account closure at any time.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that relates to an identified or identifiable natural person, directly or indirectly. This includes names, identification numbers, location data, online identifiers, and factors specific to a person's identity.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. Aladin99 is the Data Controller in respect of all Personal Data collected via the Platform.
• "Data Processor" means a third party that processes Personal Data on behalf of Aladin99, under contractual instruction and bound by data processing agreements.
• "Consent" means freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their Personal Data for a stated purpose.
• "KYC" means Know Your Customer — the identity verification process required of all Aladin99 players before withdrawal processing.

Aladin99 collects the following categories of personal data, collected at different stages of your relationship with us:

3.1 Registration & Account Data

• Full legal name
• Date of birth (for age verification — players must be 21 or above)
• Residential address, including city and postcode (e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam)
• Email address
• Mobile phone number
• Username and encrypted password
• Preferred language and currency (Malaysian Ringgit, MYR)

3.2 Identity Verification (KYC) Data

• Government-issued photo identification (e.g., Malaysian MyKad, passport)
• Proof of residential address (e.g., utility bill, bank statement)
• Payment method verification documents (e.g., screenshot of e-wallet account, bank account confirmation)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records
• Payment method details (e.g., masked bank account numbers, DuitNow account reference, Touch 'n Go eWallet ID, FPX transaction IDs)
• Account balance history
• Bonus and promotional credit records

3.4 Gameplay & Betting Data

• Game session logs, bet history, win/loss records
• Sports betting selections, stake amounts, odds accepted
• In-play betting activity
• VIP tier status and loyalty point accumulation

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, browser type and version
• Session duration and navigation patterns
• Cookie identifiers and similar tracking technologies

3.6 Communication Data

• Live chat transcripts with our support team
• Email correspondence
• Records of promotional communications sent to you
• Feedback, complaint, and dispute records

Aladin99 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or interact with any feature of the Platform.
• Automatically — through cookies, web beacons, server logs, and similar technologies when you browse or use the Platform. This includes technical data such as your IP address, device identifiers, and session activity.
• From third-party payment providers — when you make a deposit or withdrawal via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, or supported cryptocurrency networks, we receive transaction confirmation data from these providers.
• From identity verification services — we may use third-party KYC verification services to assist with identity checks. These providers supply us with verification outcomes and, where required, processed identification data.
• From fraud prevention and compliance services — we may receive data from third-party services used to detect fraud, prevent money laundering, and ensure regulatory compliance.

Aladin99 processes your personal data on one or more of the following lawful bases, depending on the nature of the processing activity:

Aladin99 uses the personal data we collect for the following purposes:

• To create, manage, and maintain your Aladin99 account, including processing deposits and withdrawals in Malaysian Ringgit (MYR).
• To verify your identity and age (21+) in compliance with our responsible gambling obligations and applicable regulatory requirements.
• To process and record all financial transactions, including payments via DuitNow, FPX, Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and cryptocurrency options.
• To detect, investigate, and prevent fraudulent activity, cheating, collusion, and money laundering on the Platform.
• To administer bonuses, promotions, and VIP loyalty programme benefits.
• To provide 24/7 customer support services and resolve disputes or complaints.
• To send you important account-related communications such as transaction confirmations, security alerts, and policy updates.
• To send you marketing and promotional communications about Aladin99 offers — only where you have provided explicit consent.
• To monitor and improve Platform performance, identify bugs, and enhance the overall user experience for Malaysian players.
• To implement responsible gambling tools, including monitoring for signs of problem gambling behaviour and facilitating self-exclusion requests.
• To comply with applicable legal, regulatory, tax, and audit obligations.

Aladin99 does not sell, rent, or trade your personal data to third-party marketers or data brokers. We may share your personal data in the following limited and controlled circumstances:

7.1 Service Providers & Data Processors

We engage trusted third-party service providers who process data on our behalf under strict contractual data processing agreements. These include payment processors (including those facilitating DuitNow, FPX, and e-wallet transactions), KYC and identity verification providers, fraud prevention and anti-money laundering service providers, cloud infrastructure and hosting providers, and customer support platform operators.

7.2 Regulatory & Law Enforcement Bodies

Aladin99 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by law, pursuant to a court order, or where we believe disclosure is necessary to protect the rights, property, or safety of Aladin99, our players, or the public.

7.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or restructuring of Aladin99's business, personal data held by Aladin99 may be transferred to the relevant acquiring or successor entity. Players will be notified of any material change in data controller identity that may affect their rights.

7.4 Aggregated & Anonymised Data

Aladin99 may share aggregated, anonymised statistical data — from which individual players cannot be identified — with third parties for industry analysis, platform benchmarking, or marketing purposes. This does not constitute sharing of personal data.

Aladin99 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session state, and collect analytical data to improve our services.

The types of cookies we use include:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against fraudulent access. You cannot opt out of these cookies while using the Platform.
• Functional Cookies: Allow the Platform to remember your preferences — such as language settings and display preferences — to provide a more personalised experience.
• Analytical / Performance Cookies: Collect anonymised data about how players navigate and use the Platform. This helps us identify performance issues and understand which features are most useful to our Malaysian player base.
• Session Identification Cookies: Maintain your active login session across pages without requiring you to re-authenticate on each navigation action.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality and performance of the Aladin99 Platform.

Aladin99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention principles apply:

• Account Data: Retained for the duration of your active account relationship with Aladin99, and for a minimum of five (5) years following account closure, to satisfy anti-money laundering and regulatory record-keeping obligations.
• KYC & Identity Documents: Retained for a minimum of five (5) years from the date of submission, or longer where required by applicable law.
• Transaction Records: Retained for a minimum of seven (7) years to comply with financial record-keeping requirements.
• Communication & Support Records: Retained for a minimum of three (3) years following the close of any support interaction or dispute.
• Technical Logs: Retained for up to twelve (12) months unless specific circumstances require longer retention.

Once personal data is no longer required and its retention period has expired, Aladin99 will securely delete or anonymise it in accordance with our internal data disposal procedures.

Aladin99 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, accidental loss, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the Platform.
• Encryption at rest for sensitive personal and financial data stored in our databases.
• Access controls — personal data is accessible only to authorised Aladin99 personnel on a strict need-to-know basis, with role-based permissions enforced throughout our systems.
• Regular security audits and penetration testing of Platform infrastructure by qualified security professionals.
• Secure password hashing — account passwords are never stored in plain text. We use industry-standard cryptographic hashing algorithms.
• Two-factor authentication options available to all registered players for enhanced account security.
• Incident response procedures — Aladin99 maintains documented procedures for identifying, containing, and responding to data security incidents, including protocols for player notification where required.

While Aladin99 employs robust security measures, no internet-based platform can guarantee absolute security. Players are responsible for maintaining the confidentiality of their own account credentials and for notifying Aladin99 immediately if they suspect any unauthorised access to their account.

Subject to applicable law, you have the following rights in respect of your personal data held by Aladin99. To exercise any of these rights, please contact our Data Protection team using the details in Section 16.

As an online platform, Aladin99 may transfer personal data to service providers and systems located in jurisdictions outside of Malaysia. Where such transfers occur, Aladin99 ensures that appropriate safeguards are in place to protect the transferred data to a standard equivalent to that which applies within Malaysia.

Safeguards used for international transfers may include contractual clauses that impose data protection obligations on the recipient, ensuring equivalent standards of data protection are maintained throughout the processing chain.

You may request information about the specific safeguards applicable to any international transfer of your personal data by contacting our Data Protection team using the details provided in Section 16.

The Aladin99 Platform may contain references or links to third-party services, payment providers, or informational resources. This Privacy Policy applies solely to personal data processed by Aladin99 on the Platform. We are not responsible for the privacy practices or content of any third-party websites, services, or platforms.

We encourage you to review the privacy policies of any third-party services you interact with — including payment platforms such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and the respective policies of your bank — before sharing your personal data with those services.

Aladin99 reserves the right to update, revise, or replace this Privacy Policy at any time. Any material changes will be communicated to registered players via email notification or via a prominent notice displayed on the Platform prior to the changes taking effect. The "Last updated" date at the top of this Policy will be revised to reflect any amendments.

We encourage you to review this Privacy Policy periodically to stay informed about how Aladin99 protects and uses your personal data. Your continued use of the Platform following the publication of any revised Policy constitutes your acknowledgement of the updated terms. If you do not agree with the revised Policy, you should discontinue use of the Platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of your data rights as described in Section 11, please contact Aladin99 through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly on the Aladin99 Platform — the fastest way to reach our Data Protection team for general privacy queries.
• Email: [email protected] (displayed as plain text — not a clickable link). Please include "Privacy Request" in the subject line for data rights matters.

We aim to acknowledge all privacy-related requests within 48 hours and to fulfil verified data subject requests within 30 calendar days. Where the nature of the request requires additional time, we will inform you of the extended timeline and the reason for the delay.

We serve registered players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia, and our support team is equipped to assist you in English at any time.