Aladdin99 Privacy
Policy & Data Practices

Introduction

This Privacy Policy ("Policy") is published by Aladdin99 ("we", "us", "our"), the operator of the online casino and sports betting platform accessible at aladdin99.cam ("the Platform"). This Policy applies to all users ("you", "your") who access, register on, or otherwise interact with the Platform, regardless of the device or method of access used.

We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. By registering an Account on the Platform or by continuing to use our Services, you acknowledge that you have read and understood this Policy and you consent to the collection and processing of your personal data as described herein.

This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference. Where any conflict arises between this Policy and the Terms & Conditions in relation to data protection matters, this Policy shall prevail.

Definitions

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial account information, and online identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" — Aladdin99, the entity that determines the purposes and means of Processing Personal Data collected through the Platform.
• "Data Processor" — any third party that Processes Personal Data on behalf of Aladdin99 under a contractual arrangement.
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the Processing of your Personal Data for a stated purpose.
• "KYC" — Know Your Customer — the identity and age verification procedures conducted on all registered Users before withdrawals are authorised.
• "Cookies" — small text files placed on your device by the Platform for the purposes of session management, analytics, and personalisation.
• "Services" — all games, betting markets, promotions, account management tools, and customer support features available through the Platform.

Personal Data We Collect

3.1 Data You Provide Directly

When you register an Account, complete KYC verification, make deposits or withdrawals, contact customer support, or participate in promotions, you provide us with Personal Data including:

• Full legal name and date of birth;
• Malaysian identification number (MyKad / Passport number);
• Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam);
• Email address and mobile phone number;
• Payment method details — including e-wallet account identifiers for Touch 'n Go eWallet, Boost, and GrabPay, bank account details for Maybank, CIMB, Public Bank, and Hong Leong Bank transactions, and cryptocurrency wallet addresses for USDT deposits;
• Copies of identity documents submitted for KYC;
• Support communications and complaint records.

3.2 Data Collected Automatically

When you access the Platform, we automatically collect certain technical data, including:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Session duration, pages visited, and in-Platform navigation patterns;
• Game play logs, including bet amounts, game types selected, and outcomes;
• Transaction logs and timestamps;
• Cookie identifiers and tracking pixels (see Section 9).

3.3 Data from Third Parties

We may receive Personal Data about you from third-party sources in limited circumstances, including:

• Identity verification service providers engaged for KYC purposes;
• Payment processors confirming the status of deposit and withdrawal transactions;
• Fraud prevention and AML screening services;
• Responsible gambling self-exclusion registries where applicable.

Purpose of Data Processing

We process your Personal Data only for specific, defined purposes. The table below summarises the primary purposes for which each category of data is used:

We do not process your Personal Data for purposes other than those listed above without first providing you with notice and, where required, obtaining your explicit consent.

Legal Basis for Processing

Aladdin99 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity — Processing that is required to perform the contract between you and Aladdin99 (i.e., providing your Account, processing your MYR deposits and withdrawals, settling bets).
• Legal Obligation — Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, identity verification requirements, and tax reporting obligations imposed by the licensing authority.
• Legitimate Interests — Processing necessary for our legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and product analytics — provided these interests are not overridden by your fundamental rights.
• Consent — Where we rely on your consent (e.g., for marketing emails and optional analytics cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent does not affect your ability to use the Platform.

Data Sharing with Third Parties

Aladdin99 does not sell your Personal Data to third-party marketers or data brokers. We share Personal Data only in the following limited and controlled circumstances:

6.1 Payment Service Providers

To process your deposits and withdrawals in MYR, we share necessary transaction data with payment service providers including the operators of Touch 'n Go eWallet, Boost, GrabPay, and Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong Bank) via FPX and DuitNow infrastructure. Cryptocurrency transactions are processed via blockchain networks and associated custodial service providers. Each provider is contractually obligated to handle your data only for the stated transaction purpose.

6.2 Identity Verification Providers

KYC document verification is conducted with the assistance of licensed third-party identity verification service providers. These providers receive only the data required to complete the verification check and are prohibited from retaining or using that data for any other purpose.

6.3 Regulatory and Law Enforcement Authorities

Aladdin99 may be required to disclose Personal Data to regulatory authorities, licensing bodies, financial intelligence units, or law enforcement agencies where compelled to do so by applicable law — including for AML reporting, tax compliance, or the investigation of criminal activity. We will notify you of such disclosures where we are legally permitted to do so.

6.4 Fraud Prevention and AML Screening

We share limited data with specialist fraud prevention and AML screening services to protect the Platform and all users from financial crime, account takeover, and bonus abuse. These processors operate under binding data processing agreements and are permitted to use the data only for the stated screening purpose.

Data Retention

We retain your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and KYC data — retained for the duration of your active Account relationship with Aladdin99, plus a minimum of 5 years following account closure, in accordance with AML regulatory requirements.
• Transaction records — retained for a minimum of 5 years from the date of each transaction, as required under applicable financial record-keeping obligations.
• Customer support communications — retained for 2 years from the date of the last interaction, unless the communication relates to an unresolved dispute, in which case it is retained until the dispute is fully resolved.
• Marketing preferences and consent records — retained for the duration of your Account, plus 1 year thereafter, to demonstrate compliance with applicable consent requirements.
• Platform analytics data (aggregated and anonymised) — retained indefinitely in aggregated, non-identifiable form.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our data destruction procedures.

Security Measures

Aladdin99 implements technical, organisational, and administrative security measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our current security infrastructure includes:

• 256-bit SSL/TLS encryption — applied to all data transmitted between your device and our servers;
• Encryption at rest — sensitive Personal Data (including identity documents and financial identifiers) stored in encrypted form;
• Access controls — role-based access permissions ensuring that only authorised personnel with a demonstrable operational need can access Personal Data;
• Multi-factor authentication (MFA) — required for all internal staff accessing systems that hold Personal Data;
• Regular penetration testing — conducted by independent security professionals to identify and remediate vulnerabilities;
• Incident response procedures — documented data breach response protocols including prompt notification to affected Users and relevant authorities where required by law.

Cookies & Tracking Technologies

9.1 What We Use Cookies For

The Aladdin99 Platform uses cookies and similar tracking technologies for the following purposes:

• Strictly Necessary Cookies — required for the Platform to function, including session management (keeping you logged in), security tokens, and preference storage. These cannot be disabled without impairing your ability to use the Platform.
• Analytics Cookies — used to understand how Users interact with the Platform in aggregate, including which pages are most visited, session duration, and navigation paths. This data is anonymised and used solely to improve the Platform experience.
• Personalisation Cookies — used to remember your preferences (e.g., language settings, game category last viewed) to provide a more tailored experience on return visits.
• Marketing Cookies — used with your consent to track your interaction with any promotional content on the Platform. You may opt out of marketing cookies at any time.

9.2 Cookie Consent

Strictly necessary cookies are placed automatically. All other cookie categories require your consent, which you may provide or withdraw via the cookie preference centre accessible from the Platform's footer. Withdrawal of consent for optional cookies does not affect your ability to use the Platform's core functions.

9.3 Third-Party Cookies

Certain analytics and fraud prevention tools used by Aladdin99 may place their own cookies on your device. These third-party cookies are governed by the respective providers' own privacy policies. Aladdin99 selects third-party tools that comply with applicable data protection standards and processes data only as described in this Policy.

International Data Transfers

The Platform is operated primarily for Malaysian users, and the majority of data processing occurs within the jurisdiction of Aladdin99's licensing authority. However, certain third-party service providers (including cloud infrastructure, identity verification, and fraud prevention providers) may process your data in jurisdictions outside Malaysia.

Where Personal Data is transferred internationally, Aladdin99 ensures that appropriate safeguards are in place, which may include:

• Adequacy decisions recognising the destination jurisdiction as providing an equivalent level of data protection;
• Standard contractual clauses binding the recipient to handle data in accordance with applicable data protection standards;
• Binding corporate rules where data is transferred to entities within the same corporate group.

You may request further information about the specific safeguards applied to any particular international transfer by contacting our support team.

Your Data Protection Rights

As a User of the Aladdin99 Platform, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request. We will respond within 30 days of receipt, and within 14 days for straightforward requests.

Protection of Minors

The Aladdin99 Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect, use, or retain Personal Data relating to persons under the age of 21. Age verification is a mandatory component of our KYC process, and any Account found to belong to a person under 21 will be immediately closed.

If you believe that we have inadvertently collected Personal Data relating to a minor, please contact us immediately at [email protected] and we will take prompt steps to delete the relevant data and close the associated Account.

Changes to This Privacy Policy

Aladdin99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the nature of our Services. Where changes are material — meaning they significantly affect how we collect, use, or share your Personal Data — we will provide advance notice via your registered email address or a prominent notice on the Platform, at least 14 days before the changes take effect.

The "Last Revised" date displayed at the top of this Policy indicates when it was most recently updated. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

Contact Us — Data Protection Enquiries

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by Aladdin99, please contact us through any of the following channels:

All Personal Data enquiries are handled by Aladdin99's dedicated data protection team. Our support team operates on Malaysia Standard Time (MYT, UTC+8) and is available every day of the year, including Malaysian public holidays.