Privacy Policy Aladin 99 —
Your Data, Your Rights, Our Responsibility

1 Introduction

Welcome to the Aladin 99 Privacy Policy. This document constitutes the formal agreement between you as a member and Aladin 99 as the platform operator regarding how your personal data is managed.

Aladin 99 is an online entertainment platform operating exclusively for the Malaysian market, offering a wide range of games including slots, Live Casino, Sports Betting (Malaysia Super League, EPL, badminton), lottery, and poker. In delivering these services, we necessarily collect and process certain personal data from our members.

We take your privacy seriously. This policy has been drafted in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and reflects our commitment to managing your data responsibly, transparently, and securely. By using the Aladin 99 platform, you agree to the terms of this privacy policy.

2 Types of Personal Data We Collect

Aladin 99 collects only the data strictly necessary to provide you with a quality and secure service. Below are the categories of data we collect:

3 How We Collect Your Data

Your personal data is collected in the following ways when you interact with the Aladin 99 platform:

• Account Registration: When you complete the registration form with your name, Malaysian phone number, and email address.
• Identity Verification (KYC): When you submit identity documents such as your MyKad or passport for account verification prior to your first withdrawal or when certain transaction limits are reached.
• Financial Transactions: When you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u (FPX), or CIMB Clicks (FPX), or submit a withdrawal request to your Malaysian bank account.
• Platform Usage: Automatically through cookie technology, server logs, and analytics tools when you browse and use our platform.
• Customer Support: When you contact our team via live chat or email, those communication records are retained for quality control and dispute resolution purposes.
• Referral Programme: When you refer a friend to join Aladin 99, your friend's name and phone number may be voluntarily shared by you.

4 Purposes and Legal Basis for Data Processing

Aladin 99 processes your personal data only on legitimate grounds and for clearly defined purposes. Below are the primary purposes for which your data is processed, along with their legal bases:

• Service Provision: Managing your account, processing deposits and withdrawals, providing access to games, and administering bonuses. (Basis: Performance of contract)
• Identity Verification & Fraud Prevention: To verify your identity and prevent fraud, money laundering, and platform abuse in accordance with Malaysian law. (Basis: Legal obligation)
• Service Communications: Sending important notices relating to your account, security updates, changes to our terms, and transaction information. (Basis: Legitimate interest)
• Platform Improvement: Analysing usage patterns to enhance the user experience, develop new features, and optimise platform performance. (Basis: Legitimate interest)
• Responsible Gaming: Monitoring betting patterns to identify potential signs of problem gambling and offering support to members who may need responsible gaming assistance. (Basis: Public interest / Legitimate interest)
• Marketing (with consent): Sending promotional offers, new bonuses, and Aladin 99 platform news. You may unsubscribe at any time. (Basis: Consent)

5 Sharing of Data with Third Parties

Aladin 99 does not sell, rent, or trade your personal data to any third party for marketing purposes. However, there are limited circumstances in which your data may be shared with certain parties:

• Payment Service Providers: Minimal transaction details shared with payment providers such as Touch 'n Go, DuitNow, GrabPay, and Malaysian banking institutions (Maybank, CIMB) strictly for the purpose of processing your financial transactions.
• Game Providers: Usernames and required betting history are shared with licensed game providers such as Evolution Gaming and Pragmatic Play for game maintenance and audit purposes.
• Malaysian Authorities: We are legally required to disclose information to Malaysian authorities (such as the PDRM or BNM) where a valid court order exists, or for anti-money laundering purposes under AMLA 2001.
• Analytics Services: Anonymised usage data may be shared with analytics platforms to help us understand and improve platform performance.

In all instances of data sharing, Aladin 99 ensures that recipient parties are bound by confidentiality agreements and equivalent data protection obligations.

6 Data Security Measures

Aladin 99 invests seriously in security infrastructure to ensure your data is always protected. Here are the security layers we employ:

• 256-bit SSL/TLS Encryption: All communications between your browser and Aladin 99 servers are encrypted using the highest security standards — the same standards used by leading Malaysian banks.
• Data at Rest Encryption: Personal and financial data stored in our databases is encrypted using robust AES-256 encryption.
• Access Controls: Only authorised Aladin 99 staff with a legitimate business need may access members' personal data. Access is controlled through a role-based access control (RBAC) system.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect and prevent any unauthorised access attempts or suspicious activity in real time.
• Regular Security Audits: Aladin 99 undergoes independent security audits on a regular basis to ensure our systems remain robust and meet the latest industry standards.
• Incident Management: We have a tested incident response procedure — in the event of a data breach, we will notify affected members and the relevant authorities within 72 hours, in line with data protection best practices.

7 Data Retention Period

Aladin 99 does not retain your personal data for longer than necessary. Retention periods depend on the type of data and applicable legal requirements:

• Active Account Data: Retained for the duration your account remains active and for a reasonable additional period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in compliance with the Companies Act requirements and Malaysia's anti-money laundering regulations.
• Support Communication Records: Stored for 3 years for dispute resolution and service quality control purposes.
• Session Cookie Data: Automatically deleted when your session ends, or within 24 hours at the latest.
• Marketing Data: Retained until you withdraw your marketing consent or close your account.

Once the retention period expires, your personal data will be securely deleted or anonymised in accordance with our established data deletion procedures.

8 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Aladin 99:

To exercise any of the above rights, please contact our privacy team at support@aladin99.biz with the email subject "Personal Data Rights Request". We will process your request within 21 business days from the date we receive your completed application.

9 Cookies, Tracking & Related Technologies

The Aladin 99 platform uses cookies and similar tracking technologies to enhance user experience, maintain security and analyse platform performance. Below are the types of cookies we use:

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Aladin 99 platform. Cookies required for security and core platform operations cannot be disabled.

10 Children's Privacy and Protection

Aladin 99 is a platform exclusively for users aged 18 years and above. We do not knowingly collect or process personal data of individuals under the age of 18.

Should we discover that we have collected personal data from an individual under the age of 18 without valid parental or guardian consent verification, we will immediately take the following steps:

• Immediately closing the account in question.
• Delete all personal data collected from that individual.
• Reporting the incident to the relevant authorities where required.

11 Amendments to the Privacy Policy

Aladin 99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or business operations.

You will be notified of any material changes to this policy through:

• A notice prominently displayed on the Aladin 99 platform homepage for a minimum of 14 days before the amendment takes effect.
• Email notification to all active members with a valid registered email address.

The latest version of this Privacy Policy is always available on this page, with the most recent update date displayed at the top of the document. We encourage you to review this page periodically.

12 Contact Our Data Protection Officer

If you have any questions, concerns, or complaints about how Aladin 99 handles your personal data, we encourage you to reach out to us directly:

• Privacy Email: support@aladin99.biz (Subject: "Privacy Policy Enquiry")
• Live Chat: Available 24/7 on the Aladin 99 platform
• Response Time: Privacy enquiries are responded to within 3–5 business days

You also have the right to lodge a complaint with Department of Personal Data Protection (JPDP) Malaysia if you are not satisfied with how we have handled your personal data, after giving us the opportunity to address your concerns first.