Privacy Policy Aladin99 — Our Commitment to Protecting Your Data

01 Information We Collect

When you register and use the Aladin99 platform, we collect several categories of information necessary to operate our services safely and efficiently. Below are the types of data we collect:

We also collect data you voluntarily provide, such as additional profile information, language preferences, and feedback about our services. All data collection follows a minimum-necessity principle — we only request what is strictly required to operate the platform.

02 How We Use Your Data

Every piece of data we collect has a clear and lawful purpose. We do not process your data for purposes unrelated to the services you use. The following are the primary purposes for data use:

• Account Management: Creating, verifying, and maintaining your account, including the KYC process required by anti-money laundering regulations.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions on the platform securely and accurately.
• Platform security: Detecting and preventing fraud, money laundering, and any platform misuse that could compromise the safety of other members.
• Customer support: Providing effective technical assistance and customer support when you contact our team.
• Legal compliance: Fulfilling the legal and regulatory obligations imposed on online gambling platform operators.
• Service improvement: Analysing usage patterns in aggregate and anonymised form to improve the user experience and platform quality.
• Service communications: Sending important notifications related to your account, transactions, security updates, and promotional information (subject to your preferences).
• VIP & loyalty programme: Managing membership benefits, reward points, and personalised offers based on your activity history on the platform.

We ensure that data processing is always proportionate to the intended purpose. Once processing is complete and there is no legal obligation to retain the data, we will delete or anonymise it.

03 Sharing Information with Third Parties

Aladin99 does not sell, rent, or trade your personal data to any third party for their own commercial gain. However, in the course of operating the platform, there are certain situations where we need to share information with trusted parties:

• Payment processors: Authorised payment service providers such as FPX, e-wallet providers, and crypto platforms require certain transaction details to process your payments securely.
• Technology service provider: Technical infrastructure providers, cloud services, and analytics tools that help us operate the platform. All such providers are bound by strict data protection agreements.
• Game software provider: Game developers and Live Casino platform providers that require minimal data to operate games correctly and prevent fraud.
• Competent authorities: Law enforcement agencies, courts, or regulatory bodies when required by law or court order. We will notify you in advance if permitted to do so.
• Identity verifiers: Third-party KYC service providers that help verify your identity during the registration process or periodic reviews.

04 Data Security and Technical Protection

Aladin99 continuously invests in the latest security technologies and procedures to ensure your personal data remains protected at all times. Our security measures encompass multiple layers of protection:

• Data encryption in transit: All communication between your device and our servers is secured with TLS 1.3 protocol and 256-bit SSL encryption, ensuring data cannot be read by unauthorised parties during transmission.
• Data encryption at rest: Sensitive data stored in our databases, including financial information and identity documents, is encrypted using AES-256 — the same encryption standard used by global banking institutions.
• Two-factor authentication (2FA): We offer two-factor authentication for all member accounts to provide an extra layer of security beyond passwords.
• 24-hour monitoring: An automated security monitoring system operates around the clock to detect any unusual activity or unauthorised access attempts.
• Regular penetration testing: We conduct regular security tests and audits by independent security experts to identify and address any system vulnerabilities.
• Staff access controls: Access to user data is restricted to staff who require it for their job responsibilities, and all access is logged and monitored.

While we take all reasonable precautions, no system can be guaranteed 100% secure. We encourage you to also take active steps to protect your account by using a strong password, enabling 2FA, and never sharing your login credentials with anyone.

05 Cookie & Tracking Technology Policy

Aladin99 uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an explanation of the types of cookies we use:

• Essential cookies: Required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled as they are critical to platform operation.
• Performance cookies: Collecting information about how you use our platform — the most visited pages, time spent, and any error messages encountered. This data is used in aggregate to improve platform performance.
• Functional cookies: Remembering your preferences and settings — such as preferred language, favourite betting ranges, and display preferences — to deliver a more personalised experience.
• Analytics cookies: Helps us understand overall platform usage patterns through de-identified data. We use third-party analytics tools that are bound by their own privacy policies.

You can control and delete cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality or your experience on the platform. For more information on managing cookies, refer to your web browser's help section.

06 Data Storage and Retention

Aladin99 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Retention periods vary by type of information:

• Active account data: Retained for the duration of your active account plus 5 years after account closure, in compliance with anti-money laundering legal requirements.
• Financial transaction records: Retained for 7 years in accordance with applicable Malaysian financial and tax legislation.
• KYC and identity verification records: Retained for the duration of the active account and 5 years thereafter, or as stipulated by the relevant regulatory authorities.
• Customer support communication logs: Retained for 2 years from the date of last interaction for reference and complaint resolution purposes.
• Aggregated analytics data: De-identified and aggregated data may be retained for longer periods for trend analysis and platform improvement purposes.

Once the retention period has expired and there is no legal requirement to continue storage, your data will be securely deleted using methods that ensure it cannot be recovered. For data in physical format, we use certified document destruction.

07 Your Rights as a User

Under Malaysia's Personal Data Protection Act (PDPA) 2010 and international data protection principles, you have the following rights regarding your personal data:

• Right of access: You have the right to request a copy of all personal data we hold about you. We will process your request within 21 business days.
• Right to rectification: If your data is inaccurate or incomplete, you may request a correction. You can also update most information directly through your account profile settings.
• Right to erasure: In certain circumstances, you may request that we delete your personal data. Please note that some data may need to be retained to fulfil legal obligations.
• Right to object: You may object to the processing of your data for direct marketing purposes at any time. Such objections will be acted upon immediately.
• Right to restrict processing: In certain circumstances, you may request that we restrict how we process your data while awaiting the resolution of a dispute.
• Right to data portability: You may request a copy of your data in a structured, machine-readable format for the purpose of transferring it to another service.

To exercise any of the above rights, contact our data protection team using the contact details at the end of this document. We may need to verify your identity before processing your request to ensure the security of your data.

08 Children's Data Protection

The aladin99 platform is strictly for adults aged 18 and above. We do not knowingly or intentionally collect personal data from children.

• Absolute prohibition: Account registration by individuals under 18 is strictly prohibited. Our KYC process is specifically designed to identify and reject underage registrations.
• Immediate action: If we discover that a child's data has been collected inadvertently, it will be deleted immediately and the associated account will be terminated.
• Parental responsibility: We encourage parents and guardians to monitor their children's internet usage and ensure that gambling platforms remain inaccessible to minors.

If you have reason to believe that a child has registered on our platform, please contact our team immediately using the details below so we can take appropriate action.

09 Third-Party Links and Services

The aladin99 platform may contain links or integrations with certain third-party services such as payment providers and game providers. This Privacy Policy applies only to the aladin99 platform and does not cover the privacy practices of those third parties.

• Third-party responsibility: Every third-party service provider integrated with our platform has its own privacy policy governing how they handle your data when you interact with their services.
• Independent audit: We encourage you to read and understand the privacy policy of any third party whose services you access through our platform.
• Risk Reduction: We select third-party partners with high security and privacy standards; however, we cannot be fully responsible for the data practices of third parties that fall outside our control.

10 Changes to This Privacy Policy

Aladin99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements.

• Notice of material changes: For any significant changes to how we handle your personal data, we will notify you via your registered email or an in-platform notification at least 14 days before the changes take effect.
• Effective date: The date of the most recent update will always be displayed at the top of this document for your reference.
• Continued use as consent: Continued use of the aladin99 platform after a policy change takes effect will be considered your acceptance of the updated privacy terms.
• Policy history: Previous versions of our Privacy Policy are available upon request for your reference.

We encourage you to review this page periodically to stay informed of the latest changes to how we protect your privacy.

11 Contact Our Data Protection Team

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the aladin99 data protection team is here to help.

For formal data rights requests, please clearly state in your email: the type of request (access, correction, deletion, etc.), your full name and registered account email, and a brief description of the data concerned. We will verify your identity before processing any request to ensure the security of your account.