1

Introduction and Scope of Privacy Policy

Aladdin999 values the privacy of every user on our platform. This Privacy Policy explains in detail how we collect, use, disclose, and protect your personal information when you access or use the Aladdin999 website and services.

This policy applies to all users of the Aladdin999 platform, including website visitors, registered members, and users of our mobile app. By registering or continuing to use our platform, you agree to the data collection and use practices described in this document.

Note: This Privacy Policy is governed by Malaysia's Personal Data Protection Act 2010 (PDPA). In the event of any conflict between this policy and applicable legal requirements, the legal requirements shall prevail.

2

Types of Personal Data We Collect

Aladdin999 only collects data that is strictly necessary to provide you with a secure, efficient, and personalised service. We do not collect excessive or irrelevant data beyond what is required to operate the platform.

2.1 Data You Provide Directly

  • Registration Information: Full name, email address, mobile number, date of birth, and account password.
  • Identity Verification Documents (KYC): A copy of your MyKad or passport, proof of address (utility bill or bank statement), and payment method details to meet compliance requirements.
  • Financial Information: Bank account details, digital wallet account numbers (TNG eWallet, DuitNow) used for fund deposits and withdrawals.
  • Support Communications: Chat history, emails, and conversation records with the aladdin999 customer support team.

2.2 Automatically Collected Data

  • Technical Data: IP address, web browser type and version, device operating system, screen resolution, and device information.
  • Usage Data: Pages visited, games played, session duration, access dates and times, and navigation patterns within the platform.
  • Cookie Data: Session cookies, preference cookies, and unique device identifiers to enhance the user experience.
  • Location Data: General geographic location based on IP address for legal compliance and fraud detection purposes.

Important: We do not collect credit card numbers directly. All card payments are processed through PCI-DSS certified payment gateways that handle sensitive financial data to the highest security standards.

3

Purposes for Using Your Personal Data

Aladdin999 uses collected data solely for legitimate purposes related to the provision of platform services. The following are the primary purposes for which your data is used:

  • Account Management: Create and maintain your account, process registration, login, and identity verification.
  • Transaction Processing: Process deposits, withdrawals, and all financial transactions securely and accurately.
  • Legal Compliance: Fulfil legal obligations under Malaysia's PDPA, anti-money laundering (AML) requirements, and customer verification (KYC).
  • Platform Security: Detect, investigate, and prevent fraud, unauthorized access, and illegal activity on the platform.
  • Service Enhancement: Analyse usage patterns to improve platform features, user interface, and overall performance.
  • Service Communications: Send important notices related to your account, transactions, security updates, and policy changes.
  • Customer Support: Resolve enquiries, complaints, and provide effective technical assistance.

Our Guarantee: Aladdin999 does not use your personal data for third-party marketing purposes, does not sell data to advertisers, and does not make automated decisions that materially affect you without human review.

4

Data Sharing and Disclosure to Third Parties

Aladdin999 understands that your trust is our most valuable asset. We do not disclose your personal data to third parties except in the limited circumstances set out below, and only to the extent necessary for the stated purposes.

4.1 Trusted Service Providers

We work with carefully selected third-party service providers who are contractually bound to protect your data. These include PCI-DSS certified payment gateway providers, ISO 27001-compliant cloud service providers, identity verification service providers, and transactional email service providers.

4.2 Legal Requirements

Aladdin999 may be required to disclose certain data to Malaysian authorities when mandated by law, court order, or for the purposes of financial crime prevention. In such situations, we will disclose only the minimum data required and will inform you where permitted by law.

4.3 Cross-Border Data Transfers

Should your data need to be transferred outside Malaysia (for example, to cloud servers in the Asia Pacific region), aladdin999 ensures that such transfers are carried out with protections equivalent to or exceeding those provided under Malaysia's PDPA, including legally binding data processing agreements.

Global Commitment: All of aladdin999's third-party partners are required to comply with data protection standards equivalent to Malaysia's PDPA. We conduct regular assessments of these partners to ensure ongoing compliance.

5

Data Security and Technical Protection Measures

Protecting your personal data is aladdin999's top priority. We continually invest in the latest security infrastructure to ensure your data remains safe from cyber threats, unauthorized access, and data breaches.

5.1 Technical Protection Layers

  • 256-bit SSL/TLS Encryption: All communications between your device and aladdin999 servers are encrypted using the highest industry-standard security protocols.
  • Encrypted Data Storage: Sensitive data stored in our databases is protected with AES-256 encryption and kept within secured network segments.
  • Two-Factor Authentication (2FA): An additional authentication layer is available and strongly recommended for all accounts to prevent unauthorized access.
  • Firewall and Intrusion Prevention System: aladdin999 servers are protected by multiple firewall layers and a real-time threat detection system.
  • Regular Security Audits: Penetration testing and independent security audits are conducted regularly by certified cybersecurity firms.

5.2 Security Incident Response

In the event of any security incident involving your data, aladdin999 is committed to notifying you within 72 hours of the incident being detected, in line with industry best practices. We will provide details of the incident, its scope of impact, and the remediation steps being taken.

Shared Responsibility: While aladdin999 takes all reasonable steps to protect your data, digital security is a shared responsibility. Make sure you use a strong password, do not share your login credentials, and always log out from shared devices.

6

Your Rights as a User under PDPA

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by Aladdin999. We are committed to respecting and facilitating the exercise of these rights.

User Rights Description Response Time
Right to Access PDPA S.30 Request a copy of all personal data we hold about you 14 business days
Right to Rectification PDPA S.34 Correct inaccurate or incomplete data in our records 7 business days
Right to Erasure Request data deletion upon account closure once all legal obligations are fulfilled 30 business days
Right to Withdraw Consent Withdraw consent for data processing for marketing purposes at any time Instant
Right to Complain Lodge a complaint with the Malaysia Department of Personal Data Protection Refer to JPDP

To exercise any of the above rights, please contact the aladdin999 privacy team via email at [email protected]. Your request will be processed once sufficient identity verification has been completed to protect the security of your account.

7

Cookie and Tracking Technology Policy

Aladdin999 uses cookies and similar tracking technologies to enhance the user experience, ensure account security, and understand how users interact with our platform.

7.1 Types of Cookies Used

  • Necessary Cookies (Required): Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
  • Preference Cookies: Save your preferences such as language, time zone, and display settings.
  • Analytics Cookies: Helps us understand usage patterns to improve the platform. Analytics data is collected anonymously.
  • Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access.

You can manage cookie settings through your web browser settings. Please note that disabling certain cookies may affect the functionality of some sections of the Aladdin999 platform.

8

Data Retention and Deletion

Aladdin999 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Malaysian law.

  • Active Account Data: Retained for the duration your account is active plus a 7-year period following account closure for financial compliance purposes.
  • Transaction Records: Retained for 7 years in line with financial reporting and anti-money laundering requirements.
  • Support Communication Logs: Retained for 2 years for service reference and dispute resolution.
  • Security Log Data: Retained for 1 year for digital forensics and threat detection purposes.

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered. You may request early deletion of your data by contacting our privacy team, subject to applicable legal requirements.

Secure Deletion: All data deletion is performed in accordance with NIST SP 800-88 standards to ensure data cannot be recovered by any party once the deletion process is complete.

9

Privacy Policy Updates and Contact Us

Aladdin999 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new technologies, or updated legal requirements. Whenever a material change occurs, we will notify you via an in-platform notice or an email to your registered address.

The effective date of the latest version will be clearly stated at the top of this document. Your continued use of the platform after that effective date will be deemed as your acceptance of the updated policy.

If you have any questions, concerns, or wish to exercise your privacy rights, please contact our Data Protection Officer (DPO):

Complete details on your rights and responsibilities as a platform user are also outlined in the Terms and Conditions Aladdin999. For information on responsible gaming, please visit the Responsible Gaming us.