Privacy Policy

This Privacy Policy ("Policy") describes how Alladin99 ("Alladin99", "we", "us", "our") collects, processes, uses, stores, and protects the personal data of users ("you", "PlayerUser") who access or use the Alladin99 online casino and sportsbook platform accessible at https://alladin99.cam ("the Platform").

Alladin99 is committed to handling your personal information with care, transparency, and in a manner consistent with internationally recognised data protection principles. We understand that our Malaysian players value their privacy, and we take our responsibility to protect it seriously.

By registering an account on the Alladin99 Platform, accessing the Platform, or submitting any personal information to us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your data as described herein. This Policy should be read alongside our Terms & Conditions.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, national identity card number, IP address, payment details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, retrieval, use, disclosure, or deletion.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data. Alladin99 acts as the Data Controller in relation to Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of Alladin99, such as payment gateway operators or KYC verification providers.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the Processing of your Personal Data for a stated purpose.
• "Cookies" means small data files placed on your device by the Platform for the purposes of session management, analytics, and personalisation.

Alladin99 is the Data Controller responsible for the Personal Data collected through the Platform. As Controller, Alladin99 determines the purposes for which your Personal Data is collected and the means by which it is processed.

Alladin99 operates under an international online gaming licence. All data processing activities are conducted in accordance with the data protection obligations applicable under that licensing framework and applicable international privacy standards.

If you have any questions about how your data is controlled or processed, please refer to Section 17 (Contact Us) of this Policy.

4.1 Data You Provide Directly

When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or otherwise interact with the Platform, you may provide us with the following categories of Personal Data:

• Full legal name as it appears on your government-issued identification
• Date of birth (for age verification — minimum 21 years required)
• Residential address, including city and postcode
• Email address and mobile telephone number
• Malaysian National Identity Card (MyKad) number or passport number
• Payment details including bank account numbers, e-wallet identifiers (such as Touch'n Go or DuitNow registered number), and cryptocurrency wallet addresses
• Source of funds information where required for AML compliance
• Communications you send to our support team via live chat or email

4.2 Data Collected Automatically

When you access the Alladin99 Platform, we automatically collect certain technical data, including:

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type and version
• Pages visited, time spent on each page, and clickstream data
• Session duration and login/logout timestamps
• Game activity data, including games played, bet amounts, win/loss records, and session frequency
• Cookie identifiers and similar tracking technologies

4.3 Data from Third Parties

We may receive Personal Data about you from third-party sources, including:

• KYC and identity verification service providers
• Payment processors and banking institutions (for deposit and withdrawal processing)
• Fraud prevention and anti-money laundering screening services
• Responsible gambling screening databases (for self-exclusion verification)

Alladin99 uses the Personal Data we collect for the following purposes:

1. Account Management: To create, maintain, and administer your registered Account on the Platform, including processing your login credentials and account settings.
2. Identity Verification (KYC): To verify your identity and age in compliance with our licensing obligations and anti-money laundering requirements.
3. Payment Processing: To process deposits and withdrawals via your selected payment method, including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Visa/Mastercard, and cryptocurrency channels.
4. Platform Security: To detect, prevent, and investigate fraud, money laundering, account abuse, and other prohibited conduct as defined in our Terms & Conditions.
5. Customer Support: To respond to your queries, complaints, and support requests, and to maintain records of communications for quality assurance purposes.
6. Responsible Gambling: To monitor your gaming activity for indicators of problem gambling behaviour and to apply responsible gambling tools such as deposit limits, session limits, and self-exclusion where appropriate.
7. Legal Compliance: To comply with applicable licensing requirements, court orders, regulatory obligations, and law enforcement requests.
8. Marketing Communications: To send you promotional offers, bonus notifications, and platform updates by email or notification, where you have consented to receive such communications or where we have a legitimate interest in doing so.
9. Platform Improvement: To analyse usage patterns, platform performance, and player behaviour (in aggregate and anonymised form where possible) to improve the Platform's features, stability, and game offering.

Alladin99 processes your Personal Data one or more of the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and Alladin99 (i.e., your Account Terms & Conditions), including account creation, payment processing, and providing gaming services.
• Legal Obligation: Processing is required for compliance with our licensing conditions, anti-money laundering obligations, KYC requirements, and other legal duties to which Alladin99 is subject.
• Legitimate Interests: Processing is necessary for purposes of fraud prevention, platform security, responsible gambling monitoring, and business analytics, provided that such interests are not overridden by your interests or rights.
• Consent: Where processing is based on your consent — for example, in relation to direct marketing communications — you may withdraw that consent at any time by contacting our support team or using the unsubscribe function in any marketing email.

Alladin99 does not sell your Personal Data to any third party. We may share your Personal Data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment Service Providers: Including DuitNow and FPX banking infrastructure operators, Touch 'n Go eWallet, Boost, GrabPay, Visa/Mastercard processing networks, and cryptocurrency exchange services — for the purpose of processing your deposit and withdrawal transactions.
• KYC and Identity Verification Providers: Third-party identity verification services used to authenticate your identity, age, and residential address in compliance with our licensing requirements.
• Fraud Prevention and AML Services: Specialist screening services used to detect and prevent fraudulent transactions, multi-accounting, and money laundering activity.
• Technology and Infrastructure Providers: Cloud hosting, database management, and platform infrastructure service providers who process data on our behalf under data processing agreements.
• Regulatory and Law Enforcement Authorities: Where required by our licensing conditions, court order, or applicable law — for example, in response to a legally binding request from a regulatory authority or law enforcement agency.
• Professional Advisers: Including legal counsel, auditors, and compliance consultants, where disclosure is strictly necessary for the provision of professional services to Alladin99.

All third-party Data Processors engaged by Alladin99 are subject to contractual data protection obligations and are permitted to use your Personal Data only for the specific purposes for which they have been engaged.

As an internationally operated platform, Alladin99 may transfer your Personal Data to servers, service providers, or Data Processors located outside of Malaysia. Where such transfers occur, Alladin99 takes reasonable steps to ensure that appropriate safeguards are in place to protect your Personal Data, consistent with the standards applied under this Policy.

Safeguards may include contractual data transfer agreements with recipient organisations, use of data processors located in jurisdictions with recognised data protection frameworks, and technical and organisational security measures applied at the destination.

By using the Alladin99 Platform, you acknowledge and consent to the transfer of your Personal Data to countries outside Malaysia as described in this section.

Alladin99 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including the duration of your Account relationship with us and any applicable statutory, regulatory, or contractual retention periods.

Specific retention periods are as follows:

• Account and Identity Data: Retained for the lifetime of your Account and for a minimum of five (5) years following Account closure, in accordance with anti-money laundering record-keeping obligations.
• Transaction and Payment Records: Retained for a minimum of five (5) years from the date of each transaction, for financial audit and regulatory compliance purposes.
• KYC Documentation: Retained for a minimum of five (5) years following Account closure or the completion of the relevant transaction, whichever is later.
• Support Communications: Retained for three (3) years from the date of the most recent communication, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the period during which marketing communications are sent to you, plus a reasonable period thereafter as evidence of consent.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our data disposal procedures.

10.1 What Are Cookies?

Cookies are small text files placed on your browser or device when you access a website. Alladin99 uses cookies and similar tracking technologies (including local storage and session tokens) to operate the Platform effectively, analyse usage, and enhance your experience.

10.2 Types of Cookies We Use

• Essential Cookies: Required for core Platform functionality, including maintaining your logged-in session, processing transactions, and applying security measures. These cannot be disabled without impairing Platform operation.
• Analytics Cookies: Used to collect aggregated information about how users interact with the Platform — pages visited, time on page, navigation paths. This helps us identify usability improvements.
• Functional Cookies: Used to remember your preferences such as language settings and display options, improving your Platform experience across sessions.
• Marketing Cookies: Used to track Platform visits following a marketing communication. We do not use third-party advertising cookies for cross-site tracking.

10.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Note that disabling essential cookies will impair or prevent your use of the Platform. For further guidance on managing cookies in your browser, please refer to your browser's help documentation.

The Alladin99 Platform is strictly for adults aged 21 and above. We do not knowingly collect Personal Data from persons under the age of 21. If we become aware that Personal Data has been submitted by or on behalf of a person under 21, that Account will be immediately closed, all data will be deleted (subject to any applicable legal retention obligations), and the matter may be referred to relevant authorities.

If you have reason to believe that a person under the age of 21 has submitted Personal Data to Alladin99, please contact our support team immediately so that appropriate action can be taken.

Alladin99 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encryption of sensitive Personal Data stored at rest on our systems
• Multi-factor authentication options for Account access
• Role-based access controls limiting staff access to Personal Data on a need-to-know basis
• Regular independent security assessments and penetration testing
• Continuous monitoring for anomalous access patterns and potential security incidents
• Documented data breach response procedures including player notification protocols

While we apply robust security practices, no internet-based system can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your Account credentials and for notifying us immediately if you suspect unauthorised access to your Account.

To exercise any of the data protection rights described in this Policy — including access, rectification, erasure, restriction, portability, or objection — please contact Alladin99 via one of the channels listed in Section 17. Requests should include your full registered name, Account email address, and a clear description of the right you wish to exercise.

We will acknowledge all data rights requests within five (5) business days and respond substantively within thirty (30) days. Where a request is complex or numerous, we may extend this period by a further thirty (30) days with prior notification to you.

Alladin99 may require you to verify your identity before processing a data rights request, to ensure that Personal Data is not disclosed or deleted pursuant to a fraudulent request. Verification will typically involve confirming details that match your Account registration.

Alladin99 may send you promotional and informational communications by email or push notification, including details of bonuses, promotions, new game releases, and platform updates. We send such communications where you have consented to receive them or where we have a legitimate interest in keeping you informed of relevant Platform developments.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email you receive from Alladin99
• Updating your notification preferences within Account settings
• Contacting our support team at [email protected] with a request to opt out

Please note that opting out of marketing communications will not prevent you from receiving transactional or account-related notifications, such as deposit confirmations, withdrawal updates, KYC requests, and security alerts — these are sent as necessary part of Platform operation.

The Alladin99 Platform may, from time to time, contain references or indirect links to third-party services such as payment providers or responsible gambling support organisations. Alladin99 is not responsible for the privacy practices or content of any third-party websites or services.

We recommend that you review the privacy policies of any third-party service before submitting Personal Data to them. Alladin99's Privacy Policy applies solely to data collected and processed through the Alladin99 Platform at https://alladin99.cam.

Alladin99 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made, we will endeavour to provide reasonable advance notice to registered users by email or via a notification on the Platform. The date of the most recent revision is shown at the top of this page.

Your continued use of the Platform following the publication of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you should cease using the Platform and may request Account closure in accordance with our Terms & Conditions.

If you have any questions about this Privacy Policy, wish to exercise a data protection right, or wish to raise a concern about how Alladin99 handles your Personal Data, please contact us using the following channels. Our support team is available 24 hours a day, 7 days a week.

When submitting a data rights request by email, please include your full registered name and Account email address so that we can verify your identity and process your request efficiently.