Malaysia PDPA 2010 Compliant

Privacy Policy Aladdin888 — Personal Data Protection for Malaysian Players

Aladdin888 takes your privacy seriously. This document explains in detail how we collect, use, store, and protect your personal data when you use our Sports Betting, Live Casino, popular games, and e-sports platform. All our practices are in full compliance with Malaysia's Personal Data Protection Act (PDPA) 2010.

Effective date: 1 January 2026  |  Version: 2.4  |  Reference Act: PDPA 2010 (Malaysia)

Aladdin888's Six Core Privacy Commitments

The data protection principles we uphold for every member on our platform

Banking-Grade 256-bit SSL Encryption

All data transmitted between your browser and Aladdin888's servers is encrypted using 256-bit SSL — the same security standard used by Malaysia's major banking institutions such as Maybank and CIMB. Your personal information and financial transactions are fully protected throughout their journey across the internet.

No Sale of Data to Third Parties

Aladdin888 has never sold, rented, or traded members' personal data to any third party for commercial purposes, and never will. Your data is not a commodity to us – it is a trust we uphold responsibly, in line with Aladdin888's core values.

Full Compliance with Malaysia's PDPA 2010

Aladdin888's entire data management system is designed and audited to ensure full compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. This means you have clear legal rights over your data, and Aladdin888 is legally bound to uphold those rights.

Full Control in Your Hands

Aladdin888 gives you meaningful control over your personal data. You may request access to, correction of, or deletion of your data at any time. Requests will be processed within 21 business days in accordance with the PDPA, and we will provide a written response to every request.

Data Segregation & Minimum Access

Access to Aladdin888 members' personal data is restricted solely to staff who genuinely need it to perform their duties. The principle of least privilege access is enforced at every level of our organisation to minimise the risk of unnecessary data exposure.

Data Breach Notification

In the event of any data breach involving your personal information at Aladdin888, we are committed to notifying you and the relevant authorities within the timeframe prescribed by Malaysian law. Transparency is our priority in any security incident.

1

Introduction & Scope of the Aladdin888 Privacy Policy

This Privacy Policy is issued by aladdin888 and applies to all individuals who access or use the aladdin888.biz platform, including registered members, website visitors, and any party that interacts with our services in any capacity. This document sets out our personal data processing practices in a comprehensive and transparent manner.

As an online Sports Betting and casino platform serving the Malaysian market, Aladdin888 understands that member trust is our most valuable asset. That trust begins with how we handle your information. We do not take this responsibility lightly – every decision regarding data handling is made with the best interests of Aladdin888 members as the priority.

This Privacy Policy applies to all data collected through the aladdin888 platform, including the desktop website, mobile interface, email communications, live chat interactions, and any other channels provided by aladdin888 for member engagement. It does not cover third-party websites or services that you may access via associated links.

Legal Basis: Aladdin888's processing of personal data is based on: (a) contract performance – processing data necessary to provide the services you have requested; (b) legal compliance – meeting legal obligations under PDPA 2010 and applicable Malaysian law; (c) legitimate interests – for security, fraud prevention, and service improvement purposes; and (d) consent – for processing that requires your explicit consent.

2

Types of Personal Data We Collect

Aladdin888 only collects personal data that is strictly necessary to deliver our services effectively and securely. We do not collect excessive or irrelevant data. Below are the categories of data we collect and their sources:

Data Category Specific Examples Source of Collection Requirement
Identity Data Full name, MyKad number, date of birth, gender Aladdin888 registration form Mandatory — KYC identity verification
Contact Data Phone number, email address, state of residence Registration & profile updates Required – account communications
Financial Data Bank account number, deposit/withdrawal records, transaction history Transactions via FPX, DuitNow, TNG, GrabPay, etc. Required – payment processing
Game Data Betting history, win/loss records, game preferences Aladdin888 platform activity Mandatory – service operations
Technical Data IP address, device type, browser, operating system, access logs Automatic platform usage Required – security & analytics
Cookie Data Session cookies, preference cookies, analytics cookies Your browser when visiting aladdin888 Required – user experience

Sensitive Data: aladdin888 does not collect sensitive data such as health information, religious beliefs, political views, or biometric data unless explicitly required by applicable Malaysian law. Should such a situation arise, you will be notified separately and your explicit consent will be obtained before any sensitive data collection takes place.

3

How aladdin888 Uses Your Personal Data

The personal data we collect is used solely for lawful and stated purposes. Aladdin888 will not use your data for any other purpose without informing you in advance and obtaining the necessary consent. The following are the primary purposes for which your data is used:

  • Creating and managing your Aladdin888 account, including the required identity verification (KYC) process
  • Processing deposits via FPX, DuitNow, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay
  • Processing withdrawal of winnings to your Malaysian bank account
  • Providing Sports Betting, Live Casino, slots, and e-sports services
  • Sending important notifications regarding your account, transactions, and platform updates
  • Detecting and preventing fraud, money laundering, and other unlawful activities
  • Meeting legal compliance obligations including Anti-Money Laundering (AML) and Malaysia's PDPA
  • Providing effective and relevant customer support in Bahasa Malaysia
  • Analysing usage patterns to improve the experience on the Aladdin888 platform
  • Ensuring compliance with responsible gaming requirements, including the minimum age of 18
  • Sending aladdin888 promotional information and offers — where you have given your consent
  • Resolving disputes and enforcing the Aladdin888 platform's Terms & Conditions

Direct Marketing: Aladdin888 may use your email address or phone number to send you promotional information, bonus offers, and the latest platform updates. You may withdraw your consent to marketing communications at any time by clicking the "unsubscribe" link in our emails or by contacting the Aladdin888 support team. Withdrawing consent to marketing will not affect your use of your account.

4

Data Sharing with Third Parties

Aladdin888 does not sell or rent your personal data to any third party. However, in the course of operating our platform, there are certain situations where we need to share some of your data with trusted parties. Every such sharing is carried out under strict controls and for specific purposes:

Technical Service Providers

Live Casino game providers such as Evolution Gaming, Playtech, and Ezugi receive only the minimum data required (player ID, betting records) to operate the games. They are contractually bound not to use this data for any other purpose and must adhere to security standards equivalent to those of Aladdin888.

Malaysia Payment Processors

To process deposits and withdrawals via FPX, DuitNow, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, minimal transaction data is shared with payment processors licensed in Malaysia. All these processors are subject to Bank Negara Malaysia regulations.

Anti-Fraud Agency

In cases of suspected fraud or money laundering, Aladdin888 may share necessary information with licensed compliance and anti-fraud agencies to protect the platform and all other members.

Malaysian Authorities

Aladdin888 will disclose data to Malaysian government authorities when required by court order, regulatory directive, or applicable Malaysian law. Any such disclosure is limited to the minimum scope required.

Cross-Border Data Transfers: Where Aladdin888's technical service providers store or process data outside Malaysia, we ensure equivalent protection is in place through legally binding data processing agreements. Aladdin888 does not transfer Malaysian members' personal data to countries with inadequate data protection standards without appropriate additional safeguards.

5

Aladdin888 Data Security Measures

Aladdin888 continuously invests in cybersecurity infrastructure to ensure the personal and financial data of our members is always protected against unauthorised access, loss, destruction, or disclosure. The following are the security layers we have in place:

Data Encryption at Rest & in Transit

All data stored in Aladdin888's databases is encrypted using AES-256. Data transmitted between your browser and our servers is protected with TLS 1.3 – the latest encryption protocol used by global financial platforms.

Layered Server Infrastructure

Aladdin888's servers are protected by multi-layered firewalls, an Intrusion Detection System (IDS), and an Intrusion Prevention System (IPS) operating 24/7. Network segmentation ensures that databases are not directly accessible from the internet.

Staff Access Controls

Internal staff access to Aladdin888 member data is strictly controlled using the principle of least privilege. All access is recorded in tamper-proof audit logs that are reviewed regularly by the security team.

Regular Security Audits

Aladdin888's systems undergo penetration testing and security audits by independent cybersecurity firms at least once a year. Audit findings are used to continuously strengthen our data protection systems.

Two-Factor Authentication (2FA)

All Aladdin888 accounts support two-factor authentication via SMS or an authenticator app such as Google Authenticator. We encourage all members to enable 2FA for stronger account protection.

Data Backup & Disaster Recovery

Aladdin888 data is automatically backed up daily to a separate geographic location. Our disaster recovery plan ensures your data remains safe even in the event of server failure or an unforeseen disaster.

While aladdin888 implements comprehensive security measures, no system can guarantee absolute 100% security. You also play an important role in protecting your account — use a strong password, enable 2FA, never share your login credentials, and report any suspicious activity to the aladdin888 support team promptly.

6

Cookies & Tracking Technologies at Aladdin888

The Aladdin888 platform uses cookies and similar tracking technologies to enhance user experience, understand how our platform is used, and maintain the security of your login session. Below are the types of cookies we use:

Strictly Necessary Cookies Analytical Cookies Preference Cookies Marketing Cookies

Strictly Necessary Cookies (Cannot Be Disabled)

These cookies are essential for the basic operation of the aladdin888 platform — including login authentication, session security, bet slip management, and other critical platform functions. Disabling these cookies will impair the core functionality of the platform.

Analytics Cookies (Optional)

These cookies help aladdin888 understand how members use our platform — which pages are visited, time spent, and the most frequently used features. This data is used to improve the overall user experience. No personally identifiable data is associated with this analytics information.

Preference Cookies (Can Be Disabled)

These cookies store your preferences such as your chosen language, display theme, and other personal settings within the Aladdin888 platform. Disabling these cookies means you will need to reconfigure these preferences each time you visit our platform.

Marketing Cookies (Require Consent)

Marketing cookies are used to display relevant Aladdin888 advertisements to you on other platforms and to measure the effectiveness of our marketing campaigns. These cookies are only activated with your explicit consent and can be withdrawn at any time.

You can manage your cookie settings through your web browser at any time. Most modern browsers allow you to view, delete, or block cookies from specific websites. Please note that disabling certain cookies may affect your experience on the Aladdin888 platform. For more information on managing cookies in your browser, refer to your browser's support documentation.

7

Your Rights as a Data Subject under Malaysia's PDPA

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you as an aladdin888 member have certain rights regarding your personal data that we hold. aladdin888 is committed to respecting and facilitating the exercise of these rights. Below are your rights and how to exercise them:

Right to Data Access

You have the right to request a copy of all personal data Aladdin888 holds about you. Requests will be processed within 21 business days and we will provide the data in a readable format.

Right to Rectification

If the personal data in your Aladdin888 account is inaccurate or incomplete, you have the right to request a correction. Minor updates can be made directly through your profile settings; changes to key information will require document verification.

Right to Erasure

You may request deletion of your personal data from Aladdin888's systems in certain circumstances – for example, when the data is no longer needed for its original purpose. This right may be limited by our legal obligations to retain certain data.

Right to Object to Processing

You have the right to object to the processing of your personal data for specific purposes, such as direct marketing. Once an objection to marketing is received, Aladdin888 will stop using your data for that purpose without delay.

Data Portability Rights

You have the right to receive the personal data you have provided to aladdin888 in a structured, machine-readable format, and to transfer it to another data controller where applicable.

Right to Restrict Processing

In certain situations – such as during a data accuracy investigation – you may request that Aladdin888 restrict the processing of your data while the matter is being resolved.

How to Exercise Your Rights: To submit any request relating to your personal data rights, contact the Aladdin888 Data Protection Officer by email at support@aladdin888.biz, stating the type of request, your account number, and sufficient information for us to verify your identity. All valid requests will be processed within 21 business days. In complex cases, this period may be extended by up to 2 months, with prior notice to you.

8

Data Retention & Deletion Period

Aladdin888 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Malaysian law. We do not retain data beyond what is needed. The following are our data retention guidelines:

Data Type Retention Period Justification
Active account data Throughout active account + 7 years AML legal compliance & Malaysian tax requirements
Financial transaction records 7 years from the date of transaction AMLATFPUAA 2001 obligations & audit requirements
Betting & game records 3 years from the date of play Dispute resolution & operational compliance
Support communication logs 3 years from the date of interaction Service improvement & complaint resolution
Technical data & access logs 12 months Cybersecurity & fraud detection
Marketing data (where consent has been given) Until consent is withdrawn Relevant Aladdin888 promotional communications

Once the retention period expires, Aladdin888 will securely delete or anonymise your data using methods that ensure it cannot be recovered. In cases where immediate deletion is not possible due to outstanding legal obligations, the data will be held in a locked state with highly restricted access until deletion can be carried out.

9

Changes to Aladdin888's Privacy Policy

Aladdin888 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements in how we protect your information. We are committed to notifying you of any material changes in a clear and timely manner.

Email Notifications

For material changes to this Privacy Policy — particularly those affecting how we use your data or introducing new rights — aladdin888 will send an email notification to all registered members at least 14 days before the changes take effect.

Platform Notifications

In-platform notifications on Aladdin888 will be displayed to logged-in members whenever the Privacy Policy has been updated. You will be asked to review and acknowledge acceptance of the latest version before continuing to use the platform.

Version History

Aladdin888 maintains an archive of all previous versions of this Privacy Policy. If you require a copy of an earlier version for any purpose, please contact our support team and we will provide it within 5 business days.

Your continued use of the aladdin888 platform after the effective date of any updated Privacy Policy changes constitutes your acceptance of the revised version. If you do not agree with the changes made, you have the right to close your aladdin888 account and request deletion of your data in accordance with the procedure set out in Section 7 above.

10

Contact the Aladdin888 Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Aladdin888 handles your personal data, we encourage you to reach out to us directly. Our team is ready to assist and will provide a clear response to every enquiry received.

Contact Information – Aladdin888 Data Protection Officer

Email (Recommended for Privacy Enquiries)

Support@aladdin888.biz — Please state "PRIVACY ENQUIRY" in your email subject line. Response time: 2–3 business days.

Live Chat (for Urgent Enquiries)

Available 24/7 via the Live Chat icon on the aladdin888 platform. For more complex privacy matters, our team will direct you to the Data Protection Officer if required.

Formal Request Processing Period

Formal requests relating to data rights (access, correction, deletion) will be processed within 21 business days. Complex cases may take up to 2 months, with advance notice provided to you.

Complaints to the Authorities

If you are dissatisfied with aladdin888's response to your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority under applicable Malaysian law.

Aladdin888's Ongoing Commitment to Your Privacy

For aladdin888, privacy is more than a legal obligation — it is a core value we uphold. Every product and technology decision we make takes privacy implications seriously. We are committed to continuously improving our data protection practices and remaining transparent with members about how their data is used. Your trust is the foundation of our relationship.

Frequently Asked Questions — aladdin888 Privacy Policy

Answers to the most frequently asked questions from members regarding data privacy on our platform

Aladdin888 holds several categories of your personal data: identity data (name, MyKad number, date of birth), contact data (phone number, email), financial data (records of deposit and withdrawal transactions via FPX, DuitNow, Touch 'n Go eWallet, and other Malaysian payment methods), gaming activity data (Sports Betting, Live Casino, slots, and e-sports betting history), and technical data (IP address, device type). You may request a copy of all this data by contacting us at support@aladdin888.biz.

Aladdin888 does not sell or rent your data to third parties. We only share the minimum necessary data with three categories of parties: (1) technical service providers such as Evolution Gaming and Playtech to operate live casino games, (2) licensed Malaysian payment processors to handle your deposits and withdrawals, and (3) Malaysian authorities where required by law. All such data sharing is governed by legally binding data protection agreements.

To request deletion of your personal data from aladdin888's systems, send an email to support@aladdin888.biz with the subject line "DATA DELETION REQUEST", along with your account number and a copy of your identification for verification purposes. Requests will be processed within 21 business days. Please note that certain data may be required to be retained for periods mandated by Malaysian law — such as financial transaction records, which must be kept for 7 years under AMLATFPUAA 2001 — even after account closure.

Yes, you may withdraw your consent to marketing communications at any time in the following ways: (1) click the "Unsubscribe" link found at the bottom of any aladdin888 promotional email, (2) update your communication preferences in your account settings, or (3) contact the aladdin888 support team via live chat or email at support@aladdin888.biz. Withdrawing consent for marketing will not affect important account-related emails such as transaction confirmations and security notifications, which will continue to be sent to you.

When you close your aladdin888 account, your account will be deactivated and you will no longer be able to access it. However, certain data must be retained in accordance with Malaysian legal obligations — financial transaction records are kept for 7 years under AML laws, and betting records are retained for 3 years. Data not subject to legal retention obligations will be securely deleted within 90 days of account closure. You may request further information regarding the specific data retained by contacting support@aladdin888.biz.

Your Data Is Protected — Join aladdin888 with Confidence

Aladdin888 has built its reputation over eight years on the trust of more than 500,000 Malaysian members. Privacy protection and data security are a core part of that commitment. Register today and enjoy a Sports Betting, live casino, slots, and e-sports platform that is not only exciting, but also safe and responsible with your personal data.

Have questions? Visit Frequently Asked Questions or email support@aladdin888.biz  |  Terms & Conditions

Bahasa Melayu