Privacy Policy alladin999 — Malaysian Player Data Protection

Alladin999 understands that Malaysian players' trust in our platform depends not only on the security of their funds, but also on the protection of their personal information. This Privacy Policy is written in plain, straightforward language — we don't believe in burying important matters behind complex legal jargon.

This document details how alladin999 collects, uses, protects, stores and, in certain circumstances, shares personal data you provide to us when using the alladin999 platform. It also describes the rights you hold regarding your personal data and how you may exercise those rights.

By registering an account with alladin999 or continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy and agree to how we handle your personal data as described herein. If you do not agree, please discontinue use of the alladin999 platform and contact us to close your account.

Alladin999 only collects data that is genuinely necessary to provide Malaysian players with a secure, legitimate, and quality platform experience. The data we collect can be broken down into the following categories:

Data You Provide Directly:

• Full name as it appears on your Malaysian identity card (MyKad or other valid identification document).
• An active Malaysian mobile number — used for OTP verification and important communications related to your alladin999 account.
• Email address — for account verification, transaction notifications and alladin999 customer support communications.
• Date of birth — to ensure compliance with the 18+ age requirement enforced by alladin999.
• Payment method information — e-wallet or bank account numbers linked for deposits and withdrawals on alladin999 (stored in encrypted format).
• KYC (Know Your Customer) documents — copies of your identity card, proof of address or other supporting documents requested by alladin999 for identity verification purposes.

Automatically Collected Data:

• Your device's IP address — used for security, fraud detection and ensuring compliance with geographical requirements.
• The type of device, operating system and web browser you use to access alladin999.
• Gaming and betting activity records — dates, times, game types, bet amounts, and outcomes within your alladin999 account.
• Financial transaction records — your deposit and withdrawal history within your alladin999 account.
• Cookie and session data — to maintain login sessions and enhance the user experience on the alladin999 platform.

Alladin999 uses collected personal data solely for legitimate purposes that are necessary for platform operations. The following outlines the specific purposes for which your data is used at alladin999:

• Identity verification and KYC: Ensuring every alladin999 player is a genuine individual who meets the required age and eligibility criteria, and preventing identity fraud.
• Financial transaction processing: Processing your deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, and returning your winnings to your Malaysian e-wallet or bank account.
• Account security: Detecting and preventing unauthorized access, fraud attempts, suspicious activity, and misuse of the alladin999 platform.
• Service improvement: Analysing usage patterns to improve alladin999 platform performance, enhance the user interface, and deliver a better overall experience.
• Account-related communications: Sending players important notifications about transactions, security updates, policy changes, and relevant promotional information.
• Responsible gaming: Monitoring gaming patterns to identify players who may need responsible gaming support and to fulfil alladin999's compliance obligations.
• Legal compliance: Complying with legal obligations and regulations applicable to alladin999 operations, including anti-money laundering (AML) requirements.

Alladin999 invests seriously in security technology and procedures to ensure your personal data is protected at all times. The key security measures we have implemented are as follows:

• 256-bit SSL encryption: All communications between your device and alladin999 servers are protected by 256-bit Secure Sockets Layer encryption — the same industry standard used by Maybank, CIMB and Malaysia's major banking institutions. Your data cannot be intercepted during transmission.
• Encrypted data storage: Sensitive data such as payment account information and KYC documents are stored in encrypted format on alladin999 servers. Data is never stored in plain text that can be read directly.
• Internal access controls: Only alladin999 staff with a legitimate operational need are permitted to access player personal data. All access is logged and continuously monitored.
• Two-factor authentication (2FA): alladin999 supports two-factor authentication to provide an additional layer of security for your account beyond your password.
• Continuous threat monitoring: The alladin999 security system actively monitors 24/7 to detect any intrusion attempts, cyberattacks or suspicious activity targeting player data.
• Regular security audits: alladin999 conducts regular security assessments by independent third parties to ensure our data protection infrastructure remains current and meets the latest industry standards.

While alladin999 takes all reasonable steps to protect your data, no security system can be guaranteed 100% secure at all times. We encourage you to take personal precautions as well, such as using a strong password and never sharing your alladin999 account login details with anyone.

Alladin999 does not sell, rent, or disclose players' personal data to third parties for marketing purposes. However, in the course of operating the platform, alladin999 may need to share certain data with the following parties under limited and controlled circumstances:

• Payment service providers: Payment gateways that handle deposit and withdrawal transactions at alladin999 — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX — receive the transaction details necessary to process your payments. These providers are subject to their own privacy policies and security standards.
• Game and technology providers: Game software providers that partner with alladin999 may require certain session data to ensure games function correctly. Such sharing is limited to the minimum data necessary and is subject to strict confidentiality agreements.
• Legal authorities: alladin999 will disclose player data to relevant authorities when required by a valid court order, warrant, or legal obligation — including anti-money laundering investigations or illegal activities involving the alladin999 platform.
• IT and security service providers: Third-party companies that assist alladin999 with server hosting, cybersecurity, and system monitoring may have limited access to player data in the course of providing their services. All such providers are bound by legally enforceable confidentiality agreements.

Financial transactions are the most sensitive aspect of your interaction with alladin999. We apply the highest level of vigilance to protecting financial data across all alladin999 platform operations.

• All deposits and withdrawals on alladin999 via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX are processed through encrypted channels that meet PCI DSS (Payment Card Industry Data Security Standard) requirements.
• Your e-wallet or bank account numbers linked to your alladin999 account are stored in encrypted format and cannot be read directly, even by regular alladin999 staff.
• Your transaction history records within your alladin999 account are for your personal reference and internal audit purposes — they are not disclosed to any third party without a valid legal basis.
• Alladin999 uses an automated fraud detection system that monitors every transaction to identify suspicious patterns that may indicate money laundering or the use of unauthorised payment methods.
• All transactions on alladin999 are recorded in Malaysian Ringgit (RM). No transaction data in foreign currencies is stored within the alladin999 system.

Alladin999 uses cookies and similar tracking technologies to enhance the platform user experience, maintain session security and analyse overall platform performance.

Types of cookies used by alladin999:

• Session cookies: Temporary cookies that maintain your login state during an active session on alladin999. These cookies are automatically deleted when you close your browser. They cannot be disabled as they are essential to the platform's core functionality.
• Security cookies: Used by alladin999 to identify and authenticate your device in order to prevent unauthorized access and CSRF (Cross-Site Request Forgery) attacks on your account.
• User preference cookies: Saving your preferences on alladin999, such as interface language and display settings, so you don't have to reconfigure them each time you visit.
• Analytics cookies: alladin999 uses analytics data collected via cookies to understand how players interact with the platform — which pages are visited most, how long players spend on the platform, and areas that need improvement.

You can manage or delete cookies through your web browser settings. However, if you disable session and security cookies, some key alladin999 platform functions may not work correctly. alladin999 recommends keeping necessary cookies enabled for the best experience when using our platform.

As an alladin999 player, you have certain rights regarding your personal data that we fully respect and support. These rights can be exercised by contacting the alladin999 support team via Live Chat or email:

• Right to access: You have the right to request a copy of the personal data alladin999 holds about you. We will provide this information within 30 business days of receiving your request.
• Right to correction: If you find that your personal data in the alladin999 system is inaccurate or incomplete, you have the right to request a correction. We will update your data within a reasonable timeframe.
• Right to erasure: In certain circumstances, you have the right to request that alladin999 delete your personal data. However, this right is not absolute — we may need to retain certain data for legal compliance, dispute resolution, or legitimate security requirements.
• Right to object to processing: You have the right to object to alladin999 processing your personal data for direct marketing purposes. We will honour such requests promptly.
• Right to restrict processing: In certain circumstances, you may request that alladin999 restrict how we process your personal data while a dispute is pending resolution.
• Right to withdraw consent: For data processing that relies on your consent (such as email marketing), you may withdraw that consent at any time without affecting the validity of any processing carried out prior to withdrawal.

Alladin999 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable laws and regulations.

• Active account data: For as long as your alladin999 account remains active, we will retain all relevant personal data to ensure continued and secure platform service to you.
• Data following account closure: When your alladin999 account is closed, we will delete or anonymise your personal data within a reasonable period, except for data that must be retained for legal compliance or other legitimate purposes.
• Financial transaction records: alladin999 financial transaction records may be retained for an extended period in accordance with legal requirements relating to financial record-keeping and anti-money laundering compliance.
• KYC Data: Identity verification (KYC) documents submitted to alladin999 may be retained for the period required by applicable regulations and laws governing alladin999's platform operations.

Alladin999 conducts periodic reviews of stored data to ensure that data no longer required is deleted or anonymised appropriately. This process is part of alladin999's commitment to responsible data management practices.

While alladin999 implements comprehensive security measures, the security of your account also depends on your own actions as a player. The following are steps we recommend you take to protect the privacy of your alladin999 account:

• Use a strong, unique password for your alladin999 account — a combination of at least 8 characters including uppercase letters, lowercase letters, numbers, and symbols. Avoid using easily guessable personal information such as your date of birth.
• Never share your alladin999 account password, PIN, or OTP with anyone — including individuals claiming to be alladin999 staff. The alladin999 support team will never ask for your password through any channel.
• Enable two-factor authentication (2FA) in your alladin999 account security settings for an additional layer of protection.
• Always log out of your alladin999 account when using a shared or public device. Do not save your alladin999 login credentials in any public device's browser.
• Contact the alladin999 support team immediately via Live Chat if you suspect your account has been accessed without authorisation, receive suspicious messages or emails appearing to be from alladin999, or notice any unusual account activity.

Alladin999 reserves the right to update, amend, or replace any part of this Privacy Policy at any time to reflect changes in platform operations, legal requirements, or current industry standards. Any material amendments will be communicated to alladin999 players via in-platform notifications or by email to the address registered to your account.

It is your responsibility to review this Privacy Policy page periodically to stay informed of the latest version and how alladin999 handles your personal data. The "Updated" date at the top of this page indicates when the last amendment to the alladin999 Privacy Policy was made.

If you have any questions, concerns, or complaints regarding how alladin999 handles your personal data, or if you wish to exercise any of the privacy rights set out in this policy, please contact us through the following channels:

• Live Chat within the alladin999 platform: The fastest way to get a response — available 24 hours a day, 7 days a week, in Bahasa Melayu. Typical response time is under 3 minutes.
• Email: support@alladin999.com — for more detailed enquiries or those requiring written documentation. We will endeavour to respond within 24 business hours.

When contacting alladin999 regarding a privacy request, please include your full name and the phone number registered to your alladin999 account to facilitate identity verification. We are unable to process requests relating to personal data without sufficient identity verification, to ensure we only disclose or modify data to the rightful account owner.