Privacy Policy — Aladin88

Aladin88 uses personal data only for specified, explicit, and legitimate purposes. We do not process your data in a manner that is incompatible with the purposes for which it was originally collected. The primary purposes for which we process personal data are:

To create and maintain your player account, verify your identity, process deposits and withdrawals via Malaysian payment channels (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect), process your bets and gaming activity, and provide customer support in English, Bahasa Melayu, and Mandarin.

To fulfil our Know Your Customer (KYC) obligations, conduct anti-money laundering checks, verify player age (minimum 21 years), comply with applicable regulations, and respond to legitimate requests from law enforcement or regulatory authorities.

To detect, investigate, and prevent fraudulent transactions, account takeover attempts, bonus abuse, multi-accounting, money laundering, and other prohibited activities. Technical data such as IP addresses and device fingerprints are essential to this function.

To monitor gameplay patterns that may indicate problem gambling behaviour, enforce deposit limits and self-exclusion periods requested by Users, and communicate responsible gambling information where appropriate.

To analyse aggregated, anonymised usage data for the purpose of improving platform performance, user experience, game selection, and payment processing efficiency. Individual player data is not used for product development without appropriate anonymisation.

Where you have provided your explicit consent to receive marketing communications, we may send you information about promotions, bonuses, new game releases, and sporting events relevant to your interests. You may withdraw this consent at any time through your account notification settings or by contacting our support team.

Aladin88 processes personal data only where a valid legal basis exists for doing so. The primary legal bases applicable to our processing activities are as follows:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions agreement with you — including account creation, payment processing, and service delivery.
• Legal Obligation: Processing necessary for compliance with applicable laws, regulations, and lawful instructions from competent authorities — including KYC verification and anti-money laundering obligations.
• Legitimate Interests: Processing carried out for the legitimate interests of Aladin88 where those interests are not overridden by your fundamental rights — including fraud prevention, platform security, and service improvement through anonymised analytics.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

We may share your personal data with carefully selected third parties only where strictly necessary for the operation of our Services or where required by law:

• Payment Service Providers: Financial institutions and payment processors (including those operating DuitNow, FPX, and major Malaysian bank online portals) receive transaction data necessary to execute deposits and withdrawals. These parties operate under their own regulatory frameworks and privacy obligations.
• KYC and Identity Verification Partners: Specialist identity verification service providers may process copies of your identification documents on our behalf under strict data processing agreements for the sole purpose of verifying your identity.
• Game Content Providers: Third-party game studios that supply live casino, slot, and sports betting content to our platform may receive anonymised session data for game auditing and RTP reporting purposes. Player identity is never disclosed to game providers.
• Technology and Hosting Providers: Cloud infrastructure, cybersecurity, and platform management service providers who host or support the Aladin88 platform are bound by contractual confidentiality and security obligations.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law or a valid legal order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or serious harm.

All third-party service providers engaged by Aladin88 are subject to contractual data processing agreements that require them to process personal data only for the specified purpose, maintain appropriate security standards, and not retain data beyond the agreed period.

The Aladin88 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session security, and to understand how our platform is used. We do not use cookies to track your activity across unrelated third-party websites.

• Essential / Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in securely. These cannot be disabled without affecting platform functionality.
• Functional Cookies: Store your preferences such as language settings (English, Bahasa Melayu, or Mandarin), notification preferences, and responsible gambling limit configurations.
• Analytical Cookies: Used in aggregated, anonymised form to understand how players navigate the platform, which games are most popular, and where technical issues occur. This data informs platform improvements.
• Security Cookies: Used to detect fraudulent login attempts, bot activity, and other security threats.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling essential cookies will impair your ability to log in to your account and use the platform. Most modern browsers provide granular cookie management tools under their Privacy or Security settings.

Aladin88 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our key security measures include:

• Transport Encryption: All data transmitted between your device and our servers is protected using TLS 1.2 /1.3 encryption (256-bit SSL). Every page and API call on the Aladin88 platform operates exclusively over HTTPS.
• At-Rest Encryption: Sensitive data stored on our servers — including KYC documents and financial records — is encrypted at rest using industry-standard AES-256 encryption.
• Two-Factor Authentication (2FA): All player accounts support two-factor authentication as an additional security layer against unauthorised access.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. All staff with access to player data undergo background screening and are bound by confidentiality obligations.
• Real-Time Fraud Monitoring: Our platform operates continuous automated monitoring systems that detect anomalous transaction patterns, login attempts from unusual locations, and other indicators of account compromise or fraud.
• Penetration Testing: The Aladin88 platform undergoes regular independent security assessments to identify and remediate vulnerabilities before they can be exploited.

Aladin88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The general retention periods applicable to each category of personal data are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our data lifecycle management procedures. Where data must be retained beyond the standard period due to an active legal dispute or regulatory investigation, it will be flaged and held under restricted access until the matter is resolved.

As a data subject, you have a number of rights in relation to the personal data that Aladin88 holds about you. These rights are exercisable by contacting our Data Protection team through the contact channels described in Section 15. We will acknowledge all valid data rights requests within three (3) business days and aim to respond substantively within thirty (30) calendar days.

• Right of Access: You have the right to request a copy of the personal data Aladin88 holds about you, together with information about how it is being used and with whom it has been shared.
• Right to Rectification: You have the right to request the correction of any personal data that is inaccurate or incomplete. You may update most account information directly through your account dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that certain data must be retained for legal compliance reasons regardless of an erasure request.
• Right to Restriction of Processing: You may request that we restrict how use your data in certain circumstances, such as where you have contested the accuracy of the data or objected to processing.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing of your personal data based on our legitimate interests, including direct marketing. Where you object to marketing, we will cease all marketing communications immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Age verification is a mandatory step in the Aladin88 account registration and KYC process. We verify the date of birth stated at registration against the government-issued identification document provided during KYC verification. Where an account is found to belong to a person under 21 years of age, the account will be immediately suspended, all funds will be returned to the source payment method, and all personal data associated with the account will be deleted in accordance with applicable data protection requirements.

If you believe that a person under the age of 21 has registered an account on our platform, please contact our support team immediately so that we may investigate and take appropriate action.

The Aladin88 platform integrates with a number of third-party services required for its operation, including payment gateways, game content providers, and analytics tools. While these services operate under their own privacy policies and regulatory obligations, Aladin88 takes reasonable steps to ensure that all third-party integrations meet appropriate data protection standards.

Our payment integrations — including those with Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong — are established and regulated Malaysian financial services providers. Each operates in compliance with Bank Negara Malaysia guidelines and their own published privacy policies. Aladin88 transmits only the minimum necessary transactional data to these providers to execute payment instructions.

Where the Aladin88 platform contains links to external websites (for example, in educational responsible gambling resources), those external sites are independent of Aladin88 and have their own privacy practices. Aladin88 accepts no responsibility for the privacy practices of third-party websites. We recommend that you review the privacy policy of any third-party site you visit.