Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how Aladdin288 ("we", "us", "the Operator", "the Platform") collects, processes, stores, and protects the personal data of individuals ("you", "the Player", "Data Subject") who access or use the Aladdin288 online casino and sports betting platform at aladdin288.cam and all associated services.

Aladdin288 operates primarily as a Malaysian-market online gaming platform. All transactions are denominated in Malaysian Ringgit (MYR), and our services are directed primarily at adult players resident in Malaysia. We take our data protection obligations seriously and process personal data only to the extent necessary for the provision of our services and fulfilment of our legal obligations.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which form part of your agreement with Aladdin288. In the event of any inconsistency between this Policy and those documents regarding personal data matters, this Privacy Policy shall take precedence.

2 Definitions

The following terms carry the meanings set out below throughout this Policy:

3 Data We Collect

Aladdin288 collects only the Personal Data that is reasonably necessary for the purposes identified in this Policy. The categories of Personal Data we collect include:

We do not collect sensitive categories of Personal Data (such as health information, racial or ethnic origin, or political opinions) unless specifically required for responsible gambling assessments, in which case such data is collected only with your explicit consent.

4 How We Collect Your Data

4.1 Directly from You

The majority of Personal Data we hold is provided directly by you when you: register an Account; complete KYC verification; make a deposit or withdrawal; contact our customer support team; or participate in a promotion. All registration forms and KYC submissions on the Aladdin288 Platform use encrypted connections.

4.2 Automatically from Platform Use

When you use the Platform, we automatically collect Technical Data including your IP address, device identifiers, browser type, and session information. This data is collected through our web server logs, analytics tools, and session cookies. We use this data to maintain Platform security, diagnose technical issues, and detect unusual access patterns that may indicate fraudulent activity.

4.3 From Third Parties

We may receive Personal Data from third-party sources including: (a) payment processors such as DuitNow, FPX, and e-wallet providers, for the purpose of confirming transaction completion; (b) identity verification service providers used during KYC processes; and (c) fraud-screening and anti-money-laundering screening databases where legally required.

5 How We Use Your Personal Data

Aladdin288 uses the Personal Data it collects for the following purposes:

• Account Creation and Management: To register your Account, verify your identity, and maintain your player profile on the Platform.
• Service Provision: To process deposits and withdrawals in MYR via your chosen Malaysian payment method; to credit winnings; to apply bonuses and promotions to your Account.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance via live chat, email, or other support channels.
• Security and Fraud Prevention: To detect and prevent fraudulent activity, account sharing, multi-accounting, and unauthorised access attempts.
• Legal and Regulatory Compliance: To fulfil our obligations under applicable anti-money-laundering laws, gaming regulatory requirements, and identity verification mandates.
• Responsible Gambling: To monitor player activity for signs of problem gambling behaviour and to administer self-exclusion, deposit limits, and intervention programmes where appropriate.
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the functionality, performance, and user experience of the Platform for Malaysian players.
• Marketing Communications: To send you promotional materials, bonuses, and platform updates where you have given your consent to receive such communications. You may opt out at any time.

6 Legal Basis for Processing

Aladdin288 processes your Personal Data on the following legal grounds:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you have agreed to — including Account management, payments, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws, including KYC verification, anti-money-laundering reporting, and gaming licence conditions.
• Legitimate Interests: Processing undertaken for fraud prevention, platform security, and responsible gambling monitoring — where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential analytics, undertaken only where you have given your freely-given, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Disclosure

7.1 Payment Processors

We share necessary financial and identity data with payment processors and financial institutions to facilitate your deposits and withdrawals. This includes providers operating the DuitNow system, FPX network, Touch 'n Go eWallet, Boost, GrabPay, and partner banks including Maybank, CIMB, Public Bank, and Hong Leong. Data shared is limited to what is strictly necessary for transaction processing.

7.2 Regulatory and Legal Authorities

We may be required to disclose Personal Data to gaming regulators, financial intelligence units, law enforcement authorities, or courts where required by applicable law or a valid legal order. We will notify you of such disclosures where we are legally permitted to do so.

7.3 Service Providers

We engage third-party service providers to assist with KYC verification, fraud screening, IT infrastructure, customer support tooling, and data analytics. All such providers are contractually bound to process your Personal Data only as directed by Aladdin288 and to maintain appropriate security standards.

8 Data Retention

Aladdin288 retains Personal Data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our data disposal procedures.

9 Data Security

Aladdin288 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• AES-256 encryption for sensitive data stored at rest in our databases;
• Restricted internal access controls, ensuring only authorised personnel with a legitimate need can access Personal Data;
• Multi-factor authentication requirements for administrative Platform access;
• Regular penetration testing and vulnerability assessments by qualified security professionals;
• Incident response procedures, including notification protocols in the event of a data breach affecting players.

Whilst we employ robust security measures, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their Aladdin288 Account and to contact our support team immediately if they suspect any unauthorised activity on their Account.

10 Cookies & Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files placed on your device when you visit the Aladdin288 Platform. They allow the Platform to recognise your device on subsequent visits, maintain your session state, and remember preferences you have set.

10.2 Categories of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, shopping basket state, and security cookies. These cannot be disabled without significantly impairing your use of the Platform.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and display options. These improve your experience but are not essential.
• Analytics Cookies: Used to understand how players navigate the Platform — which pages are visited most, where sessions are abandoned, and how technical errors occur. Data collected is aggregated and pseudonymous.
• Security & Fraud Cookies: Support our fraud detection systems by identifying unusual access patterns, device fingerprints associated with fraudulent accounts, and suspicious login attempts.

10.3 Managing Cookies

You may manage or delete cookies through your browser settings at any time. Disabling strictly necessary cookies will impair your ability to use the Platform. Disabling analytics or functional cookies will not prevent you from accessing the Platform but may affect certain preference-saving features.

11 Your Rights as a Data Subject

As an individual whose Personal Data is processed by Aladdin288, you hold the following rights. To exercise any of these rights, please contact our Data Privacy team at the contact details in Section 15.

12 Protection of Minors

Aladdin288 enforces a strict minimum age requirement of 21 years for all registered players. The Platform is not directed at, and does not knowingly collect Personal Data from, individuals under the age of 21.

Where we identify or are notified that a player is under the age of 21, we will immediately: (a) suspend and permanently close the relevant Account; (b) void all wagers and winnings associated with the Account; (c) delete or anonymise all Personal Data collected, subject to any overriding legal retention obligations; and (d) return any deposited funds at our discretion pending investigation.

13 International Data Transfers

Certain service providers engaged by Aladdin288 may process Personal Data in jurisdictions outside Malaysia. Where such international transfers occur, we ensure that appropriate safeguards are in place to protect the transferred data to a standard equivalent to that required under applicable data protection law. Safeguards may include standard contractual clauses, adequacy decisions, or binding corporate rules as appropriate.

Players whose data is transferred internationally will be notified of the relevant destination jurisdiction upon request. Such transfers occur only where necessary for the delivery of Platform services — for example, where a KYC verification provider operates data centres in another jurisdiction.

14 Amendments to This Policy

Aladdin288 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory guidance. Where changes are material — for example, where we propose to process Personal Data for a new purpose — we will provide advance notice by email or by prominent notice on the Platform before the change takes effect.

The date at the top of this page reflects the most recent revision. We encourage you to review this Policy periodically. Continued use of the Platform following notification of a revised Policy constitutes your acknowledgement of the changes.

15 Contact & Data Enquiries

If you wish to exercise any of your data subject rights, have a question about this Privacy Policy, or wish to submit a data-related complaint, please contact us through the following channels:

Please mark all privacy-related correspondence as "Privacy Enquiry — Data Subject Request" for prompt routing to our Data Privacy team. We acknowledge all privacy-related requests within 5 business days and provide a substantive response within 30 calendar days. For complex or extensive requests, we may extend this period by an additional 30 days with written notice to you.