Aladdin28 Privacy Policy – Malaysia Personal Data Protection

aladdin28 is committed to the privacy of every member who uses our platform. We understand that personal data is sensitive and valuable — it is more than just a number in our database; it is information that relates to your real life.

This Privacy Policy applies to all services offered by aladdin28 through the aladdin28.biz website, including account registration, deposits and withdrawals, casino games, Sports Betting, Live Casino, table games, virtual sports, roulette, and all customer support-related interactions.

We have a dedicated Data Protection Officer responsible for ensuring that all our data processing practices comply with Malaysia's PDPA and relevant international standards. Any privacy-related enquiries can be sent directly to our team at privacy@aladdin28.biz.

aladdin28 collects various categories of personal information depending on how you interact with our platform. Below is a full overview of the types of data we may collect:

Your personal data is collected through several different methods as you interact with the platform aladdin28:

• Account Registration: Information you provide during the registration process for a new aladdin28 account.
• KYC Process: Identity verification documents you submit to fulfil verification requirements.
• Financial Transactions: Information transmitted by payment processors (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX) when a deposit or withdrawal is processed.
• Gaming Activity: Data automatically generated while you play slots, Live Casino, table games, roulette, Virtual Sports, or place Sports Betting wagers.
• Customer Support: Information you share when contacting our support team via live chat, WhatsApp, or email.
• Cookies & Tracking Technologies: Technical data collected automatically when you visit our platform (see Section 7).
• Third-Party Verification: In certain cases, information may be verified against authorised third-party databases for identity verification purposes.

We never purchase or obtain your personal data from data brokers or unauthorised sources. All data we hold is either voluntarily provided by you or legitimately generated through your use of the platform aladdin28.

aladdin28 uses your personal data only for lawful, specific and transparent purposes. Below is the complete list of primary purposes for data processing:

1. Account Management: Creating, verifying, and managing your member account on aladdin28.
2. Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, and FPX, as well as withdrawals to your bank account or eWallet.
3. KYC & AML Compliance: To fulfil identity verification (Know Your Customer) and anti-money laundering (Anti-Money Laundering) requirements as mandated by law.
4. Customer Support: Helping resolve enquiries, complaints or technical issues you report to the aladdin28 support team.
5. Security & Fraud Prevention: Detecting and preventing fraudulent activity, account abuse and other security threats.
6. Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling and provide appropriate assistance.
7. Product Improvement: Analysing usage patterns to improve platform features, user interface and overall experience.
8. Marketing Communications: Sending notifications about promotions, bonuses and special offers – with your consent and subject to opt-out preferences.
9. Legal Compliance: To fulfil legal obligations, regulatory directives, or valid court orders.

aladdin28 does not sell, rent or trade your personal data to any party for marketing purposes. However, there are certain situations where we may need to share your data with selected third parties:

• Payment Processors: Transaction information that must be shared with Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX-affiliated banks to process your transactions.
• KYC Service Providers: Approved identity verification partners to assist with document review processes.
• Game Providers: Minimal session data shared with third-party game providers (such as Evolution Gaming, Pragmatic Play) used on the aladdin28 platform.
• Statutory Authority: Information required by Malaysian law or directives from competent authorities such as Bank Negara Malaysia or the Royal Malaysia Police.
• Audit & Compliance: Independent auditors conducting regular compliance reviews of aladdin28's operations.

All third parties we work with are required to adhere to strict data security standards and are only permitted to use your data for agreed purposes. They are not allowed to process your data for their own interests.

The security of your personal data is our top priority aladdin28. We have made substantial investments in our cybersecurity infrastructure to ensure your information is protected at all times. Our technical and organisational security measures include:

• 256-bit SSL/TLS Encryption: All communications between your browser and aladdin28's servers are encrypted using the same SSL standard employed by Malaysia's leading banks.
• At-Rest Encryption: Sensitive data stored in our databases, including financial information and KYC documents, is encrypted using AES-256.
• Two-Factor Authentication (2FA): Available to all member accounts as an additional layer of security.
• 24/7 Monitoring: A continuous security monitoring system that detects and responds to threats in real time.
• Regular Penetration Testing: Regular security testing conducted by independent security experts to identify and address vulnerabilities.
• Internal Access Controls: Only aladdin28 staff who require access to specific data are granted permission to do so — in accordance with the "least privilege" principle.
• Secure Data Centre: Data is stored in certified data centres with strict physical security controls.

Platform aladdin28 uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions — login, game sessions, and security. Cannot be disabled.
• Performance Cookies: Collecting data on how you use the platform to help us improve performance and speed.
• Functional Cookies: Remembering your preferences such as language and display settings to provide a more personalised experience.
• Analytics Cookies: Helps us understand platform usage patterns on an aggregate basis — this data is not linked to any individual's identity.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the platform aladdin28 you.

aladdin28 only retains your personal data for as long as necessary to fulfil the original purpose of collection or to meet legal requirements. The following are our data retention guidelines:

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to your identity. You may request early deletion (see Section 9), subject to applicable legal requirements.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by aladdin28. We respect and facilitate the exercise of all these rights:

Platform aladdin28 is exclusively for users aged 18 and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.

Should we discover that we have collected data from a minor without valid consent, we will take immediate steps to delete the information and close the account in question. Parents or guardians who suspect their child has registered on aladdin28 without permission are advised to contact us immediately at privacy@aladdin28.biz.

Platform aladdin28 may contain integrations with third-party services such as payment processors (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX) and game providers. When you interact with these third-party services, your personal data may also be subject to their respective privacy policies.

aladdin28 is not responsible for the privacy practices of third-party services that are outside our control. We encourage you to read the privacy policy of each third-party service you use alongside the aladdin28 platform.

aladdin28 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or improvements in how we protect your data. Any material changes will be communicated to you via:

• Clear notice on the aladdin28 platform homepage
• Notification email to your registered email address
• In-account notification when you log in

Material changes to this Privacy Policy will be communicated at least 14 days before taking effect. Continued use of the platform aladdin28 after the effective date of such changes constitutes your acceptance of the updated Privacy Policy.

This Privacy Policy was last updated on: January 2026

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we aladdin28 handling your personal data, please contact our Data Protection Officer:

• Privacy Email: privacy@aladdin28.biz
• General Support Email: support@aladdin28.biz
• Live Chat: Available 24/7 on the aladdin28 platform

We are committed to responding to all privacy enquiries within 5 business days and resolve complaints within 21 business days. If you are not satisfied with the resolution we provide, you have the right to file a formal complaint with the Department of Personal Data Protection (JPDP) Malaysia.