Privacy Policy – How aladdin9 Protects Your Personal Data

aladdin9 ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with our Platform at aladdin9.net. This Privacy Policy describes how aladdin9 collects, uses, stores, shares, and protects personal data in connection with the operation of our online casino and sportsbook services, which are directed at users in Malaysia and other eligible jurisdictions.

This Policy applies to all Members, registered account holders, and visitors to the aladdin9 Platform, and forms part of our broader agreement with you alongside the Terms and Conditions and Responsible Gaming Policy. By creating an account or using any part of the aladdin9 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

aladdin9 takes its obligations as a data controller seriously. We do not collect more data than we need, we do not retain data longer than we must, and we do not share your data with parties who have no legitimate need for it. If you have any questions about this Policy or how your data is handled, our support team is available at [email protected].

For the purposes of this Privacy Policy, the data controller responsible for personal data collected through the aladdin9 Platform is the operator of aladdin9, a company licensed under an international gaming authority. Queries regarding data handling, subject access requests, and complaints may be directed to our Data Protection contact at [email protected].

aladdin9 collects personal data across several categories, depending on the nature of your interaction with the Platform:

aladdin9 collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or updating your account profile.
• Automated technologies: Data collected automatically when you access the Platform, including cookies, web beacons, server logs, and device fingerprinting tools used for fraud detection and security monitoring.
• Third-party sources: Identity and address verification data obtained from licensed KYC and AML service providers; payment data from Malaysian payment processors including FPX, DuitNow, and e-wallet operators such as Touch 'n Go and Boost; fraud intelligence feeds from our gaming licence compliance partners.

aladdin9 processes personal data only where there is a valid legal basis to do so. The following table summarises our primary processing purposes and the corresponding legal basis:

aladdin9 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share personal data with the following categories of recipients where there is a legitimate need:

• Regulatory and licensing authorities: Our gaming licence requires us to submit certain player data and transaction records to the licensing authority on request or as part of routine compliance reporting.
• Payment processors: Personal and financial data is shared with Malaysian payment service providers (including Maybank, CIMB, FPX operators, DuitNow, Touch 'n Go, and Boost) as necessary to process transactions.
• KYC and AML service providers: Licensed third-party identity verification and anti-money laundering screening services receive the minimum data necessary to verify your identity and screen against sanctions lists.
• Game software providers: Technical identifiers (but not full identity data) may be shared with licensed game providers such as Evolution Gaming and Pragmatic Play for the purpose of game delivery and dispute resolution.
• Law enforcement and courts: aladdin9 will disclose personal data to law enforcement agencies, courts, or regulatory bodies where legally required to do so, or where we have a good-faith belief that disclosure is necessary to prevent crime or protect the safety of individuals.
• Professional advisers: Lawyers, auditors, and compliance consultants who require access to data for the purpose of providing professional services to aladdin9, subject to confidentiality obligations.

The operation of the aladdin9 Platform may involve the transfer of personal data to service providers or infrastructure located outside Malaysia. Where such transfers occur, aladdin9 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to or exceeding Malaysian data protection requirements. These safeguards include contractual data protection clauses, adequacy assessments, and reliance on providers certified under recognised international data protection frameworks.

aladdin9 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. General retention periods are as follows:

• Active account data: Retained for the duration of the Member relationship and until account closure.
• KYC and financial records: Retained for a minimum of 5 years following account closure, in accordance with AML regulatory requirements applicable to our licence.
• Customer support records: Retained for up to 3 years from the date of the interaction.
• Technical and usage logs: Retained for up to 12 months for security and fraud prevention purposes.
• Self-exclusion records: Retained indefinitely to prevent re-registration by excluded individuals.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised.

The aladdin9 Platform uses cookies and similar tracking technologies to operate core platform functions, maintain session authentication, detect fraud, and analyse usage patterns. The categories of cookies used include:

• Strictly necessary cookies: Required for the Platform to function — including login session management and security tokens. These cannot be disabled without impacting service functionality.
• Analytical cookies: Used to measure how Members interact with the Platform, helping us identify usability improvements. Data collected is aggregated and does not identify individual users.
• Fraud prevention cookies: Device fingerprinting and behavioural data used to detect suspicious login activity, account takeover attempts, and bonus abuse patterns.
• Preference cookies: Store your language, display, and notification preferences across sessions.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect your ability to use some features of the aladdin9 Platform.

Subject to applicable law and the conditions of our gaming licence, you have the following rights with respect to your personal data held by aladdin9:

To exercise any of these rights, please submit a written request to [email protected]. aladdin9 will respond within 30 days. Note that certain rights may be limited where data processing is required to fulfil legal obligations under our gaming licence — for example, KYC records must be retained for a minimum period regardless of deletion requests.

The aladdin9 Platform is strictly for adults aged 21 years and above. aladdin9 does not knowingly collect personal data from individuals under the age of 21. If aladdin9 becomes aware that personal data has been collected from a minor, the account will be immediately closed and all associated data deleted, with the exception of records required to prevent future registration by that individual. Any minor who has accessed the Platform in violation of these requirements should be reported to aladdin9 support immediately.

aladdin9 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. These include:

• 256-bit TLS encryption for all data in transit between your device and the aladdin9 servers;
• AES-256 encryption for sensitive personal data stored at rest;
• Role-based access controls limiting internal data access to personnel with a legitimate operational need;
• Multi-factor authentication requirements for all administrative access to production systems;
• Automated intrusion detection and anomaly monitoring across platform infrastructure;
• Regular penetration testing by independent security auditors;
• Incident response procedures with defined breach notification timelines.

While aladdin9 takes all reasonable precautions to secure your data, no internet transmission or storage system is perfectly secure. You are encouraged to protect your own account by enabling two-factor authentication and using a strong, unique password for your aladdin9 account.

aladdin9 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or business operations. Where changes are material, aladdin9 will notify affected Members via the registered email address or through a prominent notice on the Platform prior to the effective date. The current version of this Privacy Policy is always accessible at aladdin9.net/privacy-policy. Your continued use of the Platform following notification of an updated Policy constitutes acceptance of the changes.

If you have any questions, concerns, or complaints regarding this Privacy Policy or aladdin9's data handling practices, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 on the aladdin9 Platform (login required)

aladdin9 aims to acknowledge all privacy-related enquiries within 48 hours and to resolve them within 30 days. If you are unsatisfied with aladdin9's response to a privacy complaint, you may escalate your complaint to the relevant data protection supervisory authority in your jurisdiction, or to the dispute resolution body specified under our gaming licence terms.