Privacy Policy

For the purposes of this Policy, the following terms have the meanings assigned to them below:

Aladin888 collects the following categories of Personal Data in connection with your use of the platform:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (for age verification — minimum age is 21);
• Email address;
• Mobile phone number;
• Residential address (city, state, country — including Malaysian cities such as Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam where applicable).

3.2 Identity Verification (KYC) Data

• Copy of government-issued photo identification (e.g., Malaysian MyKad, passport, driving licence);
• Proof of address documentation;
• Proof of payment method ownership;
• Source of funds documentation (where required by compliance review).

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records;
• Payment method details (e-wallet identifiers, bank reference numbers — we do not store full bank card numbers);
• Account balance history;
• Bonus credits and wagering records.

3.4 Gaming & Betting Activity Data

• Game session records, bet amounts, wager outcomes, and winnings;
• Sports betting history including markets, stake values, and results;
• Responsible gambling tool usage (deposit limits set, self-exclusion requests).

3.5 Technical & Device Data

• IP address and general geographic location derived from IP;
• Device type, operating system, browser type and version;
• Session timestamps, login history, and platform activity logs.

Aladin888 collects Personal Data through the following methods:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in a promotion.
• Automated Collection: Technical data collected automatically when you access the platform, including IP address, device identifiers, browser data, and session activity via server logs, cookies, and similar tracking technologies.
• Third-Party Sources: Identity verification data from accredited KYC service providers; fraud and AML screening data from compliance partners; payment processing data from our payment gateway partners (including e-wallet and FPX providers used by Malaysian players such as Touch'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, and FPX).

Aladin888 processes Personal Data exclusively for defined, legitimate purposes. The table below maps the categories of data collected to the specific purposes for which they are used:

Aladin888 does not use Personal Data for purposes beyond those stated in this Policy without first obtaining your explicit consent, unless required by law or regulatory obligation.

Every instance of data processing carried out by aladin888 is grounded in one or more of the following lawful bases:

• Contractual Necessity: Processing required to perform our contractual obligations to you as a registered Player, including account management, game delivery, and payment processing.
• Legal Obligation: Processing necessary to comply with applicable anti-money laundering laws, licensing conditions, KYC requirements, and other regulatory obligations imposed on the aladin888 operator.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and service improvement — where such interests do not override your fundamental rights and freedoms.
• Consent: Where you have given explicit, freely-given consent — specifically for optional marketing communications. You may withdraw this consent at any time through your account settings or by contacting support.

Aladin888 does not sell, rent, or lease your Personal Data to third parties. Data is shared only in the circumstances set out below and only to the minimum extent necessary for the stated purpose:

• KYC & Identity Verification Partners: Accredited third-party providers engaged to verify your identity documents and perform age verification checks as part of our compliance obligations.
• Payment Processors: Our integrated payment gateway partners, including Malaysian e-wallet and banking providers (Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX) and cryptocurrency processing partners, to the extent necessary to process your transactions.
• Game Content Providers: Third-party game studios and live dealer platform providers may receive session-level data required to operate their games within our platform.
• Fraud & AML Compliance Services: Specialist providers engaged to screen transactions and accounts for fraudulent activity and money laundering risk.
• Law Enforcement & Regulatory Authorities: Where required by law, court order, or regulatory direction, we may disclose Personal Data to competent authorities. Aladin888 will not disclose data beyond what is legally required in such circumstances.

All third-party Data Processors engaged by aladin888 are bound by contractual obligations to process data only for the specified purpose, maintain appropriate security standards, and comply with applicable data protection requirements.

Aladin888 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory and legal obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, to satisfy AML and licensing record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years following the end of the business relationship, in line with standard international AML compliance standards.
• Financial Transaction Records: Retained for a minimum of five (5) years following each transaction, in accordance with financial record-keeping obligations.
• Support Communications: Retained for three (3) years following the closure of a support case, to facilitate any subsequent dispute resolution.
• Technical Logs: Typically retained for 90 days for security and fraud analysis purposes, unless longer retention is required for an ongoing investigation.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our data disposal procedures.

Aladin888 implements technical and organisational security measures proportionate to the sensitivity of the data we hold and the risks associated with our processing activities. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted in transit.
• Encryption at Rest: Sensitive data fields including KYC documents and financial information are encrypted in our databases.
• Access Controls: Strict role-based access controls limit which staff members can view sensitive Player data, operating on a need-to-know basis.
• Password Security: Player passwords are stored using one-way cryptographic hashing and are never accessible in plain text by our staff.
• Intrusion Detection: Automated monitoring systems flag anomalous account behaviour and login attempts in real time.
• Regular Security Audits: Our platform undergoes periodic security assessments to identify and remediate vulnerabilities.

Aladin888 uses cookies and similar tracking technologies to operate the platform, maintain session state, and gather analytics that help us improve the user experience. The following categories of cookies are used:

• Essential Cookies: Strictly necessary for the platform to function. These include session authentication cookies that keep you logged in during your visit. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Store your preferences such as language settings and responsible gambling tool configurations to personalise your experience.
• Analytics Cookies: Aggregate, anonymised data about how users navigate and interact with the platform, used to identify usability improvements. No individually identifiable data is extracted from analytics cookies.
• Security Cookies: Help detect and prevent fraudulent login attempts and bot activity.

Aladin888 does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings; however, disabling essential cookies will affect your ability to use core platform features including account login.

Subject to applicable law and regulatory limitations (particularly those arising from our AML and licensing obligations), you hold the following rights in relation to your Personal Data held by aladin888:

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. For identity and KYC data, you may be required to provide supporting documentation.
• Right to Erasure: Subject to our retention obligations, you may request deletion of your Personal Data. Note that data subject to mandatory regulatory retention periods cannot be deleted ahead of those periods.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances, such as while a dispute about accuracy is being resolved.
• Right to Data Portability: You may request that Personal Data you provided directly to us be provided in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, or to direct marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact our support team via live chat or send a written request to [email protected] (plain text — not a clickable link), with the subject line "Data Rights Request". We aim to respond to all rights requests within 30 calendar days of receipt.

The aladin888 platform is strictly for individuals aged21 years and above. We do not knowingly collect Personal Data from persons under the age of 21.

Age verification is a mandatory part of our registration and KYC process. All Players are required to confirm their age at registration, and to provide verified identity documentation before withdrawals are processed. Where our verification process reveals or we suspect that a Player is under 21, the account will be immediately suspended, all pending activity voided, and the matter reviewed in accordance with our responsible gambling and legal obligations.

Aladin888 operates as an internationally licensed platform. Your Personal Data may be transferred to, stored, and processed in countries other than Malaysia, including the jurisdiction under which we hold our operating licence, as well as the locations of our Data Processor partners.

Where Personal Data is transferred internationally, aladin888 takes appropriate steps to ensure that an adequate level of data protection is maintained. This may include entering into data transfer agreements with recipient organisations, applying standard contractual clauses, or relying on other lawful transfer mechanisms recognised under applicable data protection frameworks.

Players in Malaysia should note that Malaysian personal data protection legislation (Personal Data Protection Act 2010, "PDPA") may apply to certain aspects of our data processing activities. Aladin888 acknowledges these obligations and endeavours to process Malaysian users' data in a manner consistent with PDPA principles to the extent applicable to our operations.

Aladin888 reserves the right to update or amend this Privacy Policy at any time. Material changes that affect how we use your Personal Data will be communicated to registered Players via the email address associated with their account or via an on-platform notification prior to the changes taking effect.

Continued use of the aladin888 platform following notification of any amendment constitutes your acceptance of the revised Policy. Where an amendment requires your active consent (for example, a new category of data processing not previously disclosed), we will request your explicit consent before proceeding.

The version date displayed at the top of this page reflects when this Policy was last reviewed. We recommend Players review this page periodically.

For any privacy-related enquiries, data rights requests, or concerns regarding this Policy, please contact the aladin888 Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the aladin888 platform. For urgent privacy concerns, live chat is the fastest channel.
• Email: [email protected] (plain text only — not a clickable link). Please use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate. We aim to acknowledge all email enquiries within 2 business days and to resolve substantive requests within 30 calendar days.

For formal complaints that are not resolved through our standard channels, you may escalate via the dispute resolution mechanism available under our operating licence jurisdiction.

This Privacy Policy was last reviewed on 1 January 2026. Aladin888 reserves all rights not expressly granted. All enquiries are handled in English.