Privacy Policy

Introduction

Aladdin28 ("we", "us", "the Operator", "the Platform") operates the online gaming and sports betting website accessible at https://aladdin28.cam. We are committed to the responsible handling of all personal data we collect in connection with your use of our platform.

This Privacy Policy ("Policy") describes in detail how Aladdin28 collects, uses, stores, shares, and protects the personal information of our registered players and website visitors ("you", "the User", "the Data Subject"). It also sets out the rights you hold in relation to your personal data and how you may exercise those rights.

This Policy forms part of our broader legal framework, which includes our Terms & Conditions and Responsible Gambling Policy. By creating an account on Aladdin28 or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the data practices described herein.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

Data We Collect

Aladdin28 collects personal data across several stages of your relationship with our platform. The categories of personal data we collect are described in the table below:

How We Use Your Data

Aladdin28 uses personal data collected from you for the following purposes:

• Account Management: To create, maintain, and administer your player account, including authentication, account security, and profile updates.
• Identity Verification (KYC): To verify your identity, age (minimum 21 years), and eligibility to use the platform in accordance with our regulatory obligations.
• Transaction Processing: To facilitate deposits and withdrawals in MYR via supported payment channels including FPX, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency methods (BTC, ETH, USDT).
• Fraud Prevention & Security: To detect and prevent fraudulent activity, money laundering, multi-accounting, collusion, and other prohibited activities outlined in our Terms & Conditions.
• Regulatory Compliance: To meet our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and gaming licensing requirements.
• Customer Support: To respond to your enquiries, resolve disputes, and deliver effective after-care service.
• Platform Improvement: To analyse usage patterns, diagnose technical issues, and improve platform performance and user experience.
• Responsible Gambling: To monitor gaming behaviour for signs of problem gambling and to provide appropriate interventions, self-exclusion management, and deposit limit tools.
• Marketing Communications (with consent only): To send promotional materials, bonus offers, and platform updates to players who have opted in to receive such communications. You may withdraw this consent at any time.

Legal Basis for Processing

Aladdin28 processes your personal data one or more of the following legal bases, depending on the specific purpose of each processing activity:

Data Sharing & Disclosure

Aladdin28 does not sell, rent, or trade your personal data to any third party. We may, however, share your data with carefully selected service partners and in circumstances required by law, as detailed below:

• Payment Processors: We share relevant financial and identity data with payment service providers (e.g., FPX gateway operators, e-wallet platforms such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and banking partners including Maybank, CIMB, Public Bank, and Hong Leong) to process your deposit and withdrawal transactions.
• KYC & Identity Verification Providers: We engage third-party identity verification specialists to assist in our Know Your Customer compliance process. These providers operate under contractual data processing agreements that require them to protect your data and use it only for the stated purpose.
• Technology & Infrastructure Partners: Cloud hosting, cybersecurity, and platform maintenance providers may have access to certain technical data in the course of providing contracted services. All such partners are bound by strict data protection obligations.
• Regulatory Authorities: Where required by applicable law, court order, or regulatory directive Aladdin28 will disclose personal data to the appropriate authorities. We will inform you of such disclosures where we are legally permitted to do so.
• Anti-Fraud & AML Networks: We may share data with industry-recognised fraud prevention and AML databases to protect the platform and our players from financial crime.
• Business Transfers: In the event of a merger, acquisition, or sale of assets involving Aladdin28, personal data held on our systems may be transferred to the successor entity. Players will be notified prior to any such transfer where reasonably practicable.

All third-party data processors engaged by Aladdin28 are required to handle personal data in accordance with applicable data protection standards and are prohibited from using such data for any purpose other than that for which it was originally shared.

Data Retention

Aladdin28 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and contractual obligations.

• Account & Identity Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with AML regulatory requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years following each transaction, in compliance with applicable financial recordkeeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Gaming Activity Logs: Retained for a minimum of five (5) years for audit, dispute resolution, and responsible gambling compliance purposes.
• Marketing Consent Records: Retained for as long as you hold an active marketing consent, and for one (1) year following the withdrawal of consent.
• Support Communications: Retained for three (3) years from the date of the last interaction, to facilitate dispute resolution and service quality assurance.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

Cookies & Tracking Technologies

Aladdin28 uses cookies and similar tracking technologies to maintain platform functionality, analyse usage patterns, and improve the overall user experience. A cookie is a small text file stored on your device when you access our platform.

We use the following categories of cookies:

Aladdin28 does not use third-party advertising cookies, cross-site tracking pixels, or behavioural profiling technologies that share data with external marketing networks. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may impair your ability to use the platform.

Data Security

Aladin28 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security infrastructure includes:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and our platform servers.
• Encryption at rest for all sensitive personal data and financial information stored in our systems.
• Two-factor authentication (2FA) available to all registered players as an additional account security layer.
• Role-based access controls limiting internal staff access to personal data strictly to those with an operational need.
• Regular independent penetration testing and security audits conducted by third-party cybersecurity professionals.
• Real-time fraud detection and anomaly monitoring systems to identify suspicious account activity.
• Incident response procedures to manage, contain, and notify affected parties in the event of a data breach, in accordance with applicable regulatory requirements.

Your Rights

As a registered player and data subject, you hold a range of rights with respect to the personal data Aladdin28 holds about you. These rights are subject to applicable legal exemptions, particularly where data must be retained for regulatory compliance purposes.

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is being used.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data, subject to our legal obligation to retain certain records for the retention periods specified in Section 7.
• Right to Restrict Processing: In certain circumstances, you may request that we limit the processing of your personal data while a dispute or review is in progress.
• Right to Data Portability: You may request that personal data provided to us by you be transferred in a structured, machine-readable format to another service provider, where technically feasible.
• Right to Object: You may object to data processing activities carried out on the basis of our legitimate interests, including direct marketing communications.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of the above rights, please contact our Data Protection team via the contact details set out in Section 15. We will respond to verified requests within a reasonable timeframe and in any event no later than thirty (30) calendar days from receipt of a valid request.

Minors & Age Policy

Aladdin28 strictly prohibits the use of our platform by persons under the age of 21. We do not knowingly collect, store, or process personal data belonging to individuals under 21 years of age.

As part of our KYC process, all players are required to verify their age and identity before withdrawals are processed. Any account found to belong to an individual under the age of 21 will be immediately suspended, all associated balances will be forfeited, and the personal data in question will be deleted from our systems in accordance with our data retention obligations.

Third-Party Services

The Aladdin28 platform may contain references or functional integrations involving third-party services — including payment gateways and game studio content. These third parties operate their own privacy policies, which are independent of this Policy and over which Aladdin28 exercises no control.

When you interact with a third-party payment gateway — for example, completing an FPX bank transfer through Maybank, CIMB, or Public Bank, or topping up via Touch 'n Go eWallet — the relevant third party may independently collect data about your transaction in accordance with their own privacy practices. We encourage you to review the privacy policies of any third-party services you use in connection with your Aladdin28 account.

Aladdin28 is not responsible for the privacy practices or content of any third-party service. We do not endorse and have no control over third-party data processing activities beyond those governed by our contractual agreements with appointed Data Processors.

International Data Transfers

As an online gaming operator serving Malaysian players under an international gaming licence, Aladdin28 may process and store personal data on servers located outside of Malaysia. Where such international data transfers occur, we take appropriate steps to ensure that your personal data continues to receive an adequate level of protection consistent with the principles set out in this Privacy Policy.

Appropriate safeguards for international transfers may include contractual data protection clauses incorporated into our agreements with Data Processors, combined with security standards equivalent to those described in Section 9 of this Policy. We do not transfer personal data to countries or territories that do not offer adequate data protection safeguards without implementing supplementary contractual protections.

Policy Amendments

Aladdin28 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory guidance. The "Last Updated" date at the top of this page will be revised accordingly upon any material amendment.

Where changes are material, we will notify registered players via email or in-platform notification prior to the amendments taking effect. Continued use of the Aladdin28 platform following notification of a revised Privacy Policy constitutes your acceptance of the updated terms.

We recommend that you review this Policy periodically to remain informed of how we handle your personal data. Archived versions of this Policy are available upon request by contacting our support team.

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Aladdin28 handles your personal data, you may contact our Data Protection team through the following channels:

For matters relating to responsible gambling, self-exclusion, or problem gambling support resources available to Malaysian players, please refer to our Responsible Gambling page.