Aladdin28 Privacy Policy — Data Protection for Malaysian Players

Aladdin28 ("we", "platform") are fully committed to protecting the privacy and security of the personal information of every player who uses our platform. This Privacy Policy outlines our practices regarding the collection, use, disclosure, and protection of your personal data when you access or use the website and services Aladdin28.

This document has been drafted in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA) and reflects the highest data protection standards in the industry. By registering for or continuing to use the Aladdin28, you consent to the practices described in this Privacy Policy.

If you have any questions about how Aladdin28 handles your personal data, our support team is on hand to assist via email at support@aladdin28.ws or through live chat, available 24 hours a day, 7 days a week.

Aladdin28 collects various categories of information to ensure a secure, seamless, and personalised experience for you. Below is a detailed breakdown of the types of data we collect:

We only collect information that is strictly necessary for a specified purpose. Aladdin28 does not collect sensitive data such as medical information, political views or religious beliefs unless required by law. All data collected is stored securely and accessible only to authorised staff.

Aladdin28 uses your personal information for the following legitimate purposes:

• Account management: Creating and managing your player account, verifying your identity and processing financial transactions including deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX and withdrawals to your bank account.
• Service delivery: Granting access to over 1,500 games including slots, baccarat, blackjack, Live Casino and Sports Betting such as Malaysia Super League football and EPL.
• Security & fraud prevention: Detects and prevents fraudulent activity, money laundering, and platform abuse through usage pattern analysis.
• Legal compliance: To fulfil obligations under Malaysia's PDPA, anti-money laundering (AML) laws, and regulatory reporting requirements.
• Service improvement: Analyses platform usage patterns to improve overall design, performance, and user experience.
• Service communications: Sending important notifications related to your account, changes to our terms, security alerts and transaction information .
• Promotions & personalised offers: With your consent, sending you information about promotions, bonuses and special offers Aladdin28 relevant to your gaming profile. You may unsubscribe from marketing communications at any time.

All data processing at Aladdin28 has a valid legal basis — whether founded on your consent, contractual necessity, a legal obligation, or the platform's legitimate interests, provided these do not override your fundamental rights as a player.

Aladdin28 does not sell, rent, or trade your personal information to any third party for their own marketing purposes. However, there are limited circumstances in which we may share your data:

• Service providers: Third parties that assist us in operating the platform, including casino game providers (Evolution Gaming, Pragmatic Play), local Malaysian payment processors, and cloud service providers. All such parties are bound by strict confidentiality agreements.
• Regulatory authorities: When required by Malaysian law, a court order, or a legitimate regulatory authority. Aladdin28 will notify you of any such request to the extent permitted by law.
• Fraud prevention: With fraud prevention agencies or financial institutions to verify identity and prevent unlawful activity, in compliance with Malaysia's AML legal requirements.
• Business transfer: If Aladdin28 undergo a merger, acquisition or asset sale, user data may be transferred as part of that transaction. You will be notified in advance.

The security of your personal data is our top priority Aladdin28. We implement multiple layers of technical and organisational measures to safeguard your information against unauthorised access, loss, destruction, or disclosure:

• Data encryption in transit: All communications between your platform and our servers Aladdin28 are protected with 256-bit TLS/SSL protocols.
• Encryption of data at rest: Sensitive information such as passwords and payment details is stored in encrypted form using strong hashing algorithms.
• Layered access controls: Only staff with specific authorisation may access players' personal data, and every access is logged for audit purposes.
• 24/7 security monitoring: Our systems are continuously monitored to detect any suspicious activity or intrusion attempts.
• Periodic penetration testing: Aladdin28 conducts regular security assessments by independent cybersecurity experts to identify and address vulnerabilities.

Data retention period: Aladdin28 retains your personal data for as long as your account is active and for a minimum period of 7 years after account closure, in line with Malaysian financial and tax legal requirements. Data that is no longer needed will be securely deleted.

Platform Aladdin28 uses cookies and similar tracking technologies to enhance your user experience. The following are the types of cookies we use:

You can control or delete cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the platform Aladdin28. For more information on managing cookies, please refer to your browser's documentation.

Under Malaysia's PDPA and the Privacy Policy of Aladdin28, you have the following rights with respect to your personal data:

• Right of Access: You have the right to request a copy of all personal information we hold about you. Requests will be processed within 14 business days.
• Right to Correction: If any of your information is inaccurate or outdated, you have the right to request an immediate correction. You may also update certain information directly through your account settings.
• Right to Erasure: You may request the deletion of your personal data when it is no longer required, subject to our legal record-keeping obligations.
• Right to Restrict Processing: In certain circumstances, you have the right to request that we restrict how we use your data while a dispute is being resolved.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time, and we will honour such requests promptly.
• Data Portability Right: You may request your personal data in a machine-readable format for transfer to another service provider.

To exercise any of the above rights, please contact the Aladdin28 via email at support@aladdin28.ws, clearly stating your request along with proof of identity. All requests will be acknowledged within 3 business days and resolved within 30 days.

Platform Aladdin28 is intended for individuals aged 18 and above. We do not knowingly collect, process, or store any personal information from individuals under the age of 18.

Should we discover that information from a minor has been collected without our knowledge, such data will be deleted immediately and the account in question will be closed without delay. Parents or guardians who suspect their child has registered with Aladdin28 should contact us immediately at support@aladdin28.ws.

Platform Aladdin28 may contain links to third-party websites or services. This Privacy Policy applies solely to the Aladdin28 only and does not cover the privacy practices of any third-party websites you may access through links provided.

We encourage you to read and understand the privacy policy of every third-party website you visit. Aladdin28 is not responsible for the privacy practices or content of such third-party websites.

Aladdin28 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technologies in use. You will be notified of any material amendments through:

• In-platform notifications upon login
• Email to the address registered to your account
• Updates the "Updated" date at the top of this page

Continued use of the platform Aladdin28 after the amendment's effective date will be considered as your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed of how we protect your data.

For any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data by Aladdin28, please reach out to us through the following channels:

• Privacy Email: support@aladdin28.ws (please state "Privacy Enquiry" in the email subject line)
• Live Chat: Click the chat icon at the bottom right corner of the platform – available 24/7
• Response Time: Emails answered within 24 hours; live chat within minutes