Privacy Policy

This Privacy Policy ("Policy") describes how aladin9 ("aladin9", "we", "us", "our") collects, processes, stores, uses, and protects personal data relating to users ("Player", "you", "your") of the aladin9 online gaming platform, accessible at https://aladin9.cam, including all associated games, payment facilities, promotional services, and customer support functions.

aladin9 acts as the data controller for all personal data collected through the Platform. This Policy applies to all players accessing aladin9 from Malaysia, including those located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions within Malaysia.

By registering an Account, making a deposit, or otherwise using any service offered by aladin9, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read together with our Terms & Conditions.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data, location data, or any combination of data that, taken together, could identify an individual.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. For this Policy, the Data Controller is aladin9.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller under a data processing agreement.
• "KYC Data" means identity verification documents submitted by a Player during the Know Your Customer process, including government-issued identification, proof of address, and biometric data where applicable.
• "Cookies" means small text files placed on your device by the Platform to store session information and usage preferences.
• "Platform" means the aladin9 website, mobile browser interface, and all associated software and services accessible at https://aladin9.cam.

aladin9 collects personal data through several channels: information you provide directly upon registration and during account use; data generated automatically through your use of the Platform; and data received from verified third-party sources where permitted.

This data is collected during the registration process, KYC verification, deposit and withdrawal requests, and when you contact our support team.

This data is collected automatically via server logs, session tracking, and analytics tools when you access and use the Platform. It is used to ensure platform security, detect fraud, and improve user experience.

In limited circumstances, we may receive data about you from authorised third parties, including identity verification service providers engaged to support our KYC process, payment processors who confirm transaction status, and fraud prevention agencies where a security concern has been flaged. We do not purchase data lists from marketing data brokers.

aladin9 uses the personal data we collect strictly for the following purposes:

• Account management: Creating, maintaining, and administering your Player Account, including processing registration, updating account details, and managing login credentials.
• Identity verification (KYC): Verifying your age (minimum 21 years), identity, and residential address in compliance with our licence obligations and anti-money laundering requirements.
• Payment processing: Processing deposits and withdrawals via Malaysian payment methods including Touch 'n Go eWallet, DuitNow, Boost, GrabPay, FPX, Maybank, and CIMB. Transaction records are maintained for financial compliance purposes.
• Gameplay and platform services: Delivering the gaming experience, recording game outcomes and transaction histories, calculating bonus eligibility, and maintaining accurate account balances.
• Customer support: Responding to your enquiries, resolving disputes, and providing assistance through live chat or email. Support interactions are recorded for quality assurance and training purposes.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, and unauthorised account access. IP addresses and device identifiers are analysed as part of this process.
• Legal and regulatory compliance: Meeting obligations under applicable laws and our gaming licence requirements, including maintaining records as required by anti-money laundering legislation and responding to lawful requests from regulatory or law enforcement authorities.
• Responsible gambling: Monitoring account activity to identify potential signs of problem gambling behaviour and, where appropriate, proactively engaging with Players to offer responsible gambling tools.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to Players who have consented to receive such communications. Marketing consent may be withdrawn at any time.
• Platform improvement: Analysing aggregated usage data to improve our game catalogue, platform performance, and overall user experience.

aladin9 processes personal data on the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between you and aladin9 — including account registration, transaction processing, and delivering gaming services you have requested.
• Legal obligation: Processing required to comply with applicable laws, including KYC verification, anti-money laundering record-keeping, and responding to regulatory or law enforcement requests.
• Legitimate interests: Processing carried out in the legitimate interests of aladin9 — including fraud detection, security monitoring, platform improvement, and responsible gambling monitoring — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your explicit, freely given consent — primarily the sending of marketing communications. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of prior processing.

aladin9 does not sell, rent, or trade your personal data to third parties. We may share personal data with the following categories of recipients only where necessary and subject to appropriate data protection safeguards:

We share transaction data with certified payment processors and financial institutions to facilitate your deposits and withdrawals. These include the operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and other Malaysian banking institutions. These parties act as independent data controllers for payment processing and are subject to their own privacy policies and regulatory obligations.

Your KYC documents and identity data are shared with contracted identity verification service providers solely for the purpose of age and identity verification. These providers operate under data processing agreements with aladin9 and are prohibited from using your data for any other purpose.

We engage third-party providers for hosting, content delivery, analytics, fraud detection, and customer support platform services. These providers process data on our behalf as Data Processors and are bound by contractual obligations consistent with this Policy.

When you play a game provided by a third-party game studio on the aladin9 platform, certain session data (such as player ID, bet amounts, and game outcomes) may be transmitted to the game provider for gameplay and RTP calculation purposes. Game providers do not receive your personal identification data unless required for regulatory compliance.

We may disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, a court order, or regulatory directive. In such cases, we will disclose only the minimum data necessary and will notify you where we are lawfully permitted to do so.

In the event of a merger, acquisition, restructuring, or sale of all or part of aladin9's business, personal data held by aladin9 may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection commitments.

aladin9 operates primarily to serve Malaysian players, and the majority of data processing activities take place within our platform infrastructure. However, certain service providers — particularly cloud hosting, analytics, and fraud prevention partners — may process data in servers located outside Malaysia.

Where personal data is transferred outside Malaysia, aladin9 ensures that appropriate safeguards are in place, including contractual data protection obligations consistent with internationally recognised standards, so that the level of protection afforded to your data is not materially less than the protection applied within Malaysia.

If you have concerns about the international transfer of your data, please contact us using the details in Section 15 of this Policy.

aladin9 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active Account data: Retained for the duration of the account relationship and for a period of up to 5 years following Account closure, to meet legal, regulatory, and audit requirements.
• KYC documents: Retained for a minimum of 5 years following Account closure or the date of the most recent transaction, consistent with anti-money laundering legislation applicable to gaming operators.
• Transaction records: Retained for a minimum of 5 years from the transaction date for financial compliance and audit purposes.
• Customer support records: Support chat transcripts and email correspondence are retained for up to 3 years from the date of the interaction.
• Marketing preferences: Records of your consent to or withdrawal from marketing communications are retained for as long as necessary to demonstrate compliance with applicable requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in manner that prevents re-identification.

aladin9 uses cookies and similar tracking technologies to operate the Platform, maintain your session, and improve your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences — such as language or display settings — between sessions. These improve convenience but are not essential to core functionality.
• Analytics Cookies:
• Security Cookies: Support fraud detection, rate limiting, and session integrity checks. These are classified as necessary for security purposes.

Most web browsers allow you to manage cookie preferences through their settings. Disabling or deleting cookies may affect your ability to use certain features of the Platform. aladin9 does not use cookies to serve third-party advertising.

As a data subject, you have the following rights with respect to the personal data aladin9 holds about you. These rights are subject to applicable legal limitations and our legitimate interests as an operator:

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is used.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. For account details such as your email or address, you may update these directly through your Account dashboard.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations (see Section 8).
• Right to Restrict Processing: You may request that we limit the processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold.
• Right to Data Portability: Where processing is based on consent or contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data where it is based on legitimate interests. You may also withdraw marketing consent at any time.
• Right not to be subject to automated decisions: You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects on you.

To exercise any of the above rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days. Where a request is complex or numerous, we may extend this period by a further 30 days and will notify you accordingly.

aladin9 strictly prohibits the use of its Platform by persons under the age of 21. We do not knowingly collect, process, or retain personal data relating to individuals under 21 years of age. Age is verified during the KYC process using government-issued identification documents.

If we become aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the relevant Account, delete the associated personal data to the extent permissible by law, and refund any real-money deposits in accordance with our Account closure procedures.

If you believe that a person under 21 has registered an account on aladin9, please contact our support team immediately at [email protected].

aladin9 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and our servers is encrypted using 256-bit TLS encryption. The Platform enforces HTTPS on all pages.
• Data encryption at rest: Personal data stored on our servers — including KYC documents and financial records — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data is restricted to authorised personnel on a need-to-know basis. Access logs are maintained and reviewed regularly.
• Two-factor authentication (2FA): 2FA is available for all player accounts and is mandatory for administrative access to internal systems containing personal data.
• Regular security audits: We conduct periodic penetration testing and vulnerability assessments on our platform infrastructure.
• Data breach response: In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify affected players and, where required, the relevant supervisory authority, within the timeframes specified by applicable law.

While aladin9 takes all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. We strongly encourage you to use a strong, unique password and enable 2FA on your Account to reduce the risk of unauthorised access.

The aladin9 Platform does not contain links to third-party websites for external commercial purposes. Where a game is provided by a third-party studio, gameplay is delivered within the aladin9 platform environment and is subject to this Privacy Policy. However, individual game providers have their own data practices governing gameplay session data as described in Section 6.4.

aladin9 is not responsible for the privacy practices of any third-party payment providers, such as Touch 'n Go eWallet, Boost, GrabPay, or banking institutions accessed via FPX. Once you are redirected to a third-party payment interface to complete a transaction, that party's own privacy policy governs the data you provide in that environment. We recommend reviewing the privacy policies of any payment service providers you use.

aladin9 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. Material changes will be communicated to registered players via email or a prominent Platform notification at least 7 days before the revised Policy takes effect, except where immediate changes are required by law or for security reasons.

The "Last Updated" date at the top of this Policy indicates when the current version entered into effect. Continued use of the Platform following the effective date of a revised Policy constitutes acceptance of the updated terms. If you do not agree to any revised Policy, you should cease using the Platform and request Account closure before the effective date.

Previous versions of this Privacy Policy are available on request by contacting support.

If you have any questions, concerns, or requests regarding this Privacy Policy or the manner in which aladin9 processes your personal data, please contact us through the following channels:

• Email: [email protected] — please include "Privacy Enquiry" or "Data Rights Request" in the subject line. Responses are provided within 2 business hours during standard operating hours, and within 30 days formal data rights requests.
• Live Chat: Available 24 hours a day, 7 days a week including Malaysian public holidays. Average first response time is under 3 minutes. Live chat is suitable for general privacy questions; formal data requests should be submitted by email.