Privacy Policy — Aladdin666

This Privacy Policy ("Policy") is issued by Aladdin666 ("Company", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at https://aladdin666.cam ("Platform"). This Policy governs the collection, use, storage, processing, and disclosure of personal data submitted by or collected from individuals ("you", "User", "Player") who access or use the Platform.

Aladdin666 is committed to protecting your privacy and ensuring that your personal data is processed in a lawful, fair, and transparent manner. This Policy has been prepared in accordance with applicable data protection principles and regulations relevant to the jurisdictions in which Aladdin666 operates.

By creating an account on the Platform, making a deposit, or otherwise accessing our services, you acknowledge that you have read, understood, and accepted the terms of this Privacy Policy. If you do not agree to this Policy, you must not access or use the Platform.

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

3.1 Registration Data

When you create an Aladdin666 account, we collect the following information:

• Full legal name
• Date of birth (for age verification — players must be 21 or above)
• Residential address, including city and postcode
• Email address
• Mobile phone number
• Preferred currency and language settings

3.2 Identity Verification (KYC) Data

To comply with our obligations and to protect the security of our Platform, we may request the following KYC documentation:

• Government-issued photo identification (e.g., MyKad, passport)
• Proof of residential address (e.g., utility bill, bank statement dated within 3 months)
• Proof of payment method ownership (e.g., screenshot of e-wallet, bank account statement)
• Source of funds declaration where required by risk assessment protocols

3.3 Financial Data

We collect transaction-level data in connection with deposits and withdrawals, including: payment method type (e.g., Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, BTC, USDT), transaction amounts in MYR or cryptocurrency equivalent, transaction timestamps, and transaction reference numbers. Full payment credentials are not stored on the Platform.

3.4 Gameplay & Betting Data

We record your activity on the Platform, including: games played, wagers placed, bet amounts, outcomes, session durations, and responsible gambling tool usage. This data is used for account management, dispute resolution, fraud prevention, and improving our services.

3.5 Technical & Device Data

We automatically collect certain technical information when you access the Platform, including: IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, and session duration. This information is used for security monitoring and platform optimisation.

3.6 Communications Data

If you contact our support team via live chat or email, we retain records of those communications, including the content of messages, timestamps, and any attachments, for quality assurance, training, and dispute resolution purposes.

Aladdin666 collects personal data through the following channels:

• Directly from you — through account registration forms, KYC submissions, deposit and withdrawal requests, live chat and email correspondence, and responsible gambling tool activation.
• Automatically — through cookies, web beacons, and similar tracking technologies embedded in the Platform that record your device information, browsing behaviour, and session activity.
• From third parties — including identity verification service providers, payment processors (such as those facilitating FPX, DuitNow, and e-wallet transactions), fraud prevention services, and analytics providers, where such data is received in connection with the provision of services on the Platform.

The following table sets out the categories of personal data we process and the purposes for which each is used:

Aladdin666 processes personal data on the following legal bases:

• Contractual necessity — Processing required to fulfil our obligations under the account agreement, including account management, transaction processing, and customer support.
• Legal obligation — Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and tax reporting obligations.
• Legitimate interests — Processing carried out in pursuit of Aladdin666's legitimate business interests, including fraud prevention, Platform security, and service improvement, where such interests are not overridden by your fundamental rights and freedoms.
• Consent — Processing carried out on the basis of your freely given, informed consent, including the use of non-essential cookies and the sending of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Aladdin666 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. We may share your data with the following categories of third parties only to the extent strictly necessary to provide or improve our services:

• Payment processors — including providers facilitating FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency transactions. These processors receive only the data required to execute and verify your transactions.
• Identity verification providers — third-party KYC and anti-money laundering services used to verify your identity and age in accordance with our obligations.
• IT and security service providers — cloud hosting, data storage, cybersecurity, and fraud detection vendors operating under contractual data processing agreements with Aladdin666.
• Regulatory and law enforcement authorities — where we are required by applicable law, court order, or regulatory direction to disclose personal data.
• Analytics providers — anonymised or aggregated data may be shared with analytics platforms to support business intelligence and platform improvement.

In the course of providing our services to Players across Malaysia — including those in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — some personal data may be processed by third-party service providers located in jurisdictions outside Malaysia. Where such transfers occur, Aladdin666 ensures that:

• The receiving jurisdiction provides an adequate level of data protection as recognised under applicable standards; or
• Appropriate contractual safeguards are in place, such as standard contractual clauses or equivalent binding instruments, governing the transfer and processing of personal data in that jurisdiction.

If you have questions about the specific safeguards applicable to any international data transfer, you may contact us using the details provided in Section 15.

Aladdin666 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law. Our standard retention periods are as follows:

• Account and registration data — retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in compliance with anti-money laundering and regulatory record-keeping obligations.
• KYC documentation — retained for a minimum of five (5) years from the date of verification, or such longer period as may be required by applicable regulations.
• Financial transaction data — retained for a minimum of five (5) years from the date of each transaction.
• Communications data — retained for a period of three (3) years from the date of the relevant communication, unless a longer period is required for ongoing dispute resolution.
• Technical and device data — retained for a period of up to twelve (12) months, after which it is deleted or anonymised.

Upon expiry of the applicable retention period, personal data is either securely deleted or rendered permanently anonymous such that it can no longer be attributed to any individual.

The Aladdin666 Platform uses cookies and similar tracking technologies to operate effectively and to improve your experience. The categories of cookies used on the Platform are described below:

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that blocking essential cookies will impair your ability to use the Platform. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

Subject to applicable data protection law and certain exceptions, you have the following rights in relation to your personal data held by Aladdin666. To exercise any of these rights, please contact us as described in Section 15. We will respond to all valid requests within 30 calendar days of receipt.

The Aladdin666 Platform is strictly intended for use by adults aged 21 years and above. We do not knowingly collect or process personal data from any person below this age threshold. Account registration requires confirmation of eligibility, and all accounts are subject to KYC age verification.

If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the relevant account. If you believe a person under 21 may have accessed our services, please contact us immediately via the support channels listed in Section 15.

Aladdin666 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encrypted storage of sensitive account data at rest using industry-standard cryptographic protocols;
• Two-factor authentication (2FA) available for all Player accounts;
• Role-based access controls limiting personnel access to personal data on a strict need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing of Platform infrastructure;
• Incident response procedures for the timely detection, escalation, and remediation of any data security breach;
• Staff training on data protection obligations and security best practices.

Notwithstanding the foregoing, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your own account credentials and for notifying Aladdin666 promptly if you suspect any unauthorised access.

Aladdin666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or Platform functionality. Where we make material changes to this Policy, we will notify registered Players by email and/or via a prominent notice on the Platform prior to the changes taking effect.

The "Last updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the Platform following publication of any amended Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically. The current version is always available at https://aladdin666.cam/privacy-policy.

If you wish to exercise any of your data rights, have a question about this Privacy Policy, or wish to make a complaint about how your personal data has been handled, please contact our Privacy & Data team using the information below. All data rights requests and privacy complaints will be acknowledged within 5 business days and resolved within 30 calendar days where possible.