Last Updated: 1 January 2026

Privacy Policy Aladdin28 – Your Personal Data Protection

At Aladdin28, your privacy is not merely a legal obligation — it is our commitment to every Malaysian player who trusts our platform. This document transparently explains how we collect, use, and protect your personal information.

PDPA 2010 Data Protection

Aladdin28 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) in every aspect of your data management.

Data Encryption SSL 256-bit
Compliance PDPA 2010
Document Version v3.1 / 2026

Data Protection Principles Aladdin28

Full SSL 256-bit Encryption

All data transmitted between your device and aladdin28's servers is protected with SSL 256-bit encryption — the same security standard used by Malaysia's leading banking institutions. Your information cannot be intercepted by any third party.

No Sale of Data to Third Parties

Your personal information is never sold, rented, or shared with advertisers or third parties for marketing purposes without your explicit consent. Your data is used solely for the purposes stated in this Privacy Policy.

Full Control in Your Hands

You have the right to access, amend, or request deletion of your personal data at any time. The Aladdin28 account dashboard allows you to review and update your personal information easily without needing to contact support.

Malaysia PDPA Compliance

Aladdin28 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). Every data collection and processing activity has a clear and transparent legal basis to ensure your complete protection as a user.

Secure & Isolated Servers

Your data is stored in data centres equipped with multi-layered physical and digital security controls. Access to the user database is restricted to designated personnel only, with all access recorded and periodically audited.

Defined Data Retention Period

Aladdin28 retains your data only for as long as necessary for the stated purposes or as required by law. Transaction data is retained for 7 years in accordance with financial regulatory requirements, while marketing data may be deleted upon your request.

1 Introduction

Aladdin28 values the privacy of every individual who uses our platform. This Privacy Policy clearly explains how we collect, use, disclose, and protect your personal information when you register, log in, or use any of the services offered on the aladdin28 website and mobile app.

This document is prepared in accordance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia and applies to all registered players from Malaysia. By using our platform, you consent to the collection and processing of your personal data as described in this document.

Important: This Privacy Policy should be read together with Terms and Conditions and Responsible Gaming Policy us for a full overview of your rights and responsibilities as an aladdin28 member.

2 Data We Collect

Aladdin28 collects various categories of personal data depending on your interactions with our platform. Below is a summary of the types of data we collect:

Data Category Example Information Requirements
Identity Data Full name, date of birth, identity card / passport number Mandatory (KYC)
Contact Data Email address, mobile number, residential address Mandatory
Financial Data Bank account number, e-wallet details, transaction records Mandatory
Technical Data IP address, device type, web browser, operating system Automatic
Gaming Data Betting records, account balances, game history, preferences Automatic
Communication Data Support chat logs, emails to us, feedback Where applicable

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive data categories such as your health information, religious beliefs, or political views.

3 How We Collect Data

Aladdin28 collects your personal data through several channels:

  • Account Registration: Information you provide when completing the registration form, including your name, email, phone number, and password.
  • KYC Verification: Identity verification documents such as photos of your ID card, passport, and selfie uploaded for the account verification process.
  • Financial Transactions: Details associated with every deposit and withdrawal you make via FPX, Touch 'n Go, GrabPay, or DuitNow.
  • Platform Usage: Data collected automatically while you use our website or app, including pages visited and time spent.
  • Support Communications: Information you share when contacting our customer support team via live chat or email.
  • Cookies and Tracking Technology: Technical data collected through cookies, pixels, and similar technologies as described in Section 9.

4 Purpose of Data Processing

Every piece of data we collect has a clear and legitimate purpose. Aladdin28 process your personal data for the following purposes:

  • Account Management: Create, verify, and maintain your account as an aladdin28 member.
  • Transaction Processing: Process deposits, withdrawals, and all financial transactions securely and accurately.
  • Legal Compliance: Meet KYC, AML (Anti-Money Laundering), and reporting obligations to the relevant authorities.
  • Platform Security: Identify, investigate, and prevent fraudulent activity, hacking, and platform abuse.
  • Service Communications: Send transaction notifications, account updates, security alerts, and important service information.
  • Platform Improvement: Analyse usage patterns to improve functionality, performance, and the overall user experience.
  • Marketing (With Consent): Send promotional information, exclusive offers, and relevant bonuses — only if you have consented to receive such communications.
  • Customer Support: Assist in resolving inquiries, complaints, and technical issues you encounter.

Legal Basis: The processing of your data is based on (a) the performance of a contract between you and aladdin28, (b) compliance with legal obligations, (c) the legitimate interests of the platform, and (d) your consent where applicable.

5 Data Sharing with Third Parties

Aladdin28 does not sell your personal data. However, we may share data with selected third parties in certain circumstances:

  • Payment Service Providers: Transaction details required by FPX, Touch 'n Go eWallet, GrabPay, and DuitNow to securely process your payments.
  • Technical Service Providers: Companies that assist us with server hosting, platform analytics, cybersecurity, and email delivery — all bound by strict confidentiality agreements.
  • Game Providers: Minimum information required by third-party game software providers to operate games within our platform.
  • Authority: Information required by government agencies, law enforcement bodies, or courts when mandated by Malaysian law.

Warning: Aladdin28 will never ask you to provide bank account details or passwords via email or chat. Please be cautious of any communications claiming to be from us that request such sensitive information.

6 Data Security

We continuously invest in our security infrastructure to ensure your personal data remains protected at all times. The security measures we implement include:

  • SSL 256-bit encryption for all communications between the platform and your device.
  • Two-factor authentication (2FA) available for all member accounts.
  • 24/7 security monitoring to detect and respond to threats in real time.
  • Regular penetration testing by independent security experts.
  • Role-based access control — only authorised staff can access user data.
  • Regular data backups and a disaster recovery plan to ensure continuity of service.

While we take all reasonable precautions, no digital system can guarantee absolute security. In the event of a data breach that affects your rights, we will notify you within 72 hours via your registered email address, in accordance with PDPA requirements.

7 Data Retention Period

Aladdin28 retains your personal data only for as long as it is needed for the stated purposes or to fulfil legal obligations. The following are our data retention guidelines:

  • Active Account Data: Retained for as long as your account is active and for a period of 2 years after account closure to facilitate post-account support.
  • Financial Transaction Records: Retained for 7 years in accordance with Malaysia's financial and tax regulatory requirements.
  • Security Logs: Retained for 1 year for investigation and fraud detection purposes.
  • Marketing Data: Retained for as long as you do not withdraw your consent; may be deleted upon request at any time.
  • KYC Documents: Retained for the period mandated by AML requirements — typically 5 to 7 years.

When data is no longer needed, we securely delete it using methods that ensure it cannot be recovered.

8 Your Rights Under the PDPA

As a data subject under Malaysia's PDPA 2010, you have the following rights regarding your personal data:

Right of Access

Request a copy of all personal data we hold about you in a readable format.

Right to Rectification

Request correction of inaccurate or outdated personal data in our records.

Right to Erasure

Request deletion of data that is no longer required, subject to applicable legal obligations.

Right to Object

Object to the processing of your data for direct marketing purposes at any time without any conditions.

Right to Restrict Processing

Request that the processing of your data be restricted in certain situations during an investigation or dispute.

Right to Data Portability

Receive your data in a structured format that can be transferred to another service provider.

To exercise any of the above rights, you may contact our support team via the in-platform live chat. We will respond to your request within 30 calendar days from the date the request is received.

9 Cookies & Tracking Technology

Aladdin28 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

  • Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled.
  • Performance Cookies: Collect information about how you use our website to help us improve performance and design.
  • Functional Cookies: Remember your preferences such as language and display settings to deliver a more personalised experience.
  • Analytics Cookies: Help us understand website traffic and usage patterns in aggregate, anonymised form for continuous improvement.

You can manage your cookie settings through your web browser settings. However, disabling certain cookies may affect the functionality of some parts of our platform.

10 Cross-Border Data Transfers

In certain situations, your personal data may be transferred to, or processed in, countries outside Malaysia — for example, when we use cloud computing services or international technical support platforms.

Any such data transfer is only carried out when:

  • The recipient country has an equivalent or higher level of data protection than Malaysia.
  • We have established adequate contractual safeguards, such as standard data protection clauses in agreements with our partners.
  • The transfer is necessary for the performance of a contract between you and aladdin28.

11 Children's Privacy

The aladdin28 platform is strictly for individuals aged 18 years and above. We do not knowingly collect, process, or store personal data of individuals under the age of 18.

If we discover that personal data of an individual under the age of 18 has been collected without our knowledge, we will take immediate action to delete that data and close the relevant account. Parents or guardians who become aware that their child has registered on our platform are requested to contact our support team immediately.

Warning: Registration by minors is a serious violation of our Terms and Conditions. We employ multiple age verification methods, including KYC checks, to ensure compliance with age restrictions.

12 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact aladdin28's Data Protection Officer (DPO) via:

  • Email: [email protected]
  • Live Chat: Available 24 hours a day, 7 days a week via the chat button at the bottom corner of the platform.
  • In Account: Through the "Support" section in your account dashboard.

We are committed to responding to all privacy-related inquiries within 3 working days. For formal data rights requests under the PDPA, the response period is 30 calendar days.

Policy Amendments: Aladdin28 reserves the right to amend this Privacy Policy from time to time. Any material changes will be communicated via registered email or a prominent notice within the platform at least 14 days before the changes take effect.

Play with Safe & Trusted at aladdin28

Your data is fully protected. Enjoy the best gaming experience with the assurance of 256-bit SSL security, PDPA compliance, and 24/7 customer support at Aladdin28 Malaysia.

Bahasa Melayu