Data Protection & Privacy

Privacy Policy

aldin99 is committed to protecting your personal data. This Privacy Policy explains in clear, plain English exactly what information we collect from users on our platform, how we use it, who we may share it with, and the rights you hold over your own data.

Effective Date: 1 January 2026  |  Last Reviewed: 1 January 2026

How We Protect Your Privacy

These six principles summarise our approach to your personal data. The full details are in the policy document below.

Encrypted at Rest & in Transit

All personal data stored on our servers is encrypted at rest. Every connection to aldin99 is protected by 256-bit SSL/TLS encryption, ensuring your information cannot be intercepted in transit.

We Never Sell Your Data

Your personal information is never sold, rented, or traded to third-party marketers. We only share data with partners who need it to deliver services to you — and only under strict data processing agreements.

Your Rights, Respected

You have the right to access, correct, export, and request deletion of your personal data at any time. We respond to all data rights requests within 30 days and will not penalise you for exercising your rights.

Minimal Data Collection

We only collect the personal data that is strictly necessary for the services we provide — account management, payment processing, KYC compliance, and customer support. We do not collect data speculatively.

Clear Retention Limits

We do not hold personal data indefinitely. Retention periods are defined by regulatory requirements and the purpose for which data was collected. Once no longer required, data is securely deleted or anonymised.

Regulatory Compliance

Our data handling practices comply with applicable international data protection regulations. Our compliance team reviews privacy practices regularly to ensure we remain current with evolving legal requirements.

01

Introduction

This Privacy Policy ("Policy") is published by aldin99 ("aldin99", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://aldin99.cam (the "Platform"). It describes how aldin99 collects, processes, stores, and protects the personal data of individuals ("you", "your", "User") who access or register on the Platform.

aldin99 takes the privacy of its users seriously. We are committed to handling personal data responsibly and in compliance with applicable data protection legislation. This Policy applies to all Users of the aldin99 Platform, including players who access the Platform from Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other Malaysian states and territories — as well as international users.

By creating an account on aldin99 or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must cease using the Platform.

Related Documents: This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, all of which govern your use of the aldin99 Platform.

02

Definitions

The following terms carry the meanings set out below throughout this Privacy Policy:

  • "Personal Data" — Any information that relates to an identified or identifiable natural person, including name, email address, identification number, location data, or any combination of data that could identify an individual.
  • "Processing" — Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
  • "Data Controller" — aldin99, in its capacity as the entity that determines the purposes and means of processing personal data collected through the Platform.
  • "Data Processor" — A third party that processes personal data on behalf of aldin99 under a contractual arrangement, such as a payment service provider or cloud infrastructure partner.
  • "KYC" — Know Your Customer — the identity and address verification process required for regulatory compliance and fraud prevention.
  • "Consent" — A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
  • "Cookies" — Small text files placed on your device by the Platform to store session data, preferences, and usage analytics.
03

Data We Collect

aldin99 collects personal data through several channels. The categories of data collected, and the context in which each is gathered, are set out below.

3.1 Data You Provide Directly

Category Data Collected When Collected
Registration Data Full name, date of birth, email address, username, password (hashed), country of residence, preferred currency (MYR) At account creation
KYC Documents Malaysian MyKad / Passport / Driver's Licence (image), proof of address (utility bill / bank statement), selfie with ID Before first withdrawal or upon compliance request
Payment Data E-wallet identifiers (Touch 'n Go, Boost, GrabPay), bank account details (Maybank, CIMB, Public Bank, Hong Leong), DuitNow ID, cryptocurrency wallet address (USDT TRC20, BTC) When processing deposits or withdrawals
Support Communications Content of live chat transcripts, email correspondence, complaint submissions During customer support interactions
Account Preferences Responsible gambling settings, deposit/loss limits, self-exclusion status, notification preferences When configured via account settings

3.2 Data Collected Automatically

  • Device & Technical Data: IP address, browser type and version, operating system, screen resolution, device identifiers.
  • Usage Data: Pages visited, betting activity, session duration, clickstream data, features accessed.
  • Geolocation Data: Approximate geographic location derived from IP address — used to verify access from permitted jurisdictions and to prevent underage or restricted-territory access.
  • Cookie & Tracking Data: Session cookies, preference cookies, and analytics data as described in Section 7 of this Policy.
04

Legal Basis for Processing

aldin99 processes personal data only where a valid legal basis exists. The primary legal bases on which we rely are as follows:

  • Contractual Necessity: Processing required to perform our contractual obligations to you as a registered user — including account management, processing of bets and casino games, and payment processing for deposits and withdrawals in MYR.
  • Legal Obligation: Processing required to comply with applicable law — including KYC identity verification mandated by anti-money laundering regulations, age verification (21+ minimum), and record-keeping obligations imposed by our operating licence.
  • Legitimate Interests: Processing conducted for aldin99's legitimate business interests — including fraud detection and prevention, platform security, responsible gambling monitoring, and improvement of our services — where such interests are not overridden by your data protection rights.
  • Consent: Where we rely on your consent as the legal basis for processing — for example, in relation to certain marketing communications — you may withdraw that consent at any time by contacting our support team or adjusting your account notification preferences.
05

How We Use Your Data

aldin99 uses the personal data we collect for the following specific purposes:

5.1 Core Platform Operations

  • Creating, maintaining, and securing your aldin99 account.
  • Verifying your identity and age (21+ minimum) in compliance with our KYC obligations.
  • Processing deposits and withdrawals through your chosen payment method (Touch 'n Go eWallet, DuitNow, FPX, bank transfer, cryptocurrency, etc.).
  • Settling bets, crediting winnings, and managing your account balance in MYR.
  • Administering bonus offers, VIP rewards, and loyalty programme benefits.

5.2 Compliance & Regulatory Obligations

  • Conducting anti-money laundering (AML) and counter-terrorism financing (CTF) checks.
  • Maintaining transaction records as required by applicable law.
  • Reporting suspicious activity to relevant regulatory authorities where legally required.
  • Enforcing age restrictions and geographic access controls.

5.3 Safety, Security & Fraud Prevention

  • Detecting and investigating fraudulent activity, collusion, bonus abuse, and other prohibited conduct.
  • Monitoring for unusual betting patterns or account activity that may indicate account compromise.
  • Enforcing self-exclusion restrictions and responsible gambling limits set by users.

5.4 Customer Support

  • Responding to support queries submitted via live chat or email at [email protected].
  • Maintaining records of support interactions for quality assurance and audit purposes.
  • Processing complaints and dispute resolution requests.

5.5 Platform Improvement

  • Analysing aggregated usage data to improve Platform performance, user experience, and product features.
  • Conducting internal research and analytics — always using anonymised or pseudonymised data where possible.
06

Data Sharing & Disclosure

aldin99 does not sell, rent, or trade your personal data to third-party marketers under any circumstances. We may share your personal data with the following categories of recipients only where necessary and under appropriate data protection safeguards:

6.1 Payment Service Providers

We share transaction data with the payment service providers required to process your deposits and withdrawals — including e-wallet operators (Touch 'n Go, Boost, GrabPay), Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong Bank), DuitNow/FPX infrastructure operators, and cryptocurrency processing services. These providers process your data solely for payment purposes under their own applicable privacy policies.

6.2 Identity Verification Partners

We may engage third-party KYC verification service providers to assist in verifying the identity documents you submit. Such providers are bound by strict data processing agreements and may not use your data for any purpose other than the verification service contracted.

6.3 Regulatory and Law Enforcement Authorities

We may disclose personal data to relevant regulatory bodies, law enforcement agencies, or other competent authorities where we are legally required to do so — for example, in connection with an anti-money laundering investigation, court order, or regulatory inspection. We will notify you of such disclosures wherever permitted by law.

6.4 Service Providers and Subprocessors

We use carefully selected third-party service providers for functions including cloud hosting, fraud detection analytics, customer support tooling, and IT security. All subprocessors are bound by contractual data processing agreements that restrict their use of your personal data to the specific service being delivered.

We will never share your personal data with unrelated third parties for marketing, advertising, or commercial profiling purposes. Any request purportedly from aldin99 asking for your personal data outside the Platform should be treated as suspicious — contact [email protected] immediately.

07

Cookies & Tracking Technologies

aldin99 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. The categories of cookies we use are as follows:

7.1 Essential Cookies

These cookies are strictly necessary for the Platform to function. They maintain your logged-in session, remember your language and currency preferences, and ensure security features operate correctly. Essential cookies cannot be disabled without affecting core Platform functionality.

7.2 Analytical / Performance Cookies

We use analytical cookies to understand how users interact with the Platform — including which pages are visited most frequently, where users encounter errors, and how navigation flows are used. This data is processed in aggregate and does not identify individual users. These cookies help us improve the overall quality of the aldin99 experience.

7.3 Functional Cookies

Functional cookies remember your Platform preferences — such as your preferred deposit method, bet slip settings, and display preferences — so you do not need to reconfigure them on each visit.

7.4 Cookie Management

You may manage your cookie preferences through your browser settings. Disabling certain categories of cookies may affect your experience on the Platform. For full instructions on cookie management for major browsers (Chrome, Firefox, Safari, Edge), please refer to your browser's help documentation.

aldin99 does not use cookies to track your activity on third-party websites unrelated to our Platform, and we do not engage in cross-site tracking for advertising purposes.

08

Data Retention

aldin99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Data Category Retention Period Basis
Account Registration Data Duration of account + 5 years post-closure Legal / regulatory obligation
KYC Identity Documents 5 years from account closure or last transaction Anti-money laundering compliance
Transaction Records (MYR deposits / withdrawals) 7 years from transaction date Financial regulatory obligation
Betting / Gaming Records 5 years from the date of each wager Dispute resolution, compliance
Support Communications 3 years from last contact Legitimate interest (quality, audit)
Analytical / Usage Data (anonymised) 24 months on a rolling basis Legitimate interest (improvement)
Self-Exclusion Records Permanent (to prevent re-registration during exclusion period) Responsible gambling obligation

Upon expiry of the applicable retention period, personal data is either securely deleted or anonymised in a manner that prevents re-identification.

09

International Data Transfers

aldin99 operates as an international platform and may process or store personal data on servers located outside Malaysia. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to the country in which it was collected, aldin99 ensures that appropriate safeguards are in place to protect that data.

Such safeguards may include:

  • Entering into data processing agreements with receiving parties that incorporate standard contractual clauses approved by competent data protection authorities.
  • Transferring data only to jurisdictions that have received an adequacy determination from a relevant regulatory body.
  • Applying technical and organisational security measures equivalent to those applicable in the originating jurisdiction.

If you would like further information about the safeguards applied to international transfers of your personal data, please contact our Data Protection team at [email protected].

10

Your Rights as a Data Subject

Subject to applicable data protection law, you hold the following rights in respect of your personal data held by aldin99. You may exercise any of these rights by contacting us at [email protected] with the subject line "Data Rights Request". We aim to respond to all requests within 30 calendar days.

Right of Access

Request a copy of all personal data we hold about you, along with information about how it is processed.

Right to Rectification

Request correction of any personal data that is inaccurate, outdated, or incomplete.

Right to Erasure

Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention requirements.

Right to Restriction

Request that we restrict processing of your data — for example, while a rectification request is under review.

Right to Portability

Request a structured, machine-readable copy of personal data you provided to us, for transfer to another service provider.

Right to Object

Object to processing of your personal data where we rely on legitimate interests as the legal basis, including direct marketing.

Automated Decisions

Request human review of any decision made solely by automated means that significantly affects you.

Withdraw Consent

Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

aldin99 will never penalise you for exercising your data rights. Exercising your right to access, rectify, or delete your data will not affect your account standing, withdrawal eligibility, or VIP tier status.

11

Children & Minors

The aldin99 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. Age verification is enforced as part of our KYC process, and any account found to be registered by or on behalf of a person under 21 will be immediately closed.

If you believe that a person under the age of 21 has registered on aldin99 or that personal data of a minor has been collected inadvertently, please contact us immediately at [email protected]. We will take prompt action to investigate and, where confirmed, delete the relevant data and close the account without delay.

Underage Gambling is Illegal. aldin99 strongly condemns underage gambling and is committed to preventing it. Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms. For 21+ only.

12

Security Measures

aldin99 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

  • 256-bit SSL/TLS Encryption: All data transmitted between your device and the aldin99 Platform is encrypted using industry-standard transport layer security.
  • Encryption at Rest: Personal data and sensitive documents stored on our servers are encrypted using AES-256 encryption.
  • Two-Factor Authentication (2FA): Available on all user accounts as an additional layer of protection against unauthorised login.
  • Access Controls: Strict role-based access controls limit which staff members can access personal data and under what circumstances. All access is logged and audited.
  • Penetration Testing: Our platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities.
  • Data Breach Response: We maintain a documented incident response plan. In the event of a personal data breach that poses a risk to your rights, we will notify affected users and relevant authorities as required by applicable law, without undue delay.

While we implement robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for notifying us immediately if you suspect any unauthorised access to your account.

13

Third-Party Services

The aldin99 Platform may reference or link to the privacy practices of third-party service providers — such as payment operators (Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, DuitNow) — in the context of processing transactions. aldin99 is not responsible for the privacy practices of third-party entities.

When you use a third-party payment method to deposit or withdraw funds on aldin99, you are also subject to the privacy policy of that payment provider. We encourage you to review the relevant privacy policies of any third-party services you use in connection with your aldin99 account.

aldin99 does not embed third-party advertising networks, social media tracking pixels, or behavioural advertising tools on the Platform.

14

Amendments to This Policy

aldin99 reserves the right to update or amend this Privacy Policy at any time. When material changes are made — for example, changes to the categories of data we collect, new purposes for processing, or new categories of third parties with whom we share data — we will take reasonable steps to notify registered users in advance of the changes taking effect.

Notification methods may include a prominent notice displayed on the Platform, an in-account notification, or an email to your registered address. The "Effective Date" and "Last Reviewed" date at the top of this page will always reflect the most current version.

Your continued use of the aldin99 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated Policy. If you disagree with any changes, you should cease using the Platform and may request account closure in accordance with our Terms & Conditions.

15

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to how aldin99 processes your personal data, please contact us using the details below:

Data Protection Enquiries
[email protected]
Include "Privacy Enquiry" or "Data Rights Request" in the subject line.
Live Chat Support
Available 24/7 on the Platform — average response under 2 minutes
Response Commitment
We respond to all Data Rights Requests within 30 calendar days of receipt.

We take all privacy-related communications seriously. Whether you are seeking access to your data, requesting deletion, or raising a concern about how we have processed your information, you will receive a substantive response from our team — not an automated reply.

Privacy You Can Count On at aldin99

We built aldin99 for Malaysian players who deserve transparency, security, and respect. Your personal data is handled with the same care we give to every part of the platform.

For players aged 21 and above only. Please gamble responsibly. See our Responsible Gambling page for tools and support.