Privacy Policy

Alibaba99 ("we", "our", "the Platform", or "the Company") operates the online gaming platform accessible at https://alibaba99.cam. As part of our services, we collect and process personal data belonging to our registered users and platform visitors. This Privacy Policy sets out our practices in relation to that personal data and is intended to provide full transparency about how Alibaba99 handles information that can be used to identify you.

This Policy applies to all users of the Alibaba99 platform regardless of the device or method of access, and covers all data collected through our website, mobile-optimised interface, live chat support system, customer support email, and any other Alibaba99-operated communication channel.

By creating an account on Alibaba99 or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should refrain from using the Platform and contact our support team to request account closure.

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to a name, identification number, email address, phone number, IP address, or financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, disclosure, erasure, or destruction.
• "Data Controller" means Alibaba99, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of Alibaba99 pursuant to a written data processing agreement.
• "User" means any individual who has registered an account on the Platform or who accesses the Platform without registration.
• "KYC Data" means identity verification documentation and associated personal data submitted by Users in connection with the Know Your Customer verification process.
• "Cookies" means small data files stored on a User's device by the Platform for purposes including session management, analytics, and personalisation.
• "Consent" means a freely given, specific, informed, and unambiguous indication of a User's agreement to the processing of their Personal Data for one or more specific purposes.

Alibaba99 collects Personal Data across several categories depending on the nature of your interaction with the Platform. The categories of data we collect include the following:

When you create an account on Alibaba99, we collect your full legal name, email address, date of birth, country of residence, and the username and password you choose. This information is necessary to establish and manage your account and to verify your identity and eligibility to use the Platform.

Before processing withdrawals, we are required to collect and verify identity documents as part of our KYC procedures. This includes copies of government-issued photo identification (such as a Malaysian MyKad or passport), proof of residential address (such as a utility bill or bank statement issued within the past three months), and in some cases, documentation verifying your source of funds. For Malaysian users, we may also collect your phone number registered with Maybank, CIMB, or other FPX-linked institutions for transaction verification purposes.

When you make a deposit or request a withdrawal, we collect transactional data including your payment method type (e.g., Touch 'n Go eWallet, DuitNow, FPX, GrabPay, Boost, Maybank, CIMB, Public Bank, or USDT TRC20), transaction reference numbers, transaction amounts in MYR, timestamps, and where applicable, masked account or wallet identifiers. We do not store full payment credentials such as card numbers or banking passwords on our servers.

We automatically collect technical data when you access the Platform, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, session duration, and game interaction logs. This data is used to ensure Platform stability, detect fraud, and improve user experience.

If you contact our support team via live chat, email, or any other channel, we retain records of those communications including the content of messages, timestamps, and any documentation you share with us. This allows us to resolve disputes, improve service quality, and maintain compliance records.

We record your gambling activity on the Platform, including game history, betting patterns, win and loss records, bonus usage, session frequency and duration, and responsible gambling tool settings. This data is processed to fulfil our responsible gambling obligations, detect problem gambling behaviour, administer loyalty and VIP programmes, and personalise your experience on the Platform.

Alibaba99 processes your Personal Data for the following specific purposes:

• Account Management: To create, maintain, verify, and administer your registered account on the Platform.
• Service Delivery: To provide access to casino games, live dealer tables, sports betting markets, and all other features of the Platform.
• Transaction Processing: To process MYR deposits and withdrawals via supported Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks.
• Identity and Age Verification: To verify that you meet the minimum age requirement of 21 years and that the identity information you provide is accurate and current.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account abuse, money laundering, and other prohibited activities on the Platform.
• Regulatory Compliance: To meet applicable anti-money laundering, Know Your Customer, and licensing obligations imposed by the jurisdiction in which Alibaba99 holds its gaming licence.
• Responsible Gambling: To monitor gambling patterns, identify potential problem gambling behaviour, administer self-exclusion requests, and enforce deposit and loss limits set by users.
• Customer Support: To respond to enquiries, resolve disputes, and provide technical assistance.
• Marketing and Personalisation: Subject to your communication preferences, to send promotional offers, bonus notifications, and personalised content relevant to your gaming activity. You may opt out of marketing communications at any time.
• Platform Analytics and Improvement: To analyse usage patterns, test new features, and continuously improve the performance, reliability, and user experience of the Platform.

Alibaba99 relies on the following legal bases for the processing of your Personal Data:

• Contractual Necessity: The processing of your registration data, KYC data, and financial transaction data is necessary for the performance of the contract between you and Alibaba99, as set out in our Terms and Conditions.
• Legal Obligation: Certain processing activities, including KYC verification, transaction monitoring, and record-keeping, are required by applicable anti-money laundering and gaming licence regulations.
• Legitimate Interests: We process technical and usage data, fraud detection signals, and gambling activity data on the basis of our legitimate interest in maintaining platform security, preventing financial crime, and operating a safe gaming environment.
• Consent: Where we send you optional marketing communications or use non-essential cookies, we do so on the basis of your consent. You may withdraw this consent at any time without affecting the lawfulness of processing conducted before withdrawal.

Alibaba99 does not sell your Personal Data to third parties. We share your data only in the following limited circumstances:

• Payment Processors: We share transactional data with payment service providers that facilitate deposits and withdrawals on the Platform, including providers of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX integrations. These providers act as Data Processors under contractual data processing agreements.
• Game Software Providers: Game providers whose titles are available on the Platform may receive anonymised gameplay data for the purpose of RNG certification, RTP reporting, and technical maintenance. No personally identifiable information is shared for this purpose without your explicit consent.
• Identity Verification Services: Third-party KYC and identity verification providers may process your identity documents on our behalf to validate the authenticity of documents submitted during the verification process.
• Regulatory and Law Enforcement Authorities: We may disclose Personal Data to regulatory bodies, licensing authorities, law enforcement agencies, or courts where required by applicable law, court order, or regulatory direction.
• Fraud Prevention Networks: We may share fraud signals and risk indicators with industry fraud prevention services to protect the Platform and its users from financial crime.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or substantially all of Alibaba99's assets, Personal Data may be transferred to the acquiring entity subject to equivalent data protection commitments.

Alibaba99 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of the account relationship and for a period of five (5) years following account closure, in accordance with standard financial record-keeping and anti-money laundering obligations.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of submission, or longer if required by the regulatory requirements of our licensing jurisdiction.
• Transaction Records: All MYR deposit and withdrawal records, including payment method details and transaction references, are retained for a minimum of five (5) years.
• Support Communications: Customer support records are retained for a period of three (3) years from the date of the interaction.
• Technical and Usage Logs: Anonymised analytics data may be retained indefinitely. Personally identifiable technical logs are retained for a period not exceeding twelve (12) months.
• Marketing Preferences: Opt-in records and communication preference settings are retained for as long as the account remains active or until consent is withdrawn.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in accordance with our data destruction procedures.

Alibaba99 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Alibaba99 platform is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Encrypted Data Storage: Sensitive Personal Data, including identity document scans and financial records, is stored in encrypted form using AES-256 encryption at rest.
• Two-Factor Authentication: Two-factor authentication (2FA) is available for all registered accounts and is strongly recommended. Privileged administrative access to our systems requires mandatory 2FA.
• Access Control: Access to Personal Data is restricted on a strict need-to-know basis. All internal access to user data is logged, monitored, and subject to periodic access rights reviews.
• Vulnerability Management: Our Platform undergoes regular penetration testing and security audits conducted by independent third-party security specialists.
• Incident Response: We maintain a documented data breach incident response procedure. In the event of a data breach affecting your Personal Data, we will notify affected users in accordance with applicable notification obligations.

While Alibaba99 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your Alibaba99 account and to enable two-factor authentication to maximise the security of your account.

Alibaba99 uses cookies and similar tracking technologies on its platform to deliver core functionality, analyse usage, and where you have provided consent, to personalise your experience. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the operation of the Platform. They enable core functions such as user authentication, session management, security enforcement, and access to account features. These cookies cannot be disabled without affecting Platform functionality.
• Analytics Cookies: We use analytics cookies to collect aggregated, anonymised information about how users interact with the Platform — including pages visited, session duration, game category preferences, and error events. This data helps us improve Platform performance and user experience.
• Functional Cookies: These cookies allow the Platform to remember user preferences such as language settings, display preferences, and last-accessed game categories to provide a more personalised experience.
• Marketing Cookies: Subject to your prior consent, we may use marketing cookies to identify your Platform activity for the purpose of delivering relevant promotional communications. You may withdraw consent for marketing cookies at any time through your account settings or browser controls.

You can control cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect your ability to use some features of the Platform. Most modern browsers provide detailed instructions for managing cookie settings in their help documentation.

As an internationally licensed online gaming platform, Alibaba99 may transfer your Personal Data to servers, processors, or service providers located outside of Malaysia. When we transfer Personal Data internationally, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection frameworks.

Such safeguards may include contractual clauses, data processing agreements that impose equivalent data protection obligations on the recipient, or transfers to jurisdictions that provide an adequate level of data protection as assessed by international standards.

For Malaysian users, your data may be processed in the jurisdiction where Alibaba99 holds its international gaming licence, and in countries where our third-party payment processors and game software providers are based. In all such cases, contractual data protection obligations apply.

The Alibaba99 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. Our registration process requires users to declare their date of birth, and KYC verification enforces the minimum age requirement through documentary proof.

If Alibaba99 becomes aware that Personal Data has been collected from an individual under the age of 21, we will immediately suspend the relevant account, delete all associated data as required by applicable law, and return any deposited funds to the originating payment method, subject to verification.

Subject to applicable law and the specific circumstances of your request, you hold the following rights in relation to the Personal Data we hold about you:

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, along with information about how it is being processed.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: In certain circumstances, you may request that we delete your Personal Data. This right is subject to our legal obligations to retain certain records for regulatory compliance, fraud prevention, and dispute resolution purposes.
• Right to Restriction of Processing: You may request that we temporarily restrict the processing of your Personal Data while a dispute or complaint is being investigated.
• Right to Data Portability: You have the right to receive the Personal Data you have provided to us in a structured, commonly used, and machine-readable format, and to request that it be transferred to another service provider where technically feasible.
• Right to Object: You may object to the processing of your Personal Data where we rely on our legitimate interests as the legal basis for processing, including the use of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

To exercise any of the above rights, please contact our Data Protection team via the support email address listed in Section 15 of this Policy. We will respond to all valid requests within thirty (30) days of receipt. We may require you to verify your identity before processing your request.

The Alibaba99 platform does not include outbound links to external third-party websites. However, our payment processing integrations direct users to external payment provider interfaces — such as Touch 'n Go eWallet, Boost, GrabPay, and FPX banking portals — in order to complete deposit and withdrawal transactions.

When you are redirected to a third-party payment interface, that provider's own privacy policy governs the collection and processing of any data you provide on their platform. Alibaba99 is not responsible for the privacy practices or content of third-party payment providers or any other external services you access independently.

We encourage you to review the privacy policies of any third-party service you use in connection with your Alibaba99 account, including your chosen e-wallet provider (Touch 'n Go, Boost, or GrabPay) and your bank's online banking platform.

Alibaba99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, our service offerings, or the recommendations of data protection authorities. Material changes to this Policy will be communicated to registered users via email notification and/or a prominent on-Platform notice prior to the changes taking effect.

The effective date of the current version of this Privacy Policy is displayed at the top of this page. We recommend reviewing this Policy periodically to remain informed about how your data is being handled. Your continued use of the Platform following any update constitutes your acknowledgement of the revised Policy.

Previous versions of this Policy are archived and available upon written request to our Data Protection contact.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way Alibaba99 handles your Personal Data, please contact us through the following channel:

• Data Protection Contact: [email protected] — with subject line "Data Privacy Request"
• Live Support: 24/7 live chat available through the Platform interface
• Languages: English, Bahasa Melayu, and Mandarin Chinese
• Response Time: Written data rights requests responded to within 30 days of verified receipt

We serve players across Malaysia including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other states and territories. All data protection enquiries are handled by our dedicated compliance team and are treated with strict confidentiality.