Privacy Policy alibaba99 — Malaysia Member Personal Data Protection

1 Introduction & Scope of the alibaba99 Privacy Policy

Welcome to alibaba99's Privacy Policy. This document outlines alibaba99's commitment and practices in protecting the personal information of members and users of our platform. alibaba99 ("we", "the platform") is the data controller responsible for all personal information collected through the alibaba99.biz website, mobile application, and all related services.

This Privacy Policy applies to all individuals who register as alibaba99 members, visit our website, or use any services provided under the alibaba99 brand — including Sports Betting on football (Malaysia Super League, EPL), baccarat, roulette, lottery, cricket, virtual sports, and E-Sports. By using the alibaba99 platform, you agree to the terms of this Privacy Policy.

2 Types of Personal Data Collected by alibaba99

Alibaba99 only collects personal data that is strictly necessary to deliver our services safely and efficiently. Below are the categories of data collected by alibaba99:

2.1 Data You Provide Directly

• Full name as shown on your MyKad or passport.
• An active Malaysian phone number for account verification.
• A valid and active email address.
• Date of birth (for age verification — 18 years and above).
• Bank account or e-wallet details (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX) for deposit and withdrawal purposes.
• A copy of your MyKad or passport (only when requested for the KYC process).
• Your communication history with the alibaba99 support team.

2.2 Data Collected Automatically

• The IP address of your device when accessing the alibaba99 platform.
• The type of web browser and operating system being used.
• Activity log data — pages visited, access times, and actions taken within the platform.
• Gaming session data — bets placed, games played, and outcomes.
• Cookie and tracking technology data as detailed in Section 9.

3 How alibaba99 Uses Your Personal Data

Alibaba99 uses the personal data collected solely for the purposes listed below. We will not use your data for any other purpose without first obtaining your fresh consent.

• Service provision: Managing your account, processing deposits and withdrawals via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks, and FPX, and enabling you to access all games and betting on alibaba99.
• Identity verification: Ensuring members are aged 18 and above and comply with the KYC (Know Your Customer) requirements set out by alibaba99.
• Security & fraud prevention: Detecting and preventing unauthorised activity, fraud, money laundering, and misuse of the alibaba99 platform.
• Service communications: Sending important notifications relating to your account, transactions, service updates, and customer support responses.
• Platform improvements: Analysing usage patterns to improve the interface, performance, and overall experience on the alibaba99 platform.
• Responsible gambling: Monitoring gambling patterns to identify members who may need support and providing appropriate self-control tools.
• Legal compliance: Complying with applicable legal and regulatory obligations, including record-keeping requirements under Malaysian law.
• Relevant marketing: Sending you relevant alibaba99 promotional information and offers — only where you have given explicit consent to receive marketing communications.

4 Legal Basis for Data Processing at alibaba99

Alibaba99 processes your personal data on valid legal bases in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). These bases include:

• Contract fulfilment: Processing necessary to fulfil our agreement with you, such as setting up your account, processing deposits, and paying out winnings.
• Legitimate interests: Processing for the purposes of fraud prevention, network security, and service improvement — where these interests do not override your fundamental rights.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements.
• Consent: For direct marketing activities and the use of non-essential cookies — for which we will obtain your explicit consent beforehand.

5 alibaba99 Personal Data Sharing

Alibaba99 does not sell members' personal data to anyone. However, in certain circumstances, we may need to share data with the following parties:

5.1 Third-Party Service Providers

Alibaba99 works with trusted service providers to manage the technical aspects of our platform, including payment processors (such as the Touch 'n Go, DuitNow, GrabPay, and FPX gateways), secure server hosting providers, and identity verification services. All such providers are bound by strict confidentiality agreements and may only use your data for purposes specified by alibaba99.

5.2 Legal Requirements

Alibaba99 may be required to disclose members' personal data to government authorities, law enforcement bodies, or courts where mandated by applicable Malaysian law. alibaba99 will notify the relevant member prior to such disclosure, unless prohibited by law from doing so.

5.3 Business Transfer

In the event of a merger, acquisition, or asset sale, members' personal data may be transferred to the successor entity. alibaba99 will notify members before any such transfer takes place and a new privacy policy applies, and you have the right to withdraw your consent if you do not agree.

6 alibaba99 Data Security Measures

Alibaba99 implements multiple layers of technical and organisational security measures to protect members' personal data against unauthorised access, loss, destruction, or accidental disclosure:

• Encryption of data in transit: All communications between your device and alibaba99's servers are secured with 256-bit TLS/SSL protocols.
• Encryption of data at rest: Sensitive data such as payment information is stored in encrypted format using the latest industry standards.
• Role-based access control: Access to members' personal data is restricted to staff who require it to perform their duties only.
• 24/7 security monitoring: alibaba99's automated monitoring system detects and responds to security threats around the clock.
• Two-factor authentication (2FA): alibaba99 encourages and supports the use of 2FA for all member accounts as an additional layer of security.
• Regular security audits: alibaba99 conducts regular security audits and penetration testing by independent third parties to identify and address vulnerabilities.

7 Personal Data Retention Period

Alibaba99 retains members' personal data only for as long as necessary to fulfil the original purpose of collection or to meet legal requirements. alibaba99's data retention policy is as follows:

• Active account data: Retained for the duration of your active membership with alibaba99.
• Data following account closure: Data is retained for 7 years following account closure to comply with Malaysia's anti-money laundering and tax legal requirements.
• Transaction log data: Records of all financial transactions (deposits and withdrawals) are retained for a minimum of 7 years in accordance with Malaysian legal requirements.
• Customer support data: Customer support communication records are retained for 3 years from the date of the last interaction.
• Non-essential cookie data: Deleted according to your chosen cookie settings, typically within 30 days to 2 years depending on the cookie type.

Once the relevant retention period has expired, alibaba99 will securely delete or anonymise your personal data in accordance with industry-standard procedures.

8 Your Rights as an alibaba99 Member

As an alibaba99 member and a data subject under Malaysia's PDPA, you have the following rights in relation to your personal data:

How to Exercise Your Rights

To exercise any of the above rights, please contact the alibaba99 privacy team by email at support@alibaba99.biz or via the in-platform 24/7 live chat. alibaba99 may require you to verify your identity before processing your request to ensure data security.

9 Cookies & Tracking Technologies at alibaba99

Alibaba99 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies used by alibaba99:

9.1 Essential Cookies (Required)

These cookies are required for the core functionality of the alibaba99 platform and cannot be disabled. They include login session cookies, security cookies, and server load-balancing cookies. Without them, the alibaba99 platform will not function properly.

9.2 Preference Cookies

These cookies save your preferences — such as interface language and display settings — so alibaba99 can deliver a more personalised experience each time you visit.

9.3 Analytics Cookies

Alibaba99 uses analytics cookies to understand how members interact with our platform — which pages are visited most, how long an average session lasts, and where technical issues occur. This data helps us continuously improve the alibaba99 platform.

9.4 Cookie Controls

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality or your experience on the alibaba99 platform.

10 Children's Data Protection

Alibaba99 is an entertainment platform for adults aged Ages 18 and above only. alibaba99 does not knowingly collect or process personal data from individuals under the age of 18.

If you believe that a child or individual under the age of 18 has registered an alibaba99 account or provided us with their personal data, please contact us immediately at support@alibaba99.biz. alibaba99 will investigate the matter and take appropriate action, including promptly deleting all relevant data.

11 Transfer of Personal Data Outside Malaysia

In operating alibaba99's global platform, there are circumstances where your personal data may be processed or stored on servers located outside Malaysia — for example, by cloud hosting providers or technical service providers using international infrastructure.

In all such cases, alibaba99 ensures that data transfers are carried out in compliance with Malaysia's PDPA requirements. alibaba99 only transfers data to countries or entities that provide a comparable level of data protection to Malaysian standards, or where adequate contractual safeguards are in place.

12 Changes to alibaba99's Privacy Policy

Alibaba99 may update this Privacy Policy from time to time to reflect changes in our practices, new technologies, updated legal requirements, or other operational reasons. alibaba99 will notify you of any material changes through:

• An email notification to your registered email address.
• An in-platform notification on alibaba99 the next time you log in.
• Updating the "Last Updated" date at the top of this document.

Your continued use of the alibaba99 platform after the effective date of any Privacy Policy changes will be considered acceptance of the updated terms. We encourage you to review this page periodically to stay informed about alibaba99's privacy practices.

13 Contact the alibaba99 Privacy Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way alibaba99 handles your personal data, please do not hesitate to contact us: