Garuda888 Privacy Policy – Our Commitment to Protecting Players' Personal Data

1Introduction and Scope of This Policy

Garuda888 ("we", "our platform") is committed to protecting the privacy and security of the personal data of every individual who uses our services. This Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and sets out the principles we follow in handling your information.

This policy applies to all users who access the platform Garuda888 through the garuda888.im website, our mobile app, or any other service channel operated by us. This includes prospective members browsing the site, registered members actively playing, and former members whose accounts have been closed.

By using any of the services of Garuda888, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please do not use our platform. For any privacy-related enquiries, you may contact us by email at support@garuda888.im at any time.

2Types of Personal Data We Collect

Garuda888 only collects personal data that is necessary to provide our members with safe, compliant, and quality services. The following are the categories of data we may collect:

A. Personal Identification Data

• Full name as stated in official identity documents.
• Identity Card number (MyKad) or passport number for identity verification.
• Date of birth to verify that players meet the minimum age requirement of 18 years.
• Current residential address in Malaysia.
• Mobile phone number for account verification and communication.
• Email address for important communications and account notifications.

B. Financial and Transaction Data

• Registered payment method details, including e-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) or Malaysian bank account information (Maybank, CIMB, and others).
• Records of all deposit and withdrawal transactions in Malaysian Ringgit (RM).
• Betting history and gaming activity.

C. Technical and Usage Data

• IP address and device location data.
• Device type, operating system, and web browser used.
• Cookies and session data to improve the user experience.
• Activity logs and platform usage records.

3How We Collect Your Personal Data

Garuda888 collects personal data through the following channels:

• Registration form: When you create a new account on the Garuda888 platform, we collect basic information required to set up and verify your account.
• KYC (Know Your Customer) process: During the identity verification process, you may be asked to upload documents such as a copy of your MyKad or a recent bank statement.
• Transaction activity: Every time you make a deposit via Touch 'n Go, DuitNow, GrabPay, FPX, or any other Malaysian payment method, or submit a withdrawal request, transaction data is recorded automatically.
• Platform usage: Cookies, server logs, and other tracking technologies record how you interact with the Garuda888 platform for service improvement purposes.
• Customer support communications: When you contact our support team via live chat, email, or Telegram, those conversations may be recorded for training and quality improvement purposes.
• Third-party verification: In certain cases, we may receive information from authorised third-party identity verification service providers.

4Purpose of Data Collection and Use

Garuda888 using collected personal data solely for legitimate and responsible purposes, including:

• Service provision: Setting up and managing member accounts, processing deposits and withdrawals in MYR, and ensuring seamless access to all games and platform features.
• Identity verification (KYC/AML): To comply with anti-money laundering legal requirements and ensure all members meet the minimum age of 18.
• Security and fraud prevention: Detecting and investigating suspicious activity to protect the integrity of the platform and the accounts of all Garuda888 members.
• Service communications: Sending important notifications related to your account, transactions, security updates, and policy changes.
• Customer support: Resolving member enquiries, complaints, and reported technical issues more efficiently.
• Platform improvements: Analysing usage patterns to improve the gameplay experience and features on the Garuda888 platform.
• Legal compliance: Meeting reporting and compliance obligations to the relevant authorities.

5Sharing of Data with Third Parties

Garuda888 does not sell, rent, or disclose members' personal data to third parties for commercial gain. However, under the limited circumstances outlined below, we may need to share data with certain parties:

• Payment service providers: Required transaction data is shared with Malaysian payment processors such as FPX, Touch 'n Go, DuitNow, and other service providers solely for the purpose of processing your financial transactions.
• Technology provider: Companies providing technical infrastructure, cloud services, or security systems for the Garuda888 platform may have limited access to data necessary to perform their services.
• Legal authority: When required by law, court order, or direction from a legitimate enforcement authority, Garuda888 will disclose the necessary data.
• Identity verification service providers: For KYC and AML purposes, verification information may be shared with accredited and recognised service providers.

All third parties we work with are required to comply with strict security and privacy standards, and are only permitted to use shared data for the specified purposes. They are not allowed to use such data for any other purpose or disclose it to any other party.

6Data Security Measures

Garuda888 invests seriously in security technologies and procedures to protect our members' personal data from unauthorised access, disclosure, alteration, or destruction. The key security measures we implement are:

• 256-bit SSL Encryption: All data transmitted between your device and Garuda888's servers is encrypted using the latest TLS/SSL protocols — the same standard used by Malaysian banking institutions.
• Two-Factor Authentication (2FA): Members are encouraged (and in certain circumstances required) to enable 2FA to protect access to their accounts.
• Strict access controls: Only authorised staff with a legitimate business need may access members' personal data. All such access is logged and continuously monitored.
• 24/7 threat monitoring: An intrusion detection system and suspicious activity monitoring operate around the clock to identify and respond to security threats.
• Regular security audits: The Garuda888 platform undergoes regular penetration testing and security audits by independent experts to identify and address any vulnerabilities.
• Secure data storage: Personal data is stored on servers protected by encryption, housed in certified data centres with strict physical access controls.

7Cookie Policy

Garuda888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect platform functionality. Garuda888.

8Data Retention Period

Garuda888 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable Malaysian law.

Once the specified retention period has elapsed, your personal data will be securely deleted or anonymised in accordance with the data disposal procedures established by Garuda888.

9Your Rights as a Data Subject

Under the Malaysian Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Garuda888:

10Cross-Border Data Transfers

In the course of its operations, Garuda888 may need to transfer or store your personal data on servers located outside Malaysia. When such transfers occur, we ensure that the destination country or region provides a level of data protection equivalent to or greater than that required under Malaysia's PDPA.

Every international data transfer carried out by Garuda888 protected by legally binding data transfer agreements, ensuring your data remains safeguarded to the same standards as in Malaysia. We do not transfer your personal data to countries that lack an adequate data protection framework without appropriate additional safeguards.

11Child Protection

Garuda888 does not provide services to individuals under the age of 18, and we do not knowingly collect personal data from minors. Our platform has strict age verification mechanisms in place to prevent underage individuals from registering or accessing our services.

If we discover that personal data of a minor has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. If you believe your child has provided personal data to Garuda888 without your knowledge, please contact us immediately at support@garuda888.im.

12Amendments to This Privacy Policy

Garuda888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform operations. Members will be notified of any material changes via:

• In-platform notifications displayed upon login to Garuda888.
• An email to your registered address at least 14 days before the changes take effect.
• A clear notice at the top of this Privacy Policy page indicating the date of the most recent update.

Continued use of the platform Garuda888 after the effective date of any amendment will be considered acceptance of the updated policy. All previous versions of this Privacy Policy are archived and available upon request via our customer support email.

13Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding how Garuda888 handles your personal data, or if you wish to exercise any of your data protection rights, please contact our Data Privacy Officer (DPO) through the following channels:

This Privacy Policy takes effect on 1 July 2026. This Bahasa Malaysia version is the official document for players in Malaysia and fully complies with the requirements of the Personal Data Protection Act 2010 (PDPA).