Privacy Policy garuda365 – Malaysian Player Data Protection Commitment

Garuda365 ("Platform", "we", "the company") recognises that privacy is a fundamental right of every individual. We take this responsibility seriously and have developed this Privacy Policy to transparently explain how we manage the personal information of every member using the garuda365 platform at https://garuda365.biz.

This policy applies to all personal information collected, processed, stored, or used by garuda365 in connection with the provision of online casino services, Sports Betting, slots, Live Casino, and all related services offered to Malaysian players. It also covers information we collect through our digital platform, email communications, live chat, and other interaction channels.

Garuda365 is the data controller for all personal information collected through our platform. This means we determine the purposes and means of processing your personal data. We are committed to processing your data lawfully, fairly, and transparently in compliance with the requirements of PDPA 2010.

Garuda365 collects several categories of personal information depending on how you interact with our platform. Below is a full list of the data types we may collect:

2.1 Identity & Registration Information

• Full name as stated on your Malaysian identity card
• National identification number (MyKad) or passport number for KYC verification
• Date of birth to verify the minimum age requirement of 18 years
• Gender (if voluntarily provided)
• Residential address in Malaysia

2.2 Contact Information

• Malaysian mobile number (required for OTP verification)
• Active email address for account communications and promotions

2.3 Financial Information

• Malaysian bank account number (for withdrawals)
• EWallet information — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow
• FPX details used for deposits via Maybank2u or CIMB Clicks
• Deposit and withdrawal transaction history in MYR

2.4 Gaming & Activity Information

• Game history for slots, Live Casino, blackjack, roulette, and Sports Betting
• Betting records, wins and losses
• Game preferences and platform usage patterns
• Session time logs for responsible gambling monitoring

2.5 Technical Information

• Your device's IP address
• Device type, operating system, and browser version
• Approximate location data (state within Malaysia) based on IP
• Activity logs and login/logout timestamps

Garuda365 collects your personal information through several different channels and methods over the course of your membership:

3.1 Directly from You

The majority of data we collect is provided directly by you through your interactions with garuda365, including during new account registration, KYC identity verification, deposit or withdrawal requests, customer support form submissions, participation in promotions or challenges, and communications via live chat or email with the garuda365 team.

3.2 Automatically via the Platform

When you browse or use the garuda365 platform, our systems automatically collect certain technical information via cookies, session tokens, server logs, and other standard tracking technologies. This data is used to ensure the platform operates correctly, detect unauthorised access attempts, and analyse how users interact with the platform for continuous improvement.

3.3 From Payment Providers

When you make a deposit or withdrawal on garuda365 using Touch 'n Go eWallet, GrabPay, DuitNow, FPX, or other methods, the relevant payment provider may share limited transaction data with us for verification and accounting purposes. garuda365 does not store sensitive details such as your credit card number or eWallet password.

Garuda365 uses your personal information only for lawful, stated purposes. Below is a full list of the purposes for which garuda365 processes your personal data:

4.1 Service Provision

• Verifying your identity during registration and when logging into your garuda365 account
• Processing deposits in Malaysian Ringgit (MYR) via your preferred payment method
• Processing withdrawal requests to your Malaysian bank account or eWallet
• Providing access to all garuda365 games and services
• Crediting bonuses, cashback, and winnings to your account

4.2 Security & Fraud Prevention

• Detecting and investigating suspicious or fraudulent account activity
• Verifying that only one account is held per individual
• Monitoring compliance with the 18-year age requirement
• Preventing money laundering and financial crime

4.3 Customer Support & Communications

• Sending important account notifications such as deposit confirmations, successful withdrawal alerts, and security reminders
• Responding to enquiries and complaints submitted to the garuda365 support team
• Sending relevant promotional information and bonuses — only where you have consented to receive them

4.4 Responsible Gaming

• Monitoring gameplay patterns to detect signs of problem gambling
• Enforcing the deposit limits, loss limits, and time limits you have set for yourself
• Managing self-exclusion requests effectively

4.5 Platform Improvements

• Analyzing usage patterns to improve the garuda365 interface and user experience
• Testing new features and optimizing platform performance for Malaysia's internet infrastructure

Garuda365 does not sell or transfer your personal data to third parties for marketing or commercial purposes. However, there are limited situations where we need to share certain information with trusted parties for operational purposes:

5.1 Payment Service Providers

When you make a deposit or withdrawal at garuda365, the required transaction information is shared with the relevant payment provider — such as the FPX network, Touch 'n Go, GrabPay, Boost, ShopeePay, or DuitNow. This sharing is strictly limited to what is necessary to complete the transaction in Malaysian Ringgit (MYR) and nothing more.

5.2 Game Software Providers

Game software providers such as Pragmatic Play, PG Soft, and Habanero may receive limited game data (not personally identifiable information) necessary to operate games and verify results correctly. All such providers are bound by strict confidentiality agreements with garuda365.

5.3 Authorities & Legal Requirements

Garuda365 may be required to disclose your personal information to Malaysian authorities or other relevant bodies when mandated by law, court order, or a legitimate criminal investigation. In such circumstances, garuda365 will comply with all applicable legal requirements.

Garuda365 continually invests in security infrastructure to ensure that every member's personal and financial information is protected to the highest standard. The security measures we have in place include:

• 256-bit SSL/TLS Encryption: All communication between your browser and garuda365 servers is encrypted using the same 256-bit SSL/TLS protocol trusted by Malaysia's leading banks.
• Stored Data Encryption: Sensitive data stored in garuda365's databases — including financial and identity information — is encrypted using industry-standard cryptographic algorithms.
• Tiered Access Controls: Access to members' personal data within garuda365's internal systems is strictly restricted on a need-to-know basis. All access is logged and audited.
• Continuous Monitoring: garuda365 systems are monitored 24 hours a day, 7 days a week to detect and respond to any security threats or unauthorized access attempts.
• Regular Security Testing: garuda365 conducts regular penetration testing and security audits to identify and address any system vulnerabilities before they can be exploited.
• Funds Segregation: Player funds are held in accounts kept entirely separate from garuda365's operational finances — ensuring the safety of your money is never dependent on the platform's financial position.

While garuda365 takes all reasonable steps to protect your data, no system can guarantee 100% absolute security. We therefore encourage you to do your part by using a strong, unique password for your garuda365 account, not sharing your login credentials with anyone, and reporting any suspicious activity to the garuda365 support team immediately.

Cookies are small text files stored on your device when you browse the garuda365 website. They help our platform run more efficiently and provide you with a better experience. garuda365 uses the following types of cookies:

7.1 Essential Cookies

These cookies are required for the core functionality of the garuda365 platform and cannot be disabled. They include session cookies that keep you logged in during an active session, security tokens that protect against CSRF attacks, and your selected language preference. Without these cookies, the garuda365 platform cannot function properly.

7.2 Analytics Cookies

These cookies help us understand how Malaysian players use the garuda365 platform — which pages are visited most, how long users spend on certain pages, and common navigation paths. This information is used to improve the platform's design and performance. Analytics data is aggregated and does not contain any personally identifiable information.

7.3 Functional Cookies

These cookies remember your preferences to deliver a more personalised experience — such as your game preferences, display settings, and preferred payment methods. They do not contain sensitive personal information and can be disabled without affecting garuda365's core functionality.

You can manage and delete cookies through your browser settings at any time. However, disabling essential cookies may prevent you from accessing certain parts of the garuda365 platform correctly.

In the course of providing global online casino services, garuda365 may need to process or store some of your data on servers located outside Malaysia — for example, to meet the requirements of international game software providers such as Pragmatic Play or PG Soft, which operate from other jurisdictions.

In all cases where cross-border data transfers occur, garuda365 ensures that:

• The recipient country or organisation maintains data protection standards equivalent to or higher than Malaysia's PDPA requirements.
• Appropriate data transfer agreements, including standard contractual clauses, are in place to safeguard your data.
• Only data genuinely required for service purposes is transferred — no excessive data transfers.
• All third-party providers that receive data are bound by strict data processing agreements.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and garuda365's Privacy Policy, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of all personal information we hold about you. garuda365 will provide this information within 21 days of receiving your request.
• Right to Rectification: If the personal information we hold is inaccurate or out of date, you have the right to request that garuda365 correct it. You may also update certain information directly through your garuda365 account profile settings.
• Right to Erasure: Under certain circumstances, you may request that garuda365 delete your personal data. Please note that we may be required to retain some data for periods prescribed by law (for example, financial data for 7 years).
• Right to Object to Processing: You may object to garuda365 processing your data for specific purposes, particularly for direct marketing. You can unsubscribe from promotional communications at any time.
• Right to Data Portability: You may request that garuda365 provide your personal data in a machine-readable format for transfer to another service provider if required.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time without affecting the validity of any processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the garuda365 privacy team at support@garuda365.biz with the subject line "PERSONAL DATA RIGHTS REQUEST", along with your full name and garuda365 account number. We will process your request within the timeframe required by law.

Garuda365 is an adult entertainment platform intended exclusively for individuals aged 18 and above. We do not knowingly collect or process any personal information from individuals under the age of 18.

Should we discover that we have inadvertently collected personal data from an individual under the age of 18, we will take immediate steps to delete that data from our systems and close the account in question. Any funds that may have been deposited into the account will be refunded via the original payment method following identity verification.

If you are a parent or guardian and discover that your child has registered a garuda365 account, please contact us immediately at support@garuda365.biz and we will address the matter promptly and discreetly.

The garuda365 platform may contain links to or integrations with third-party services such as payment providers (Touch 'n Go, GrabPay, DuitNow) and game software providers. This Privacy Policy applies solely to the garuda365 platform and not to those third-party websites or services.

Garuda365 is not responsible for the privacy practices or content of third-party websites. We encourage you to read the privacy policy of any third-party service you use in the context of deposits and withdrawals to understand how they handle your data.

Garuda365 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, service improvements, or updates to applicable laws and regulations in Malaysia.

When material changes are made to this Privacy Policy, we will notify you via a prominent notice on the garuda365 platform or by email to your registered address at least 14 days before the changes take effect. The "Last Updated" date at the top of this page will be updated whenever changes are made.

Continued use of the garuda365 platform after any changes take effect will be considered acceptance of the updated Privacy Policy terms. If you do not agree with the changes, you have the right to close your garuda365 account and request a withdrawal of all eligible balances.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how garuda365 handles your personal data, please do not hesitate to reach us through the following channels:

• Privacy Email: support@garuda365.biz (subject: "PRIVACY ENQUIRY")
• Live Chat: Available 24/7 via the live chat button on the garuda365 platform
• Response Time: Email within 24 hours · Live chat within 5 minutes
• Support Language: Bahasa Malaysia and English

For formal complaints relating to personal data protection that cannot be resolved through garuda365 support channels, you also have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital Malaysia, in accordance with the provisions of PDPA 2010.

Garuda365 is committed to addressing every privacy enquiry seriously and within a reasonable timeframe. Your privacy is not merely a legal obligation for us — it is a core value we uphold in every aspect of platform operations.