Privacy Policy garuda138 – Your Personal Data Protection

This Privacy Policy is published by garuda138 and applies to all users who register or use our platform via the website garuda138.pw or our Android and iOS mobile apps.

This document clearly outlines the types of personal data we collect from you, the purposes for collection, the parties who may have access to your data under certain circumstances, and your rights as the data owner.

Garuda138 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010). We take seriously the trust placed in us by every member when they provide their personal information, and we are committed to always acting with honesty and responsibility in managing that data.

Garuda138 collects information from several sources depending on how you interact with our platform. Below is a comprehensive overview of the data we may collect:

We do not collect data falling under sensitive categories such as medical information, religious beliefs, political views, or criminal records unless there is a legal requirement for us to do so.

Collected data is used solely for legitimate and transparent purposes. The following are the primary purposes for which your personal data is used on the garuda138 platform:

• Account management: Create, maintain, and secure your account.
• Transaction processing: Process deposits, withdrawals, and bonus payments accurately and efficiently.
• Identity verification (KYC): Meets legal compliance requirements related to player identity verification.
• Platform security: Detect and prevent fraud, money laundering, and unauthorised access.
• Service communications: Send important notifications regarding your account, transactions, and policy updates.
• Platform improvements: Analyse usage patterns to enhance the player experience.
• Legal compliance: Fulfil obligations under PDPA 2010 and other applicable laws.

We will not use your data for any other purpose without obtaining your consent first, unless there is a legal requirement that compels us to do so.

Garuda138 does not sell, rent, or share your personal data with third parties for their own marketing purposes. This is our absolute commitment.

There are limited situations where we may need to share data with other parties:

• Payment service providers: To process your deposits and withdrawals through secure channels such as FPX, e-wallets, and banks.
• Legal authority: Where required by law, court order, or investigation by a competent authority in Malaysia.
• Technical service providers: Technology partners who assist in operating our platform, all bound by strict confidentiality agreements.

Garuda138 continuously invests in security infrastructure to ensure your personal data remains protected at all times. Key security measures we implement include:

• 256-bit SSL Encryption: All communications between your device and our servers are encrypted using the latest TLS 1.3 protocol.
• Integrated secure servers: Data is stored in certified data centers with strict physical and digital access controls.
• Intrusion detection: A 24/7 monitoring system that detects and responds to any security threats in real time.
• Role-based access: Only staff who require access to specific data to perform their duties are permitted to do so.
• Regular backups: Data is automatically backed up to ensure recovery in the event of an unexpected incident.

While we take all reasonable precautions, no system is completely impenetrable. In the event of a material data breach, we will notify affected users and the relevant authorities within the timeframe required by law.

The garuda138 platform uses cookies and similar tracking technologies to enhance user experience and ensure essential features run smoothly.

Types of cookies we use:

• Session cookies: Required to maintain your login session and keep your session secure while you play.
• Preference cookies: Save your language settings and interface preferences so they do not need to be reconfigured each time.
• Analytics cookies: Helps us understand how players interact with the platform for continuous improvement.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of some parts of the garuda138 platform.

As a registered garuda138 player in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act 2010:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request that we correct any inaccurate or incomplete information.
• Right to Erasure: Under certain circumstances, you may request that we delete your personal data, subject to record-keeping obligations required by law.
• Right to object: You have the right to object to the processing of your data for direct marketing purposes.
• Right to data portability: You may request your data in a machine-readable format.

To exercise any of the above rights, please contact the garuda138 support team via live chat. We will process your request within 21 business days.

Garuda138 retains your personal data only for as long as necessary to fulfill the purposes stated in this policy or to comply with applicable legal requirements.

• Active account data: Retained for the duration your account is active and for 7 years after account closure for financial legal compliance purposes.
• Transaction records: Retained for 7 years in accordance with Malaysia's accounting and financial compliance legal requirements.
• Support communication records: Retained for 3 years for reference and service improvement purposes.
• Technical logs: Retained for 12 months before being automatically deleted.

Once the retention period expires, data will be securely deleted or anonymized in accordance with established procedures.

The garuda138 platform may contain links to third-party websites or services in certain contexts. This privacy policy does not apply to those websites or services.

We encourage you to read the privacy policy of any third-party websites you visit. garuda138 is not responsible for the privacy practices or content of external websites.

The garuda138 platform is exclusively for individuals aged 18 years and above. We do not intentionally collect personal information from individuals under the age of 18.

If we determine that a person under the age of 18 has provided us with personal information, we will take reasonable steps to delete that information and close the account immediately.

Parents and guardians who believe their child has registered an account at garuda138 are urged to contact us immediately via live chat so that appropriate action can be taken.

Garuda138 reserves the right to amend this privacy policy from time to time to reflect changes in law, technology, or the operation of our platform. The latest version will always be displayed on this page with a clear update date.

When there are material changes to how we use your personal data, we will notify you via in-app notification or your registered email before the changes take effect.

If you have any questions, concerns, or wish to exercise any of your privacy rights, our team is ready to assist through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom right corner of the garuda138 website or app.
• Email: [email protected] – for specific privacy inquiries and data access requests.
• FAQ: Visit page FAQ us for quick answers to common questions.

We are committed to responding to all privacy-related inquiries within 5 business days and resolve formal requests within 21 business days from the date of receipt.