Privacy Policy Garuda138

01Introduction and Scope of This Policy

Garuda138 ("we", "Platform") respects the privacy of every individual who uses our services. This Privacy Policy explains in detail how we collect, process, store and protect your personal data when you use the garuda138.fun website, the garuda138 mobile app, or any related services.

This policy applies to all garuda138 users, including unregistered visitors, registered members, and anyone who interacts with our platform through any official communication channel. By using the garuda138 platform, you agree to the data collection and usage practices described in this document.

Garuda138 acts as the data controller for all personal information collected through our platform. This means we determine the purpose and manner in which your data is processed, and we are fully responsible for ensuring that processing is carried out lawfully and securely.

02Types of Personal Data We Collect

Garuda138 collects your personal data through several means — directly when you register and use the platform, automatically as you browse our website, and occasionally from trusted third-party sources for identity verification purposes.

We never collect sensitive personal data such as medical information, political views, or biometric data except where specifically required by applicable law.

03How We Use Your Data

Every piece of data garuda138 collects has a clear and lawful purpose. We do not process data for any purpose other than those stated below:

• Account Management: Creating, verifying and managing your user account on the garuda138 platform.
• Transaction Processing: Processing all deposits, withdrawals and financial transactions securely and accurately.
• Identity Verification (KYC): Meeting legal requirements related to identity verification and anti-money laundering.
• Customer Support: Providing relevant and effective technical support and customer service.
• Platform Security: Detecting and preventing fraud, account abuse and other unlawful activity.
• Personalise Your Experience: Personalising content, promotions and game recommendations based on your preferences and playing habits.
• Marketing Communications: Sending information about promotions, special offers and platform updates — subject to your communication preferences.
• Legal Compliance: Fulfilling legal obligations, regulations and directives from relevant authorities.
• Analytics & Improvement: Understanding how users interact with the platform for the purpose of continuous service improvement.

04Legal Basis for Data Processing

Garuda138 processes your personal data based on one or more valid legal grounds as provided under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Consent: You provide explicit consent during account registration by agreeing to this Privacy Policy.
• Contract Execution: Processing is required to execute the agreement between you and garuda138, including processing deposits and withdrawals.
• Legal Obligations: Garuda138 is required by law to process certain data, such as financial records for audit and compliance purposes.
• Legitimate Interest: Garuda138 has a legitimate interest in processing data for platform security, fraud prevention and service improvement purposes.

05Cookies and Tracking Technology

Garuda138 uses cookies and similar tracking technologies to enhance the user experience, maintain login session security, and collect analytics data on how our platform is used.

The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session verification, and security. These cookies cannot be disabled as they are necessary for the platform to operate.
• Performance Cookies: Collecting information about how you use the platform, such as the most frequently visited pages. This data is used for platform improvement and is collected anonymously.
• Functional Cookies: Saving your preferences such as language, display settings and game preferences to deliver a more personalised experience.
• Marketing Cookies: Used to display relevant promotions to you based on your interests and usage history on the garuda138 platform.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of some sections of the garuda138 platform.

06Data Sharing with Third Parties

Garuda138 does not sell, rent or trade your personal data to any third party for their own marketing purposes. However, in certain limited situations, garuda138 may share your data with the following parties:

• Payment Service Providers: Information required to process deposits and withdrawals is shared with the relevant payment gateways and financial institutions. All such providers are bound by strict data protection agreements.
• Game Providers: Minimum technical data required to operate games is shared with third-party game platform providers integrated within garuda138.
• KYC Service Providers: Identity information required for the verification process is shared with accredited KYC service providers who assist us in verifying user identities.
• Legal Authorities: Garuda138 will disclose required data to legal authorities when required to do so by law or a valid court order.

07Data Security and Protection

Protecting your personal and financial data is garuda138's top priority. We continuously invest in security infrastructure to ensure your data remains safe at all times.

The technical and organisational security measures we implement include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and garuda138 servers.
• Sensitive data stored in databases is encrypted using industry-standard encryption algorithms.
• Role-based access control ensuring that only authorised staff can access user data.
• 24/7 security monitoring and active intrusion detection systems.
• Regular security audits conducted by independent, certified third-party auditors.
• Two-factor authentication (2FA) for all internal access to systems containing user data.
• Regular data backups to ensure service continuity and recovery from incidents.

While garuda138 takes all reasonable steps to protect your data, no security system can be guaranteed 100% secure. In the event of a data security breach affecting your information, we will notify you and the relevant authorities within the timeframe required by law.

08Data Retention Period

Garuda138 retains your personal data only for as long as it is needed for the purpose it was collected, or as required by applicable law. Retention periods vary by data type:

• Active Account Data: Retained for as long as your account remains active on the garuda138 platform.
• Financial Transaction Data: Retained for a minimum of 7 years after a transaction occurs, in line with Malaysia's accounting and tax legal requirements.
• Support Communication Logs: Retained for 3 years for reference and dispute resolution purposes.
• KYC Data: Retained for 5 years after account closure, in accordance with anti-money laundering legal requirements.
• Technical Data (Logs): Retained for 12 months for security and technical troubleshooting purposes.

Once the retention period expires, your data will be securely deleted or converted into an anonymised form that cannot be identified as your personal information.

09Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and garuda138's policy, you have the following rights regarding your personal data:

• Right of Access: You have the right to obtain a copy of the personal data that garuda138 holds about you.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data.
• Right to Erasure: In certain circumstances, you have the right to request that your personal data be deleted from garuda138's systems.
• Right to Restriction of Processing: You have the right to request that garuda138 restrict how we process your data in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for the purpose of transferring it to another provider.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.

To exercise any of the above rights, please contact the garuda138 data protection team via live chat or support email. We will process your request within 14 business days.

10Children's Privacy

The garuda138 platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data of children under the age of 18.

If garuda138 discovers that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who suspect their child has registered on the garuda138 platform are urged to contact us immediately.

11Links to Other Platforms

The garuda138 platform may contain links to third-party websites or services in certain contexts, such as game providers or payment gateways. The garuda138 Privacy Policy does not apply to those external websites or services.

Garuda138 is not responsible for the privacy practices or content of any third-party websites. We recommend that you read the privacy policy of each platform you visit independently before providing them with any personal information.

12Changes to This Privacy Policy

Garuda138 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements, or developments in the services we offer.

When material changes are made, garuda138 will notify you via:

• A clear notice on the main page of the garuda138 platform.
• An email notification to the registered email address on your account (for significant changes).
• Update the "Last Updated" date at the top of this page.

Continued use of the garuda138 platform after changes to the Privacy Policy are published will be considered your acceptance of the updated policy.

13Contact Us About Privacy

If you have any questions, concerns or complaints regarding how garuda138 handles your personal data, our data protection team is ready to assist:

• Live Chat 24/7: The fastest way — contact us directly via the live chat button on the garuda138 platform.
• Email: [email protected] — we aim to respond within 24 hours.
• FAQ: Check FAQ page us for answers to the most frequently asked privacy questions.

For official requests regarding personal data rights such as access, correction, or deletion, please email us with the subject "Data Rights Request" along with a copy of your identification document for identity verification before we process your request.