Personal Data Protection

Privacy Policy Garuda365 — Personal Data Protection for Malaysian Members

Your privacy is our priority. This document transparently explains how garuda365 collects, uses, stores, and protects your personal data in line with international security standards.

Last Updated: 1 January 2026

Key Summary: Garuda365 does not sell your personal data to third parties. All data is collected solely for platform operations, security, and service improvement purposes. You have the full right to access, correct, and request deletion of your data at any time.

1. Introduction and Scope of This Policy

This Privacy Policy is published by Garuda365 ("Platform", "we") and applies to all users who access or use the Garuda365 platform via the website garuda365.onl or our official mobile app. This policy explains our privacy practices in a comprehensive and transparent manner.

Garuda365 operates in compliance with applicable data protection laws, including Malaysia's Personal Data Protection Act 2010 (PDPA). We are committed to ensuring that all personal data you provide is handled with full responsibility, security, and transparency.

By using the Garuda365 platform, you consent to the collection and use of information as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform.

2. Types of Personal Data We Collect

Garuda365 collects various types of data depending on your interactions with our platform. Below is a summary of the data we collect and the purposes for collection:

Data Category Example Information Primary Purpose
Identity Data Full name, IC/passport number, date of birth Identity verification (KYC)
Contact Data Email address, phone number, full address Account communications & support
Financial Data Bank account details, digital wallets, transaction history Deposit & withdrawal processing
Technical Data IP address, device type, browser, operating system Security & fraud prevention
Usage Data Game history, session duration, game preferences User experience improvement
Communication Data LiveChat logs, support emails, feedback Customer service improvement

We only collect data that is strictly necessary for the stated purpose. We do not collect sensitive data such as biometric information, religion, or political affiliation unless specifically required by applicable law.

3. How We Use Your Data

The personal data we collect is used solely for the following legitimate and stated purposes:

  • Account Management: To create, verify, and manage your account on the garuda365 platform, including the required KYC process.
  • Transaction Processing: To securely and promptly process deposits, withdrawals, and all financial transactions related to your account.
  • Platform Security: To detect, investigate, and prevent fraudulent activity, money laundering, and any activity that violates our terms of use.
  • Legal Compliance: To comply with applicable legal obligations, including anti-money laundering (AML) reporting requirements and identity verification obligations.
  • Service Communications: To send important notifications related to your account, including transaction confirmations, security alerts, and policy updates.
  • Experience Enhancement: To analyze aggregated usage patterns in order to improve our platform's interface, performance, and game selection.
  • Marketing (with consent): To send information about promotions, bonuses, and exclusive offers — only if you have given consent to receive marketing communications.

Garuda365 does not make fully automated decisions that have a significant effect on your rights based solely on personal data, without any human involvement in the evaluation process.

4. Data Storage and Security Measures

Garuda365 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

  • 256-bit SSL encryption: All data transmitted between your device and garuda365's servers is encrypted using the highest-grade TLS/SSL protocols.
  • Database Encryption: Sensitive data stored in our databases, including passwords and financial information, is encrypted using industry-standard encryption algorithms.
  • Strict Access Controls: Only authorised garuda365 staff with a legitimate operational need may access member personal data, with comprehensive monitoring and audit logs in place.
  • Continuous Monitoring: Our security systems are monitored 24 hours a day, 7 days a week to detect any suspicious activity or unauthorized access attempts.
  • Regular Security Testing: Penetration testing and security audits are conducted regularly by independent third parties to ensure our security infrastructure remains robust.

Your personal data is retained for as long as necessary to fulfil the original purpose of collection or as required by applicable law. Financial transaction records are kept for a minimum of 7 years in compliance with anti-money laundering legislation.

Data Servers: Garuda365 member data is stored in data centres with internationally recognised security certifications, strict physical access controls, and digital safeguards. We do not store data on unsecured devices or unprotected networks.

5. Data Sharing with Third Parties

Garuda365 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We only share your data in the following limited situations:

  • Payment Service Providers: Required transaction information is shared with approved payment processors (e.g. FPX, Touch 'n Go, Boost) solely to process your deposits and withdrawals.
  • Game Software Providers: Required game session data is shared with third-party software providers that supply games on our platform, strictly within the scope necessary for game operations.
  • Legal Obligations: Data may be disclosed to government authorities or law enforcement when required by valid legislation, court order, or regulatory reporting obligations.
  • Support Service Providers: Selected technical and support service providers may process certain data on our behalf, subject to strict data protection agreements.

All third parties that receive your data from garuda365 are bound by strict confidentiality and data protection agreements, and are prohibited from using that data for any purpose other than what is specified in those agreements.

6. Cookies and Tracking Technologies

The garuda365 platform uses cookies and similar tracking technologies to enhance user experience, analyse platform performance, and secure sessions. The types of cookies we use are:

  • Essential Cookies: Required for core platform operations including login authentication, session management, and security. These cookies cannot be disabled.
  • Preference Cookies: Saves your personal settings such as preferred language, currency, and display preferences to streamline your platform experience.
  • Analytics Cookies: Collects statistical data on how you use the platform in aggregated, anonymised format for service improvement purposes only.
  • Security Cookies: Helps us detect fraudulent activity, protect your account, and secure your login sessions.

You can manage cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the Garuda365 platform and your overall user experience.

7. Your Rights Regarding Personal Data

As a garuda365 member, you have the following rights regarding the personal data we hold about you, in accordance with Malaysia's Personal Data Protection Act 2010:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request the correction of any inaccurate or outdated data in our records.

Right to Erasure

You may request the deletion of your personal data, subject to legal retention obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another platform.

Right to Restriction of Processing

You may request that the processing of your data be restricted under certain circumstances provided by law.

To exercise any of the above rights, please contact our data protection team by email at [email protected]. We will respond to your request within 30 business days.

8. Protection of Children's Data

Garuda365 is a platform exclusively for adults aged 18 and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.

If we discover that a person under the age of 18 has registered an account or provided personal data to us, we will take immediate action to delete all such data and close the account without prior notice. All funds in that account will be forfeited in accordance with the platform's terms and conditions.

If you have reason to believe that a minor has registered on our platform, please contact us at [email protected] so that we can take immediate action.

9. Changes to This Privacy Policy

Garuda365 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or service improvements. The date of the most recent update is always displayed at the top of this page.

For material changes, we will endeavor to notify you via your registered email or a prominent in-platform notification before the changes take effect. Continued use of the garuda365 platform after any update constitutes your acceptance of the revised policy.

We encourage you to review this page periodically to stay informed about how we protect your personal data.

10. Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the garuda365 Data Protection Officer (DPO) through the following channels:

We are committed to responding to all privacy-related enquiries within 5 business days. For formal complaints regarding data handling, we will provide a full response within 30 business days in accordance with legal requirements.

Why Your Data Is Safe with garuda365

Six layers of protection ensuring the privacy and security of your personal data at all times.

256-Bit SSL Encryption

All communications between your device and garuda365's servers are fully encrypted using 256-bit TLS/SSL — the same standard used by major financial institutions and banks worldwide.

Two-Factor Authentication

Garuda365's 2FA system adds an extra layer of security to your account. Even if your password is compromised, unauthorized parties still cannot access your account without the second verification code.

No Data Sales

Garuda365 has never and will never sell, rent, or trade member personal data to third parties for advertising or marketing purposes. Your data belongs to you.

Real-Time Monitoring

Garuda365's security monitoring system operates 24/7 to detect suspicious activity, unauthorized login attempts, or unusual transaction patterns before they become a problem.

Malaysia PDPA Compliance

All of garuda365's data handling practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring your rights as a data subject are fully protected under local law.

Full Control in Your Hands

You have full control over your data — access, correct, or request deletion at any time. The privacy settings panel within the Garuda365 app makes it easy to manage your data preferences and communications.

FAQ — Privacy Policy

Answers to the most frequently asked questions about privacy and data security at garuda365.

Absolutely not. garuda365 has never and will never sell, rent, or trade members' personal data to any third party for their own marketing or business purposes. Your data is only shared with selected service providers necessary for platform operations, and they are bound by strict confidentiality agreements.

Data retention periods depend on the type of data and legal requirements. Active account data is retained for the duration of your active membership. Financial transaction records are kept for a minimum of 7 years in accordance with anti-money laundering legal requirements. After an account is closed, your personal data will be deleted within 90 days, unless a longer retention period is required by law.

You can submit a data access request by contacting our data protection team via email at [email protected]. Include your full name, account number, and the type of data requested. We will verify your identity and provide a copy of the relevant data within 30 business days. No fee is charged for your first data access request each year.

Yes, you can withdraw your marketing consent at any time through the account settings in the garuda365 app or by contacting our support team. Once your request is received, you will stop receiving marketing communications within 5 business days. Withdrawing marketing consent will not affect important service communications related to your account.

In the event of a data breach that may affect your personal data, garuda365 is committed to notifying you within 72 hours of becoming aware of the incident, in accordance with data breach notification requirements. We will provide details on the nature of the breach, the data affected, the steps we have taken, and the actions you can take to protect yourself.
Your Data Is Safe With Us

Play Responsibly at Garuda365

Your privacy and data security are our priority. Register a garuda365 account with confidence — Malaysia's transparent, secure, and trusted online betting platform since 2018.

256-bit SSL encryption  ·  Malaysia PDPA Compliance  ·  No data selling

Bahasa Melayu