Personal Data Protection

Privacy Policy Garuda138 – Your Personal Data Protection

Your privacy is our priority. This document clearly explains how garuda138 collects, uses, stores, and protects the personal information of each member – without any complicated language.

Updated: June 2026 256-bit SSL PDPA Compliance

Garuda138's Six Data Protection Principles

Your personal data is more than just a number in our database. Here is how we ensure your information remains secure and is handled with full integrity.

Bank-Grade Encryption

All data transmitted between your device and garuda138 servers is protected by 256-bit SSL encryption – the same security standard used by leading financial institutions worldwide.

No Sale of Data to Third Parties

Garuda138 has never and will never sell member personal data to any third party for marketing or commercial purposes without your explicit consent.

Minimum Data Collection

We only collect information that is strictly necessary to provide our services. No excess data is gathered, and every type of data we store has a clearly defined purpose.

Full Control Is Yours

You have the right to access, correct, and request deletion of your personal data at any time. The garuda138 privacy team is ready to handle such requests within the stipulated timeframe.

Secure Data Storage

Your data is stored on protected servers with strict access controls. Only authorised garuda138 staff with a legitimate business need may access member data.

Immediate Incident Notification

In the event of a security incident involving member data, garuda138 is committed to notifying affected members within the timeframe required by applicable data protection regulations.

This Privacy Policy effective 1 January 2026. We encourage you to review this page from time to time to stay informed about how we handle your data.

Introduction

Garuda138 takes seriously our responsibility to protect the privacy of every member who uses our platform. This Privacy Policy explains in detail how we collect, use, disclose, and protect your personal information when you register for and use garuda138 services.

This document is written in English to ensure Malaysian players can clearly understand their rights. By registering an account or using the garuda138 platform, you agree to the practices described in this Privacy Policy.

If you have any questions about how we handle your data, the garuda138 privacy team is available via the support channels on the platform.

Garuda138 complies with applicable data protection legislation, including the Malaysia Personal Data Protection Act (PDPA) 2010 and relevant international regulatory requirements applicable to our operating jurisdictions.

Personal Data We Collect

Garuda138 collects several categories of personal information during the registration process, platform usage, and communications with our support team. Below is a summary of the types of data collected:

Data Category Sample Information Purpose
Identity Data Full name, date of birth, identification card number Identity verification (KYC), legal compliance
Contact Data Email address, phone number Account communications, security notifications
Financial Data Bank account number, digital wallet information Deposit and withdrawal processing
Usage Data Activity logs, betting history, login timestamps Account security, service improvement
Technical Data IP address, device type, web browser Fraud prevention, platform analytics

Garuda138 does not collect sensitive information such as biometric data, health information, or religious beliefs unless required by applicable law.

How We Use Your Data

The information we collect is used solely for legitimate and necessary purposes in delivering garuda138 services. The following are the primary purposes for which your data is used:

  • Create and manage your member account
  • Process deposits and fund withdrawals securely
  • Verify your identity through the mandatory KYC process
  • Prevent fraud, money laundering, and other illegal activities
  • Provide effective customer support
  • Send important account-related communications
  • Monitor and improve platform performance
  • Comply with legal obligations and regulatory requirements

Garuda138 does not use your data to make automated decisions that materially affect you without appropriate human oversight.

You may opt out of marketing communications at any time by contacting our support team. However, account-related and security communications cannot be stopped while your account remains active.

Data Sharing With Third Parties

Garuda138 maintains a strict policy on member data sharing. We do not sell, rent, or disclose your personal information to third parties for their own marketing purposes.

There are certain situations where we may need to share your data with regulated parties:

  • Approved payment service providers to process your financial transactions
  • Licensed third-party identity verification (KYC) service providers
  • Regulatory authorities and law enforcement when required by law
  • Technology service providers that assist in operating the garuda138 platform under strict confidentiality agreements

All third parties that receive garuda138 member data are bound by strict data protection agreements and are not permitted to use that data for any purpose other than what has been agreed upon.

  • Your data is never sold to advertisers or data brokers
  • Your data is not shared with other platforms in the industry without your consent
  • Your data is not transferred to countries without equivalent data protection without additional safeguards

Data Security Measures

Garuda138 invests seriously in security infrastructure to ensure your personal data is always protected. The technical and organisational measures we implement include:

  • 256-bit SSL encryption for all transmitted data
  • Encryption of sensitive data at rest in the database
  • Role-based access control for staff
  • 24/7 security monitoring and intrusion detection
  • Regular security testing and audits by independent parties
  • Two-factor authentication (2FA) is available for member accounts
  • Tested security incident response procedures

Reminder: While garuda138 takes all reasonable steps to protect your data, no security system is perfect. We encourage you to use a strong password, enable 2FA, and never share your login credentials with anyone.

Cookies and Tracking Technologies

Garuda138 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse platform usage. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login, session security, and language preferences. These cookies cannot be disabled.
  • Performance Cookies: Help us understand how the platform is used for improvement purposes. Information is collected in aggregate form and does not identify individuals.
  • Functional Cookies: Save your preferences such as display settings and game selections for a more convenient experience.

You can manage your cookie settings through your web browser settings. However, disabling certain cookies may affect the functionality of the garuda138 platform.

Data Storage and Retention

Garuda138 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law.

Data retention periods vary depending on the type of data:

  • Active account data: Retained for as long as your account is active and for a post-closure period as required by law
  • Financial transaction data: Retained for a minimum of 7 years as required by anti-money laundering legislation
  • Customer support communication logs: Retained for 3 years for dispute resolution and quality assurance purposes
  • Technical data and security logs: Retained for 12 months for security and investigation purposes

When your data is no longer needed, garuda138 will securely delete or anonymise it in accordance with established procedures.

Your Rights as a Data Subject

As a garuda138 member, you have the following rights regarding your personal data. garuda138 is committed to respecting and facilitating these rights:

1

Right of Access

Request a copy of the personal data we hold about you at any time.

2

Right to Rectification

Request correction of inaccurate or incomplete personal data.

3

Right to Erasure

Request deletion of your personal data, subject to legal obligations.

4

Right to Restriction

Request restriction of your data processing under certain circumstances.

5

Right to Data Portability

Receive your data in a machine-readable format for transfer to another party.

6

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

To submit any request relating to the above rights, contact the garuda138 privacy team via Live Chat or support email. We will process your request within 30 business days.

Children's Data Protection

Garuda138 services are strictly for individuals aged 21 and above. garuda138 does not knowingly collect or process personal data from minors. If we discover that we have collected data from someone under the age of 21, we will take immediate action to delete that data and terminate the relevant account.

If you have reason to believe that a minor has registered on the garuda138 platform, please notify our support team immediately.

Amendments to This Privacy Policy

Garuda138 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, technology used, or applicable legal requirements. Any material amendments will be communicated to members via email or in-platform notification before they take effect.

It is your responsibility to review this page periodically. The effective date of the latest version is always displayed at the top of this document. Continued use of the platform after any amendments are published constitutes acceptance of the updated privacy terms.

Contact Our Privacy Team

If you have any questions, concerns, or wish to submit a request regarding your personal data, the garuda138 privacy team is ready to assist. There are several ways to reach us:

  • Live Chat available 24 hours a day, 7 days a week on the platform
  • Email the support address listed on our Contact Us page
  • Via the garuda138 mobile app under the Support section

We are committed to responding to all privacy-related enquiries within a reasonable timeframe. Formal data subject rights requests will be processed within 30 business days of receipt.

Communication security: The garuda138 team will never ask for your account password via email or chat. If you receive such a request, please report it to us immediately as it may be a phishing attempt.

Play with Peace of Mind at garuda138

Your privacy and security are our priority. Join over 500,000 Malaysian players who have trusted garuda138 as their preferred betting platform – with full confidence that their data is always protected.

SSL Encryption No Data Sales PDPA Compliance
Bahasa Melayu