Privacy Policy Garuda888 —
Personal Data Protection for Malaysian Members

01 Introduction and Scope of This Privacy Policy

Garuda888 ("we", "Platform" or "Garuda888") values the privacy of every individual who uses our online gaming platform at garuda888.bio. This Privacy Policy is written in clear, plain language so you know exactly what happens to your personal information from the moment you first visit our website to your everyday use of our services.

This document explains the types of personal data we collect, why we need it, how we use it, who we may share it with, and what your rights are as the owner of that data. This policy applies to all users of the Garuda888 platform — whether you are browsing our website without logging in, registering as a new member, or a loyal VIP member who has been with us for years.

We also wish to affirm that garuda888 processes all personal data of Malaysia members in accordance with the requirements of Personal Data Protection Act 2010 (PDPA) which is Malaysia's primary legislation governing the collection and use of personal data in the commercial sector.

02 Types of Personal Data We Collect

Garuda888 only collects data that is genuinely necessary to provide you with high-quality services. We do not collect excessive data or retain information irrelevant to our service objectives. In general, the data we collect falls into three main categories:

A. Data You Provide Directly

• Full name as it appears on your official identification document
• National Identity Card number (MyKad) or passport number for foreign nationals
• Date of birth to confirm you meet the minimum age requirement of 18 years
• An active email address for communication and account verification purposes
• A Malaysia mobile number registered in your name
• Current residential address including postcode and state
• Bank account or e-wallet details for processing deposits and withdrawals

B. Data Collected Automatically

• IP address and network information when you access the platform
• Device type, operating system, and web browser version used
• Game session data including start time, end time, and in-game activity
• Financial transaction records including date, time, amount, and payment method
• Account activity logs such as logins, password changes, and settings updates
• Cookie data and tracking technologies as described in further detail in Section 6

C. Data from Third Parties

• Identity verification from licensed KYC (Know Your Customer) service providers
• Payment verification information from payment processors we work with
• Risk assessment data from fraud prevention services we utilise

03 Why We Collect Your Personal Data

Garuda888 uses the personal data you provide or that we collect solely for legitimate purposes necessary to operate our platform. Below is a full explanation of why each category of data is collected and how it is used:

• Identity Verification and Account Registration: Ensuring every member who registers is a real individual aged 18 and above, and that the information provided is accurate and verifiable through the KYC process.
• Financial Transaction Processing: Processing deposits, withdrawals, and fund transfers safely and efficiently. Your financial data is required to handle payments via FPX, DuitNow, TNG eWallet, Boost, GrabPay, and other payment methods we support.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, money laundering, unauthorized access, and platform abuse. This is our legal responsibility under Malaysia's anti-money laundering regulations.
• Customer Service: When you contact our support team, we use your account information to verify your identity and resolve your issue quickly and accurately.
• Service Communications: Sending important notifications about your account, policy updates, transaction confirmations, and customer support responses.
• Experience Personalisation: Personalizing content, promotions, and game recommendations most relevant to you based on your preferences and gaming habits — with the aim of making your experience on garuda888 more enjoyable.
• Legal Compliance: Meeting legal reporting requirements, financial audits, and requests from lawful authorities related to financial crime prevention.

04 Legal Basis for Data Processing

Under the Malaysia Personal Data Protection Act 2010, all personal data processing must have a valid legal basis. Garuda888 carries out data processing on the following bases:

• Consent: For marketing communication and content personalisation purposes, we require your explicit consent. You may withdraw this consent at any time through the communication preference settings in your account.
• Contract Performance: Data processing necessary to fulfil the service contract between you and Garuda888 — including payment processing, account management, and providing access to games.
• Legal Obligation: Processing required to comply with Malaysian law, including Anti-Money Laundering (AMLA) requirements, tax reporting, and licensing obligations.
• Legitimate Interest: Processing required for Garuda888's legitimate interests, including platform security, fraud prevention, and service improvement — provided these interests do not override your fundamental rights and freedoms.

05 Data Sharing with Third Parties

Garuda888 understands that your trust is our most valuable asset. We do not share your personal data indiscriminately. Below is a full breakdown of the situations in which your data may be accessed by parties other than garuda888:

• Payment Processors: Payment service providers such as FPX processors, DuitNow, and e-wallet processors receive only the transaction information strictly necessary to process your payment. They are bound by strict confidentiality agreements.
• KYC Service Providers: Licensed identity verification companies that help us verify your identification documents during the KYC process. Data shared is limited strictly to information required for verification only.
• Technology Service Providers: Cloud infrastructure providers, analytics platforms, and cybersecurity services we use to operate the platform. All providers are bound by strict contractual terms regarding data protection.
• Relevant Authorities: Garuda888 will disclose data when required by Malaysia law, court order, or a lawful request from a relevant law enforcement agency.
• Business Transfer: If Garuda888 is involved in a merger, acquisition, or asset sale, user data may be transferred as part of that transaction. You will be notified in advance via a clear notice.

06 Use of Cookies and Tracking Technologies

Garuda888 uses cookies and similar tracking technologies to enhance the user experience, secure Login sessions, and understand how members interact with our platform. Below is an explanation of the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification, security, and language preferences. These cookies cannot be disabled as they are essential for the platform to function correctly.
• Performance Cookies: Helping us understand which pages are visited most frequently, how users navigate the platform, and where any technical issues occur. This information is used to improve platform performance and usability.
• Functional Cookies: Storing your preferences such as language selection, display settings, and Login details to make repeat visits easier without having to reconfigure each time.
• Marketing Cookies: Used to display relevant promotions and offers based on your interests and activity. You may opt out of marketing cookies without affecting the platform's core functionality.

You can manage your cookie preferences through your web browser settings at any time. Please note that disabling certain cookies may affect some functions of the Garuda888 platform.

07 Your Rights as a Data Owner

Under the Malaysia Personal Data Protection Act 2010, you have certain rights regarding your personal data held by Garuda888. We respect and facilitate the exercise of all these rights:

08 Our Data Security Measures

Garuda888 continuously invests in the latest security infrastructure to ensure your personal data is always protected. Below is an overview of the technical and organizational measures we have implemented:

• End-to-End Encryption: All communications between you and Garuda888's servers are protected using TLS 1.3 protocol with AES-256 encryption, the highest security standard in the industry.
• Two-Factor Authentication (2FA): We provide and encourage the use of two-factor authentication for all accounts to add an extra layer of protection against unauthorized access.
• Continuous Security Monitoring: Our cybersecurity team monitors the platform 24 hours a day, 7 days a week to detect and respond to any threats or suspicious activity in real time.
• Periodic Penetration Testing: We conduct comprehensive security testing by independent security experts on a regular basis to identify and address any vulnerabilities before they can be exploited.
• Internal Access Controls: Access to members' personal data within Garuda888 is restricted on a strict need-to-know basis. All access is logged and audited regularly.
• Staff Security Training: All Garuda888 staff who handle personal data receive comprehensive and regular data protection training to ensure they understand their responsibilities.

09 Personal Data Retention Period

Garuda888 does not store your personal data indefinitely. We set reasonable retention periods based on the purpose of data collection and applicable legal requirements:

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered. In cases where law requires longer retention, we will comply with those requirements and notify you accordingly.

10 Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, there are several channels you can use to reach us:

• Data Protection Officer (DPO): [email protected] — for all privacy-related enquiries and data subject rights requests
• General Customer Support: [email protected] — for general account and service enquiries
• LiveChat 24/7: Available directly on the Garuda888 platform for immediate assistance in Bahasa Melayu, Mandarin, and English

Garuda888 is committed to responding to all privacy-related enquiries within 5 working days. For complaints requiring further investigation, we will send an acknowledgement within 24 hours and resolve your case within a reasonable timeframe.

If you are dissatisfied with how we handle your privacy complaint, you have the right to lodge a complaint with Department of Personal Data Protection (JPDP) Malaysia via their official website.