OFFICIAL DOCUMENT

Garuda188 Privacy Policy – Personal Data Protection for Malaysian Users

Garuda188 is committed to protecting the privacy and personal data of every member. This Privacy Policy explains transparently how we collect, use, store, and protect your information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Please read this document carefully before using our platform.

Updated: 1 January 2026

Privacy Policy Summary: We collect only the data we need, never sell your information to third parties, protect your data with 256-bit SSL encryption, and give you full control over your personal data at any time. Your privacy is not merely a legal obligation to us — it is a moral responsibility.

1
Introduction & Scope of Privacy Policy

This Privacy Policy is issued by Garuda188 ("we", "platform") and applies to all users who access or register an account at garuda188.my. This document describes our privacy practices regarding the collection, processing, storage, and disclosure of your personal data.

We are fully compliant with Personal Data Protection Act 2010 (PDPA) Malaysia in all aspects of how we handle user data. As a platform serving Malaysian users, we understand the trust you place in us when sharing your personal information, and we take this responsibility very seriously.

This Privacy Policy should be read in conjunction with Terms & Conditions Garuda188. By using our platform, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the platform and contact us to request data deletion.

2
Types of Information We Collect

Garuda188 only collects information that is strictly necessary to provide safe, compliant, and quality services to our Malaysian users. Below are the categories of data we collect:

Data Category Sample Information Purpose of Collection
Identification Data Full name, MyKad number, date of birth Identity verification (KYC), legal compliance
Contact Data Malaysian phone number, email address Account communications, OTP verification, notifications
Financial Data Payment methods (TnG, GrabPay, DuitNow), transaction history Deposit/withdrawal processing, fraud prevention
Usage Data Betting history, games played, session duration Service improvement, responsible gaming
Technical Data IP address, device type, web browser, location Account security, suspicious access detection

We never collect sensitive information such as passwords in plain text, full credit card numbers, or biometric data. All financial data is processed through secure, encrypted payment channels.

3
How We Use Your Data

Every piece of information we collect has a clear and legitimate purpose. Garuda188 uses your personal data for the following:

  • Account Management: Creating and maintaining your user account, processing registration, identity verification, and account recovery.
  • Transaction Processing: Managing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as securely processing withdrawals to your account.
  • Platform Security: Detecting and preventing fraud, money laundering, unauthorised access, and any suspicious activity that could compromise your account.
  • Service Communications: Sending important account notifications, OTP verification, promotional updates (where you have consented), and policy updates.
  • Service Enhancement: Analysing usage patterns to improve the platform experience, develop new features, and personalise content for Malaysian users.
  • Legal Compliance: Fulfilling our obligations under Malaysian law, including PDPA 2010, anti-money laundering (AML) requirements, and regulatory directives.
  • Responsible Gaming: Monitoring betting patterns to identify users who may need support and providing appropriate responsible gambling tools.

Marketing Communication Preferences: We only send you promotional emails or SMS if you have given explicit consent during registration or through your account settings. You may withdraw this consent at any time via the unsubscribe link or by contacting our support team.

4
Information Sharing & Disclosure

Garuda188 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. This is our unwavering commitment to all users.

However, there are limited situations where we may need to share your information with certain parties:

  • Payment Service Providers: Information required to process your transactions is shared with the relevant e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and banks (via DuitNow/FPX). These providers are bound by strict confidentiality agreements.
  • Game Providers: Minimal account information is shared with third-party game providers that supply slots, live casino, poker, and e-sports on our platform, strictly for technical purposes.
  • Regulatory Authority: We will disclose information to the police, courts, or Malaysian regulatory authorities when required by law, court order, or for crime prevention purposes.
  • Technology Partners: Technical service providers — including server hosting, analytics, and cybersecurity services that help us operate the platform — are all bound by strict data protection agreements.

Every third party that receives your data from Garuda188 is bound by confidentiality and data protection obligations that meet or exceed the standards we hold ourselves to.

5
Data Security & Protection Measures

The security of your personal data is a top priority at Garuda188. We continually invest in the latest security infrastructure to ensure your information is always protected against unauthorised access, loss, or misuse.

Our security measures include:

  • 256-bit SSL Encryption: All data transmitted between your device and Garuda188's servers is encrypted using TLS 1.3, the highest industry standard.
  • Two-Factor Authentication (2FA): We support and encourage all account holders to enable 2FA as an additional layer of protection beyond your password.
  • 24/7 Monitoring: Our threat detection system operates around the clock to identify and block any unauthorised access attempts or suspicious activity in real time.
  • Secure Password Storage: Your password is never stored in plain text. We use the bcrypt hashing algorithm with a random salt to ensure your password remains confidential, even from our own internal staff.
  • Regular Security Audits: Our platform undergoes regular penetration testing and independent security audits conducted by certified cybersecurity firms.
  • Internal Access Controls: Access to user data within Garuda188 is strictly limited on a need-to-know basis and fully logged for audit purposes.

Data Breach Notification: In the event of a data security breach affecting your information, Garuda188 is committed to notifying you within 72 hours of becoming aware of the incident, in line with Malaysian PDPA best practices.

6
Cookies & Tracking Technologies

Garuda188 uses cookies and similar tracking technologies to enhance user experience, analyse platform performance, and keep your account secure. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

  • Essential Cookies (Required): Required for core platform functions such as login sessions, account security, and transaction processing. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collecting information on how you use our platform — pages visited, time spent, and errors encountered. This data is used in aggregate to improve the user experience.
  • Functional Cookies: Saving your preferences such as language, display settings, and login details (if you select "Remember Me") to deliver a more personalised experience.
  • Analytics Cookies: We use certified third-party analytics tools to understand our website's traffic patterns on an anonymous basis for platform improvement purposes.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality and security of your Garuda188 account.

7
User Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Garuda188. We respect and fully support the exercise of all these rights:

Right to Data Access

You have the right to request a copy of all personal data we hold about you. We will provide a full report within 14 business days from the date your request is received.

Right to Data Rectification

If any information we hold about you is inaccurate or out of date, you have the right to request an immediate correction. Contact our support team or update it directly in your profile settings.

Right to Erasure

You may request deletion of your personal data upon account closure, subject to our legal record retention obligations. Financial data may need to be retained for a minimum of 7 years in accordance with Malaysia's AML requirements.

Right to Restrict Processing

In certain circumstances, you have the right to request that we restrict the processing of your data — for example, while the accuracy of data is under review or a processing objection is being considered.

Right to Withdraw Consent

For processing based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the validity of any processing carried out prior to withdrawal.

Right to Lodge a Complaint

If you believe your privacy rights have been violated, you have the right to lodge a complaint directly with us or with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the rights above, please contact us at support@garuda188.my with the subject line "PDPA Rights Request" along with a copy of your identification for verification.

8
Data Retention & Deletion

Garuda188 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal requirements. The following are our data retention guidelines:

  • Active Account Data: Retained for the duration your account remains active with Garuda188, plus 90 days after account closure for recovery and support purposes.
  • Financial & Transaction Records: Retained for a minimum of 7 years from the transaction date in compliance with Malaysia's Anti-Money Laundering Act (AMLA) and tax requirements.
  • Security Logs: Retained for 12 months for security incident investigation and fraud prevention purposes.
  • Support Communication Data: Support tickets and communication records are retained for 2 years for reference and service quality purposes.
  • Marketing Data: Retained until you withdraw your consent or request deletion, whichever comes first.

Once the retention period has ended, your data will be securely deleted or permanently anonymised so it can no longer be linked back to your identity.

9
Changes to This Privacy Policy

Garuda188 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. Each new version will display the latest "Updated" date at the top of this document.

For material amendments — that is, changes that significantly affect how we process your data — we will notify you via:

  • In-platform notifications when you log in to your Garuda188 account.
  • Email to the address registered with your account, at least 14 days before the changes take effect.
  • A prominent notice on our website's main page.

Your continued use of the Garuda188 platform following any amendments to this Privacy Policy will be deemed your acceptance of the revised terms. If you do not agree with the changes, you have the right to close your account and request deletion of your data.

10
Contact Us – Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by Garuda188, please contact our Data Protection Officer (DPO) through the following channels:

  • Privacy Email: support@garuda188.my (subject: "Privacy Enquiry / PDPA")
  • Live Chat: Available 24/7 on the Garuda188 platform for immediate assistance
  • Response Time: We are committed to responding to all privacy enquiries within 3 business days

We take every privacy inquiry seriously and will always strive to resolve your concerns promptly, transparently, and professionally. Your trust is Garuda188's most valued asset.


Garuda188's Privacy Commitment to Malaysian Users

Six core principles that shape how we handle your personal data every day

Military-Grade Encryption

All your personal and financial data is protected with 256-bit SSL encryption and TLS 1.3 protocol — the same technology used by leading Malaysian banking institutions such as Maybank and CIMB.

Full Data Control

You have full control over your data. Access, correct, restrict, or delete your information at any time through your account settings or by reaching out to our responsive support team.

No Data Sales

Garuda188 has never and will never sell, rent, or trade your personal data to advertisers, data brokers, or any third party for commercial purposes. This is our absolute commitment.

Malaysian PDPA Compliance

All our data handling practices are in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We undergo annual compliance audits to ensure the highest standards are consistently maintained.

24/7 Security Monitoring

Our security monitoring system operates around the clock, automatically detecting and blocking any suspicious access attempts. You will be notified should any unusual activity be detected on your account.

Malay Language Support

All privacy enquiries and PDPA requests may be submitted in Bahasa Melayu. Our fluent Malaysian-speaking DPO team is ready to help you understand your rights clearly and easily.


FAQ – Privacy Policy

Answers to the most frequently asked questions by Malaysian users regarding Garuda188's privacy practices

Garuda188 does not sell or share your personal data with third parties for marketing purposes. We only share the necessary information with payment service providers such as Touch 'n Go, GrabPay, and DuitNow to process your transactions, as well as game providers that support our platform. All such third parties are bound by strict confidentiality agreements.

You may submit a Subject Access Request by emailing support@garuda188.my with the subject line "PDPA Data Access Request". Please include your account number and a copy of your ID for verification. We will provide a full report of your data within 14 working days.

Yes, you may request deletion of your personal data upon account closure. However, financial and transaction records may need to be retained for 7 years in accordance with Malaysia's AML legal requirements. Data not subject to legal retention obligations will be securely deleted within 30 days from the date your request is received.

During a suspension period, your data is stored securely and will not be processed for marketing purposes. If an account is suspended for security or investigative reasons, relevant data may need to be retained longer in accordance with legal requirements. You are still welcome to contact us regarding your data during this period.

All transactions on Garuda188 are processed through secure, encrypted payment channels. We do not store your credit card numbers or full bank account details on our servers. Payments via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and DuitNow are processed directly by the respective providers using their own certified security systems.
🔒

Your Data Is Safe with Garuda188

Join over 500,000 Malaysian members who trust Garuda188 for a safe and secure sports betting, casino, and e-sports experience. Register today and enjoy internationally recognised data protection standards.

256-bit SSL Protected • PDPA Malaysia Compliant • 24/7 Support

Bahasa Melayu