Garuda138 Privacy Policy – Your Personal Data Protection

Introduction

Welcome to the garuda138 Privacy Policy. This document explains in detail how garuda138 ("we", "our platform") manages, protects, and processes your personal information ("your data") when you use our services on garuda138.vu.

Garuda138 takes privacy protection responsibility very seriously. We understand that your trust is our most valuable asset. As such, we are committed to ensuring that every piece of data you provide us is handled with the utmost integrity, transparency, and security.

This Privacy Policy applies to all garuda138 users, including website visitors, registered members, and any party that interacts with our platform through any digital channel. By using the garuda138 platform, you agree to the collection and use of your information as described in this document.

Data Collected

Garuda138 collects various types of information to enable us to deliver a safe, seamless, and high-quality service to you. The types of data we collect are as follows:

Garuda138 does not collect data classified as sensitive, such as health information, political affiliations, or religious beliefs, unless required by applicable law or necessary for legally permitted KYC purposes.

How Your Data Is Used

Information you provide to garuda138 is used solely for legitimate purposes directly related to the delivery of our services. The following are the primary purposes for which your data is used:

• Account management: Creating, verifying, and maintaining your member account, including the KYC process required by the authorities.
• Transaction processing: Processing all deposits and withdrawals securely, ensuring your funds reach the correct destination within the stipulated timeframe.
• Platform security: Detecting and preventing fraudulent activity, money laundering, unauthorized access, and account abuse.
• Legal compliance: Fulfilling applicable legal and regulatory obligations, including reporting to relevant authorities when required.
• Service communications: Sending important notifications regarding your account, security updates, and changes to the terms of service.
• Permitted marketing: Sending promotional information and exclusive offers — only if you have given consent to receive marketing communications.
• Platform improvement: Analyzing usage patterns to enhance the gaming experience, platform speed, and support service quality.
• Responsible gaming: Monitoring betting patterns to identify early signs of problem gambling and provide timely assistance.

Garuda138 will not use your data for any purpose other than those stated above without first obtaining your additional consent.

Data Sharing

Garuda138 does not sell or disclose your personal data to third parties for commercial purposes. However, there are certain situations where we may share your data with selected and trusted parties, as follows:

• Service providers: Licensed payment processing companies, KYC service providers, and security platforms that help us deliver our services — all parties are bound by strict confidentiality agreements.
• Game providers: Licensed game software providers such as Pragmatic Play, Evolution Gaming, and PG Soft may receive game data necessary to ensure game integrity.
• Regulatory authority: Required information may be shared with government authorities, law enforcement agencies, or regulatory bodies when required by law.
• Analytics partners: Anonymised and aggregated data (with no personally identifiable information) may be shared with analytics platforms for service improvement purposes.

Data Security

Garuda138 continuously invests in world-class security infrastructure to ensure your personal data is always protected. Key security measures we employ include:

• 256-bit SSL Encryption: All data transmissions between your device and garuda138 servers are encrypted using the latest TLS 1.3 protocol, making interception by external parties virtually impossible.
• Two-factor authentication (2FA): We offer two-factor authentication to protect your account from unauthorized access, even if your password has been compromised.
• 24/7 Monitoring: Our automated security monitoring system operates around the clock to detect suspicious activity and respond immediately.
• Encrypted data storage: All personal data is stored on encrypted servers protected by multi-layered access controls and regular security audits.
• Security testing: Garuda138 conducts regular penetration testing and security audits by qualified third parties to identify and address system vulnerabilities.

Cookies & Tracking Technologies

Garuda138 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The types of cookies we use are as follows:

• Essential cookies: Required for core website functions such as login, session management, and security. These cookies cannot be disabled.
• Preference cookies: Saving your personal settings such as preferred language and display preferences for a more comfortable experience.
• Analytics cookies: Helping us understand how users interact with the platform in order to improve overall performance and user experience.
• Marketing cookies: Used to display promotions relevant to your interests — only activated with your consent.

You can manage or disable non-essential cookies through your web browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality of some features on the garuda138 platform.

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and garuda138's internal policies, you have the following rights regarding your personal data:

• Right of access: You have the right to request a copy of the personal data we hold about you at any time.
• Right to rectification: You have the right to request correction of any personal data that is inaccurate, incomplete, or outdated.
• Right to erasure: In certain circumstances permitted by law, you have the right to request that your personal data be deleted from our systems.
• Right to restriction of processing: You have the right to request that the processing of your data be restricted under certain circumstances while a dispute is being resolved.
• Right to object to marketing: You may opt out of receiving marketing communications from garuda138 at any time without any penalty.
• Right to data portability: You have the right to receive your personal data in a structured, machine-readable format for transfer to another party.

To exercise any of the above rights, please contact the garuda138 support team via 24/7 live chat. We will process your request within 30 business days from the date we receive your complete request.

Data Retention & Deletion Period

Garuda138 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by law. Our data retention guidelines are as follows:

• Active account data: Retained for the duration your account remains active on garuda138, plus any additional period required by law.
• Financial transaction data: Retained for a minimum of 7 years to comply with accounting and anti-money laundering legal requirements.
• Security logs: Retained for 2 years for security incident investigation and fraud prevention purposes.
• Marketing data: Retained until you withdraw your consent, after which the data will be deleted within 30 days.
• Account closed: Basic data is retained for 5 years after account closure for legal compliance purposes, then permanently deleted.

When your data is no longer needed, garuda138 will securely delete or anonymise it in a manner that prevents it from being recovered or re-associated with you.

Third-Party Links

The garuda138 platform may contain links to third-party websites or services in certain contexts. Please be aware that garuda138 has no control over the privacy policies or data collection practices of those third-party websites.

We recommend reading the privacy policy of every website you visit through links found on our platform. garuda138 is not responsible for the content, privacy policies, or practices of any third-party websites or services.

Changes to Privacy Policy

Garuda138 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform enhancements. When we make significant changes, we will:

• Updating the "Last Amended" date at the top of this document.
• Sending notifications to your registered email at least 14 days before changes take effect.
• Displaying a prominent notice on the garuda138 homepage for a specified period.

Continued use of the garuda138 platform following any amendments to this Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically.

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how garuda138 handles your personal data, our team is available to assist you at any time.

We are committed to addressing all privacy-related inquiries within 3 working days. For more urgent matters, please use our live chat channel, available 24 hours a day, 7 days a week.