Privacy Policy Garuda999 – Protection of Your Personal Data

1 Introduction & Scope of This Privacy Policy

Garuda999 ("we", "Platform") is fully committed to protecting the privacy of every individual who interacts with our platform. This Privacy Policy explains in detail how we collect, process, store, disclose, and safeguard your personal information when you use the website, services, and products provided by garuda999.

This policy applies to all users of the garuda999 platform without exception, including visitors who are simply browsing the website, prospective members in the registration process, active registered members, and former members who have closed their accounts. By accessing or using any part of the garuda999 platform, you acknowledge that you have read and understood this Privacy Policy.

Garuda999 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. We take this responsibility seriously and continually strive to meet all applicable regulatory requirements.

2 Personal Information We Collect

Garuda999 only collects information that is genuinely necessary for the stated purposes. The following are the categories of information we collect:

2.1 Information You Provide Directly

• Full name as it appears on your official identification document.
• Date of birth for age verification (18 years and above).
• Active email address used for account communications.
• Mobile number for two-factor authentication and notifications.
• Residential address for regulatory compliance requirements.
• Identity document (MyKad or passport) for the KYC process.
• Bank account or e-wallet details registered for payment transactions.

2.2 Information Collected Automatically

• IP address and geolocation data for security and compliance purposes.
• Browser type, operating system, and device information used.
• Session data including pages visited, time spent, and navigation patterns.
• Transaction logs including deposits, withdrawals, and gaming activity.
• Cookie data and similar tracking technologies (see Section 7).

3 How We Use Your Data

Every piece of information we collect is used solely for legitimate and transparent purposes. garuda999 uses your personal data for the following:

• Account Management: Create, verify, and maintain your member account, including a secure login process.
• Transaction Processing: Process deposits, withdrawals, and all financial transactions accurately and promptly.
• Identity Verification (KYC): Comply with regulatory requirements and prevent money laundering by verifying each member's identity.
• Platform Security: Detect and prevent fraud, bot usage, collusion, and other suspicious activities.
• Service Communications: Send important notifications about your account, transactions, policy changes, and security updates.
• Marketing (with consent): Inform you about the latest promotions, bonuses, and offers where you have given your consent.
• Responsible Gaming: Monitor usage patterns to identify signs of problem gambling and provide appropriate assistance.
• Product Enhancements: Analyze aggregated data to enhance user experience, platform performance, and service quality.

4 Legal Basis for Data Processing

Garuda999 processes your personal data on valid legal grounds in accordance with Malaysia's PDPA. The legal bases we rely on are:

• Contract Fulfillment: Processing is required to fulfill the service agreement between you and garuda999, including account management and payment processing.
• Legal Obligation: Processing is required to comply with regulatory requirements, anti-money laundering (AML) obligations, and KYC requirements set by the relevant authorities.
• Legitimate Interest: Processing for platform security, fraud prevention, and service improvement based on garuda999's legitimate interests.
• Consent: For optional processing such as marketing communications, we obtain your explicit consent, which may be withdrawn at any time.

5 Information Sharing & Disclosure

Garuda999 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your data in the following limited circumstances:

• Service Providers: Technical partners that support platform operations, including payment service providers (DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost), cloud service providers, and gaming software providers. All parties are bound by strict data confidentiality agreements.
• Legal Requirement: When required by a court, law enforcement agency, or regulatory authority with valid jurisdiction.
• Rights Protection: To protect the rights, property, or safety of garuda999, its members, or the public from any threat or fraud.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred to the receiving entity, which will continue to be bound by an equivalent or stricter privacy policy.

6 Security & Data Protection

Garuda999 implements multiple layers of industry-standard technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or disclosure.

• 256-bit SSL Encryption: All data transmitted between your browser and garuda999's servers is encrypted using 256-bit TLS/SSL protocols, ensuring your data cannot be intercepted in transit.
• Secure Password Storage: Your account password is stored as a cryptographic hash that cannot be decrypted by anyone, including garuda999 staff.
• Two-Factor Authentication (2FA): The 2FA system is available for all accounts, adding an extra layer of security during login.
• 24/7 Monitoring: Our automated monitoring system detects and responds to suspicious activity around the clock.
• Internal Access Controls: Access to members' personal data within the garuda999 organisation is restricted to staff who genuinely require it, based on a strict need-to-know principle.
• Regular Security Audits: garuda999 conducts regular security assessments and penetration testing to identify and address any vulnerabilities.

7 Cookies & Tracking Technologies

Garuda999 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser.

• Essential Cookies: Required for core platform operations such as login sessions and security preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collect information about how you use the platform to help us improve website performance and stability.
• Functional Cookies: Remember your preferences and settings such as language, region, and display options to deliver a more personalized experience.
• Analytics Cookies: Help us understand aggregated usage patterns for product and service improvement purposes.

You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality and your experience on the garuda999 platform.

8 Data Retention Period & Deletion

Garuda999 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy or as required by applicable law.

• Active Account Data: Retained for as long as your account is active and in use.
• Data after Account Closure: Financial transaction records and KYC documents are retained for a minimum of 7 years after account closure, in compliance with anti-money laundering legal requirements.
• Security Logs: Access logs and security activity are retained for 2 years for investigation and audit purposes.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.

Once the retention period has expired, your data will be securely deleted or permanently anonymised so that it can no longer be linked to you.

9 Your Rights as a Data Subject

As a garuda999 member and data subject, you hold the following rights regarding your personal data that we process:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete information.
• Right to Erasure: You may request deletion of your personal data in certain circumstances, subject to applicable legal retention obligations.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting any processing that took place prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the relevant data protection authority if you believe your privacy rights have been violated.

To exercise any of the above rights, please contact the garuda999 Privacy & Compliance team via Live Chat or email at [email protected]. We will process your request within 30 business days.

10 Children's Data & Age Protection

Garuda999 does not provide services to individuals under the age of 18. We do not knowingly collect or process personal data from minors. Should we discover that we have inadvertently collected data from an underage individual, we will take immediate steps to delete that information and close the relevant account.

Garuda999 employs a strict age verification process during registration, including identity document checks, to ensure that only eligible adults can access our platform.

11 Links to Third-Party Websites

The garuda999 platform may contain links or integrations with third-party services such as game providers and payment processors. This Privacy Policy applies solely to the garuda999 platform.

Garuda999 is not responsible for the privacy practices or content of third-party websites or services. We encourage you to read the privacy policy of each third-party platform you visit or use separately.

12 Amendments to This Privacy Policy

Garuda999 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use. Any significant changes will be communicated to you via your registered email or through an in-platform notification.

The "Last Updated" date at the top of this document will always reflect the latest version of our Privacy Policy. Your continued use of the garuda999 platform following the publication of any amendments constitutes your acceptance of the updated Privacy Policy.

13 Contact Us – Privacy Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or how garuda999 handles your personal data, please do not hesitate to reach out to us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the platform.
• Privacy Email: [email protected] – We aim to respond within 2 business days.
• FAQ: Visit page FAQ us for answers to the most frequently asked questions.