Information We Collect
Garuda303 collects various types of personal information during the registration process and through the use of our platform. All data collection is carried out transparently, with a clear purpose, and only to the extent necessary to provide high-quality service to you as our member.
Information you provide directly: This includes your full name, date of birth, national ID or passport number, residential address, mobile number, email address, and bank account or e-wallet information. This information is collected during the account registration process and during the KYC identity verification process.
Information collected automatically: When you use the garuda303 platform, we automatically collect technical information including your IP address, browser type and version, device type, operating system, screen resolution, and session data such as pages visited, time spent, and actions taken on the platform.
Financial transaction information: garuda303 maintains complete records of all deposit, withdrawal, and wagering transactions made in your account. These records are essential for ensuring accuracy, resolving disputes, and meeting applicable legal compliance requirements.
- Full name and identity document information
- Contact information: email, phone number, address
- Bank account details and payment methods
- Gaming activity records and transaction history
- Device data: IP, browser type, operating system
- Cookies and session data during platform use
Garuda303 never stores credit or debit card numbers directly. All payments are processed through PCI DSS-compliant payment gateways and are fully encrypted.
How We Use Your Information
Garuda303 uses collected personal data exclusively for legitimate and necessary purposes to provide you with the best possible service. We do not use your data for any other purpose without first obtaining your consent.
Account management and authentication: Your personal data is used to create and manage your garuda303 account, verify your identity at login, process financial transactions, and maintain the security of your account at all times.
Legal compliance and fraud prevention: garuda303 is legally required to conduct Know Your Customer (KYC) and Anti-Money Laundering (AML) procedures. Your data is used to fulfill these legal obligations, detect suspicious activity, and protect all platform users from fraud.
Service improvement: We analyse platform usage patterns in aggregate and anonymised form to improve the user experience, enhance the interface, and develop more useful new features. Individual data is not used for this purpose without anonymisation.
Communication and support: Your contact information is used to send important account-related notifications, customer support responses, announcements of changes to terms or policies, and promotional information you have agreed to receive.
You may opt out of marketing communications from garuda303 at any time by updating your notification preferences in your account settings or by contacting our support team.
Data Sharing With Third Parties
Garuda303 understands the importance of your privacy and will never sell your personal data to any third party. However, there are certain situations where we need to share your information with others to ensure our services function properly and remain legally compliant.
Authorised service providers: garuda303 works with carefully selected service providers, including payment processors, cloud service providers, identity verification providers, and gaming technology companies. All these partners are bound by strict confidentiality agreements and are prohibited from using your data for any purpose other than the tasks assigned to them.
Legal requirements: garuda303 will disclose user information to the relevant authorities when required by law, court order, or official investigation by a law enforcement agency. In such situations, we will notify you to the extent possible unless legally prohibited from doing so.
Rights protection and security: We may share necessary information to investigate and prevent fraud, protect the safety of other users, or defend garuda303's legal rights in legal proceedings.
All third parties working with garuda303 have signed data processing agreements that comply with PDPA standards. We conduct annual reviews of all partners to ensure ongoing compliance.
Cookies and Tracking Technologies
Garuda303 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the garuda303 website.
Essential cookies: These cookies are required for the platform's basic operations and cannot be disabled. They enable features such as login authentication, session security, and language preferences to function correctly. Without these cookies, the garuda303 platform will not operate normally.
Performance and analytics cookies: garuda303 uses analytics tools to understand how users interact with our platform. This data is collected anonymously and used solely to improve the performance and usability of the website.
Functional cookies: These cookies store your preferences such as interface language, display settings, and other configurations so you do not need to reset them each time you visit the platform.
You can manage and delete cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and user experience of the garuda303 platform.
Data Security & Encryption
Garuda303 continually invests in the latest security infrastructure to ensure your personal data is protected to the highest standard. We apply the same security standards used by major financial institutions to maintain your trust.
All communications between your browser or mobile app and garuda303's servers are secured using TLS 1.3 protocol with 256-bit encryption. This means every bit of information transmitted — including login credentials, payment details, and personal data — is fully encrypted and unreadable by any third party while in transit.
Data stored in our databases is also encrypted using high-standard AES-256 encryption. User passwords are stored as hashes using the bcrypt algorithm with a random salt, meaning that even in the event of a database breach, your actual password cannot be retrieved.
Garuda303 conducts regular penetration testing performed by accredited independent cybersecurity firms. Any identified vulnerabilities are addressed promptly in accordance with our established incident response protocol.
In the event of a data breach affecting your personal information, garuda303 is committed to notifying you within 72 hours of becoming aware of the incident, in line with international data breach notification standards.
Your Rights Over Personal Data
As a garuda303 user, you hold strong rights over your personal data. garuda303 fully respects these rights and provides straightforward mechanisms for you to exercise them.
Right of Access
You have the right to obtain a copy of all personal data we hold about you at any time.
Right to Rectification
You may request the correction of any inaccurate or incomplete personal data in our records.
Right to Erasure
You may request the deletion of your personal data, subject to our legal data retention obligations.
Right to Object
You may object to the processing of your data for direct marketing purposes or our legitimate business interests.
Right to Data Portability
You have the right to receive your data in a structured, machine-readable format for transfer to another platform.
Right to Restriction
You may request that we restrict the processing of your data under certain circumstances during an investigation or dispute.
To exercise any of the above rights, please contact garuda303's Privacy Officer by email at [email protected]. We will respond to your request within 30 business days. In complex situations, this period may be extended up to 90 days, with prior notification to you.
International Data Transfers
Garuda303 operates globally and our technology infrastructure may involve data processing across multiple locations worldwide. Transfers of your personal data overseas are carried out only when necessary and with adequate safeguards in place.
Every international data transfer carried out by garuda303 is subject to appropriate safeguard mechanisms, including standard contractual clauses approved by the relevant data protection authority, or other transfer mechanisms recognised under applicable law.
We ensure that all overseas data recipients provide a level of data protection at least equivalent to that provided by garuda303 and Malaysian law. This includes the requirement to implement appropriate technical and organisational security measures.
The primary garuda303 servers storing Malaysian user data are housed in data centres compliant with ISO 27001 standards. We prioritise local data processing wherever feasible.
Children's Privacy
Garuda303 is a platform strictly restricted to individuals aged 18 and above. We do not knowingly collect or process personal data of minors. This is a non-negotiable policy under any circumstances.
Should we discover that personal data of an underage child has been inadvertently collected through identity fraud or other means, we will take immediate action to delete that data and close the account in question. Parents or guardians who become aware that their child holds a garuda303 account are urged to contact us immediately.
If you become aware that someone under the age of 18 has used the garuda303 platform, please contact us immediately at [email protected] so that immediate action can be taken.
Privacy Policy Changes
Garuda303 reserves the right to amend or update this privacy policy from time to time to reflect changes in our practices, new legal requirements, or relevant technological developments. All changes will take effect after appropriate notice has been given to you.
When we make significant changes to this privacy policy, we will notify you via in-platform notifications, an email to your registered address, or a prominent announcement on the garuda303 homepage. The "Updated" date at the top of this policy will always reflect the date of the current version.
Your continued use of the garuda303 platform after any privacy policy changes take effect will be considered your acceptance of the updated policy. We encourage you to review this privacy policy periodically to stay informed about how we protect your personal data.
Contact Our Privacy Officer
Garuda303 has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with data protection laws and handling all privacy-related inquiries and complaints from our users.
If you have any questions, concerns, or complaints regarding how garuda303 handles your personal data, or if you wish to exercise your rights under this privacy policy, please contact our Privacy Officer through the following channels:
- Email: [email protected]
- Live Chat: Available 24 hours a day, 7 days a week within the platform
- Target response time: 3 business days for general inquiries, 30 days for data rights requests
We are committed to addressing all privacy-related inquiries and complaints seriously, transparently, and within a reasonable timeframe. Your trust is the foundation of our service, and we will never take our responsibility to protect your privacy lightly.
The garuda303 privacy team is available to assist you 24/7. Every complaint or inquiry received will be logged with a reference number and managed systematically until fully resolved.