Official Documents

Privacy Policy Garuda303 — Protection of Your Personal Data

At garuda303, your privacy is not merely a legal obligation — it is our genuine commitment. Find out exactly how your personal data is collected, used, and protected on our platform.

Updated: 1 January 2026  |  Version 2.5
256-bit
SSL Encryption
KYC
Identity Verification
2FA
Account Security
PDPA
Legal Compliance

Privacy Statement: garuda303 handles your personal data with complete integrity. This Privacy Policy transparently explains how we manage your information from the moment of registration through every transaction and interaction on our platform. We do not sell your data to any third party for marketing purposes.

1Introduction

Garuda303 ("we", "our platform") values the privacy of every user who entrusts us with their personal information. This Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices in data management.

This document explains the types of personal data we collect, the purposes of collection, how we store and protect that data, who may receive your data, and your rights as a user regarding your own personal data.

This Privacy Policy applies to all users who register or use the garuda303 platform, including the garuda303.vin website, the garuda303 mobile app, and all related services. By registering or using our platform, you consent to the collection and processing of data as outlined in this policy.

Data Controller: garuda303 acts as the data controller for all personal information collected through our platform. We take full responsibility for ensuring your data is processed lawfully, fairly, and transparently.

2Personal Data We Collect

We collect only the data genuinely necessary to provide you with a safe and efficient service. Below are the categories of data we collect:

Data Category Example Information Primary Purpose
Identity Data Full name, date of birth, IC/passport number Registration & KYC
Contact Data Email address, mobile number Communications & OTP
Financial Data Bank account number, bank name, transaction records Deposits & withdrawals
Technical Data IP address, device type, browser, OS Security & fraud detection
Usage Data Games played, total wagering amounts, session duration Analytics & responsible gaming
Location Data Country, region (based on IP) Geography & security compliance

We also collect data indirectly through cookies, tracking pixels, and approved third-party analytics tools. This data is used solely to improve user experience and platform security.

Data Minimisation Principle: garuda303 practises the principle of data minimisation — we only collect what is strictly necessary. You may contact us at any time to find out what specific data we hold in relation to your account.

3How Your Personal Data Is Used

The data we collect is used for clearly defined, legitimate purposes. We do not use your data for any other purpose without notifying you in advance. The following outlines our data processing purposes:

  • Account management: Creating, verifying, and managing your user account, including login, profile settings, and activity history.
  • Transaction processing: Verifying and processing deposits, withdrawals, and fund transfers securely and accurately.
  • Identity verification (KYC): Meeting anti-money laundering (AML) legal requirements and verifying that users are legitimate individuals aged 18 and above.
  • Fraud prevention: Detecting and investigating any suspicious activity, including unauthorised login attempts and unusual transactions.
  • Service communications: Sending transaction notifications, security alerts, policy updates, and important information related to your account.
  • Customer support: Processing and responding to enquiries, complaints, or requests submitted to our support team.
  • Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate support when needed.
  • Legal compliance: Fulfilling our obligations under applicable Malaysian law, including PDPA 2010, AMLA, and other regulatory requirements.
Marketing: We only send you promotional communications if you have given explicit consent during registration or through your account settings. You may unsubscribe at any time via the unsubscribe link in any email or by updating your communication preferences in your account profile.

4Data Storage & Security

Garuda303 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

  • 256-bit SSL encryption: All data transmitted between your device and our servers is protected by 256-bit TLS/SSL encryption — the same security standard used by leading financial institutions worldwide.
  • Stored data encryption: Sensitive data, including financial information and KYC documents, is stored in encrypted form using the AES-256 algorithm.
  • Strict access controls: Only authorised garuda303 staff with a legitimate business need may access user personal data. All access is logged and monitored.
  • Two-factor authentication (2FA): We support 2FA for user accounts as an additional layer of protection against unauthorised access.
  • 24/7 Monitoring: Our systems are continuously monitored to detect any security threats or anomalies in real time.
  • Retention period: Active account data is retained for the lifetime of your account. After account closure, data is kept for seven years to meet AML legal requirements before being securely deleted.
In the Event of a Data Breach: In the event of a data security breach that affects your rights and freedoms, garuda303 will notify you within 72 hours of becoming aware of the incident, in line with international data protection best practices.

5Data Sharing with Third Parties

Garuda303 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We may share your data only in the following limited and controlled situations:

  • Approved service providers: Payment providers (DuitNow, FPX, Touch 'n Go, Boost, GrabPay), licensed game providers, and technical infrastructure providers that support our platform operations. All providers are bound by strict data protection agreements.
  • Regulatory authority: Law enforcement agencies, financial regulatory bodies, or courts when required by law or a valid court order.
  • KYC verification: Certified third-party identity verification services to meet our AML/KYC requirements.
  • Protection of our rights: In cases where it is necessary to detect, investigate, or take legal action in relation to fraud, money laundering, or violations of our terms of service.
  • Business transfers: In the event of a company merger, acquisition, or asset sale, with advance notice provided to users.

In all of the above situations, only the minimum data required for the specific purpose will be shared. We ensure that all third parties receiving your data comply with data protection standards equivalent to or higher than this Privacy Policy.

6Cookies & Tracking Technologies

Garuda303 uses cookies and similar tracking technologies to enhance your experience on our platform, secure your login session, and understand how users interact with our website.

  • Essential cookies (required): Required for core platform functions such as login session authentication, security, and your basic preferences. These cookies cannot be disabled without affecting platform functionality.
  • Performance cookies: Collecting information on how you use the platform — pages visited, time spent, and errors encountered — to help us improve our service.
  • Functional cookies: Saving your preferences such as language, display settings, and personal choices to deliver a more personalised experience.
  • Analytics cookies: Used in conjunction with approved analytics tools to understand usage trends and continuously improve the platform.
Cookie Controls: You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect platform functionality. More information on managing cookies is available in your browser's privacy settings.

7Your Rights as a User

Under Malaysia's PDPA and international data protection best practices, you have the following rights regarding your personal data held by garuda303:

Right of AccessRequest a copy of the personal data we hold about you at any time.

Right to RectificationRequest correction of any inaccurate or incomplete data in our records.

Right to ErasureRequest the deletion of your data, subject to our legal retention obligations.

Right to ObjectObject to the processing of your data for direct marketing purposes at any time.

Right to RestrictionRequest that we restrict the processing of your data under certain legally permitted circumstances.

Right to PortabilityReceive your data in a structured, machine-readable format for transfer to another service.

To exercise any of the above rights, please contact our privacy team by email at [email protected], clearly stating the right you wish to exercise and your account details for identity verification. We will respond within 14 business days.

8International Data Transfers

Garuda303 operates a server infrastructure distributed across multiple locations to ensure optimal platform performance and high service availability. This means your personal data may be transferred to, and processed in, countries outside Malaysia.

However, any international data transfer we carry out is subject to adequate safeguards, including:

  • Transfers to countries recognised as having data protection standards equivalent to Malaysia.
  • Use of approved standard contractual clauses with data recipients in other countries.
  • Ensuring third-party infrastructure providers comply with internationally recognised security standards, including ISO 27001 and SOC 2.
Your Rights: You have the right to request further details about the safeguards applied to international transfers of your data. Contact us at [email protected] for any enquiries on this matter.

9Child Protection

The garuda303 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from minors or individuals below the legal age in their respective countries.

All account registrations go through a strict age verification process, including KYC checks requiring valid identification documents. Should we find that we have collected data from anyone under the age of 18, the account will be immediately closed and all related data securely deleted.

Report a Concern: If you believe a minor may have registered or used our platform without authorisation, please contact us immediately at [email protected]. We take all such reports seriously and will respond within 24 hours.

10Amendments to This Privacy Policy

Garuda303 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. Any amendments will be published on this page with an updated effective date.

For significant amendments that affect how we process your personal data, we will provide reasonable notice via:

  • Email to your registered address at least 14 days before the amendment takes effect.
  • In-platform notifications when you log in to your account.
  • A clear update notice displayed at the top of this Privacy Policy page.

Continued use of the garuda303 platform after any amendments take effect will be considered your acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account and stop using the platform.

11Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, our privacy team is here to help.

Privacy Email
Response within 14 business days
Live Chat
24/7 Support in Bahasa Melayu
Average response time < 2 minutes
Official Complaints: If you are not satisfied with our response to your privacy complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the provisions of PDPA 2010.

Data Security is Our Priority

Behind every privacy policy you read is a robust security infrastructure and a team dedicated to maintaining your trust.

Bank-Grade Encryption

Your data is protected with 256-bit SSL encryption and AES-256 for stored data — the same standard used by major Malaysian banks to protect their customers' information.

Transparent & Secure KYC

Our KYC process uses certified digital identity verification technology. Your documents are stored with full encryption and accessed only by authorised personnel.

No Data Selling

We have never and will never sell, rent, or trade your personal data to advertisers or third-party data brokers. Your data belongs to you, entirely.

Malaysia PDPA Compliance

Garuda303 operates in full compliance with Malaysia's Personal Data Protection Act 2010. Our compliance team ensures all data processing practices are kept current with the latest legal developments.

2FA for Your Account

Two-factor authentication is available and strongly recommended for all garuda303 accounts. This additional security layer ensures only you can access your account, even if your password is compromised.

Regular Security Audits

Our data security infrastructure undergoes regular independent audits by certified cybersecurity firms. The findings are used for continuous improvement of our data protection systems.

Your Data, Safe With Us

Ready to Play Confidence?

Create your garuda303 account today and enjoy over 1,000 game options on a platform that safeguards your privacy and data security to the highest standard.

Bahasa Melayu