Official Documents

Garuda303 Privacy Policy β€” Data Protection for Malaysian Players

Your privacy is our priority. This document transparently explains how Garuda303 collects, uses, stores, and protects your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Effective: 1 January 2026
Updated: 1 June 2026
PDPA 2010 Compliance
256-bit SSL
Latest β€” June 2026

Garuda303's Commitment to Your Privacy

Six core principles that guide how we handle your data

πŸ”’
256-bit SSL Encryption
All data transmitted between your device and Garuda303's servers is protected by 256-bit SSL encryption β€” the same standard used by Maybank and CIMB to secure your online banking transactions.
πŸ‡²πŸ‡Ύ
PDPA 2010 Compliance
The Garuda303 Privacy Policy is drafted in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) β€” the federal legislation governing the collection and processing of personal data in the country.
🚫
No Sale of Data to Third Parties
Garuda303 has never sold, rented, or traded our players' personal data to any third party for marketing or commercial purposes, and we never will β€” without your explicit consent.
🎯
Minimum Data Collection
We only collect data that is strictly necessary to provide our services to you. Information that is not relevant to platform operations will not be collected β€” this is the principle of "data minimisation" that we uphold.
πŸ‘οΈ
Right of Access & Full Control
You have the right to access, correct, transfer, or request the deletion of your personal data at any time. The process is straightforward and can be completed through your account settings or by contacting the Garuda303 support team.
πŸ“’
Full Transparency
Garuda303 will notify you promptly in the event of any data breach that affects your information. We believe in transparency β€” you have the right to know what happens with your data.
Important Notice to Garuda303 Players

This Privacy Policy describes Garuda303's data processing practices and applies to all users of our platform β€” including the website, mobile app, and all related services. By using the Garuda303 platform, you agree to the terms set out here. Please read this carefully before registering an account.

01Introduction β€” Who We Are and Why Privacy Matters

Garuda303 is a digital entertainment platform offering online casino services, Sports Betting, and a wide range of online games to Malaysian players. As a platform that handles players' financial and personal data, we fully appreciate the sensitivity of the information you entrust to us.

We, Garuda303 (hereinafter referred to as "Garuda303", "We", "Platform"), are the responsible data processor under Malaysia's Personal Data Protection Act 2010 (PDPA). This Privacy Policy has been drafted to meet the requirements of that legislation and to ensure you have a full understanding of your rights with respect to your personal data.

When you register a Garuda303 account, make a deposit via Touch 'n Go eWallet, DuitNow, or any other supported Malaysian payment method, or use any of our services β€” you are placing your trust in us. Garuda303 does not take that trust lightly. Every decision about how we handle your data is made with your best interests as the top priority.

Garuda303's Privacy Promise

We are committed to being fully transparent about the data we collect, explaining precisely how it is used, and giving you complete control over your personal information. For us, privacy is not merely a legal obligation β€” it is a core value we stand by.

02Categories of Personal Data We Collect

Garuda303 collects various types of personal data depending on how you interact with our platform. Below is a detailed breakdown of each data category we may collect:

Data Category Example Information Mandatory / Optional
Identity Data Full name (as per MyKad), MyKad / passport number, date of birth, gender Mandatory
Contact Data Mobile phone number, email address, residential address Mandatory
Financial Data Deposit / withdrawal records, payment methods used (TNG, DuitNow, GrabPay, etc.), bank account name Mandatory
Platform Activity Data Game history, bets placed, favourite games, active session duration Automatic
Technical Data IP address, device type, operating system, browser version, session information Automatic
Communication Data Conversation history with our support team, feedback you have provided Contextual
KYC Data MyKad / passport copy, selfie for facial verification (if required for large withdrawals) Specific
A Note on Sensitive Data

Garuda303 does not collect sensitive data such as your health information, political affiliations, religious beliefs, or sexual orientation. Biometric data (such as fingerprints) is also not collected. Should any KYC process require additional data, you will be informed in advance and your explicit consent will be sought.

03How Garuda303 Collects Your Data

Garuda303 collects your personal data through several methods:

3.1 Information You Provide Directly

This is data you enter directly into the Garuda303 platform, including during new account registration, profile updates, identity verification (KYC), interactions with our customer support team, and participation in promotional programmes or customer satisfaction surveys.

3.2 Automatically Collected Data

When you use the Garuda303 platform, our systems automatically record certain technical information. This includes your device's IP address, browser type and version, operating system, pages visited within the platform, time and duration of each session, and actions taken on the platform such as games played and bets placed.

3.3 Information from Legitimate Third-Party Sources

In certain contexts, Garuda303 may receive information about you from legitimate third parties, such as payment service providers (for example, when you use DuitNow or Maybank2u to make a deposit) and third-party identity verification platforms we engage for KYC purposes. Data received from these sources is handled to the same rigorous standards as data you provide directly.

04How We Use Your Personal Data

Garuda303 uses your personal data only for legitimate purposes, which are clearly stated below. We will not use your data for any other purpose without first obtaining your consent:

  • Account Management: Creating and managing your Garuda303 account, processing logins, and verifying your identity;
  • Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u, CIMB Clicks), and withdrawals to your account;
  • Service Provision: Enabling you to access all games and features on the Garuda303 platform;
  • Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance;
  • Security & Fraud Prevention: Detecting and preventing unauthorised access, fraud, money laundering, and other unlawful activities;
  • Legal Compliance: Fulfilling legal obligations under the PDPA 2010 and anti-money laundering (AML) regulations;
  • Platform Improvement: Analysing usage patterns (in anonymised form) to improve the user experience;
  • Marketing Communications: Sends information about Garuda303 promotions and offers β€” only where you have consented to receive such communications.
About Marketing Emails & Notifications

You may opt out of receiving marketing communications from Garuda303 at any time by clicking the "unsubscribe" link in any of our marketing emails, or by updating your communication preferences in your account settings. Please note that important transactional emails (such as deposit confirmations and security notifications) are not covered by this opt-out and will continue to be sent to keep your account secure.

05Sharing Data with Third Parties

Garuda303 does not sell, rent, or disclose your personal data to third parties for commercial marketing purposes. However, in certain limited and controlled circumstances, we may share your data with the following parties:

5.1 Contracted Service Providers

Companies we engage to provide specific services on behalf of Garuda303 β€” such as payment service providers, identity verification platforms, cloud service providers, and data analysts β€” may receive data solely as needed to carry out their respective functions. All such providers are bound by strict confidentiality agreements and are prohibited from using your data for any other purpose.

5.2 Legal Authorities

Garuda303 complies with all legal obligations and reserves the right to disclose data to the relevant authorities when required by law, court order, or criminal investigation requirements. This includes compliance with anti-money laundering (AML) regulations and the Sedition Act in force in Malaysia.

5.3 Business Transfers

In the event of a merger, acquisition, or transfer of Garuda303's assets, user data may be transferred as part of the business transaction. In such cases, the receiving party will be bound by this Privacy Policy or an equivalent policy providing the same level of protection.

What We Will Never Do

Garuda303 will never: sell your data to advertisers or data brokers; share your betting history with your employer; disclose your financial information to parties without a legitimate legal or contractual need; or use your data to discriminate against you on the basis of any protected personal characteristic.

06Data Storage & Security Measures

The security of your data is Garuda303's foremost technical priority. We implement multiple layers of protection to keep your information safe:

  • Data Encryption in Transit: All communications are protected by 256-bit SSL/TLS;
  • Data Encryption at Rest: Sensitive data is stored in encrypted form using AES-256 algorithms;
  • Strict Access Controls: Only staff with a legitimate operational need are permitted to access players' personal data. Such access is continuously monitored and audited;
  • Two-Factor Authentication (2FA): Available and strongly recommended for all Garuda303 accounts;
  • 24/7 Monitoring: An active threat detection system monitors for any unauthorised access attempts;
  • Regular Security Testing: Security audits and penetration testing are conducted regularly by independent third parties.

6.1 Data Retention Period

Garuda303 retains your personal data for as long as your account remains active or as long as necessary to provide services to you. Upon account closure, data will be retained for a minimum of 7 years to meet Malaysia's financial compliance and tax legal requirements, after which it will be securely deleted.

07Cookies & Tracking Technologies

The Garuda303 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. Cookies are small text files stored in your browser.

7.1 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as staying logged in and session security. These cookies cannot be disabled without affecting platform functionality;
  • Performance Cookies: Collects anonymised information about how you use the platform to help us improve the user experience;
  • Functionality Cookies: Enables the platform to remember your preferences, such as language and display settings;
  • Analytics Cookies: Used to analyse platform traffic and usage patterns in aggregate β€” this data is not linked to your personal identity.

7.2 Managing Your Cookies

You can manage and delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some areas of the Garuda303 platform. For guidance on managing cookies in your browser, refer to the official documentation for the browser you are using.

08Your Rights Under PDPA 2010

As a Malaysian citizen or resident, the Personal Data Protection Act 2010 (PDPA) grants you certain rights over your personal data. Garuda303 respects and facilitates the exercise of the following rights:

πŸ‘οΈ
Right of Access
You have the right to request a copy of all personal data we hold about you. Requests will be processed within 21 business days.
✏️
Right to Rectification
If any of your data is inaccurate or out of date, you have the right to request an immediate correction or update.
πŸ—‘οΈ
Right to Erasure
You may request the deletion of your personal data, subject to applicable legal retention requirements.
🚫
Right to Object
You may object to the processing of your data for direct marketing purposes at any time without providing a reason.
πŸ“€
Data Portability Rights
You have the right to receive your personal data in a structured, machine-readable format for transfer to another platform.
⏸️
Right to Restrict Processing
In certain circumstances, you may request that we restrict how we use your data while your request is being reviewed.
How to Submit a Privacy Rights Request

To submit any request relating to your privacy rights, please email privacy@garuda303.biz stating the type of request, your full name, and your Garuda303 account number. Requests will be acknowledged within 3 business days and resolved within 21 business days.

09Protection of Children's Data

The Garuda303 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from minors. Should we discover that a child's data has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the account in question.

If you believe your child has registered an account with Garuda303 without your consent, please contact our support team immediately at support@garuda303.biz. We will respond within 24 hours.

Minimum Age Requirement: 18 Years

Garuda303 enforces strict age verification. Any account found to belong to an individual under 18 will be terminated immediately and all associated funds will be forfeited. This is a social responsibility we take seriously in order to protect young Malaysians.

10Amendments to This Privacy Policy

Garuda303 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. When material amendments are made:

  • The "Last Updated" date at the top of this page will be updated;
  • In-platform notifications or emails will be sent to all active Garuda303 members;
  • Previous versions of the Privacy Policy will be archived for your reference;
  • Continued use of the platform after the effective date of any amendment constitutes acceptance of the changes.

Garuda303 recommends reviewing this page regularly β€” at least once every 3 months β€” to stay informed about how we protect your privacy.

11Contact the Garuda303 Privacy Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO):

  • Privacy Email: privacy@garuda303.biz
  • General Support Email: support@garuda303.biz
  • Live Chat: Available on the platform 24/7 β€” select the "Privacy & Data" category
  • Response Time: Within 3 business days for email; Within 5 minutes for live chat
  • Support Languages: Bahasa Melayu, English

You may also lodge a formal complaint with Department of Personal Data Protection Malaysia (JPDP) if you believe your privacy rights have been violated and Garuda303 has not resolved the matter to your satisfaction. For more information about your rights, please refer to the Terms & Conditions and Frequently Asked Questions us.

Join Garuda303

Your Data Is Safe β€” Time to Play!

Backed by Garuda303's industry-grade privacy and security standards, register now and enjoy over 1,000 casino games, Sports Betting on the Liga Super Malaysia, EPL, badminton, and much more.

Touch 'n Go GrabPay Boost ShopeePay DuitNow Maybank2u CIMB Clicks
Bahasa Melayu