Privacy Policy Garuda55 – Malaysia Member Personal Data Protection

This privacy policy applies to all services offered by garuda55 through the garuda55.vin website, the garuda55 mobile app for Android and iOS, and all official garuda55 communication channels including support email and in-platform live chat.

By registering an account with garuda55 or using any of our services, you agree to the collection and use of your personal information as described in this privacy policy. If you do not agree with any part of this policy, you should not use garuda55's services.

Garuda55 is the data controller for the personal information you provide through our platform. This means we are responsible for deciding how and why your data is processed, and for ensuring that processing complies with all applicable privacy requirements.

Garuda55 collects various types of personal data in the course of providing our services. Below is an overview of the data categories we collect:

Garuda55 also collects data you provide voluntarily, such as communication preferences, platform feedback, and other information you share with us through customer support channels.

Your personal data is used by garuda55 solely for legitimate purposes directly related to the provision of our platform services. Specifically, garuda55 uses your data for the following purposes:

• Account management — Creating and maintaining your account, processing logins, and managing account settings.
• Transaction processing — Processing deposits, withdrawals, and all financial activities related to your garuda55 account.
• Identity verification — Carrying out KYC processes required to ensure platform security and compliance with anti-money laundering requirements.
• Customer Support — Providing effective and relevant assistance when you contact the garuda55 support team.
• Platform security — Detecting and preventing fraud, unauthorised access, and activities that violate the terms of use.
• Service improvements — Analysing usage patterns in aggregate to improve the garuda55 platform user experience.
• Service communications — Sending important notifications about your account, transactions, or changes to garuda55 policies.
• Legal compliance — Fulfilling legal and regulatory obligations applicable to garuda55 operations.

Garuda55 only processes your personal data when there is a valid legal basis for doing so. The legal bases we rely on include:

• Contract performance — Most of our data processing is necessary to fulfil the service agreement between garuda55 and you as a member, including transaction processing and account management.
• Legal obligations — Some data processing is mandatory to comply with legal requirements, such as KYC records and financial transactions for anti-money laundering purposes.
• Legitimate interests — Garuda55 processes certain data on the basis of legitimate business interests, such as fraud detection and platform security, which also serve your interests as a member.
• Consent — For certain types of data processing, such as optional marketing communications, we will obtain your explicit consent beforehand.

Garuda55 does not sell your personal information to any third party. However, in the course of delivering our services, there are certain situations where we may need to share your personal data with selected third parties:

• Payment providers — To process deposits and withdrawals, garuda55 shares the necessary transaction information with certified payment gateways such as FPX and e-wallet providers.
• Technology service providers — Companies providing the technical infrastructure for garuda55 operations, subject to strict data processing agreements.
• Game providers — Information required to ensure a seamless gaming experience with certified game providers integrated within the garuda55 platform.
• Legal authorities — Garuda55 will disclose required data where mandated by law, court order, or lawful investigation by a competent authority.

All third parties that receive personal data of garuda55 members are bound by strict confidentiality and data protection agreements. Garuda55 conducts regular reviews of all such third parties to ensure they maintain the required data security standards.

The garuda55 platform uses cookies and similar tracking technologies to enhance the user experience and ensure optimal platform performance. Cookies are small text files stored on your device when you visit the garuda55 platform.

Types of cookies used by garuda55:

• Essential cookies — Required for core platform functions such as login authentication and session security. Without these cookies, the garuda55 platform cannot function properly.
• Performance cookies — Collecting information on how users interact with the garuda55 platform to help us identify issues and improve our services.
• Functional cookies — Allows the platform to remember your preferences such as language and display settings to provide a more personalised experience.

You can manage your cookie settings through your browser settings. However, disabling certain cookies may affect the functionality of the garuda55 platform and your gaming experience.

Your personal data security is garuda55's top priority. We implement comprehensive technical and organisational security measures to protect your data from unauthorised access, loss, or misuse.

Garuda55's key security measures include:

• 256-bit SSL encryption for all data transmitted between your device and garuda55's servers.
• Passwords are stored using irreversible one-way hashing algorithms.
• 24/7 server security monitoring with automated intrusion detection systems.
• Access control based on the principle of least privilege — garuda55 staff are only granted access to the data strictly necessary for their role.
• Regular security audits conducted by independent experts.
• Regular data backups with tested recovery procedures.

Garuda55 retains your personal data for the period necessary for the original purpose of collection. Financial transaction records are retained in accordance with the timeframes required by applicable law. When data is no longer needed, it is securely disposed of using industry-recognised procedures.

In the course of operating the garuda55 platform, your personal data may be stored or processed on servers located outside Malaysia. This includes the use of cloud infrastructure that may store data across multiple geographic locations.

Whenever your personal data is transferred outside Malaysia, garuda55 ensures that:

• The destination country or region has adequate data protection in place, or
• Appropriate data transfer agreements have been established between garuda55 and data recipients in the relevant country.
• Technical and organisational protection measures equivalent to those in Malaysia are applied to safeguard your data.

Garuda55 prioritises the use of infrastructure providers with a strong track record in data protection compliance and cybersecurity.

As a garuda55 member, you have certain rights regarding the personal data we hold about you. garuda55 respects and facilitates the exercise of these rights:

The garuda55 platform is strictly for adult users aged 18 and above. garuda55 does not knowingly collect or process personal data from individuals under the age of 18.

If garuda55 discovers that personal data of a child (an individual under the age of 18) has been collected without our knowledge, we will take immediate steps to delete the relevant data and close the associated account.

If you believe that a child's personal data has been submitted to garuda55 without appropriate consent, please contact our support team immediately so corrective action can be taken without delay.

If you have any questions, concerns, or wish to exercise your privacy rights regarding how garuda55 handles your personal data, you may contact us via:

• Live Chat — The fastest method. Use the live chat feature on the garuda55 platform for an immediate response from our support team, available 24/7.
• Support Email — Send your privacy enquiry to the garuda55 team via our support email address. We will respond within 2 business days.

For requests related to data rights such as access, correction, or deletion, please include the following to expedite processing: your full name and garuda55 account username, the type of request being submitted, and any other relevant information.