Garuda999 is committed to protecting your personal data and respecting your privacy. This Policy explains what information we collect, how we use it, and the rights available to you as a Garuda999 member.
Six principles that underpin every data decision we make at Garuda999.
All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption — the same standard used by leading Malaysian banks and financial institutions.
Garuda999 does not sell, rent, or trade your personal information to any third party for commercial marketing purposes. Your data belongs to you.
We collect only the personal data that is strictly necessary to operate your account, process transactions, and meet our regulatory obligations. Nothing more.
You have the right to access, correct, or request deletion of your personal data at any time. We respond to all data rights requests within a reasonable and timely manner.
We use cookies solely to improve your experience and to support essential platform functions. We explain every category of cookie we use and give you control over non-essential cookies.
Our data handling practices are aligned with applicable data protection regulations, including anti-money-laundering (AML) and know-your-customer (KYC) obligations relevant to the markets we serve.
This Privacy Policy ("Policy") is issued by Garuda999 ("we", "us", "our") and applies to all personal data collected, processed, stored, or otherwise handled in connection with your use of the Garuda999 website at garuda999.cam and all associated services, features, and communications (collectively, "the Platform").
Garuda999 takes the privacy and security of your personal information seriously. We understand that as a Malaysian-focused online gaming platform handling financial transactions denominated in Malaysian Ringgit (MYR) — including deposits and withdrawals via Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank — the trust our members place in us extends well beyond the gaming experience itself. The responsible handling of your personal data is a fundamental part of the service we provide.
This Policy explains what personal data we collect, the purposes for which we use it, the legal basis on which we process it, how we protect it, and the rights you hold as a data subject. By registering an account on the Garuda999 platform or by continuing to use our Services, you acknowledge that you have read and understood this Privacy Policy.
Note: This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together constitute the full framework governing your use of the Garuda999 platform.
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
Garuda999 collects personal data that falls into the following categories:
We do not collect: Sensitive special-category data beyond what is required for KYC compliance (e.g., race, political opinions, religious beliefs, biometric data, or medical records), except where a User voluntarily discloses such information in a support interaction.
Garuda999 collects your personal data through the following methods:
| Method | Examples |
|---|---|
| Direct Submission | Account registration form, KYC document upload, withdrawal requests, contact form submissions, live chat interactions |
| Automated Technical Collection | Cookies, server logs, session tracking, IP address recording, device fingerprinting for fraud detection |
| Payment Processors | Transaction confirmation data returned by Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, and banking partners |
| Third-Party Verification | Identity verification responses from KYC service providers used for document authentication |
| Analytics Platforms | Aggregated behavioural analytics from platform usage, used in anonymised form for product improvement |
Garuda999 processes your personal data for the following purposes:
To create, manage, and maintain your Garuda999 account; to authenticate your identity at login; to process deposits and withdrawals; and to communicate account-related information including transaction confirmations and security alerts.
To fulfil our obligations under applicable anti-money-laundering (AML), know-your-customer (KYC), and counter-terrorism financing (CTF) regulations. This includes verifying your identity, monitoring transactions for suspicious activity, and reporting to relevant regulatory authorities where legally required.
To detect, investigate, and prevent fraudulent activity, account abuse, bonus exploitation, and other conduct that violates our Terms and Conditions. This includes the use of automated risk-scoring systems and manual review by our compliance team.
To monitor betting patterns that may indicate problem gambling behaviour; to enforce self-exclusion and deposit limit requests; and to respond to requests from responsible gambling support organisations where legally required to do so.
To respond to enquiries, resolve disputes, handle complaints, and improve the quality of our support services based on past interaction records.
To analyse usage patterns, identify technical issues, and improve the features, performance, and user experience of the Garuda999 platform. This analysis is conducted primarily on aggregated and anonymised data.
To send you promotional communications, bonus offers, and platform updates, but only where you have provided your consent to receive such communications. You may withdraw this consent at any time by updating your notification preferences in your account settings or by contacting our support team.
Garuda999 processes your personal data on the following legal bases:
Garuda999 does not sell, rent, or trade your personal data. We share your data only in the following circumstances and only to the extent strictly necessary:
We engage trusted third-party service providers who process personal data on our behalf, including payment processors (e.g., FPX gateway operators, e-wallet providers), KYC verification service providers, cloud hosting infrastructure providers, and customer support platform operators. All such providers are contractually bound to process your data only in accordance with our documented instructions and applicable data protection obligations.
We may disclose personal data to regulatory authorities, law enforcement agencies, or other government bodies where we are legally required to do so — for example, in response to a court order, a lawful investigation, or an AML reporting obligation.
In the event of a merger, acquisition, restructuring, or sale of all or part of Garuda999's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any resulting changes to this Privacy Policy.
✓ Our Commitment: We will never share your personal data with advertisers, data brokers, or any party for commercial marketing purposes without your explicit and informed consent.
Some of our third-party service providers — including cloud infrastructure and KYC verification partners — may process data in jurisdictions outside Malaysia. Where such international transfers take place, Garuda999 takes reasonable steps to ensure that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses and assessments of the data protection standards in the destination jurisdiction.
If you have questions about the specific safeguards applicable to the transfer of your data outside Malaysia, please contact us at [email protected].
Garuda999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including any legal, regulatory, accounting, or reporting obligations.
As a general guide:
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.
The Garuda999 platform uses cookies and similar tracking technologies to ensure the proper functioning of the Platform, to remember your preferences, and to support our analytics and security functions.
| Category | Purpose | Required? |
|---|---|---|
| Strictly Necessary | Essential for platform operation — session management, login authentication, security tokens | Yes |
| Functional | Remember your language preference, display settings, and last-visited game category | No |
| Analytical | Aggregate usage data to understand platform performance and popular features (anonymised) | No |
| Fraud Detection | Device fingerprinting and behavioural signals used to identify suspicious activity | Yes |
You may control or disable non-essential cookies through the cookie preference settings available on the Garuda999 platform. You may also manage cookies via your browser settings; however, disabling strictly necessary cookies may impair the functionality of the Platform and prevent you from accessing certain features, including your account.
Garuda999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, Garuda999 will notify affected users in accordance with applicable notification obligations.
⚠ Your Responsibility: You are responsible for maintaining the security of your account credentials. Never share your password with any third party. If you suspect unauthorised access to your account, contact us immediately at [email protected].
As a data subject, you hold the following rights in relation to the personal data that Garuda999 holds about you. To exercise any of these rights, please contact us via live chat or at [email protected].
You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed, the categories of data held, and the recipients to whom it has been or will be disclosed.
You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Where personal data has been shared with third parties, we will take reasonable steps to inform those parties of the correction.
You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing. Please note that this right is subject to our legal retention obligations, which may require us to retain certain data (e.g., transaction records) notwithstanding an erasure request.
You may request that we restrict the processing of your personal data in certain circumstances, such as where the accuracy of the data is contested or where you have objected to processing and a determination is pending.
Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
You have the right to object to the processing of your personal data where such processing is based on our legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease processing your data for that purpose immediately.
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.
Response Timeframe: Garuda999 aims to respond to all data rights requests within thirty (30) days of receipt. For complex requests, this period may be extended by a further two months, in which case we will notify you of the extension and the reasons for it.
The Garuda999 platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. If you are under 21 years of age, you are not permitted to register an account or use any of the Services provided by Garuda999.
If we become aware that personal data has been collected from a person under 21 without verifiable parental consent, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child may have provided personal data to Garuda999, please contact us immediately at [email protected].
Garuda999 reserves the right to update or revise this Privacy Policy at any time, at our sole discretion. Whenever material changes are made to this Policy, we will take reasonable steps to notify registered Users — which may include displaying a prominent notice on the Platform, sending a notification to the email address associated with your account, or both.
The date at the top of this document reflects the date on which this Privacy Policy was most recently updated. Your continued use of the Garuda999 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must cease using the Platform and close your account.
We recommend reviewing this Privacy Policy periodically to stay informed of any updates and to understand how Garuda999 continues to protect your personal data.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which Garuda999 processes your personal data, please contact our Customer Support team through any of the following channels:
Our Customer Support team is available 24 hours a day, 7 days a week, in English, Bahasa Melayu, and Chinese. For formal data rights requests, please include "Data Rights Request" in the subject line of your email to ensure your enquiry is directed to our compliance team without delay.
Support Hours: 24 hours / 7 days a week | Languages: English · Bahasa Melayu · 中文 | Email: [email protected]
Request a copy of all personal data we hold about you at any time.
Have inaccurate or incomplete data corrected promptly.
Request deletion of your data where no legal obligation requires us to retain it.
Pause processing of your data in certain prescribed circumstances.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests or for direct marketing.
Our support team handles all privacy and data rights enquiries in English, Bahasa Melayu, and Chinese — 24 hours a day, seven days a week. Reach us via live chat for a response in under 5 minutes, or explore our FAQ for quick answers to common questions.
For players aged 21 and above only. Please play responsibly.