Official Documents

Privacy Policy garuda303 – Our Commitment to Protecting Your Personal Data

Garuda303 takes the privacy and data protection of every member seriously. This Privacy Policy clearly explains how we collect, use, store, and protect your personal information as a player on our platform.

Updated: 1 January 2026  |  Applies to all Malaysian players

Garuda303's Privacy Commitment to Malaysian Players

Six core principles at the heart of our data protection — not just promises, but everyday practice

256-bit SSL Encryption
All data transmitted between your device and garuda303 servers is protected by 256-bit SSL encryption — the same security standard used by Malaysia's major banks, including Maybank and CIMB.
Secure Data Storage
Your personal data is stored on strictly controlled servers with access limited to authorised personnel only. Passwords are stored as hashes that no one can read — including us.
No Sale of Data to Third Parties
Garuda303 has never and will never sell, rent, or share your personal data with third parties for marketing purposes. Your information belongs to you, and you alone.
Privacy Controls in Your Hands
You may request to view, update, or delete your personal data at any time through our customer support. We respect your right to control your own personal information.
Minimum Data Collection
Garuda303 only collects data that is strictly necessary to deliver our services — we do not request irrelevant or excessive information. The principle of data minimisation is central to how we operate.
Data Breach Notification
In the event of any security incident affecting your data, Garuda303 is committed to notifying you within 72 hours via email or an in-platform notice — in line with global industry best practices.
Security Level
Data Encryption256-bit
Access ControlStrictly Enforced
24/7 MonitoringActive
DDoS ProtectionActive
Your Data Is Safe

Join millions of players who trust Garuda303

Register Now
1. Introduction

garuda303 ("we", "platform", "company") are fully committed to protecting the privacy and data security of every member who uses our online betting platform. This Privacy Policy transparently explains how we collect, use, store, disclose, and protect your personal information when you use the Garuda303 website and services.

As an online betting platform serving the Malaysian market, Garuda303 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international information security standards. We hold your trust in us as something truly invaluable.

Important Note: By using the Garuda303 platform, you consent to the collection and use of your personal information as described in this Privacy Policy. If you do not agree, please discontinue use of the platform.

We encourage you to read this Privacy Policy in full, together with Terms & Conditions us to fully understand the rights and responsibilities of both parties.

2. Personal Information We Collect

Garuda303 collects various types of personal information to enable us to provide a safe, fair, and efficient service to Malaysian players. The following are the main categories of information we collect:

2.1 Account Registration Information

  • Full name as shown on your MyKad or Malaysian passport
  • MyKad or passport number (for KYC identity verification)
  • Date of birth
  • Active email address
  • Malaysia mobile number
  • Password (stored as an unreadable hash)

2.2 Financial & Transaction Information

  • Payment method details used (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX)
  • Deposit and withdrawal history
  • Betting records and gaming activity
  • Bank account holder name (for verification of FPX transfers via Maybank2u or CIMB Clicks)

garuda303 never stores full credit or debit card numbers. All payment transactions are processed through PCI-DSS certified third-party payment gateways.

2.3 Technical & Usage Information

  • Your device's IP address
  • Device type, operating system, and web browser
  • Pages visited and time spent on each page
  • Login activity logs including date, time, and geographic location
  • App usage data if you use the Garuda303 mobile app

2.4 Identity Verification (KYC) Information

To process withdrawals above a certain threshold, or where required by compliance obligations, Garuda303 may request:

  • MyKad copy (front and back)
  • Selfie holding MyKad
  • Recent Malaysian bank statement (not older than 3 months)
Data Category Purpose of Collection Legal Basis Retention Period
Registration Data Account management Consent / Contract For the lifetime of the account + 7 years
Financial Data Transaction processing & AML Legal requirements 7 years (regulatory requirement)
Technical Data Security & service improvement Legitimate interests 13 months
KYC Documents Identity verification & compliance Legal requirements 5 years after account closure
3. How We Use Your Information

Garuda303 uses collected personal information solely for legitimate and necessary purposes. The following are the primary purposes for which your data is used:

3.1 Service Operations

  • Opening and managing your player account at Garuda303
  • Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX
  • Processing withdrawals to your Malaysian e-wallet or bank account
  • Giving you access to all Garuda303 products — Sports Betting, football, Live Casino, lottery, roulette, and virtual sports

3.2 Security & Compliance

  • Verifying your identity to prevent fraud and identity misuse
  • Monitoring account activity to detect and prevent fraud, money laundering, and platform abuse
  • Complying with Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements

3.3 Communications & Support

  • Sending important account notices such as transaction confirmations and security alerts
  • Providing customer support when you contact us
  • Sending promotional information and bonus offers where you have consented to receive marketing communications

3.4 Platform Improvement

  • Analysing usage patterns to enhance the user experience on the Garuda303 platform
  • Conducting research and development for new products
  • Testing and improving the platform's technical features

You may withdraw your consent to receive marketing communications at any time by contacting our customer support. Withdrawal of consent does not affect the validity of any data processing that took place prior to the withdrawal.

4. Information Sharing & Disclosure

Garuda303 does not sell your personal data to any third parties. However, we may share information in the following limited circumstances:

4.1 Trusted Service Providers

We work with third-party service providers who help us run our operations, including:

  • Payment Gateway: Payment processors for Touch 'n Go eWallet, GrabPay, DuitNow, and FPX — only the minimum information required for transaction processing is shared
  • Game Providers: Live casino and slots providers that require minimum session data to enable gameplay functionality
  • Analytics Services: Web analytics tools that help us understand platform usage (data is aggregated and non-identifiable)
  • Cloud Services: Server infrastructure providers that store your data in a secure, encrypted environment

All third-party service providers are bound by confidentiality agreements and are prohibited from using your data for any purpose other than providing their services to Garuda303.

4.2 Legal Requirements

Garuda303 may disclose your personal information where required by Malaysian law or a valid court order, or where we believe disclosure is necessary to:

  • Complying with legal process or requests from Malaysian authorities
  • Protecting the rights, property, or safety of Garuda303, our players, or the public
  • Detecting, preventing, or addressing fraud, security issues, or technical problems

Garuda303 will never disclose your account information to anyone claiming to be a family member or third-party agent without identity verification that has been pre-authorised by you.

5. Cookies & Tracking Technologies

Garuda303 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.

5.1 Types of Cookies We Use

  • Essential Cookies (Required): Required for core platform functions such as login, game sessions, and security. Cannot be disabled.
  • User Preference Cookies: Saving your preferences and settings, such as language and display options, for a better experience.
  • Analytics Cookies: Collects aggregated data on how you use the platform to help us improve our services. This data cannot identify you as an individual.
  • Session Cookies: Automatically deleted when you close your web browser.

5.2 Managing Cookies

You can control and manage cookies through your web browser settings. Most modern browsers allow you to view, delete, or block cookies. However, disabling certain cookies may affect the functionality of the Garuda303 platform — particularly the login and game session features.

6. Data Security Measures

Garuda303 invests heavily in security infrastructure to ensure your data is always protected. The following layers of protection are in place:

  • Encryption in Transit: All communication between your device and garuda303 servers uses TLS 1.3 protocol with 256-bit encryption — no data is transmitted in plain text.
  • Encryption at Rest: All data stored on our servers is encrypted using AES-256 — even if a server is physically accessed by an unauthorised party, the data remains unreadable.
  • Two-Factor Authentication (2FA): We offer 2FA for all accounts to provide an additional layer of security beyond your password.
  • 24/7 Threat Monitoring: Our SIEM (Security Information and Event Management) system continuously monitors all network and platform activity to detect threats in real time.
  • Regular Penetration Testing: Garuda303 conducts regular penetration testing by independent cybersecurity firms to identify and patch vulnerabilities before they can be exploited.
  • Internal Access Controls: Internal access to user data is restricted to personnel who require it, in accordance with the principle of least privilege.

While Garuda303 implements comprehensive security measures, no system can guarantee 100% security in the digital environment. We encourage you to take precautions as well, such as using a strong password and never sharing your login credentials with anyone.

7. Data Retention & Deletion

Garuda303 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal and regulatory requirements.

Active account data is retained for the lifetime of your account. Upon closing your garuda303 account, operational data will be deleted within 90 days; however, financial records and KYC documents will be retained for the period required by Malaysian law (typically 5–7 years) for audit and anti-money laundering compliance purposes.

Technical data such as access logs and activity logs are retained for 13 months for security and diagnostic purposes, then automatically deleted.

7.1 Deletion Upon Request

You may request deletion of your personal data by contacting garuda303 customer support. Deletion requests will be processed within 30 days, except for data that must be retained under legal requirements or that relates to an ongoing investigation.

8. Your Rights as a garuda303 Player

Under Malaysia's Personal Data Protection Act 2010 and Garuda303's own policies, you have the following rights with respect to your personal data:

Right of Access
You have the right to request a copy of all personal data we hold about you. We will provide a report within 14 business days.
Right to Rectification
If your data is inaccurate or out of date, you have the right to request that we update it promptly.
Right to Erasure
You may request the deletion of your personal data under certain circumstances, subject to legal retention requirements.
Right to Withdraw Consent
You may withdraw your consent for marketing communications at any time without affecting your account.
Data Portability Rights
You have the right to request your data in a machine-readable format for transfer to another platform if needed.
Right to Object
You have the right to object to the processing of your data for direct marketing purposes or profiling that you have not consented to.

To exercise any of the above rights, please contact the Garuda303 customer support team via Live Chat or email support@garuda303.ws, stating the right you wish to exercise along with your account details.

9. Children's Privacy

Garuda303 is an adult betting platform intended solely for individuals who are 18 years of age and above. We do not knowingly collect or store any personal information from minors.

Should we discover that a minor's information has been collected without our knowledge — for example, as a result of inaccurate information provided during registration — we will promptly delete that information and close the associated account.

If you are a parent or guardian and believe that your underage child has registered a garuda303 account, please contact us immediately at support@garuda303.ws so we can take the necessary action.

10. Amendments to the Privacy Policy

Garuda303 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, Malaysian legal requirements, or technological developments. The "Updated" date at the top of this page will be revised whenever changes are made.

For amendments that involve material changes to how we process your personal data, garuda303 will provide notice via the email address registered to your account or through a prominent notice on the platform's homepage at least 14 days before the changes take effect.

Your continued use of the Garuda303 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account before the amendment takes effect.

11. Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Garuda303 handles your personal data, please do not hesitate to get in touch with us:

  • Live Chat: Available 24/7 — log in to your Garuda303 account and click the support icon at the bottom right corner of the screen.
  • Privacy Email: support@garuda303.ws — please include "Privacy Inquiry" in the email subject line for a faster response.

We aim to respond to all privacy-related enquiries within 5 business days. For more complex complaints requiring internal investigation, we will update you within 5 business days on the progress and the expected resolution timeline.

Frequently Asked Questions — Privacy Policy

No, absolutely not. Garuda303 has never sold, rented, or traded your personal data to any third party for marketing or commercial purposes, and never will. Your data is only shared with service providers who assist us in operating the platform (such as payment gateways Touch 'n Go and DuitNow), and they are bound by strict confidentiality agreements.

Yes, you may request the deletion of your personal data by contacting our customer support. However, certain categories of data must be retained in accordance with Malaysian legal requirements — in particular, financial records and KYC documents, which must be kept for 5–7 years to meet anti-money laundering compliance obligations. All other data will be deleted within 90 days of your request.

All deposits and withdrawals on Garuda303 — whether via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks) — are processed through PCI-DSS certified payment gateways (Payment Card Industry Data Security Standard). This means Garuda303 does not store your financial account details directly in our systems. 256-bit SSL encryption ensures that all data transmitted between your device and our platform cannot be intercepted.
Your Data Is Safe With Us

Register with Confidence — Your Privacy is Garuda303's Priority

Over 500,000 Malaysian players have trusted Garuda303 with their information. Data security, integrity, and player satisfaction are foundations we have never compromised.

256-bit SSL Data Not Sold Privacy Guaranteed 24/7 Support
Bahasa Melayu