Important Documents
Member privacy is a top priority at garuda138. This document clearly outlines what data we collect, how it is used, and the full rights you hold as our member in Malaysia.
Our Commitment
This is the foundation of how garuda138 manages and protects the personal data of every Malaysian member.
All data transmitted between your device and garuda138's servers is encrypted using 256-bit SSL protocol — the same standard used by Malaysia's leading banks such as Maybank and CIMB. Your information cannot be intercepted by any party while in transit.
Garuda138 only collects data that is strictly necessary to provide you with our services — no excess data is gathered purely for commercial purposes. Every piece of data we collect has a clearly defined purpose, as outlined in this privacy policy.
Garuda138 has never and will never sell, rent, or share members' personal data with third parties for marketing purposes. Your data belongs to you — we are merely its custodian for the service purposes you have agreed to.
All of garuda138's data management practices are designed and implemented in full compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. This means you have full legal protection over how your data is handled by garuda138.
Access to garuda138 members' personal data within our organisation is restricted to staff who genuinely need it to perform their duties. All access is logged and audited on a regular basis to ensure there is no misuse.
You have the right to access the personal data garuda138 holds about you, correct any inaccurate information, or request deletion of your data at any time. All such requests will be processed within 14 business days.
Important Note: This Privacy Policy explains how garuda138 collect, use, store, and protect your personal data. By registering for or using the garuda138 platform, you agree to the practices described in this Privacy Policy. Please read the full document to understand the rights and protections you have as our member.
This Privacy Policy is published by garuda138 ("us", "Platform") and applies to all registered members, website visitors, and garuda138 mobile app users. This document explains in detail how we handle your personal data in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010.
Garuda138 takes your privacy very seriously. We recognise that as an online gaming platform involving financial transactions, your trust in how we handle your information is paramount. We are therefore committed to managing your personal data responsibly, transparently, and in accordance with applicable Malaysian law.
Official Language: The garuda138 Privacy Policy is published in Bahasa Melayu as the official version for Malaysian members. In the event of any discrepancy in any translation, the Bahasa Melayu version shall be definitive and binding.
Garuda138 only collects data necessary to provide you with a quality and secure service. The data we collect falls under several categories:
| Data Category | Examples of Information | Purpose of Collection |
|---|---|---|
| Identity Information | Full name, identification card (IC) number | Identity verification (KYC), fraud prevention |
| Contact Information | Malaysian phone number, email address | Account communications, security notifications |
| Financial Information | Malaysian bank account number, e-wallet name (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay) | Deposit & withdrawal processing |
| Activity Data | Game history, betting records, transaction history | Account management, fraud detection, responsible gaming |
| Technical Data | IP address, device type, web browser, OS | Account security, platform optimisation |
| Cookie Data | User preferences, login sessions | Better user experience |
Garuda138 not stores your full credit or debit card number. All card transactions are processed through a secure third-party payment gateway that is fully PCI-DSS compliant.
Note: Garuda138 may also receive data about you from third-party sources such as identity verification providers, fraud prevention agencies, and game suppliers for verification and security purposes.
Personal data collected by garuda138 used exclusively for the following purposes:
Garuda138 does not use your data to serve third-party advertisements or share your data with external advertisers without your explicit consent. Any marketing communications from garuda138 itself can be unsubscribed from at any time via your account settings.
Garuda138 has a very clear policy on data sharing: we does not sell members' personal data with anyone, under any circumstances. However, there are limited situations where garuda138 may need to share your data with certain third parties:
Our Commitment: In all of the data-sharing situations described above, garuda138 discloses only the minimum information necessary, and always within the applicable legal protection framework. We never share data for third-party commercial gain.
Garuda138 implementing multiple layers of technical and organisational security controls to protect your personal data from unauthorised access, loss, or misuse:
While garuda138 takes all reasonable steps to protect your data, no system is completely impenetrable. You also play an important role in keeping your account secure — never share your password, exercise caution when logging in from public devices, and ensure your devices have up-to-date security protection.
Platform garuda138 uses cookies and similar tracking technologies to enhance your user experience. Cookies are small text files stored on your device when you visit the garuda138 website or use the app.
Garuda138 uses the following types of cookies:
You can manage your cookie preferences through your web browser or app settings. Please note, however, that disabling essential cookies may affect your ability to use the platform garuda138 in full.
Third-Party Cookies: Game providers and analytics services used by garuda138 may also set their own cookies. These third-party cookie practices are governed by their respective privacy policies and are not under garuda138's direct control.
Garuda138 retains your personal data only for as long as necessary for the purposes stated in this privacy policy, or as required by applicable Malaysian law.
Once the retention period has expired and there is no legal requirement to continue storing your data, it will be securely deleted from our systems garuda138 using methods that ensure the data cannot be recovered.
Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding your personal data held by garuda138:
You have the right to request a copy of your personal data held by garuda138 at any time.
If your data is inaccurate or out of date, you have the right to request that garuda138 correct it.
You may request the deletion of your personal data, subject to any applicable legal retention obligations.
Under certain circumstances, you may request that garuda138 restrict how your data is processed while an issue is being resolved.
You may object to the processing of your data for specific purposes, such as marketing communications from garuda138.
You have the right to receive your data in a machine-readable format for transfer to another party if needed.
To exercise any of the above rights, please contact our support team garuda138 via live chat or email at support@garuda138.world by clearly stating your request. Garuda138 aims to process all data rights requests within 14 business days.
Platform garuda138 is strictly limited to users aged 18 and above. We do not knowingly collect, process, or store any personal data belonging to individuals under the age of 18.
If garuda138 discovers that personal data of a minor has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. If you believe someone under the age of 18 has registered on the garuda138 platform, please contact us immediately at support@garuda138.world so that appropriate action can be taken promptly.
Garuda138 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or added service features.
When material changes are made to this Privacy Policy, garuda138 will notify members via in-platform notifications or their registered email address at least 7 days before the amendments take effect. The "Updated" date at the top of this page will always reflect the latest version.
We encourage you to review the garuda138 Privacy Policy periodically. Your continued use of the garuda138 platform after any amendments take effect constitutes your acceptance of the updated privacy policy.
Current Version: This Privacy Policy takes effect from 1 January 2026 and supersedes all previous versions. If you require an earlier version for reference, please contact garuda138 support.
If you have any questions, concerns, or requests relating to the Privacy Policy garuda138 or about how we handle your personal data, you can reach us through:
Garuda138 aims to respond to all privacy-related enquiries within 2 business days and to resolve data rights requests within 14 business days. All communications are conducted in Bahasa Malaysia for the convenience of our Malaysian members.
If you are not satisfied with garuda138's response to your privacy enquiry, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Digital.
When discussing privacy in the context of an online gaming platform, many people may wonder — "is my data truly safe?" That is a fair question, and we at garuda138 understand why it matters. When you sign up and make a deposit using Touch 'n Go, DuitNow, or GrabPay, you are entrusting us with sensitive information. We do not take that trust lightly.
Our privacy policy is more than a legal requirement — it is a genuine agreement between garuda138 and every one of our members. As you read through this document, you will not find deliberately vague language or hidden clauses that allow us to do anything that could harm you. What you read is exactly what we practice.
Every piece of data that garuda138 collected for a clear purpose. Your name and phone number are required to verify your identity — this protects you from someone using your personal details to register a garuda138 account without your knowledge. Your bank account or e-wallet details are required so that your winnings can be withdrawn to the correct account within 15 minutes.
Your gaming activity history — bets, wins, losses — is stored not to "monitor" your playing patterns, but for several important purposes: first, to detect any suspicious activity that may indicate your account has been accessed without authorisation. Second, to enable responsible gaming tools garuda138 work effectively — if you have set a weekly loss limit, the system needs to know how much you have already lost. Third, for processing the weekly cashback and slots rebate you are entitled to receive.
When you make a deposit using Touch 'n Go eWallet, DuitNow, Boost, ShopeePay, GrabPay, FPX Maybank2u, or CIMB Clicks, the process actually involves several layers of security working simultaneously. The connection between your app or browser and the garuda138 encrypted with 256-bit SSL — meaning that even if someone were able to "intercept" your communications, all they would see is fully encrypted data that is completely unreadable.
Garuda138 never stores your full credit or debit card number in our systems. When you make a payment via FPX or card, your card details are processed directly by a PCI-DSS compliant payment gateway — garuda138 only receives confirmation that the payment was successful, without needing to store your card details. This is an important additional layer of protection for you as a user.
Cookies on the platform garuda138 works to make your gaming experience more convenient and secure. Imagine having to log in again, reset your language preference, and search for your favourite games every time you open the garuda138 app — that would be a frustrating experience. Cookies allow garuda138 to remember your active login session, display preferences, and game settings, making your overall experience feel smoother and more intuitive.
Analytics cookies help the garuda138 understand how our members use the platform — which pages are visited most, which games are most popular, and where users encounter technical difficulties. All such analytics are conducted on aggregated, anonymised data — we do not track individual activity for surveillance purposes. The result is a better garuda138 experience for all our members.
This is a question many members garuda138 wondering. The answer is: the majority of your personal data will be deleted or anonymised within 30 days of your account closure date. However, there are certain categories of data that garuda138 is legally required to retain for a longer period.
Financial transaction records — deposits, withdrawals, betting history — must be retained for a minimum of 7 years in accordance with Malaysian financial and tax legal requirements. This is not optional garuda138, but a legal obligation that applies to all business entities in Malaysia. This data is stored in encrypted form and can only be accessed for audit purposes or legitimate legal requirements.
If you close your garuda138 account due to responsible gaming concerns — for example, you want to take a break from gambling — we retain the necessary information to prevent you from re-registering during your self-imposed "cooling-off" period. This is to protect you, not to penalise you. Garuda138 takes our commitment to healthy and responsible gaming seriously for all our Malaysian members.
Your data is safe with garuda138. Register for free and enjoy a trusted platform with full privacy protection.
The most frequently asked questions by garuda138 members about privacy and data protection, answered clearly in Bahasa Melayu.
Register a Free AccountFour simple steps to exercise your data protection rights as a garuda138 member.
Log in to your garuda138 account. All privacy settings can be managed directly from your account profile page.
Update your personal information, set communication preferences, and manage cookie consent through your garuda138 account settings.
For specific data rights requests such as access, correction, or deletion — contact garuda138 support via live chat.
Garuda138 aims to respond within 2 business days and to resolve all data rights requests within 14 business days.
Garuda138 is fully committed to protecting the privacy of every one of our Malaysian members. All your personal data — registration details, payment information, and activity history — is stored with 256-bit SSL encryption and managed in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. Garuda138 never sells or shares your data to third parties for marketing purposes. You have the full right to access, correct, or request deletion of your data at any time by contacting garuda138 support.
The full terms of use for the garuda138 platform can be found on our Terms & Conditions page.
Read Full Terms & ConditionsRegister a free account today with the confidence that your privacy is always protected. Claim your RM100 welcome bonus and enjoy over 1,000 games with guaranteed security.
Privacy enquiries? Contact us at support@garuda138.world or use the in-platform live chat.