Garuda138 is committed to protecting the privacy of every Malaysian member. This document clearly explains what data we collect, how we use it, who we share it with, and your rights as the owner of that personal data.
Before reading the full document, these six core principles summarise Garuda138's approach to privacy and the protection of Malaysian members' personal data.
All personal data and financial transactions you submit to the Garuda138 platform are protected by 256-bit SSL encryption â the same level of security used by Malaysia's leading banks such as Maybank and CIMB. No data is transmitted without encryption protection.
256-bit SSLGaruda138 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). This means you have legally guaranteed rights to access, correct, and request the deletion of any personal data we hold about you.
PDPA 2010Garuda138 has never and will never sell, rent or trade members' personal data to any third party for marketing or commercial purposes. Your data belongs to you â not to us as a business asset.
No Data SalesGaruda138 only collects personal data that is strictly necessary for platform operations â including account registration, payment processing and legal compliance. We do not collect irrelevant or excessive data.
Minimum DataMembers' personal data is retained only for as long as necessary for the stated purpose or as required by law. Once an account is closed and the mandatory retention period has lapsed, data will be securely deleted or anonymised.
Retention LimitsYou can access, update, and request deletion of your personal data at any time through your account settings or by contacting our support team. You may also withdraw your marketing consent at any time.
Full ControlBy registering for or using the platform Garuda138, you agree to the collection and use of your personal data as described in this Privacy Policy. Please read this document carefully. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.
This Privacy Policy is published by Garuda138 and applies to all users and members of the online Sports Betting and casino platform accessible at garuda138.link. This policy describes our practices regarding the collection, use, storage, disclosure, and protection of your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
"Personal data" in the context of this document refers to any information that can be used to identify you directly or indirectly â including your name, phone number, email address, identification number, financial information, and platform usage data.
This policy should be read alongside Terms & Conditions ours, which constitutes the entire agreement between you and Garuda138. Any terms not defined herein carry the same meaning as in those Terms & Conditions.
When you register or use the platform Garuda138, you provide us with the following personal data:
While you use the Garuda138 platform, our systems automatically collect the following data:
| Data Category | Example | How It Is Collected | Retention Period |
|---|---|---|---|
| Identity | Full Name, MyKad | Registration form | 7 years |
| Contact | Phone, email | Registration form | 7 years |
| Financial | Deposits, withdrawals | Platform transactions | 7 years |
| Technical | IP, browser | Automatic | 2 years |
| Usage | Betting history | Automatic | 5 Years |
| Cookies | Session cookies | Automatic | Until deleted |
Garuda138 uses the personal data collected solely for the following purposes. We do not use your data for any purpose not stated here without obtaining your fresh consent:
Garuda138 does not sell or trade members' personal data to any third party. However, in the course of operating the platform, we may need to share certain data with a limited number of third parties in the following circumstances:
Garuda138 works with carefully selected third-party service providers to support platform operations. These providers may only use your data for the purposes we specify and are bound by strict data protection agreements:
Garuda138 may be required to disclose members' personal data to the following parties on grounds of unavoidable legal obligation:
Garuda138 continuously invests in security infrastructure to protect members' personal data. The technical measures implemented include:
While Garuda138 takes every reasonable step to protect your data, account security is a shared responsibility. You are required to:
As a Garuda138 member protected under Malaysia's PDPA 2010, you have the following rights regarding the personal data we hold. To exercise any of these rights, please contact our customer support team via live chat or email at support@garuda138.link.
Data rights requests will typically be processed within 14 working days. For more complex cases, we may require up to 30 days and will notify you of the reason. Garuda138 will not charge any fee for reasonable data rights requests.
Cookies are small text files stored on your device when you visit a website. The Garuda138 platform uses cookies to ensure a smooth, secure and personalised user experience. Cookies do not contain information that directly identifies you personally, except for session cookies linked to a currently logged-in account.
| Cookie Type | Purpose | Period | Can Be Declined? |
|---|---|---|---|
| Essential Cookies | Login, session security | Session only | No â Required for core functionality |
| Preference Cookies | Save language & display settings | 1 year | Yes â Can be declined |
| Analytics Cookies | Platform usage statistics | 2 years | Yes â Can be declined |
| Security Cookies | Fraud & bot detection | Session only | No â Required for security |
You can manage and delete cookies through your web browser settings. However, blocking essential cookies may affect the functionality of the Garuda138 platform, including your ability to log in. For guidance on managing cookies in your browser, please refer to your browser's help documentation.
As a platform serving the Malaysian market, Garuda138 stores member personal data on servers located within or outside Malaysia. Where personal data is transferred outside Malaysia â for example, to cloud service or technical infrastructure providers â Garuda138 ensures that such transfers occur only to countries or entities that provide a level of data protection equivalent to or greater than Malaysia's PDPA 2010.
All third-party providers who receive Malaysian members' personal data are required to sign binding data processing agreements obligating them to implement security measures equivalent to those used by Garuda138.
The Garuda138 platform is strictly for users aged 21 years and above. We do not knowingly collect personal data from minors. Should we become aware that we have collected personal data from anyone under the age of 21, we will take immediate steps to delete that data and close the associated account.
If you are a parent or guardian and believe that your underage child has registered an account with Garuda138, please contact us immediately by email at support@garuda138.link so that we can take the appropriate action.
Garuda138 reserves the right to update this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or changes to platform operations. The "Last Updated" date at the top of this document will always reflect the most current version.
For material changes â that is, changes that significantly affect how we use or protect your personal data â Garuda138 will provide clear notice via an in-platform announcement or email to active members before the changes take effect. You will have the opportunity to review the changes and, if you disagree, to close your account before they come into force.
If you have any questions, concerns or complaints regarding this Privacy Policy or how Garuda138 handles your personal data, please contact us through:
We will endeavour to respond to all privacy-related enquiries within 5 business days. For more complex complaints involving data deletion or restriction, the response time is up to 14 business days. All privacy-related communications are handled in strict confidence.
In today's digital world, personal data is an extremely valuable asset. When you register on any online platform â including betting platforms such as Garuda138 â you are entrusting us with important information about yourself. We do not take that trust lightly. That is why we have chosen to write this Privacy Policy in clear, plain language rather than lengthy and confusing legal jargon.
Malaysian players using Garuda138 to bet on the Malaysia Super League, EPL, BWF badminton, cricket or any other sport, play poker, live casino or slots â all of these activities involve sensitive financial data flows. Every time you make a deposit via DuitNow or Touch 'n Go eWallet, every time you withdraw winnings via GrabPay or FPX, that transaction information is processed through our security systems. Without proper protection, such information can be misused.
Garuda138 uses 256-bit SSL encryption â and this is not just a technical term that sounds impressive. It means that every packet of data travelling between your device and our servers is rendered unreadable to any third party, even if they manage to intercept it. Think of it as whispering inside a soundproof room â even if someone is right outside the door, they cannot hear a thing.
About Malaysia's PDPA 2010 â Malaysia's Personal Data Protection Act, in force since 2013, provides legal protection for Malaysians regarding their personal data. For players Garuda138, this means you have legally guaranteed rights to know what data we hold about you, request corrections if anything is inaccurate, and in many circumstances, request that your data be deleted. We welcome you to exercise these rights, as they encourage us to consistently maintain the quality and accuracy of the data we keep.
One point we want to make absolutely clear: Garuda138 has never and will never sell member personal data to third parties for marketing purposes. We understand this is a common concern among Malaysian internet users â signing up on one platform only to suddenly receive spam emails or SMS messages from other companies. At Garuda138, that does not happen. Your data stays with Garuda138, used solely to operate your account, and protected to the standards we hold ourselves to.
This Privacy Policy forms part of a broader data protection framework at Garuda138. Please also read Terms & Conditions us (governing your general rights and responsibilities as a member) and Responsible Gaming Policy us (governing self-protection tools and support). Together, these three documents form the complete framework governing your relationship with the Garuda138 platform.
Sign up for free at Garuda138 and enjoy a platform that fully protects your personal data.
Register NowThe Malaysia PDPA 2010 grants you clear rights over your personal data. Garuda138 respects and fully facilitates the exercise of these rights.
Request a copy of all personal data Garuda138 holds about you. We will provide it within 14 working days.
Request correction of inaccurate or incomplete data. Keep your records up to date and accurate at all times.
Request the deletion of your personal data under certain circumstances, subject to legal retention obligations.
Object to the processing of your data for direct marketing purposes at any time, without providing any reason.
To exercise any of the above rights, contact us at support@garuda138.link with the subject line "Privacy Rights Request".