Garuda55 Privacy Policy
Your privacy matters to us. This Privacy Policy explains what personal data Garuda55 collects from you, how we use and protect it, and the rights available to you under applicable data protection principles.
Our Privacy Commitments at a Glance
A plain-language summary of how Garuda55 treats your personal information.
No Data Selling
Garuda55 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes — ever.
256-Bit Encryption
All data transmitted between your device and Garuda55 is protected using industry-standard 256-bit TLS encryption at all times.
Your Rights, Respected
You have the right to access, correct, restrict, or request deletion of your personal data at any time by contacting our support team.
Minimal Collection
We only collect the personal data that is strictly necessary for account operation, regulatory compliance, and delivery of our services.
No Third-Party Marketing
Your contact details will never be shared with third-party marketing companies. Any communications you receive from us are directly from Garuda55.
Clear Retention Limits
We retain your personal data only for as long as is necessary for the purposes set out in this Policy and as required by applicable law and regulatory obligations.
Introduction
Garuda55 ("we", "us", "our", or "Garuda55") is committed to protecting and respecting the privacy of all individuals who access or use the Garuda55 online gaming and sports betting platform, accessible at garuda55.cam (the "Platform").
This Privacy Policy ("Policy") describes how Garuda55 collects, uses, stores, discloses, and otherwise processes personal data relating to registered users ("Members", "Players", or "you") and visitors to the Platform. It has been drafted in accordance with applicable data protection principles and international gaming regulatory requirements.
By accessing the Platform, registering a Garuda55 Account, or providing any personal information to us, you acknowledge that you have read and understood this Policy and consent to the collection, use, and disclosure of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue your use of the Platform immediately.
Definitions
For the purposes of this Privacy Policy, the following definitions shall apply:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can be used to identify a natural person, directly or indirectly, including but not limited to name, identification number, location data, or online identifiers. |
| "Processing" | Any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, or erasure. |
| "Data Controller" | Garuda55, being the entity that determines the purposes and means of processing personal data collected through the Platform. |
| "Data Processor" | Any third party engaged by Garuda55 to process personal data on our behalf, subject to contractual data protection obligations. |
| "Cookies" | Small text files placed on your device by the Platform for the purposes of improving user experience, analytics, and session management. |
| "KYC" | Know Your Customer — the identity and age verification process conducted in compliance with anti-money laundering and responsible gambling obligations. |
Personal Data We Collect
Garuda55 collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we may collect include the following:
3.1 Identity and Registration Data
Full legal name, date of birth, nationality, gender, and a copy of a valid government-issued identity document (e.g., Malaysian MyKad, passport, or driving licence) collected during Account registration and KYC verification.
3.2 Contact Data
Email address, Malaysian mobile phone number, and residential or mailing address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, or Shah Alam).
3.3 Financial and Transaction Data
Details of deposits, withdrawals, and betting transactions conducted on the Platform, including payment method identifiers associated with Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Malaysian bank accounts (Maybank, CIMB, Public Bank, Hong Leong Bank, RHB), and cryptocurrency wallet addresses where applicable. We do not store full payment card numbers.
3.4 Gaming and Betting Activity Data
Records of games played, bet history, wagering amounts, wins and losses, bonus participation, session durations, and game preferences across all product verticals including slots, live casino, and sports betting markets (e.g., Liga Super Malaysia, EPL, UFC).
3.5 Technical and Device Data
IP address, browser type and version, device identifiers, operating system, screen resolution, time zone settings, and access logs generated when you visit or interact with the Platform.
3.6 Communications Data
Records of communications between you and Garuda55's customer support team, including live chat transcripts and email correspondence.
How We Collect Personal Data
Garuda55 collects personal data through the following channels:
- Directly from you: When you register an Account, complete KYC verification, make deposits or withdrawal requests, contact our customer support team, or participate in promotions.
- Automatically: Through cookies, web beacons, and server logs when you access or interact with the Platform. See Section 8 for further details on our use of cookies.
- From payment processors: Transaction confirmation and fraud screening data provided by our integrated Malaysian payment partners (Touch 'n Go, Boost, GrabPay, DuitNow, FPX, and partnered banks) in the course of processing deposits and withdrawals.
- From identity verification providers: Data provided by third-party KYC service providers engaged by Garuda55 to verify your identity and age as part of our regulatory compliance obligations.
- From fraud prevention and AML services: Screening data provided by anti-money laundering and fraud prevention service providers used to fulfil our compliance obligations.
How We Use Your Personal Data (Data Processing)
Garuda55 processes your personal data for the following purposes:
| Purpose | Description |
|---|---|
| Account Administration | Creating, maintaining, and managing your Garuda55 Account, including processing deposits, withdrawals, and account security settings. |
| KYC & Age Verification | Verifying your identity and confirming that you meet the 21+ age requirement as mandated by our gaming licence and responsible gambling obligations. |
| Regulatory Compliance | Meeting anti-money laundering (AML), counter-terrorism financing (CTF), and gaming authority reporting obligations applicable to Garuda55's licensed operations. |
| Fraud Prevention | Detecting, investigating, and preventing fraudulent transactions, duplicate accounts, collusion, and other prohibited conduct as defined in our Terms & Conditions. |
| Customer Support | Responding to your enquiries, resolving disputes, and providing technical and account assistance through live chat and email support channels. |
| Personalisation | Tailoring game recommendations, promotional offers, and content to your demonstrated preferences and playing habits within the Platform. |
| Responsible Gambling | Monitoring betting patterns to identify signs of problem gambling behaviour, applying self-exclusion requests, and enforcing deposit limits and session alerts as requested by you. |
| Platform Improvement | Analysing aggregated and anonymised usage data to improve platform performance, user experience, and product offerings. |
| Marketing Communications | Sending promotional offers, bonus notifications, and platform updates to you where you have consented to receive such communications. You may withdraw consent at any time. |
Legal Basis for Processing
Garuda55 processes your personal data on the following legal bases:
- Contractual necessity: Processing necessary to fulfil the contract between you and Garuda55, including account administration, payment processing, and service delivery.
- Legal obligation: Processing required to comply with applicable legal obligations, including AML/CTF legislation, gaming regulatory requirements, and tax reporting obligations.
- Legitimate interests: Processing conducted in pursuit of Garuda55's legitimate business interests, including fraud prevention, platform security, and responsible gambling monitoring, where such interests are not overridden by your fundamental rights.
- Consent: Where we rely on your consent as the legal basis for processing (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
Data Sharing and Disclosure
Garuda55 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:
- Payment processors and financial institutions: Including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, RHB, and cryptocurrency network operators, for the purposes of processing deposits, withdrawals, and fraud screening.
- KYC and identity verification providers: Third-party services engaged to verify your identity and age as part of our regulatory compliance obligations.
- Regulatory authorities and law enforcement: Where required by law, court order, or gaming regulatory authority direction, Garuda55 may disclose your personal data to relevant governmental bodies or law enforcement agencies.
- AML and fraud prevention services: Third-party providers engaged to screen transactions and account activity against financial crime databases.
- Game and platform technology providers: Our licensed game studio and platform infrastructure partners may receive limited technical data necessary for service delivery, subject to contractual data protection obligations.
- Professional advisers: Legal, accounting, or auditing firms engaged by Garuda55 in the course of our legitimate business operations, subject to professional confidentiality obligations.
Cookies and Tracking Technologies
Garuda55 uses cookies and similar tracking technologies to operate improve the Platform, personalise your experience, and gather analytical data. By continuing to use the Platform after being presented with a cookie notice, you consent to our use of cookies as described herein.
The categories of cookies we use are as follows:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Essential for core Platform functionality including session authentication, account login, and security enforcement. Cannot be disabled without affecting platform operation. | Session |
| Functional | Remember your preferences such as language settings, preferred payment methods, and display options to improve your experience on return visits. | Up to 12 months |
| Analytical / Performance | Collect aggregated and anonymised data about Platform usage patterns, page performance, and error reporting to help us improve the Platform. | Up to 24 months |
| Fraud Prevention | Detect and prevent fraudulent activity, bot access, and unauthorised account access attempts in real time. | Session to 6 months |
You may manage your cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect the functionality and performance of the Platform. For strictly necessary cookies, there is no opt-out option as they are required for basic Platform operation.
Data Retention
Garuda55 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention principles apply:
- Active Account data is retained for the duration of your Account with Garuda55 and for a period of five (5) years following Account closure, in accordance with AML and gaming regulatory record-keeping requirements.
- KYC and identity verification documents are retained for a minimum of five (5) years from the date of your last transaction on the Platform, or such longer period as required by applicable law.
- Transaction records including deposits, withdrawals, and betting history are retained for a minimum of five (5) years for compliance and audit purposes.
- Customer support communications are retained for a period of three (3) years from the date of the relevant communication.
- Marketing consent records are retained until you withdraw your consent, plus a reasonable period thereafter to demonstrate compliance with consent obligations.
- Technical and device data collected through server logs is typically retained for a period of twelve (12) to twenty-four (24) months before being anonymised or deleted.
Upon expiry of the applicable retention period, personal data will be securely deleted, anonymised, or rendered irreversibly de-identified in accordance with our data deletion procedures.
Data Security
Garuda55 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
- 256-bit TLS (Transport Layer Security) encryption for all data transmitted between your device and the Garuda55 Platform.
- Encrypted storage of sensitive personal data and financial information at rest, using industry-standard encryption protocols.
- Two-factor authentication (2FA) available to all Account holders as an additional layer of login security.
- Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis.
- Regular penetration testing, security audits, and vulnerability assessments conducted by qualified third-party security professionals.
- Continuous real-time monitoring of platform infrastructure for anomalous activity indicative of intrusion or data breach attempts.
- Segregation of player funds in accounts separate from operational funds, reducing financial data exposure risk.
In the event of a personal data breach that poses a risk to your rights and freedoms, Garuda55 will notify you and any applicable regulatory authority in accordance with applicable data breach notification obligations.
Your Data Rights
Subject to applicable data protection laws and relevant regulatory obligations, you have the following rights in relation to your personal data held by Garuda55:
Right of Access
Request a copy of the personal data Garuda55 holds about you and information on how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data held your Account profile.
Right to Erasure
Request deletion of your personal data where we no longer have a legal basis to retain it.
Right to Restrict Processing
Request that we limit how we use your personal data in certain circumstances.
Right to Portability
Receive a structured, machine-readable copy of personal data you have provided directly to Garuda55.
Right to Object
Object to processing of your personal data for direct marketing or legitimate interest purposes.
To exercise any of the above rights, please contact our data protection team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within five (5) business days and aim to fulfil it within thirty (30) days, subject to identity verification requirements.
Please note that certain rights may be limited where Garuda55 is required by law to retain or process your data, including for AML compliance, regulatory reporting, and the prevention and detection of fraud.
Children's Privacy and Age Verification
The Garuda55 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Garuda55 conducts mandatory age verification as part of the Account registration and KYC process to enforce this requirement.
If Garuda55 becomes aware that personal data has been collected from an individual who is under the age of 21, we will immediately suspend the relevant Account, delete or anonymise the associated personal data, and return any deposited funds following completion of the verification process, subject to applicable AML requirements.
Changes to This Privacy Policy
Garuda55 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or operational changes to the Platform.
When we make material changes to this Policy, we will notify registered Members via the email address associated with their Account and/or through a prominent notice on the Platform. The updated Policy will take effect on the date specified in the notice, or immediately upon publication if no separate effective date is stated.
Your continued use of the Platform following notification of a revised Policy constitutes your acceptance of the changes. The "Last Updated" date at the top of this page reflects the date on which the most recent version of this Policy was published. We encourage you to review this Policy periodically to stay informed of any changes.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which Garuda55 processes your personal data, please contact our data protection team through the following channels:
- Email: [email protected] (Please use subject line: "Privacy Policy Enquiry")
- Live Chat: Available24 hours a day, 7 days a week via the support widget on the Platform.
We aim to respond to all privacy-related enquiries within five (5) business days. For formal data rights requests under Section 11, please allow up to thirty (30) days for a full response.
Our support team serves players across Malaysia — including Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, and Shah Alam — in English, Bahasa Melayu, and Mandarin.
This Privacy Policy was last updated on 1 January 2026 and is effective from the same date.
Your Data. Your Rights.Your Platform.
Questions about how we handle your data? We are here to help. For players aged 21 and above only.
Terms & Conditions
Explore Garuda55's full range of live casino, slots, and sports betting products for Malaysian players.
Visit HomepageTerms & Conditions
Read our full Terms & Conditions to understand your rights, account rules, bonus policies, and platform regulations.
Read T&CsResponsible Gambling
Learn about our self-exclusion tools, deposit limits, session reminders, and responsible gambling commitment.
Learn More