Garuda4D Privacy Policy – Personal Data Protection for Malaysian Members

Garuda4D ("we", "the platform") is the data controller for personal information collected through the garuda4d.im website and all related service channels. In the context of this Privacy Policy, "personal data" refers to any information that can be used to identify you, directly or indirectly, as an individual — including your name, email address, phone number, financial information, and platform usage data.

This Privacy Policy explains:

• The types of personal data we collect from garuda4d members.
• The purpose and legal basis for processing that data.
• Parties that may have access to your data.
• Data retention periods and deletion procedures.
• Your rights regarding your personal data under Malaysia's PDPA.
• How to contact us regarding any privacy-related concerns.

By registering an account on garuda4d or using any of our services, you agree to the collection and use of your personal data as described in this Privacy Policy. If you do not agree with any part of this policy, please stop using the garuda4d platform and contact us to discuss your available options.

Garuda4D collects personal data from members through several channels — directly when you register or interact with the platform, automatically through your use of the platform, and in certain cases, from legitimate third-party sources.

A) Data You Provide Directly

B) Automatically Collected Data

When you use the garuda4d platform, our systems automatically collect certain technical information required to operate the service safely and efficiently:

• Device data: Device type, operating system, phone or computer model, screen resolution.
• Browser data: Web browser type and version, language settings, time zone.
• Network data: IP address, internet service provider (ISP), and general geographic location (state/city).
• Usage data: Pages visited, time spent, games played, bets placed, navigation paths within the platform.
• Session data: Login time, session duration, and activity during the session.

C) Data from Third-Party Sources

In certain situations, garuda4d may receive information about you from legitimate third-party sources, including:

• Payment operators (such as FPX, DuitNow) for transaction verification purposes.
• Identity verification bodies for the KYC (Know Your Customer) process.
• A voluntary self-exclusion list to ensure that individuals who have registered for self-exclusion cannot access the garuda4d platform.

Garuda4D uses collected personal data solely for legitimate purposes that are directly related to providing our services to you. The following are the primary purposes for which garuda4d processes your data:

• Account management: Creating, verifying, and maintaining your garuda4d account, including secure login processes and two-factor authentication.
• Financial transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, and withdrawals to your Malaysian bank account or e-wallet.
• Identity verification (KYC): Meeting legal compliance requirements to verify member identities and prevent underage individuals or unauthorised parties from accessing the platform.
• Service provision: Enables you to use all features of the garuda4d platform, including badminton betting, Malaysia Super League football, cricket, lottery, virtual sports and poker.
• Platform security: Detecting and preventing fraud, bot usage, collusion in poker, money laundering, and other suspicious activity that threatens the security of the platform and its members.
• Customer support: Responding to enquiries, resolving disputes, and providing the technical assistance you need.
• Service communications: Sending important notifications relating to your account, transactions, changes to our terms, and security updates.
• Experience personalisation: Displaying relevant content, promotions, and recommendations based on your usage history and preferences on garuda4d.
• Marketing (with your consent): Sending information about promotions, new bonuses and exclusive garuda4d offers — only if you have consented to receive marketing communications.
• Legal compliance: Meeting applicable legal and regulatory obligations, including maintaining transaction records as required under Malaysian law.

Garuda4D will not use your personal data for any purposes beyond those stated above without first obtaining your explicit consent.

Garuda4D does not sell, rent, or trade members' personal data to any third party for commercial purposes. This is our absolute commitment. However, in the course of providing our services, there are limited situations where data sharing may occur:

Trusted Service Providers

Garuda4D works with carefully selected third-party service providers to support our platform operations. These include:

• Malaysian payment processors such as FPX, DuitNow, and e-wallet operators that handle your deposit and withdrawal transactions.
• Cloud and hosting service providers that securely store platform data.
• Identity verification service provider for the KYC process.
• Analytics software providers that help us understand platform usage patterns for improvement purposes (data is anonymised or aggregated).

All these service providers are bound by strict confidentiality agreements and are only permitted to process your data for the specific purposes defined by garuda4d.

Legal Requirements

Garuda4D may be required to disclose your personal data to the relevant authorities where there is a legitimate legal obligation to do so, including:

• Court orders or valid legal process.
• Requests from Malaysian law enforcement agencies in the context of related criminal investigations.
• Reporting obligations under anti-money laundering legislation.

Garuda4D takes serious investment in security technologies and procedures to protect your personal data from unauthorised access, loss, misuse, disclosure, or alteration. The following are the key security measures we employ:

• 256-bit SSL/TLS Encryption: All communications between your browser or app and garuda4d's servers are encrypted using 256-bit SSL/TLS — the same standard used by leading financial institutions worldwide.
• Sensitive data encryption: Passwords are stored in an irreversible hashed format. Financial information such as bank account numbers is stored in encrypted form using robust encryption algorithms.
• Access controls: Only garuda4d staff with a legitimate business need are permitted to access members' personal data, and all such access is logged and actively monitored.
• 24/7 security monitoring: Our automated monitoring system detects and alerts on any suspicious activity or unauthorised access attempts in real time.
• Regular security testing: Garuda4D conducts regular penetration testing and security audits to identify and address vulnerabilities before they can be exploited.
• Two-factor authentication (2FA): We offer two-factor authentication as an additional layer of security for your garuda4d account.

While we take all reasonable steps to protect your data, no security system can offer a 100% guarantee against all cyber threats. In the event of a material data breach affecting your personal data, garuda4d will notify you within a reasonable timeframe in accordance with applicable legal requirements.

Garuda4D uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how members use our platform. Cookies are small text files stored in your web browser when you visit the garuda4d platform.

Types of Cookies We Use

• Essential Cookies (Required): Required for the garuda4d platform to function properly. This includes login session cookies, security tokens, and language preferences. Disabling these cookies will affect platform functionality.
• Performance & Analytics Cookies: This helps us understand how members interact with the garuda4d platform — which pages are visited most, where members encounter issues, and how we can improve the user experience. Data collected is aggregated and does not identify you individually.
• Functionality Cookies: Saves your preferences such as poker table display settings, preferred betting limits and notification choices so you do not have to reconfigure them each time you log in.
• Marketing Cookies (with consent): Used to display relevant promotions and offers based on your interests and activity on garuda4d. These cookies are only activated if you give your consent.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the garuda4d platform. For more information on managing cookies in your browser, please refer to your browser's help documentation.

Under Malaysia's Personal Data Protection Act (PDPA) 2010 and garuda4d's privacy policy, you have the following rights with respect to your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Garuda4D will provide this information within 21 days of receiving a valid request.
• Right to Rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. You may also update certain information directly through your garuda4d account settings.
• Right to Erasure: In certain circumstances, you have the right to request that we delete your personal data. Please note that we may need to retain certain data to meet our legal or contractual obligations, even after a deletion request has been received.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests under certain circumstances.
• Right to Data Portability: You have the right to receive the personal data you have provided to us in a machine-readable format and to transfer it to another data controller where applicable.
• Right to Withdraw Consent: Where our processing of your data is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the validity of any processing that took place prior to the withdrawal.

To exercise any of the above rights, please contact the garuda4d privacy team by email at support@garuda4d.im with the subject line "Privacy Rights Request". We will respond to your request within the timeframe stipulated by applicable law.

Garuda4D retains your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by applicable law.

When the retention period expires or data is no longer required, garuda4d will delete or anonymise that data in a secure and irreversible manner. Our data deletion procedures are audited regularly to ensure compliance with this policy.

The garuda4d platform may contain links or references to third-party websites or services in certain contexts. Garuda4D is not responsible for the privacy practices or content of those third-party websites.

This Privacy Policy applies solely to the garuda4d.im platform and the services we operate directly. When you leave the garuda4d platform to access third-party services — such as your bank's website for FPX processing or the Touch 'n Go app for deposits — the privacy policy of that respective third party will apply. We recommend that you read the privacy policy of every platform you use.

If you have any questions, concerns or complaints regarding how garuda4d handles your personal data, or to exercise any of your privacy rights, please contact us:

• Email: support@garuda4d.im (use subject: "Privacy Enquiry")
• Live Chat: Available 24/7 on the garuda4d platform — response time under 2 minutes.

Garuda4D is committed to addressing all privacy enquiries seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory body.

Amendments to This Privacy Policy

Garuda4D reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use. When material changes are made, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending email notifications to all registered garuda4d members.
• Displaying a clear notice on the garuda4d platform for a minimum period of 14 days.

Your continued use of the garuda4d platform after any amendments take effect constitutes your acceptance of the updated Privacy Policy. We recommend reviewing this page periodically.