At Garuda77, your privacy is more than a legal obligation — it is a genuine commitment. This document clearly explains what data we collect, why we need it, and how we protect it for you.
Before you read the full document, here are the key commitments Garuda77 makes to every member regarding the protection of their personal data.
Every piece of personal and financial information you submit to Garuda77 is encrypted using 256-bit SSL — the same security standard used by major Malaysian banks such as Maybank and CIMB. No third party can intercept or read your data while it is in transit.
Garuda77 never sells, rents, or shares members' personal data with any advertising company, data aggregator, or third party for direct marketing purposes. Your information is not a commodity we trade — it is a trust we safeguard wholeheartedly.
All of Garuda77's data management practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA). This means you have the legal right to access, correct, and request deletion of your data. Garuda77 respects and facilitates the exercise of these rights at no charge.
Only Garuda77 staff with a legitimate job requirement may access members' personal data. All access is logged, monitored, and regularly audited. No staff member may access a member's full data without senior management approval and a justifiable purpose.
You may withdraw your consent to receive promotional emails, SMS, and push notifications from Garuda77 at any time via your account settings or by contacting our support team. Withdrawing marketing consent will not affect your access to Garuda77 services.
Garuda77 does not retain your personal data indefinitely. Retention periods are determined by legitimate legal and operational requirements. Following account closure, personal data will be deleted or anonymised within the timeframe prescribed by Malaysian law, unless a legal obligation requires it to be kept for longer.
This Privacy Policy explains how Garuda77 collects, uses, stores, and protects your personal data when you register for and use our platform. By creating a Garuda77 account or continuing to use our platform after this policy's effective date, you are deemed to have read and agreed to the terms set out here. Garuda77 is committed to managing your data transparently, responsibly, and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
Garuda77 collects your personal data through several channels as you interact with our platform. We only collect information that is genuinely necessary to provide the services you request and to fulfil our legal obligations.
When you register a Garuda77 account, make a deposit or withdrawal, or contact our support team, you provide the following information:
For identity verification (KYC) purposes, you may be asked to submit a copy of your Malaysian identity card, a recent bank statement, or proof of address. These documents are stored securely and used solely for verification purposes.
When you use the Garuda77 platform, our system automatically collects the following technical information to ensure the service runs correctly and securely:
In certain cases, Garuda77 may receive information about you from legitimate third-party sources — such as payment providers (when you make a deposit via FPX, DuitNow, or e-wallet), or fraud prevention agencies used to verify your identity. Information received from these sources is used solely for transaction processing and account security purposes.
Garuda77 uses your personal data only for legitimate and necessary purposes. We will not use your data for any other purpose without informing you in advance and, where required by law, obtaining your consent.
The majority of data we collect is used for core purposes directly related to Garuda77 services:
Garuda77 uses certain data to protect the platform and its members from unlawful activity:
Garuda77 uses your contact information for important communications related to your account — such as deposit and withdrawal confirmations, notifications of changes to our terms or policies, account security alerts, and responses to your customer support inquiries. These communications cannot be disabled as they are essential to the security of your account.
With your consent, Garuda77 may send you information about new promotions, exclusive member bonuses, special events tied to Malaysian celebrations (Hari Raya Aidilfitri, Merdeka, New Year), and the latest game updates. You may withdraw this consent at any time without affecting your access to the Garuda77 platform.
Anonymised or aggregated usage data — such as traffic patterns, game statistics, and technical performance reports — is used by the Garuda77 team to improve the user experience, resolve technical issues, and plan new platform feature development.
Garuda77 understands that you are entrusting us with your personal data. We do not disclose your information to outside parties indiscriminately. The following are specific circumstances under which data sharing may occur.
Garuda77 works with carefully selected third-party service providers to support platform operations. These include server infrastructure and hosting providers, payment processors supporting DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, FPX Maybank2u and CIMB Clicks transactions, live casino software providers, and cybersecurity services. All providers are contractually required to process your data solely on Garuda77's instructions and may not use it for their own purposes.
Garuda77 may disclose your personal data to Malaysian government authorities or law enforcement if required by valid law, court order, or regulatory directive. In such circumstances, Garuda77 will notify you of the disclosure where permitted by law to do so.
In the event of a merger, acquisition, or transfer of Garuda77's assets to another entity, members' personal data may form part of the transferred assets. Garuda77 will notify members before any such data transfer takes place and will ensure that the receiving entity is bound by the same or higher data protection standards.
Garuda77 continuously invests in security infrastructure and practices to protect your personal data from unauthorised access, alteration, disclosure, or destruction.
The technical security measures implemented by Garuda77 include:
Only Garuda77 staff with a legitimate job requirement are granted access to members' personal data. Access is governed by a least-privilege principle — each staff member can only view the data necessary for their specific role. All access is logged and regularly audited.
In the event of a data breach affecting your personal information, Garuda77 will promptly take the following steps: contain and assess the scope of the breach, notify the relevant authorities in accordance with Malaysia's PDPA requirements, and inform affected members within a reasonable timeframe with details of the breach and the remedial actions taken.
Garuda77 is responsible for protecting your data on our end, but you also play an important role. We encourage you to use a strong, unique password for your Garuda77 account, enable two-factor authentication, never share your login credentials with anyone, and notify Garuda77 immediately if you suspect your account has been accessed without authorisation.
Garuda77 uses cookies and similar tracking technologies on our platform. This section explains what cookies are, the types of cookies we use, and how you can manage them.
Cookies are small text files stored on your device when you visit a website. They help the site remember your settings and preferences, maintain your login session, and collect information about how you use the platform for improvement purposes.
| Cookie Type | Purpose | Period | Can It Be Disabled? |
|---|---|---|---|
| Essential Cookies | Maintaining login sessions and account security | Session / 30 days | No — required for core functionality |
| Functional Cookies | Remembering language preferences and table display settings | 1 year | Yes — but will affect your experience |
| Analytics Cookies | Understanding how players use the platform | 90 days | Yes — through browser settings |
| Performance Cookies | Monitoring page load speeds & technical errors | 30 days | Yes |
You can manage and delete cookies through your web browser settings. Most modern browsers — including those commonly used in Malaysia, such as Chrome and Safari on Android and iOS devices — allow you to block or delete cookies from the settings menu. Please note that blocking essential cookies may affect your ability to log in and fully use certain features of the Garuda77 platform.
As a Garuda77 member residing in Malaysia, you have specific rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). Garuda77 respects these rights and provides straightforward mechanisms for you to exercise them.
You have the right to request a copy of the personal data Garuda77 holds about you. Data access requests can be submitted by email to support@garuda77.best. Garuda77 will process your request within 21 business days and may require identity verification before releasing any data.
If any personal data we hold about you is inaccurate, incomplete, or outdated, you have the right to request a correction. For basic account details such as your email address and phone number, you can update these yourself via your Garuda77 account settings. For more sensitive information such as your full name, please contact our support team.
Under certain circumstances, you may request that Garuda77 delete your personal data. However, this right is subject to limitations set by law — for example, Garuda77 is legally required under Malaysia's anti-money laundering legislation to retain financial transaction records for a minimum period. Outside of these legal obligations, Garuda77 will process deletion requests accordingly.
For data processing that relies on your consent (primarily marketing communications), you may withdraw that consent at any time without any adverse effect on the core Garuda77 services you use.
Garuda77 retains your personal data for as long as your account is active, plus any additional period required to meet legal obligations. Our data retention guidelines are as follows:
Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to you.
Garuda77's server infrastructure operates primarily within the Asian region to ensure the best speed and performance for Malaysian players. In certain cases, data may be processed outside Malaysia — for example, if our cloud or cybersecurity service providers have facilities in other countries. Garuda77 ensures that any international data transfers comply with data protection standards equivalent to or exceeding Malaysia's PDPA requirements, and that appropriate contracts are in place with all parties involved.
Garuda77 strictly prohibits the use of its platform by individuals under the age of 18. This platform is not designed for minors, and we do not knowingly collect personal data from underage individuals.
Should Garuda77 discover that we have collected personal data from an individual under the age of 18, we will promptly delete that data and close the relevant account. If you believe a minor has registered a Garuda77 account without authorisation, please notify us immediately at support@garuda77.best so that prompt action can be taken.
Parents and guardians concerned about child protection in the context of online gambling may use parental controls available on devices and Malaysian internet service providers to block access to casino websites.
The Garuda77 platform may contain links to third-party websites or services in certain contexts — such as links to Malaysian e-wallet providers for payment processing. Garuda77 is not responsible for the privacy practices or content of those third-party websites.
Once you leave the Garuda77 platform and navigate to a third-party website, Garuda77's Privacy Policy no longer applies. We encourage you to read the privacy policy of any other website or service you visit. Garuda77 does not control and is not responsible for how third parties handle your data.
Garuda77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, the technologies we use, legal requirements, or other relevant factors.
When we make significant changes to this Privacy Policy, we will notify all members via their registered email address or through an in-platform notification at least 14 days before the changes take effect. For minor or editorial updates, we will simply update the "Last updated" date at the top of this page.
Continued use of the Garuda77 platform after the effective date of an updated Privacy Policy constitutes acceptance of those changes. If you do not agree with the updated Privacy Policy, you may close your account before the changes take effect.
Garuda77 maintains an archive of all versions of the Privacy Policy that have ever been in effect. If you need a copy of a specific version for reference or legal purposes, please contact us at support@garuda77.best and specify the date or version number you require.
Garuda77 has appointed a Data Protection Officer responsible for ensuring the platform's compliance with Malaysia's PDPA 2010 and handling privacy-related enquiries from members.
If you have any questions, concerns, or complaints regarding how Garuda77 handles your personal data, or if you wish to exercise any of your rights under the PDPA, you may reach us via:
Garuda77 aims to respond to all privacy enquiries within 5 business days. For more complex requests such as data access or data deletion requests, processing may take up to 21 business days.
If you are dissatisfied with Garuda77's response to your privacy complaint, you have the right to escalate the matter to the Personal Data Protection Commissioner of Malaysia, who is responsible for enforcing the PDPA 2010.
Garuda77 believes that player trust is the foundation of everything we do. This Privacy Policy is more than a legal document — it reflects our core values on how your data should be treated. We encourage you to read this policy, understand your rights, and reach out to us if anything is unclear. For more specific privacy-related questions, visit FAQ page us or contact our 24/7 support team directly.
Under Malaysia's PDPA 2010 and Garuda77's commitment to privacy, you have these rights, which you may exercise at any time.
Request a copy of the personal data Garuda77 holds about you. We will process your request within 21 business days of identity verification.
Correct any inaccurate or outdated personal data in your Garuda77 account via your account settings or by contacting our support team.
Request deletion of your personal data within the limits permitted by law. Financial records are retained in accordance with Malaysia's AML requirements.
Object to the processing of your data for marketing or profiling purposes. Your objection will be actioned without affecting your access to core services.
Withdraw consent for marketing communications at any time through your account settings or by notifying the Garuda77 support team.
If you are unsatisfied with Garuda77's response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the PDPA 2010.
Your gameplay data at Garuda77 — including betting patterns and session duration — may be used to identify signs of problem gambling so we can offer appropriate support. This is a use of data we believe provides genuine benefit to you. This platform is strictly for users aged 18 and above. For free and confidential assistance with gambling-related issues, please contact Talian Kasih 15999 (24 hours). Read the Garuda77 Responsible Gaming guide.
Garuda77 has built a platform that respects your privacy from day one. Register today and enjoy a fully safe, fair, and responsible Malaysian online casino experience.