Privacy Policy garud888 — Protection of Your Personal Data

This Privacy Policy explains how garud888 ("we", "Platform") collects, uses, stores, discloses, and protects your personal information when you use the garud888.pro website, the garud888 mobile app, or any services we provide.

This policy applies to all users — whether you are simply browsing our site, in the process of registering, or already an active member. By accessing or using garud888 services, you agree to the collection and use of information as described in this policy.

If you have any doubts or questions after reading this document, do not hesitate to contact our support team. We would rather you fully understand your rights than continue using the platform without clarity on your privacy.

Garud888 only collects data necessary to operate your account, process transactions, and fulfil legal obligations. We do not collect irrelevant or excessive data.

Your personal data is used solely for purposes related to garud888 services. We do not use your data for unrelated purposes or in ways you would not expect.

• Account Management — Creating, verifying, and maintaining your account, including password recovery and two-factor authentication.
• Transaction Processing — Processing deposits, withdrawals, and all financial activities related to your garud888 account.
• KYC and AML Compliance — Verifying your identity and fulfilling legal obligations related to anti-money laundering.
• Platform Security — Detecting and preventing fraud, unauthorised access, and other suspicious activities.
• Service Improvement — Analysing usage patterns to improve the user experience and platform performance.
• Service Communications — Sending important notifications related to your account, policy changes, and security updates.
• Marketing Communications — With your consent, sending information about garud888 promotions, offers, and new features.

Garud888 does not sell your personal data. However, there are limited situations where your data may be shared with certain parties for legitimate purposes:

• Payment Service Provider — FPX, Touch 'n Go, Boost, and other financial service providers required to process your transactions.
• Identity Verification Provider — Trusted third parties conducting KYC verification on behalf of garud888.
• Statutory Authority — When required by law, court order, or a valid official investigation.
• Technology Provider — Parties providing server infrastructure, cybersecurity, and other technical services, subject to strict confidentiality agreements.

Garud888 continually invests in data security infrastructure to ensure your information is always protected. This is not merely a technical expense — it is a responsibility we take seriously towards every member.

• Encryption in Transit — All data transmitted between your device and garud888 servers is protected with 256-bit TLS/SSL encryption.
• Encryption at Rest — Sensitive data such as financial information and identity documents are encrypted while stored on our servers.
• Access Control — Only authorised personnel who require access to perform their duties may access your data.
• Continuous Monitoring — An automated monitoring system runs 24/7 to detect any suspicious activity or intrusion attempts.
• Periodic Audits — System security is regularly audited by independent security experts to identify and patch any vulnerabilities.

Garud888 uses cookies and similar tracking technologies to enhance your user experience, maintain session security, and analyse how the platform is used.

• Essential Cookies — Required for core platform functions such as login, session security, and language preferences. These cookies cannot be disabled without affecting basic functionality.
• Performance Cookies — Collecting statistical data on how users interact with the platform for improvement purposes. This data is anonymised.
• Functional Cookies — Remembering your preferences such as display settings and selected odds format for a more personalised experience.

You can manage cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of some parts of the garud888 platform.

Garud888 retains your personal data for as long as your account is active or as long as needed to provide services to you. After account closure, we may still need to retain certain data for the following purposes:

• Financial and Transaction Records — Retained for a minimum of 7 years in accordance with financial and tax legal requirements.
• KYC and Identity Verification Records — Retained for a minimum of 5 years after the account closure date for AML compliance purposes.
• Communication Logs — Customer support communication records are retained for 2 years for reference and dispute resolution purposes.
• Technical Data and Logs — System logs are retained for 12 months for security and troubleshooting purposes.

Once the defined retention period has ended and no other legal obligation requires continued storage, your data will be securely deleted or anonymised.

As a data subject, you have certain rights regarding the personal data held by garud888. We respect and facilitate the exercise of these rights.

• Right to Access — You may request a copy of the personal data we hold about you. Requests will be processed within 30 business days.
• Right to Rectify — If any of your information is inaccurate or outdated, you may request a correction via your account settings or our support team.
• Right to be Forgotten — In certain circumstances, you may request the deletion of your personal data. Please note that some data may need to be retained to fulfil legal obligations even after a deletion request.
• Right to Object — You may object to the processing of your data for direct marketing purposes at any time via your account settings.
• Data Portability Rights — You may request your data in a structured, machine-readable format if you wish to transfer it to another platform.

To exercise any of these rights, please contact the garud888 support team via live chat or Telegram. We will verify your identity before processing any data-related requests.

In the course of operations, garud888 may transfer your personal data to other countries for storage or technical processing purposes. This includes the use of cloud servers and technical infrastructure that may be located outside Malaysia.

Whenever any cross-border data transfer occurs, garud888 ensures that:

• The destination country maintains an adequate level of data protection, or
• Appropriate safeguards have been put in place through contractual agreements requiring recipients to uphold data protection standards equivalent to Malaysian law.

Garud888 services are intended for individuals aged 18 and above. We do not knowingly collect any personal data from individuals under the age of 18.

If you believe a child has provided personal data to garud888 without your knowledge, please contact us immediately. We will take appropriate steps to delete that data and suspend the relevant account.

Parents and guardians are advised to monitor their children's internet usage and use appropriate parental control software to prevent access to online betting platforms.

Garud888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or improvements in how we handle data.

For material changes — meaning changes that significantly affect how we use your data — we will notify you via the app or email at least 14 days before the changes take effect. This gives you sufficient time to read, understand, and if necessary, take action regarding your account.

The date of the last update is always displayed at the top of this page. Continued use of the platform after changes take effect constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how garud888 handles your personal data, we encourage you to reach out to us directly.

We are committed to responding to all privacy-related inquiries within 5 business days. For data access or deletion requests, processing may take up to 30 business days.