Gardenia888 Privacy Policy — How We Protect the Personal Data of Malaysian Players

Gardenia888 ("we", "the platform", or "Gardenia888") operates a Sports Betting, online casino, slots, jackpot, and digital entertainment services platform available at gardenia888.site. We take our personal data protection responsibilities seriously and are committed to safeguarding the privacy of every member.

This Privacy Policy applies to all information we collect from you when you use the Gardenia888 platform, including information you provide directly during registration, information we collect automatically as you browse the platform, and information we receive from legitimate third parties such as payment service providers.

This policy is written in Bahasa Melayu as the official version and complies with Malaysia's Personal Data Protection Act 2010 (PDPA) as well as international data protection best practices. We encourage you to read this document in full before using the Gardenia888 platform for the first time.

Gardenia888 collects various categories of personal data depending on how you interact with our platform. Below is a full breakdown of the types of data collected:

A. Data You Provide Directly

• Registration Information: Username, password (stored in encrypted form), email address, Malaysian phone number, date of birth, and state of residence in Malaysia.
• Identity Information (KYC): Full name as per MyKad, MyKad number, front and back copies of MyKad, and an identity verification selfie (collected during the KYC verification process).
• Payment Information: eWallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay) or bank account numbers registered for deposit and withdrawal purposes. We do not store full credit or debit card details.
• Communications: The content of messages you send to the Gardenia888 support team via live chat, email, or WhatsApp.

B. Automatically Collected Data

• Device & Access Data: IP address, web browser type, operating system, device model, and screen resolution.
• Platform Activity Data: Pages visited, time spent in each section, button clicks, games played, bets placed, and transaction values.
• Approximate Location Data: Country and region determined based on your IP address (we do not collect your precise GPS location).
• Cookie & Session Data: Login session information, language preferences, and personal platform settings.

Gardenia888 uses the personal data collected for the following purposes. For each purpose, we rely on a valid legal basis:

• Account Management: Creating and maintaining your account, verifying your identity during login, and processing account-related requests such as password changes or personal information updates.
• Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX; and processing winning withdrawals to your registered account. Financial transaction records are retained for audit and compliance purposes.
• KYC Verification & Compliance: Verifying your identity to meet legal requirements related to anti-money laundering (AML) and counter-terrorism financing (CFT), including checks against relevant sanctions and watchlists.
• Security & Fraud Prevention: Detecting and preventing unauthorised access, payment fraud, multiple account registrations, bot usage, and other suspicious activity that could compromise the security of the platform or other players.
• Customer Support: Providing technical assistance and account-related support, processing complaints, and resolving disputes. Support communication records are retained for reference and service improvement purposes.
• Responsible Gaming: Monitoring play patterns to identify players who may need responsible gambling support, and delivering appropriate interventions in accordance with Gardenia888's policy.
• Platform Improvements: Analysing aggregated, anonymised usage data to understand how players interact with the platform and to continuously improve the overall user experience.
• Marketing Communications: Sending information about Gardenia888's latest promotions, bonuses, and offers via email or in-platform notifications — only to players who have given their consent to receive marketing communications. You may unsubscribe at any time.

Gardenia888 does not sell or trade members' personal data. However, in the course of operating the platform, we may share certain data with carefully selected third parties in the following circumstances:

• Payment Service Providers: Required transaction information is shared with payment gateway operators such as FPX (Malaysian interbank transfer), DuitNow operators, and authorised eWallet providers to process your deposits and withdrawals.
• Game Providers: Required account information (username, player ID) is shared with game providers such as Pragmatic Play, NetEnt, Microgaming, and Play'n GO to enable you to access their games within the Gardenia888 platform.
• Identity Verification Services: KYC information may be shared with approved third-party identity verification service providers to authenticate the validity of your documents.
• Legal Authority: Gardenia888 will disclose personal data to the relevant authorities (such as the Royal Malaysia Police, MACC, or Bank Negara Malaysia) when required to do so by law, court order, or in the course of an official investigation into fraud or unlawful activity.
• Cloud & Infrastructure Services: Data is stored in a secure cloud environment operated by infrastructure service providers that comply with international security standards. All such providers are bound by strict data processing agreements.

Every third party with whom we share data is required to handle that information to security and privacy standards equal to or higher than those of Gardenia888 itself. We do not permit third parties to use our members' data for their own marketing purposes.

The security of your personal data is Gardenia888's highest priority. We implement multiple layers of technical and organisational safeguards to protect your information from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS Encryption: All communications between your browser or app and Gardenia888's servers are encrypted using TLS 1.3 with 256-bit key length — the same standard used by major Malaysian banking institutions.
• Secure Password Storage: Account passwords are never stored in plain text. We use a strong hashing algorithm (bcrypt with random salt) to secure all passwords.
• Two-Factor Authentication (2FA): We offer and actively encourage the use of 2FA via SMS OTP for all accounts, adding an extra layer of security during login and high-value transactions.
• Internal Access Controls: Access to members' personal data within the Gardenia888 organisation is restricted to staff who require it to perform their duties. All data access is logged and audited on a regular basis.
• 24/7 Security Monitoring: Our systems are continuously monitored to detect and respond to any unauthorised access attempts, cyberattacks, or anomalies in data usage patterns.
• Regular Penetration Testing: Gardenia888 conducts regular penetration testing by independent third parties to identify and patch security vulnerabilities before they can be exploited.

The Gardenia888 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse how the platform is used. The types of cookies we use are as follows:

• Essential Cookies (Required): These cookies are essential for the platform's core functions — such as maintaining your login session, saving language preferences, and ensuring session security. They cannot be disabled as they are necessary for the platform to operate correctly.
• Analytics Cookies: We use analytics cookies to understand how players interact with our platform — which pages are visited most frequently, where players spend their time, and common navigation paths. This data is used in aggregated, anonymised form to improve platform design and functionality.
• Functional Cookies: These cookies remember your preferences and settings — such as display mode, frequently played game selections, and other personal configurations — to provide a more personalised and consistent experience each time you use the platform.
• Session Cookies: Temporary cookies that are automatically deleted when you close your browser. They are used to manage active login sessions and prevent unauthorised access.

You can manage or disable cookies through your browser settings at any time. Please note, however, that disabling essential cookies may affect the functionality of the Gardenia888 platform and make certain features harder to use.

Gardenia888 does not retain your personal data indefinitely. We have a clear data retention policy based on service requirements and legal obligations:

• Active Account Data: For as long as your account remains active on Gardenia888, we retain the personal data necessary to provide our services.
• Data After Account Closure: Once your account is closed, most personal data will be deleted or anonymised within 90 days, except for data that must be retained longer for legal reasons.
• Financial & Transaction Records: Financial transaction records (deposits, withdrawals, and betting activity) are retained for 7 years in accordance with Malaysian accounting and tax legal requirements.
• Identity Verification (KYC) Records: KYC documents are retained for 5 years after the business relationship ends, in accordance with the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• Security Logs: Access logs and security-related activity are retained for 12 months for investigation purposes if required.
• Support Communications: Customer support communication records are retained for 2 years for reference and service improvement purposes.

Once the applicable retention period has expired, your personal data will be securely deleted from all Gardenia888 systems or anonymised in a manner that it can no longer be linked back to you personally.

As a Gardenia888 player and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to your personal data:

To exercise any of the rights above, please contact the Gardenia888 support team by email at support@gardenia888.site stating the nature of your request. We may need to verify your identity before processing certain requests to ensure the security of your data. All valid requests will be processed within 14 to 21 business days.

The Gardenia888 platform is not intended for individuals under the age of 21 and we do not knowingly collect personal data from them. Gardenia888 enforces a minimum age of 21 for all members, in line with youth protection requirements within the gambling industry.

During the registration process, we collect the applicant's date of birth and verify age through a KYC process that requires a Malaysian MyKad. This allows us to identify and reject applications from individuals who have not reached the minimum required age.

If we discover that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data and close the associated account. If you believe that your underage child or dependent has accessed the Gardenia888 platform, please contact us immediately at support@gardenia888.site.

Gardenia888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, applicable laws, or the services we offer to Malaysian players.

When we make significant changes to this Privacy Policy, we will provide appropriate notice through one or more of the following methods:

• Displaying a clear notice on the Gardenia888 platform homepage before any changes take effect
• Sending a notification email to your registered email address
• Displaying in-platform notifications when you are logged in

For minor changes (such as spelling corrections or clarifications that do not alter the substance of the policy), we may not issue a specific notice, but the "Last Updated" date at the top of the document will be revised.

Your continued use of the Gardenia888 platform after any changes take effect constitutes your acceptance of the updated policy. We recommend visiting this page periodically to stay informed of the latest version of our Privacy Policy.

If you have any questions, concerns, or requests regarding Gardenia888's Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Privacy Email: support@gardenia888.site — use the subject line "Data Privacy Inquiry" to help us process your request faster
• Live Chat: Available 24 hours a day, 7 days a week within the Gardenia888 platform after logging in
• Response Time: Privacy enquiries will be responded to within 3 business days. Formal personal data rights requests will be processed within 14 to 21 business days.

The Gardenia888 support team is fluent in Malay and fully understands the needs of Malaysian players. We encourage you to reach out to us without hesitation if anything about your data privacy is unclear or concerns you.