Section 1
Introduction
Garasislot ("we", "us", "our") operates the online gaming platform accessible at garasislot.cam. We are committed to handling the personal data of our users — including registered Players and visitors — with transparency, care, and in full compliance with applicable data protection standards.
This Privacy Policy ("Policy") describes how Garasislot collects, uses, discloses, stores, and protects personal information relating to individuals who access or use our platform, register for an account, or communicate with our support team. It also describes your rights as a data subject and how you may exercise them.
This Policy applies to all users accessing garasislot.cam, including players located across Malaysia — from Kuala Lumpur and Petaling Jaya to Penang, Johor Bahru, Shah Alam, and beyond — as well as users accessing the platform from other jurisdictions where doing so is lawful.
By registering an account or continuing to use garasislot.cam, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform more broadly.
We may update this Policy from time to time. The version currently published at garasislot.cam/privacy-policy is the version in effect. Material changes will be communicated to registered users via their registered email address.
Section 2
Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings ascribed below:
"Personal Data"
Any information that relates to an identified or identifiable natural person, including but not limited to name, email address, date of birth, identification number, payment details, IP address, and device identifiers.
"Processing"
Any operation or set of operations performed on personal data, whether or not by automated means — including collection, storage, use, disclosure, erasure, or destruction.
"Data Controller"
Garasislot, as the entity that determines the purposes and means of processing personal data collected through garasislot.cam.
"Data Processor"
A third party that processes personal data on behalf of Garasislot pursuant to a data processing agreement, such as payment gateway providers, fraud detection service providers, and KYC verification platforms.
"Data Subject"
Any natural person whose personal data is processed by or on behalf of Garasislot — primarily registered Players, but also visitors who interact with the Platform without registering.
"KYC Data"
Identity verification documentation submitted as part of the Know Your Customer process, including government-issued identification documents (e.g., Malaysian MyKad, Driver's License, Passport), proof of address documents, and biometric selfie photographs.
Section 3
Personal Data We Collect
The categories of personal data Garasislot collects depend on how you interact with our platform. The following table summarises the data categories and the context in which they are collected:
| Data Category | Examples | When Collected |
|---|---|---|
| Registration Data | Full name, email address, username, date of birth, country of residence, phone number | Account registration |
| Identity / KYC Data | MyKad, Driver's License, Passport, proof of address, selfie with ID | KYC verification process |
| Financial Data | Payment method type, last 4 digits of account/card, transaction history, deposit and withdrawal amounts in MYR | Deposits & withdrawals via Maybank, CIMB, Touch 'n Go eWallet, DuitNow, FPX, crypto wallets, etc. |
| Gaming & Betting Data | Game history, bet records, wagering amounts, win/loss records, bonus redemptions | Platform usage — ongoing |
| Technical Data | IP address, browser type and version, device type, operating system, session timestamps, login history | Automatically upon platform access |
| Communications Data | Contents of live chat transcripts, email correspondence with support team, feedback submissions | Support interactions |
| Marketing Preferences | Opt-in/opt-out status for promotional emails, notification preferences | Registration and account settings |
We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, unless directly required for responsible gambling purposes (e.g., self-exclusion declarations) in which case such data is processed strictly for that purpose only.
Section 4
How We Collect Your Data
Garasislot collects personal data through the following means:
4.1 Direct Provision by You
You provide us with personal data directly when you: register an account on garasislot.cam; complete the KYC verification process by uploading identity documents; make a deposit or request a withdrawal; contact our customer support team via live chat or email; participate in surveys, promotions, or feedback requests; or update your account profile settings.
4.2 Automated Collection
When you access garasislot.cam, certain technical data is collected automatically through cookies, log files, and similar technologies. This includes your IP address, device identifiers, browser fingerprint, pages visited, session duration, and gameplay activity. This data is used to ensure platform security, detect fraud, maintain session integrity, and improve the user experience.
4.3 Third-Party Sources
In some circumstances, Garasislot may receive personal data about you from third parties, including: payment service providers processing your deposit or withdrawal transactions; identity verification service providers conducting KYC checks; fraud prevention and anti-money laundering screening services; and analytics providers that aggregate anonymised usage data. All third-party data processors are subject to contractual data protection obligations.
Section 5
Lawful Basis for Processing
Garasislot processes your personal data only where a lawful basis exists. The applicable bases are as follows:
- Contractual necessity: Processing is necessary to fulfil our obligations under our Terms & Conditions — including account creation, processing deposits and withdrawals, delivering games and betting services, and providing customer support.
- Legal obligation: Garasislot is subject to obligations under applicable anti-money laundering legislation, gaming regulations, and tax reporting requirements. Processing KYC data, transaction records, and account histories is required to comply with these obligations.
- Legitimate interests: We process certain technical and behavioural data in pursuit of our legitimate interest in operating a secure and fair gaming platform, preventing fraud, and improving our services — provided such processing does not override your fundamental rights and freedoms.
- Consent: Where required by law or where no other lawful basis applies, we will seek your explicit consent before processing. You have the right to withdraw consent at any time, without affecting the lawfulness of processing that took place before withdrawal.
Section 6
How We Use Your Personal Data
Garasislot uses the personal data we collect for the following purposes:
6.1 Platform Operation
To create and manage your account; verify your identity and eligibility to use the platform; process MYR deposits and withdrawals through your chosen payment method (Touch 'n Go eWallet, Maybank, CIMB, DuitNow, FPX, or cryptocurrency); deliver games, sports betting markets, and promotional offers; and maintain your account history and preferences.
6.2 Regulatory Compliance
To comply with our obligations under anti-money laundering and counter-terrorism financing regulations, including maintaining transaction records and making disclosures to regulatory or law enforcement authorities where legally required.
6.3 Security & Fraud Prevention
To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, money laundering, and other forms of platform misuse. This includes monitoring login patterns, device fingerprints, and transaction behaviours for anomalies.
6.4 Responsible Gambling
To operate responsible gambling tools including deposit limits, self-exclusion registers, session time controls, and reality check alerts. Account activity data is used to identify patterns that may indicate problem gambling behaviour, enabling our team to reach out with support resources where appropriate.
6.5 Customer Support
To respond to your enquiries, resolve disputes, process complaints, and maintain records of communications for quality assurance purposes.
6.6 Marketing Communications
To send you information about Garasislot promotions, bonus offers, and platform updates — but only where you have opted in to receive such communications. You may opt out at any time by updating your account notification settings or contacting our support team.
6.7 Platform Improvement
To analyse aggregate, anonymised usage data to improve the garasislot.cam platform, fix technical issues, and develop new features that better serve Malaysian players.
Section 7
Data Sharing & Third Parties
Garasislot does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may, however, share your personal data with the following categories of recipients where necessary:
7.1 Data Processors
Service providers who process data on our behalf under contractual data protection obligations, including: payment gateway and banking partners (facilitating MYR transactions via DuitNow, FPX, Maybank, CIMB, Touch 'n Go eWallet, and others); KYC and identity verification service providers; fraud detection and anti-money laundering screening platforms; cloud hosting and infrastructure providers; and customer support software providers.
7.2 Regulatory & Law Enforcement Authorities
Garasislot may disclose personal data to government agencies, regulators, courts, or law enforcement bodies where required by applicable law, court order, or regulatory directive. We will notify affected users of such disclosures where legally permitted to do so.
7.3 Business Transfers
In the event of a merger, acquisition, or sale of all or a substantial portion of our assets, personal data held by Garasislot may be transferred to the successor entity. Users will be notified of any such transfer and any consequential changes to this Privacy Policy in advance, where practicable.
All third-party data processors engaged by Garasislot are required to implement appropriate technical and organisational measures to protect personal data and are prohibited from using it for any purpose other than the contracted service.
Section 8
Cookies & Tracking Technologies
Garasislot uses cookies and similar technologies on garasislot.cam. A cookie is a small text file placed on your device when you visit a website. Cookies serve several purposes on our platform:
8.1 Essential Cookies
These cookies are strictly necessary for the platform to function. They manage your logged-in session, maintain your account security tokens, preserve your language and display preferences, and ensure that game sessions are correctly attributed to your account. You cannot opt out of essential cookies without affecting your ability to use the platform.
8.2 Analytics Cookies
We use analytics cookies to understand how players navigate and interact with garasislot.cam. This data is aggregated and anonymised — it does not identify you as an individual. Analytics data helps us improve platform performance, identify technical issues, and develop better features for Malaysian players.
8.3 Preference Cookies
These cookies remember your interface preferences — such as chosen display settings and notification preferences — so that you do not need to reconfigure them on each visit.
8.4 Managing Cookies
You can manage or delete cookies through your browser settings. Most modern browsers allow you to block third-party cookies, delete existing cookies, and set preferences for future cookie handling. Note that disabling essential cookies will prevent you from logging in and using the platform. Instructions for managing cookies vary by browser; consult your browser's help documentation for guidance.
Section 9
Data Security
Garasislot implements a layered approach to data security, combining technical, administrative, and physical controls to protect the personal data we hold from unauthorised access, disclosure, alteration, or destruction.
Our security measures include, without limitation:
- 256-bit SSL/TLS encryption applied to all data transmitted between your browser and our servers
- Encrypted data storage for sensitive personal data at rest, including KYC documents and financial records
- Access controls restricting internal access to personal data on a strict need-to-know basis, with role-based permissions and audit logging
- Multi-factor authentication for internal system access by Garasislot staff
- Continuous monitoring of platform activity for anomalies indicative of a security breach or unauthorised access attempt
- Regular security assessments and penetration testing of the platform infrastructure
Your responsibility: While we implement robust security measures, no system is entirely immune from risk. You are responsible for maintaining the confidentiality of your account login credentials and for logging out of your account when using shared or public devices. Notify us immediately via our support team if you believe your account has been compromised.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Garasislot will notify affected individuals without undue delay and take all reasonable steps to contain and remediate the breach.
Section 10
Data Retention
Garasislot retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law. The following general retention periods apply:
| Data Type | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal obligation (AML / gaming regulations) |
| KYC / identity documents | Duration of account + 5 years post-closure | Regulatory compliance |
| Financial transaction records | 7 years from transaction date | AML and financial reporting obligations |
| Gaming and betting history | Duration of account + 5 years post-closure | Regulatory compliance and dispute resolution |
| Support communications | 3 years from last interaction | Legitimate interest (dispute resolution) |
| Technical / log data | 12 months from collection | Security monitoring and fraud prevention |
| Marketing preferences | Until opt-out or account closure | Consent |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual. Where anonymisation is not technically feasible, data will be permanently deleted.
Section 11
Your Rights as a Data Subject
As a data subject, you hold the following rights in relation to the personal data Garasislot holds about you. To exercise any of these rights, please contact our support team as described in Section 15.
Right of Access
You have the right to request a copy of the personal data Garasislot holds about you, along with information about how it is used. We will provide this within 30 days of a verified request.
Right of Rectification
If any personal data we hold is inaccurate or incomplete, you have the right to request correction. You may update most account details directly through your profile settings.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that certain data must be retained to comply with legal obligations and cannot be erased on request.
Right to Data Portability
You may request an export of personal data you have provided to us in a structured, commonly used, machine-readable format, where technically feasible and where processing is based on consent or contract.
Right to Object
You have the right to object to processing of your personal data where it is based on legitimate interests, including for direct marketing purposes. Marketing opt-outs take effect immediately upon request.
Right to Restrict Processing
In certain circumstances, you may request that we restrict the processing of your data — for example, while a dispute about accuracy is being resolved. Restricted data may still be stored but not otherwise used.
We will respond to all data subject requests within 30 calendar days of receipt. In complex cases, we may extend this period by a further 60 days, with notice provided. We may be required to verify your identity before processing any data subject request.
Section 12
International Data Transfers
Garasislot operates globally, and personal data collected through garasislot.cam may be transferred to and processed in countries outside Malaysia. Such transfers are necessary for the operation of our platform, including the delivery of payment processing, KYC verification, and cloud infrastructure services.
Where personal data is transferred to jurisdictions that do not offer an equivalent level of data protection to that applicable in Malaysia, Garasislot will implement appropriate safeguards to protect your data. These safeguards may include: contractual clauses requiring the recipient to protect the data; transfers to organisations that maintain internationally recognised data protection certifications; or other mechanisms recognised under applicable law as providing adequate protection.
By using garasislot.cam, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia for the purposes described in this Policy.
Section 13
Children & Minors
Strict 21+ Policy: Garasislot's services are strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21.
If we become aware that personal data has been collected from a person under 21 years of age without verified parental or guardian consent, we will take immediate steps to delete that data from our records and close the associated account. Any funds deposited by an underage individual will be handled in accordance with our Terms & Conditions and applicable regulatory requirements.
If you believe that a minor under the age of 21 has registered an account or submitted personal data to Garasislot, please contact our support team immediately so that we may investigate and take appropriate action.
Section 14
Updates to This Privacy Policy
Garasislot reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When we make material changes to this Policy, we will:
- Update the "Effective Date" displayed at the top of this page
- Notify registered users by email at their registered email address, where the change materially affects their rights
- Display a notice on the garasislot.cam platform for a reasonable period following publication of the updated Policy
Your continued use of the platform following notification of a Policy update constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you should request account closure in accordance with our Terms & Conditions.
The current version of this Privacy Policy is always available at garasislot.cam/privacy-policy.
Section 15
Contact Us
If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or need to raise a concern about how Garasislot handles your personal data, please contact our support team through the channels below. All privacy-related communications should be marked clearly as a "Data Privacy Request" or "Privacy Enquiry" to ensure they are directed to the appropriate team.
Live Chat
Available 24 hours a day, 7 days a week via the chat function on garasislot.cam. For data requests, please state "Data Privacy Request" at the start of your message.
Email (plain text — not a clickable link)
[email protected] — We aim to acknowledge all data subject requests within 5 business days and provide a full response within 30 calendar days.
All requests should be submitted in English. Our data privacy team serves registered players across Malaysia, including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond.