Gardenia888 Privacy Policy – Personal Data Protection for Malaysian Members

Gardenia888 collects two main categories of data from members: data you provide voluntarily when interacting with the platform, and data collected automatically through your use of the platform.

Gardenia888 only collects data that is strictly necessary for the stated purposes. We do not collect sensitive data such as health information, political views, or religious beliefs unless it is directly relevant to a specific legal compliance obligation.

Gardenia888 uses members' personal data responsibly and only for legitimate purposes. The following is a complete list of the purposes for which data is used at gardenia888:

• Service Delivery: Creating and managing member accounts; processing deposits and withdrawals; providing access to casino games, Sports Betting, and all gardenia888 platform features.
• Verification & Security: Verifying identity and age at registration; detecting and preventing fraud, money laundering, and platform abuse; monitoring accounts for suspicious activity.
• Legal Compliance: Meeting reporting obligations under relevant Malaysian laws, including anti-money laundering (AML) and know your customer (KYC) requirements.
• Service Communications: Sending important account notifications such as transaction confirmations, security alerts, changes to terms, and other technical information you need to be aware of.
• Responsible Gaming: Monitoring gameplay patterns to identify members who may need responsible gaming assistance; enforcing limits set by members themselves.
• Platform Improvements: Analysing aggregated data (not individual data) to understand usage patterns and improve the overall user experience on the gardenia888 platform.
• Marketing Communications: Only with your explicit consent, to send you information about promotions, bonuses, and new offers at gardenia888. You may withdraw this consent at any time through your account settings.

Gardenia888 takes security infrastructure seriously to protect the personal data of all members. Data protection is not merely a policy document for us — it is a set of technical and organisational practices enforced daily at every level of platform operations.

The technical security measures employed by gardenia888 include:

• 256-bit SSL/TLS Encryption: All communications between your device and gardenia888's servers are encrypted using 256-bit SSL/TLS protocol — the same standard used by major Malaysian banks including Maybank and CIMB. This ensures your data cannot be read by any third party during transmission.
• Stored Data Encryption: Sensitive data such as financial details and identity information is stored in encrypted databases. Even if a physical server were accessed by an unauthorised party, the data would remain unreadable without the correct encryption key.
• Layered Access Controls: Access to systems containing gardenia888 member data is restricted to specifically authorised personnel only, with two-factor authentication (2FA) mandatory for all internal access. Every access event is logged and monitored.
• 24/7 Monitoring: Gardenia888's security systems are continuously monitored to detect any unusual activity or intrusion attempts. Our cybersecurity team responds to threats in real time.
• Regular Penetration Testing: Gardenia888 conducts regular penetration testing using independent external specialists to identify and patch any vulnerabilities before they can be exploited.
• Secure Data Backup: Member data is automatically backed up to a separate, secure server location to ensure service continuity and protection against data loss.

While gardenia888 takes all reasonable precautions, no digital system can guarantee 100% absolute security. In the event of a data security breach involving your personal data, gardenia888 will notify you within the timeframe prescribed by applicable Malaysian law.

Gardenia888 does not retain members' personal data for longer than is necessary for the original purpose of collection, or longer than required by applicable Malaysian law. gardenia888's data retention policy is as follows:

• Active Account Data: Retained for the duration of your active gardenia888 account and for a minimum of 7 years after account closure to meet Malaysian financial and anti-money laundering legal requirements.
• Financial Transaction Records: All deposit, withdrawal, and other transaction records are retained for a minimum of 7 years in accordance with Malaysian accounting and financial legal requirements. This includes all transactions made via Touch 'n Go eWallet, DuitNow, GrabPay, and other payment methods.
• Identity Verification Data: Copies of identity documents and other verification materials are retained for the duration of the active account and for 5 years after account closure, in accordance with mandatory KYC and AML requirements.
• Support Communication Logs: Customer support chat records and emails are retained for 2 years for quality control purposes and for reference in the event of a dispute relating to those interactions.
• Technical Log Data: Server logs and technical data are retained for 12 months for security and technical troubleshooting purposes.
• Marketing Data: If you have given consent for marketing communications, this data is retained until you withdraw that consent.

Once the applicable retention period has elapsed, your personal data will be securely deleted or fully anonymised so that it can no longer be associated with you. This deletion is carried out using procedures that do not permit data recovery.

Gardenia888 is a platform intended exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 18. This is a zero-tolerance policy with no exceptions.

As part of the gardenia888 registration process, all new account applicants are required to confirm that they are 18 years of age or older. Additional age verification in the form of identity documents may be requested at any time during use of the platform.

Should gardenia888 discover that personal data belonging to an individual under the age of 18 has been collected in our systems — whether inadvertently or through the provision of false information — we will take immediate action:

• The account in question will be suspended immediately without prior notice
• All personal data belonging to the individual will be deleted from gardenia888's systems within 72 hours
• All related financial transactions will be reversed in accordance with standard procedures
• Relevant cases will be reported to the appropriate Malaysian authorities where required

Parents or guardians who suspect that their underage child may have registered for or accessed the gardenia888 platform are urged to contact our support team immediately by email at support@gardenia888.best so that prompt action can be taken.

If you have any questions or concerns, or wish to exercise your privacy rights regarding personal data held by gardenia888, please contact our privacy team through the following channels:

• Privacy Email: support@gardenia888.best — please use the subject line "Privacy Enquiry" to help us handle your query more efficiently. We aim to respond within 2 working days.
• Live Chat: The gardenia888 support team is available 24/7 via live chat within the platform for initial privacy enquiries. For formal data deletion or export requests, email is the recommended channel to ensure a clear written record.
• FAQ: Visit the Frequently Asked Questions for answers to the privacy questions most frequently asked by gardenia888 members.

Gardenia888 takes every privacy enquiry and request seriously. We are committed to responding to all valid requests within the timeframe set by Malaysia's PDPA — no more than 21 working days for requests that require investigation.