Your privacy matters to us. This Privacy Policy explains what personal data Gardenia88 collects, why we collect it, how we use and protect it, and what rights you hold as a registered user of our platform.
Gardenia88 ("we", "us", "our", "the Platform") operates the online casino and sports betting platform accessible at gardenia88.cam. As part of delivering our services to players across Malaysia — including users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond — we necessarily collect and process personal information about our registered users and platform visitors.
This Privacy Policy ("Policy") sets out in clear, structured terms: what categories of personal data Gardenia88 collects, the lawful bases on which we process that data, how it is used and protected, with whom it may be shared, for how long it is retained, and the rights you have in relation to your personal data.
This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, both of which form part of the contractual framework governing your use of the Gardenia88 platform. By creating an account or continuing to use the Gardenia88 platform, you acknowledge that you have read and understood this Policy.
For the purposes of this Privacy Policy, the following definitions apply:
Gardenia88 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and from third-party service providers where lawfully permitted. The categories of data we collect include:
Collected when you create and maintain a Gardenia88 account:
Collected as part of mandatory identity verification:
Collected in connection with deposits, withdrawals, and gaming activity:
Collected automatically when you access the platform:
Collected when you contact Gardenia88 support or respond to communications:
Collected in connection with player protection tools:
Gardenia88 processes personal data on one or more of the following lawful bases. The table below maps the primary data categories to their corresponding lawful basis:
| Data Category | Lawful Basis | Purpose |
|---|---|---|
| Registration data | Contract performance | Creating and maintaining your Account under our Terms & Conditions |
| KYC / identity documents | Legal obligation | Compliance with anti-money laundering and age verification requirements |
| Financial & transaction data | Contract performance & legal obligation | Processing deposits, withdrawals, and gaming transactions; regulatory reporting |
| Technical & usage data | Legitimate interests | Platform security, fraud detection, performance optimisation, analytics |
| Communication data | Contract performance & legitimate interests | Customer support, dispute resolution, service improvement |
| Marketing communications | Consent | Sending promotional offers, bonus notifications, and platform updates (opt-in only) |
| Responsible gambling data | Legal obligation & vital interests | Player protection, harm prevention, regulatory compliance |
Gardenia88 uses the personal data we collect for the following purposes:
To create, operate, and maintain your Account; to process deposits and withdrawals through your preferred Malaysian payment channels (including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, and USDT TRC20); to verify your identity and age in compliance with our KYC obligations; to provide access to gaming products; and to administer promotional offers and loyalty programme benefits.
To detect and prevent fraudulent transactions, account takeover attempts, multi-accounting, money laundering, and other prohibited conduct. This includes automated fraud scoring, IP monitoring, device fingerprinting, and behavioural analysis. Gardenia88 may use your data to flag and investigate suspicious activity, and to report it to relevant authorities where legally required.
To comply with our obligations under applicable gaming licensing conditions, anti-money laundering regulations, and data protection requirements. This includes maintaining transaction records for the minimum statutory retention periods, conducting enhanced due diligence on high-value transactions, and cooperating with regulatory investigations.
To provide support through our 24/7 live chat and email channels; to maintain support records; to investigate and resolve disputes; and to train our support team using anonymised or pseudonymised interaction data.
To analyse aggregate, anonymised usage patterns to improve platform performance, game selection, payment method availability, and the overall user experience for Malaysian players. Analytics data does not identify individual users.
To monitor gaming behaviour for indicators of problem gambling; to enforce player-set deposit limits and session time limits; to act on cooling-off and self-exclusion requests; and to flag accounts for proactive responsible gambling interventions where our monitoring systems identify potential concern patterns.
Where you have provided explicit consent, to send you promotional communications about bonuses, seasonal promotions (including Malaysian festive promotions), sports betting offers, and platform updates. You may withdraw your marketing consent at any time by adjusting your Account notification preferences or by contacting our support team.
Gardenia88 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Personal data is shared with third parties only in the following circumstances:
We engage carefully vetted third-party service providers who process personal data on our behalf under binding data processing agreements. These include: payment processing partners (for FPX, DuitNow, e-wallet, and bank transfer transactions); KYC and identity verification providers; fraud prevention and anti-money laundering screening services; cloud infrastructure and hosting providers; customer support platform providers; and analytics service providers. All processors are contractually restricted from using your data for any purpose other than the services they provide to Gardenia88.
Gardenia88 will disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, valid legal process, or lawful regulatory direction — including in connection with anti-money laundering investigations, gaming regulatory compliance, or fraud investigations.
As a condition of our gaming licence, certain transaction and account data may be shared with the relevant licensing authority as part of ongoing regulatory reporting obligations.
In the event of a merger, acquisition, restructuring, or sale of substantially all assets of the entity operating Gardenia88, personal data may be transferred as part of that transaction, subject to equivalent data protection obligations being maintained by the acquiring entity.
The Gardenia88 platform uses cookies and similar tracking technologies to operate core functionality, maintain your session, and improve your experience. Below is a summary of the cookie categories we use:
| Cookie Type | Purpose | Opt-Out |
|---|---|---|
| Essential / Functional | Session management, login state, security tokens, language and region preferences | Not possible — required for platform operation |
| Performance / Analytics | Anonymised page view tracking, feature usage analytics, error monitoring | Via browser settings or cookie preference centre |
| Fraud Prevention | Device fingerprinting, bot detection, suspicious activity pattern recognition | Not possible — required for platform security |
| Preference / Personalisation | Remembering game preferences, recently played titles, lobby display settings | Via Account preferences |
You may control non-essential cookie usage through your browser settings. Please note that disabling cookies may affect the functionality and performance of the Gardenia88 platform. Gardenia88 does not use third-party advertising or cross-site tracking cookies.
Gardenia88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, or to resolve any ongoing disputes. The principal retention periods applied are as follows:
Where retention beyond these periods is required by law, regulatory order, or for the establishment, exercise, or defence of legal claims, data will be retained for the minimum additional period necessary.
Gardenia88 implements a comprehensive information security programme designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security measures include, but are not limited to:
As a data subject whose personal information is processed by Gardenia88, you hold a number of rights in relation to your personal data. These rights may be exercised by contacting the Gardenia88 Data Protection team via the contact details set out in Section 14 below.
The rights available to you include:
You have the right to request confirmation of whether Gardenia88 processes your personal data, and where it does, to receive a copy of that data along with information about the purposes and basis of processing.
You have the right to request correction of any inaccurate or incomplete personal data held about you. Many data fields can be updated directly within your Account settings. Where this is not possible, contact support.
You may request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purpose it was collected. This right is subject to overriding legal and regulatory retention obligations — for example, Gardenia88 cannot delete transaction records that it is legally required to retain for anti-money laundering compliance purposes.
You may request that we restrict processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing based on legitimate interests, pending verification of those interests.
Where processing is based on your consent or on contract performance, and is carried out by automated means, you may request that your personal data be provided in a structured, machine-readable format.
You have the right to object to processing based on legitimate interests, including profiling, and to withdraw consent for any processing based solely on consent (such as marketing communications) at any time without affecting the lawfulness of prior processing.
Where Gardenia88 makes decisions about you solely through automated means that produce legal or similarly significant effects — such as automated account risk scoring — you have the right to request human review of that decision, to express your point of view, and to contest the outcome.
Gardenia88 operates on a globally distributed cloud infrastructure, and certain personal data may be processed or stored on servers located outside Malaysia. Specifically, data may be transferred to service providers and infrastructure partners located in jurisdictions including but not limited to Singapore, Europe, and other territories where Gardenia88's cloud infrastructure providers operate.
Where personal data is transferred internationally, Gardenia88 ensures that appropriate safeguards are in place, including contractual data processing agreements incorporating standard contractual clauses or equivalent protections recognised under applicable data protection frameworks. Gardenia88 does not transfer personal data to jurisdictions that do not offer an adequate level of data protection without implementing appropriate supplementary safeguards.
The Gardenia88 platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the Gardenia88 registration and KYC process, and any account identified as belonging to an individual under 21 years of age will be immediately closed and all associated data handled in accordance with our legal obligations.
If you are a parent or guardian and believe that a minor has registered on the Gardenia88 platform or has provided us with their personal data without your knowledge, please contact us immediately at the details provided in Section 14. We will take prompt action to investigate and, where confirmed, close the account and securely delete the data in accordance with our retention policies.
Gardenia88 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or our service offering. The "Last Reviewed" date displayed at the top of this page will be updated to reflect the date of any revision.
Where changes are material — meaning they could significantly affect your privacy rights or how your data is processed — Gardenia88 will provide advance notice to registered Users via platform notification or email, a minimum of 14 days before the revised Policy takes effect. For non-material or clarifying changes, the revised Policy will take effect immediately upon publication.
Your continued use of the Gardenia88 platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree to a material change, you should cease using the platform and request Account closure before the change takes effect.
For any queries, concerns, or formal requests relating to this Privacy Policy or to your personal data held by Gardenia88, please contact our Data Protection team through the following channels:
When submitting a data subject rights request (access, rectification, erasure, etc.), please provide your registered Account username, the email address associated with your Account, and a clear description of the request. Gardenia88 may need to verify your identity before processing the request, to ensure we do not disclose or delete data in response to fraudulent requests.
If you are dissatisfied with our response to a privacy concern, you have the right to escalate the matter to the applicable data protection regulatory authority in the jurisdiction relevant to your complaint. Gardenia88 commits to cooperating fully with any such regulatory investigation.
Your data rights are not just legal formalities — they are practical controls over how your personal information is used. Here's a quick reference to the six core rights covered in this Policy.
Request a copy of the personal data we hold about you, plus information about how and why it is being processed.
Ask us to correct any personal data that is inaccurate, incomplete, or out of date — including your contact details or address.
Ask us to delete your personal data in certain circumstances. Subject to legal retention obligations that may override this right.
Request that we temporarily halt processing of your data while a dispute about accuracy or legitimate interest is being resolved.
Where applicable, receive your data in a structured, machine-readable format for transfer to another service provider.
Object to legitimate-interest-based processing and withdraw marketing consent at any time — without affecting prior lawful processing.
Beyond legal compliance, these are the practical commitments that define how we treat your personal information every day.
Every connection between your device and the Gardenia88 platform is encrypted end-to-end. Your personal and financial data never travels in plain text.
Gardenia88 does not sell, rent, or share your personal data with third parties for marketing purposes. Full stop — no exceptions, no small print.
We collect only the personal data that is genuinely necessary to deliver our services, comply with our legal obligations, and protect platform security.
KYC verification is mandatory and enforces our 21+ age requirement. No underage account can pass our identity checks — protecting both minors and the platform.
We don't hold your data indefinitely. Retention periods are defined, audited, and enforced. Once the purpose is fulfilled and legal periods expire, data is securely deleted.
You will only receive promotional emails and notifications if you have explicitly opted in. You can withdraw that consent at any time — instantly and without friction.
Understanding how your data is handled is part of making an informed decision about where to play. If you have questions about this Privacy Policy or want to exercise any of your data rights, our support team is here around the clock. 21+ only — please play responsibly.