This Privacy Policy explains how bro138 collects, uses, stores, and protects your personal information. We are committed to safeguarding your privacy and ensuring that your data is handled in accordance with internationally recognized data protection standards.
1.1 Scope. This Privacy Policy applies to all personal information collected by bro138 through the bro138 platform (https://bro138.click), including the website, mobile-optimized interfaces, and any associated services. By registering an account, placing a bet, or otherwise interacting with the bro138 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein.
1.2 Age Restriction. The bro138 platform is intended exclusively for individuals aged 21 years or older. We do not knowingly collect or process personal information from individuals under the age of 21. If we become aware that an individual under 21 has provided personal data to bro138, we will delete that information immediately and close the associated account.
1.3 Geographic Context. bro138 operates as an internationally licensed offshore gaming platform serving players resident in Indonesia. This Privacy Policy is designed to comply with internationally recognized data protection standards while reflecting the operational reality of cross-border online gaming services.
2.1 Identity. The data controller responsible for your personal information is the legal entity operating the bro138 platform under its international gaming license. All data processing activities described in this Privacy Policy are conducted under the authority and responsibility of bro138 as the data controller.
2.2 Contact Details. For all privacy-related inquiries, data access requests, correction requests, deletion requests, or complaints regarding the handling of your personal data, you may contact bro138 directly at: [email protected] (plain text — not a clickable link; copy this address into your email client).
3.1 Account Registration Data. When you register an account on bro138, we collect the following personal information:
3.2 KYC Verification Data. As part of our Know Your Customer (KYC) compliance obligations, we collect identity verification documents before your first withdrawal, including:
3.3 Financial Transaction Data. When you deposit or withdraw funds, we collect:
3.4 Gaming Activity Data. We automatically log your betting and gaming activity on the bro138 platform, including:
3.5 Technical and Device Data. When you access the bro138 platform, we automatically collect technical information, including:
4.1 Account Management. We use your personal data to create and maintain your bro138 account, process your login credentials, and provide customer support services. This includes password reset functionality, account verification, and communication regarding account status changes.
4.2 Payment Processing. Your financial transaction data is used to process deposits and withdrawals, maintain accurate account balances, reconcile transactions, and comply with anti-money laundering (AML) and financial crime prevention obligations.
4.3 Identity Verification & KYC. We process your KYC documents to verify your identity, confirm your age (21+ requirement), detect and prevent fraud, ensure compliance with our licensing obligations, and protect the integrity of the bro138 platform. Identity verification is a non-negotiable legal and operational requirement for all online gaming platforms.
4.4 Service Delivery. Your gaming activity data is used to facilitate bet placement and settlement, deliver game outcomes, award winnings, apply bonus terms, and provide personalized account dashboards showing your betting history, balance, and active promotions.
4.5 Security & Fraud Prevention. We analyze behavioral patterns, device fingerprints, and transaction data to detect unusual activity, prevent multi-accounting (duplicate accounts), identify collusion or bonus abuse, and protect both bro138 and its player community from fraudulent conduct.
4.6 Responsible Gaming. Your activity data may be analyzed to identify patterns consistent with problem gambling behaviors. Where such patterns are detected, bro138 may proactively contact you to offer responsible gaming tools such as deposit limits, self-exclusion, or cooling-off periods.
4.7 Marketing Communications. With your consent (where required by applicable law), we may use your email address or phone number to send promotional offers, bonus announcements, and platform updates. You may opt out of marketing communications at any time by clicking the unsubscribe link in any promotional email or by contacting support.
4.8 Legal Compliance. bro138 may use and disclose your personal data where required to comply with applicable laws, respond to lawful requests from regulatory authorities, enforce our Terms & Conditions, protect our legal rights, or defend against legal claims.
5.1 General Principle. bro138 does not sell, rent, or share your personal data with third parties for their own marketing purposes. Your information is treated as strictly confidential and is disclosed only in the limited circumstances described below.
5.2 Payment Processors. When you deposit or withdraw funds, certain transaction details (account holder name, bank/e-wallet identifier, transaction amount) are shared with our contracted payment processing partners (Indonesian banks and e-wallet providers) solely for the purpose of completing the financial transaction. These processors are bound by confidentiality obligations and are prohibited from using your data for any purpose other than transaction processing.
5.3 Game Providers. Your gameplay activity on live casino tables, slot games, and other third-party-provided content may be logged by the game studio (e.g., Evolution Gaming, Pragmatic Play, PGSoft, Microgaming) for game integrity, fairness auditing, and technical support purposes. Game providers are contractually bound to use this data solely for operational purposes and not for independent marketing.
5.4 Regulatory Authorities. bro138 may disclose your personal data to the licensing authority under which we operate, or to other governmental bodies where required by law, court order, or regulatory mandate. This includes but is not limited to anti-money laundering investigations, fraud investigations, and compliance audits.
5.5 Legal Proceedings. We may disclose your data where necessary to enforce our Terms & Conditions, protect the rights, property, or safety of bro138, its employees, or other platform users, or where disclosure is required in connection with legal proceedings, arbitration, or dispute resolution.
5.6 Business Transfers. In the event that bro138 is acquired by or merges with another entity, your personal data may be transferred to the acquiring entity as part of the business transaction. You will be notified via email if such a transfer occurs, and the new data controller will continue to be bound by the terms of this Privacy Policy unless you are provided with notice and an opportunity to consent to a new policy.
6.1 Encryption. All data transmitted between your device and bro138's servers is encrypted using 256-bit SSL (Secure Sockets Layer) technology, the same standard employed by major banking institutions globally. Personal data stored on bro138's servers is encrypted at rest using industry-standard encryption algorithms.
6.2 Access Controls. Access to personal data within bro138's systems is restricted to authorized personnel only, on a need-to-know basis. All employees and contractors with access to personal data are bound by confidentiality agreements and undergo regular data protection training.
6.3 Secure Infrastructure. bro138's technical infrastructure is hosted in secure, professionally managed data centers with physical security controls, fire suppression systems, redundant power supplies, and 24/7 monitoring. Regular security audits and penetration testing are conducted to identify and remediate vulnerabilities.
6.4 Account Security. While bro138 implements robust technical security measures, you also play a critical role in protecting your account. You are responsible for maintaining the confidentiality of your login credentials, using a strong and unique password, enabling two-factor authentication (where available), and logging out after each session when using a shared or public device.
6.5 Incident Response. In the event of a data breach that affects your personal information, bro138 will notify affected users and relevant regulatory authorities in accordance with applicable data breach notification laws. Notification will be provided via email to the address on file, and will include information about the nature of the breach, the data affected, and the steps bro138 is taking to remediate the issue.
7.1 Active Account Data. Personal data associated with active bro138 accounts is retained for as long as the account remains open and active. This includes registration data, KYC documents, transaction history, and gaming activity logs.
7.2 Closed Account Data. When you request account closure, bro138 will retain certain personal data for a period of 7 years from the date of closure to comply with anti-money laundering (AML) regulations, financial record-keeping obligations, and to resolve any pending disputes or claims. After this retention period, personal data will be securely deleted or anonymized such that it can no longer be linked to an identifiable individual.
7.3 Financial Records. Transaction records, including deposit and withdrawal logs, are retained for a minimum of 7 years in accordance with international financial regulatory standards and gaming license requirements.
7.4 Marketing Data. If you have opted in to receive marketing communications, your contact information will be retained until you opt out (unsubscribe) or until the account is closed, whichever occurs first.
7.5 Technical Logs. Server logs, IP address logs, and device fingerprint data are typically retained for 12 to 24 months for security and fraud prevention purposes, after which they are automatically purged.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account Registration Data | Active + 7 years post-closure | AML compliance, dispute resolution |
| KYC Documents | Active + 7 years post-closure | Regulatory requirements, fraud prevention |
| Financial Transaction Records | 7 years minimum | Financial record-keeping laws |
| Gaming Activity Logs | Active + 7 years post-closure | Dispute resolution, audit trails |
| Marketing Consent Data | Until opt-out or closure | Consent management |
| Technical Logs (IP, Device) | 12–24 months | Security, fraud prevention |
8.1 Right of Access. You have the right to request a copy of the personal data bro138 holds about you. This includes registration details, KYC documents, transaction history, and gaming activity logs. Access requests can be submitted by contacting [email protected]. bro138 will respond to verified access requests within 30 calendar days.
8.2 Right to Rectification. If any of your personal data held by bro138 is inaccurate or incomplete, you have the right to request correction. You may update certain account details (email address, phone number, address) directly through your account dashboard. For corrections to KYC documents or other verified data, contact support with supporting documentation.
8.3 Right to Erasure. You have the right to request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and no overriding legitimate grounds exist. Note that bro138 may be legally required to retain certain data for the retention periods described in Section 7, even after an erasure request.
8.4 Right to Data Portability. You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format (e.g., CSV or JSON). Data portability requests can be submitted via [email protected].
8.5 Right to Object. You have the right to object to processing of your personal data where bro138 relies on legitimate interests as the legal basis for processing. Upon receiving an objection, bro138 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for the establishment, exercise, or defense of legal claims.
8.6 Right to Restrict Processing. In certain circumstances, you have the right to request that bro138 temporarily suspend processing of your personal data, for example while a dispute about accuracy or lawfulness of processing is being resolved.
8.7 Right to Withdraw Consent. Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
8.8 How to Exercise Your Rights. To exercise any of the rights described above, please contact bro138's Data Protection Officer via email at: [email protected] (plain text — not a clickable link). Include your full name, registered email address, and a clear description of the right you wish to exercise. bro138 may request additional verification to confirm your identity before processing the request.
9.1 What Are Cookies. Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work more efficiently, provide a better user experience, and deliver analytics and marketing information to site operators.
9.2 Types of Cookies We Use. bro138 uses the following categories of cookies:
9.3 Managing Cookies. Most web browsers allow you to control cookies through browser settings. You can configure your browser to block all cookies, accept only first-party cookies, or prompt you before accepting a cookie. Note that blocking certain cookies may impair the functionality of the bro138 platform, including the ability to log in or place bets.
9.4 Third-Party Cookies. bro138 may use third-party analytics services (such as Google Analytics) and advertising partners that place their own cookies on your device. These third parties have their own privacy policies governing their use of cookies and tracking technologies.
10.1 Game Providers. bro138 integrates games and live casino services from third-party providers including Evolution Gaming, Pragmatic Play, PGSoft, Microgaming, NetEnt, and others. When you play these games, certain data (such as bet history and game session data) may be processed by the game provider. These providers operate under their own privacy policies, which you should review independently.
10.2 Payment Processors. Deposits and withdrawals are processed through Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). bro138 does not store your full bank account credentials or card details. Payment data is transmitted securely to the relevant financial institution for transaction processing.
10.3 External Links. The bro138 platform may contain links to external websites (such as game provider homepages or payment method information pages). bro138 is not responsible for the privacy practices or content of these external sites. We recommend reviewing the privacy policy of any third-party site before providing personal information.
11.1 Right to Amend. bro138 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements. Updated versions will be published on this page with a revised "Last Updated" date at the top of the document.
11.2 Notification of Material Changes. For material changes that significantly affect your rights or how your personal data is processed, bro138 will notify registered users via email to the address on file, and may display a prominent notice on the platform homepage.
11.3 Continued Use. Your continued use of the bro138 platform after a Privacy Policy update constitutes your acceptance of the revised policy. If you do not agree to the updated terms, you should cease using the platform and may request account closure in accordance with Section 3.4 of our Terms & Conditions.
If you have questions about this Privacy Policy, wish to exercise your data protection rights, or need to submit a privacy-related complaint, please contact bro138's Data Protection team using the details below. All inquiries will be responded to within 30 calendar days.
Our FAQ page covers common questions about account security, KYC verification, and data handling. For platform rules and policies, visit our Terms & Conditions page.