Our Privacy Commitments
Six principles that govern how bro178 handles your personal data — every day, without exception.
Data Security
All data transmitted between your device and bro178 is protected by 256-bit SSL/TLS encryption. Sensitive records — including payment details and identity documents — are stored using AES-256 encryption at rest within access-controlled server environments.
No Data Selling
bro178 will never sell, rent, or trade your personal information to unaffiliated third parties for their independent marketing or commercial purposes. Your data is used solely to operate the platform, fulfill regulatory obligations, and improve your player experience.
Your Control
You retain meaningful control over your personal data. bro178 provides clear mechanisms for you to access, correct, export, and — where applicable — request erasure of your personal information. We honor all valid data rights requests within thirty (30) days.
Data Minimization
We collect only the personal data that is necessary for a stated, legitimate purpose. We do not collect supplementary or speculative data about you beyond what is required for account administration, KYC compliance, fraud prevention, and service delivery.
Opt-Out Marketing
Marketing and promotional communications from bro178 are entirely opt-in. You can update your communication preferences at any time via your account settings or by contacting our support team. Opting out of marketing does not affect transactional or security-related notifications.
Full Transparency
This policy is written in plain, professional English — not dense legalese — so you can understand precisely how your data is used. We update this document whenever our practices change and notify all registered players of material revisions via email.
1 Introduction
bro178 ("we", "us", "our", or "bro178") operates the online gaming platform accessible at https://bro178.cam. This Privacy Policy sets out our commitment to protecting the personal data of all individuals who visit, register on, or use our platform (collectively, "you" or the "Player").
bro178 primarily serves the Indonesian market. Our platform is presented in English and is used by Indonesian players — including residents of Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, and other cities across the archipelago — who prefer an internationally styled gaming experience. The data-handling practices described in this policy are designed to reflect both international best-practice standards and the privacy expectations of our Indonesian player base.
By accessing the bro178 platform or registering an account, you acknowledge that you have read this Privacy Policy in full and consent to the coll ection, processing, and use of your personal data as described herein. If you do not agree with any part of this policy, you must discontinue use of the platform immediately.
2 Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
- "Personal Data" — any information that identifies or could reasonably be used to identify a natural person, directly or indirectly. This includes your name, email address, date of birth, device identifiers, and financial account details.
- "Processing" — any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, erasure, or destruction.
- "Data Controller" — bro178, the entity that determines the purposes and means of processing your personal data.
- "Data Processor" — any third party that processes personal data on behalf of bro178 under a written data-processing agreement (e.g., payment gateway providers, KYC verification vendors, cloud hosting services).
- "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
- "KYC" — Know Your Customer; the identity verification process required before processing withdrawals or investigating account activity.
- "Cookies" — small text files placed on your device by the bro178 platform to store session information, preferences, and analytics data.
3 Data We Collect
bro178 collects the minimum personal data necessary to deliver a secure, compliant, and high-quality gaming experience. The categories of data we collect are described in the table below.
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender, government-issued ID number (KTP/passport/SIM) | Account registration, KYC verification, age eligibility check |
| Contact Data | Email address, WhatsApp number, residential address (city, province, postal code) | Account communication, support, verification, marketing (where opted in) |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, etc.), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history | Deposit and withdrawal processing, AML compliance, fraud prevention |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session timestamps | Platform security, fraud detection, analytics, platform optimization |
| Gaming Activity Data | Betting history, game preferences, wagering amounts, win/loss records, bonus usage, session durations | Service delivery, responsible gaming monitoring, bonus administration, dispute resolution |
| Communications Data | Live chat transcripts, email correspondence, support tickets, feedback submissions | Customer support, quality assurance, dispute resolution, regulatory record-keeping |
| KYC Document Data | Scanned or photographed copies of identity documents, proof-of-address documents, selfie verification images | Regulatory compliance, fraud prevention, account ownership verification |
bro178 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health records, or biometric data beyond what is strictly required for identity document verification.
4 How We Collect Data
bro178 collects personal data through the following channels:
4.1 Directly From You
The majority of your personal data is provided directly by you when you: register an account on the bro178 platform; complete KYC verification by uploading identity documents; make a deposit or withdrawal and provide payment account details; contact our customer support team via live chat, WhatsApp, or email; or opt in to promotional communications.
4.2 Automatically Through Platform Use
When you access and use the bro178 platform, certain technical and behavioral data is collected automatically via cookies, server logs, and similar technologies. This includes your IP address, device and browser identifiers, pages visited, session duration, click patterns, and game interactions. This data is used primarily for platform security, fraud detection, and performance analytics.
4.3 From Third-Party Service Providers
bro178 may receive personal data about you from third-party sources in the following circumstances:
- KYC Verification Partners: Identity verification vendors may return processed results (e.g., document authenticity scores, liveness check results) to bro178 as part of the account verification workflow.
- Payment Processors: Banks and e-wallet providers may confirm transaction status, account name matching, and payment authentication results.
- Fraud Prevention Services: Third-party risk intelligence providers may supply device fingerprint data, IP reputation scores, and fraud signals to supplement our internal fraud detection systems.
- Affiliate Partners: If you arrived at bro178 via a registered affiliate, we may receive a basic referral identifier — but no additional personal data — from that affiliate partner.
5 Purpose & Legal Basis for Processing
bro178 processes your personal data only where a legitimate legal basis exists. The table below maps each processing purpose to its applicable legal basis.
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract (your agreement to these Terms & Conditions) |
| Processing deposits and withdrawals | Performance of contract; legal obligation (AML/payment regulations) |
| KYC identity and age verification | Legal obligation (international AML standards, 21+ age restriction) |
| Fraud detection and prevention | Legitimate interest (protecting the platform, other players, and financial integrity) |
| Responsible gaming monitoring | Legitimate interest; legal obligation (player protection standards) |
| Customer support and dispute resolution | Performance of contract; legitimate interest |
| Sending promotional and marketing communications | Consent (you may withdraw consent at any time) |
| Platform analytics and performance improvement | Legitimate interest |
| Regulatory record-keeping and reporting | Legal obligation |
6 Data Sharing & Third-Party Disclosure
bro178 does not sell your personal data. We share personal data with third parties only in the following limited and controlled circumstances:
6.1 Service Providers (Data Processors)
We engage carefully vetted third-party vendors who process personal data on our behalf under written data-processing agreements that prohibit them from using your data for any purpose beyond the specific service they provide to bro178. These include: KYC and identity verification providers, payment gateway and banking partners (including local Indonesian banks and e-wallet providers), cloud hosting and infrastructure providers, live chat and customer support software providers, and fraud prevention and risk intelligence vendors.
6.2 Regulatory and Legal Authorities
bro178 may disclose personal data to regulatory bodies, law enforcement agencies, courts, or other governmental authorities where required to do so by applicable law, valid legal process (such as a court order or official regulatory notice), or where disclosure is necessary to protect the rights, property, or safety of bro178, its players, or the public.
6.3 Business Transfers
In the event of a merger, acquisition, reorganization, or sale of all or substantially all of bro178's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the email address registered to your account, and the acquiring entity will be required to honor the commitments made in this Privacy Policy.
We will never share your personal data with unaffiliated advertising networks, data brokers, or third-party marketers for their own commercial purposes without your explicit prior consent.
7 Data Retention
bro178 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration and identity data | Duration of account plus five (5) years after account closure |
| KYC documents | Duration of account plus five (5) years after account closure (AML compliance) |
| Financial transaction records | Five (5) years from the date of each transaction |
| Gaming activity and betting history | Three (3) years from the date of activity |
| Customer support communications | Three (3) years from the date of the interaction |
| Marketing consent records | Until consent is withdrawn, plus three (3) years thereafter |
| Technical/log data (IP addresses, session logs) | Twelve (12) months from the date of collection |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our internal data lifecycle management procedures. Anonymized, aggregated data may be retained indefinitely for analytical purposes as it no longer constitutes personal data.
8 Security Measures
bro178 implements a layered, defense-in-depth security architecture to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our technical and organizational security measures include:
- Transport Encryption: All data in transit between your browser or app and our servers is encrypted using TLS 1.2 or higher (256-bit SSL).
- Data-at-Rest Encryption: Sensitive personal and financial data stored on our servers is encrypted using AES-256 encryption.
- Access Controls: Access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
- Two-Factor Authentication (2FA): Available and strongly recommended for all player accounts; mandatory for administrative and operational staff accounts.
- Intrusion Detection: Our infrastructure is monitored continuously for anomalous activity, unauthorized access attempts, and data exfiltration patterns.
- Penetration Testing: We engage independent security specialists to conduct regular penetration tests and vulnerability assessments of our platform.
- Incident Response: In the event of a data breach that is likely to result in a risk to your rights, bro178 will notify affected players without undue delay via their registered email address.
While bro178 applies industry-standard security controls, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. Do not share your password with anyone — bro178 staff will never ask for your password.
9 Cookies & Tracking Technologies
bro178 uses cookies and similar technologies (including local storage, session storage, and pixel tags) to operate the platform, remember your preferences, analyze usage patterns, and support fraud prevention systems. The categories of cookies we use are as follows:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, authentication, security tokens, load balancing. Required for the platform to function. | No — disabling will break core platform functionality |
| Functional | Remembering language preferences, game display settings, and other user-interface customizations. | Yes — via browser settings (may affect personalization) |
| Analytics | Aggregated, anonymized data on platform usage — page views, session lengths, most-visited sections — used to improve the platform experience. | Yes — via browser settings or opt-out mechanism |
| Security & Fraud Prevention | Device fingerprinting, IP reputation checks, bot detection, and session anomaly monitoring. | No — required to protect the platform and all players |
You can manage cookie preferences through your browser settings. Most modern browsers allow you to block, delete, or receive alerts before cookies are placed. Please note that disabling certain cookie categories may impair platform functionality or your gaming experience.
10 Your Data Rights
As a registered player on bro178, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at with the subject line "Data Rights Request". We will acknowledge your request within seventy-two (72) hours and respond substantively within thirty (30) days.
11 Protection of Minors
21+ Only: The bro178 platform is strictly intended for adults aged 21 years and older. We do not knowingly collect, process, or store personal data from any individual under the age of 21.
During account registration and KYC verification, bro178 takes active steps to confirm the age of all applicants. Any account where the registered player is subsequently found to be under 21 years of age will be immediately and permanently closed. Any funds deposited by an underage player will be returned to the source payment method (net of any amounts already wagered), and no winnings generated by an underage player will be released.
If you have reason to believe that a minor has registered on the bro178 platform using falsified information, please contact us immediately at so that we may investigate and take appropriate action.
12 International Data Transfers
bro178's primary player base is located in Indonesia, and we endeavor to process and store personal data in server environments that meet international security standards. In some cases, the third-party service providers we engage (for example, KYC verification vendors or cloud infrastructure providers) may process your data in jurisdictions outside Indonesia.
Whenever personal data is transferred to a third-party processor operating in another jurisdiction, bro178 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. These safeguards include: contractual data-processing agreements containing standard data-protection clauses, vendor security assessments prior to onboarding, and ongoing monitoring of third-party compliance.
By using the bro178 platform, you acknowledge and consent to the transfer of your personal data to third-party processors in other jurisdictions where necessary for the delivery of the services described in this policy, provided that such transfers are governed by appropriate contractual protections.
13 Changes to This Privacy Policy
bro178 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or platform functionality. When we make material changes to this policy, we will notify all registered players by email at least seven (7) days before the revised policy takes effect, and we will update the "Last Updated" date at the top of this page.
Non-material changes — such as typographical corrections, clarifications that do not alter the substance of our data-processing practices, or updates to contact details — may be made without advance notice, although the "Last Updated" date will always reflect the most recent revision.
Your continued use of the bro178 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you must stop using the platform and may request account closure by contacting our support team.
We recommend bookmarking this page and reviewing it periodically. The version of this Privacy Policy that was in effect at the time of each data-processing activity governs that activity. Archived versions of this policy are available on request by contacting .
14 Contact & Data Enquiries
If you have any questions, concerns, or requests relating to this Privacy Policy or the way bro178 handles your personal data, please reach out to our dedicated support team using the contact details below. All privacy-related correspondence is handled in strict confidence.
Email:
Subject Line: Use "Privacy Policy Enquiry" or "Data Rights Request" so your message is routed to the correct team.
Live Chat: Available 24 hours a day, 7 days a week via the platform's built-in chat interface. For sensitive data requests, email is preferred to ensure a documented record.
Response Time: We aim to acknowledge all privacy enquiries within 72 hours (WIB, UTC+7) and to provide a full substantive response within thirty (30) days of receiving a complete and valid request.
Questions About Your Privacy?
Our support team is available around the clock to address any privacy concern or data rights request. You can also explore our full Terms & Conditions or read our Responsible Gaming guidelines.