At bro28, the privacy and security of your personal data is a foundational commitment — not an afterthought. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used and protected, and what rights you hold as a registered Player on the bro28 Platform.
Throughout this Privacy Policy, the following terms carry the meanings defined below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living individual, including name, date of birth, contact details, financial identifiers, and device identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transmission, restriction, erasure, or destruction. |
| "Platform" | The bro28 website at https://bro28.pro, all associated web pages, account management interfaces, and digital services operated under the bro28 brand. |
| "Player" / "you" | Any individual who registers a bro28 Account or accesses the Platform's Services. |
| "Controller" | The entity that determines the purposes and means of processing Personal Data — in this context, bro28. |
| "Processor" | A third party that processes Personal Data on behalf of bro28 under a written data processing agreement. |
| "KYC" | Know Your Customer — the identity verification and document authentication process required for Account withdrawal eligibility. |
| "Cookies" | Small text files placed on your device by the Platform to store session data, preferences, and analytics information. |
bro28 acts as the Data Controller for all Personal Data collected through the Platform. As Controller, bro28 determines the purposes for which Personal Data is processed and the means by which that processing is carried out. All data-related inquiries, access requests, and complaints should be directed to bro28 using the contact details set out in Section 16 of this Policy.
bro28 is committed to processing Personal Data in a manner that is lawful, fair, transparent, accurate, and limited to what is strictly necessary for the purposes described in this Policy. Where bro28 engages third-party Processors, those Processors are required by contract to apply equivalent standards of data protection.
When you create a bro28 Account, we collect the following information:
To comply with anti-money-laundering obligations and to protect all Players, bro28 collects the following KYC documents before approving withdrawal requests:
bro28 records all financial transactions on your Account, including:
We maintain detailed logs of your gaming activity on the Platform, including game sessions, bet amounts, outcomes, stake history, and use of responsible gaming tools. This data is essential for dispute resolution, fraud prevention, and regulatory compliance.
When you access the Platform, our servers automatically collect:
If you contact bro28 via live chat or email, we retain transcripts and correspondence. This data is used for quality assurance, dispute resolution, and compliance record-keeping. Chat transcripts are stored for a minimum of 24 months.
bro28 collects Personal Data through the following channels:
bro28 processes your Personal Data for the following specific purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and securing your bro28 Account, including password resets, session authentication, and Account notifications. |
| Payment Processing | Facilitating IDR deposits and withdrawals via Indonesian bank transfers and e-wallets; verifying payment method ownership; preventing duplicate transaction errors. |
| KYC & Compliance | Verifying your identity and age (21+), fulfilling anti-money-laundering (AML) obligations, and maintaining compliance records as required by bro28's international licensing authority. |
| Fraud Prevention | Detecting and preventing unauthorized account access, bonus abuse, collusion, money laundering, chargeback fraud, and other prohibited activities described in the Terms & Conditions. |
| Platform Improvement | Analyzing aggregated and anonymized usage data to improve Platform performance, game selection, and user experience features. |
| Customer Support | Resolving disputes, answering queries, processing complaints, and maintaining support correspondence records. |
| Responsible Gaming | Monitoring gaming patterns to identify problem-gambling indicators; applying deposit limits, cooling-off periods, and self-exclusion measures at your request or proactively where required. |
| Marketing Communications | Sending promotional emails and in-platform notifications about bonuses, tournaments, and new game releases — only where you have provided explicit consent. You may withdraw consent at any time. |
bro28 will not use your Personal Data for any purpose incompatible with those listed above without first obtaining your explicit consent or establishing a separate lawful basis for doing so.
bro28 processes Personal Data on the following legal bases:
bro28 shares Personal Data with the following categories of third-party Processors under strict contractual data-protection terms:
bro28 may disclose Personal Data to competent legal authorities, regulators, or law enforcement agencies without prior notice to you where required to do so by a valid legal order, court judgment, regulatory instruction, or where disclosure is necessary to prevent imminent harm, fraud, or criminal activity.
In the event of a merger, acquisition, or sale of substantially all of bro28's assets, Personal Data held by bro28 may be transferred to the acquiring entity as part of the transaction. You will be notified via your registered email address in advance of any such transfer, and the acquiring entity will be required to honor the commitments made in this Privacy Policy.
bro28 does not sell, rent, or trade your Personal Data to any third party for marketing or commercial purposes. Your data is shared only as described in this Section 7 and for no other commercial use.
bro28's infrastructure and some of its third-party Processors may be located outside Indonesia. Where Personal Data is transferred to servers or service providers in other jurisdictions, bro28 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections afforded within Indonesia, including:
If you would like further information about the specific safeguards applied to international transfers of your data, please contact bro28 using the details in Section 16.
bro28 retains Personal Data for as long as necessary to fulfill the purposes described in this Policy, and in any event for the minimum periods required by applicable law and our international licensing obligations:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of Account plus 5 years after closure |
| KYC documents | Duration of Account plus 5 years after closure |
| Financial transaction records | Minimum 7 years from transaction date |
| Gaming activity logs | 3 years from last game session |
| Customer support transcripts | 24 months from last interaction |
| Marketing consent records | Until consent is withdrawn, plus 12 months |
| Technical/device logs | 12 months on a rolling basis |
| Fraud investigation records | 7 years from investigation closure |
Upon expiry of the applicable retention period, Personal Data is either securely deleted or irreversibly anonymized so that it can no longer be associated with an identifiable individual. Anonymized data may be retained indefinitely for statistical and Platform improvement purposes.
bro28 implements a multi-layered security framework to protect your Personal Data against unauthorized access, loss, alteration, and disclosure:
The bro28 Platform uses the following categories of cookies and tracking technologies:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your login session, prevent cross-site request forgery (CSRF), and enable core Platform functionality. Cannot be disabled without breaking the Platform. | Session / up to 24 hours |
| Functional | Remember your language preferences, display settings, and last-visited game categories to personalize your experience. | Up to 30 days |
| Analytics | Collect aggregated, anonymized data on page views, navigation paths, and feature usage to help bro28 improve the Platform. No individual Player is identified. | Up to 13 months |
| Security | Support fraud-detection systems by identifying device fingerprints and flagging anomalous login behavior. | Up to 12 months |
You may control cookie preferences through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Note that blocking strictly necessary cookies will prevent you from logging in to your Account and using core Platform features. Blocking functional or analytics cookies will not affect your ability to play but may result in a less personalized experience.
bro28 does not use third-party advertising or retargeting cookies. No data collected via Platform cookies is shared with advertising networks or social media platforms for targeting purposes.
As a registered Player and data subject, you hold the following rights with respect to your Personal Data held by bro28. To exercise any of these rights, contact us using the details in Section 16:
bro28 will respond to all valid rights requests within 30 days of receipt. Where a request is complex or numerous, the response period may be extended by a further 60 days, in which case you will be notified of the extension within the initial 30-day window.
The bro28 Platform is strictly intended for adults aged 21 years or older. bro28 does not knowingly collect Personal Data from any individual under the age of 21. Age verification is a mandatory component of the registration process, and KYC verification confirming date of birth is required before withdrawal functionality is unlocked.
If bro28 discovers that an Account has been registered by an individual under 21, the Account will be immediately suspended, all funds will be frozen pending investigation, and any wagering activity will be voided. The Personal Data associated with the underage Account will be deleted once the investigation is complete and any necessary regulatory notifications have been made.
If you are a parent or guardian and believe your child has registered a bro28 Account without authorization, please contact us immediately via live chat or email so that we can take appropriate action without delay.
The bro28 Platform may contain references to third-party game studios and payment providers by name. bro28 does not embed links to external third-party websites within the Platform's content pages. However, in the event that any such link exists, please be aware that bro28 has no control over and accepts no responsibility for the privacy practices of third-party websites. Each third party's own privacy policy will govern data collected through their respective platforms. We encourage you to review the privacy policy of any third-party service you use in connection with your bro28 Account, including your bank's online banking portal and your e-wallet provider's app.
bro28 reserves the right to update this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or our international licensing obligations. Material changes — such as new categories of data being collected, new sharing arrangements, or changes to retention periods — will be communicated to registered Players via email to the address on file and via a prominent notice on the Platform, with a minimum of seven (7) days' advance notice before the revised Policy takes effect.
Non-material changes (such as clarifications of existing language, corrections of typographic errors, or reorganization of sections without substantive change) may be made without prior notice, and the "Last Updated" date at the top of this Policy will be revised accordingly.
Your continued use of the bro28 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must discontinue use of the Platform and request Account closure before the effective date of the change.
For all privacy-related inquiries, data subject rights requests, questions about this Privacy Policy, or concerns about how your Personal Data is being handled, please reach bro28 through the following channels:
When submitting a rights request by email, please include "Privacy Request" in the subject line, your registered username, and a brief description of your request. This helps our team route and prioritize your inquiry correctly.
Six concrete commitments that define our approach to data protection — applied every day, on every transaction, for every Player on the Platform.
Every connection between your device and the bro28 Platform is secured with 256-bit TLS encryption. Your login credentials, KYC documents, and transaction data are never transmitted in plain text.
bro28 does not sell, rent, or trade your Personal Data to any third party for marketing, advertising, or commercial purposes. Your data is used exclusively to operate your Account and deliver the Platform's services.
KYC documents are stored with restricted access, retained only for the legally required period, and shared solely with licensed identity verification partners. No KYC document is accessible by game studios or marketing teams.
Your Account password is never stored in plain text. bro28 uses industry-standard salted hashing algorithms, meaning that even internal bro28 staff cannot read or retrieve your password under any circumstances.
bro28 does not hold your data indefinitely. Every category of Personal Data has a clearly defined maximum retention period. Once that period expires, data is securely deleted or irreversibly anonymized.
Access, correct, export, or request deletion of your data at any time. bro28 responds to all valid data subject rights requests within 30 days. No fees charged for standard requests. No unnecessary barriers.
Now that you understand how bro28 handles your privacy, explore everything the Platform has to offer — from live sportsbook markets on BRI Liga 1 and the EPL, to hundreds of slots, live casino tables, keno draws, and competitive slot tournaments. All in IDR, all available 24/7.
21+ only. Gambling involves financial risk. Please play responsibly.