Bro178 Privacy Policy & Personal Data Protection

1Introduction and Scope of This Policy

Welcome to the bro178 Privacy Policy. This document is provided to transparently explain how bro178 ("we", "Platform", "company") collects, uses, processes, stores, and protects your personal information when you use our platform — including the website, mobile app, and all related services.

This Privacy Policy applies to all users who register and use bro178 services, including new members, active members, and anyone browsing our website. By registering or continuing to use the bro178 platform, you are deemed to have read, understood, and agreed to the terms set out in this Privacy Policy.

We are committed to ensuring your privacy is always protected, and we only collect information that is strictly necessary to deliver the best service to you. If you have any questions regarding this policy, our support team is available to assist you 24 hours a day, 7 days a week.

2Types of Personal Data We Collect

2.1 Information You Provide Directly

When you register a bro178 account, you provide basic information required to verify your identity and deliver our services. This information includes:

• Full name as shown on your identification card or passport
• Date of birth for age verification purposes (18 years and above)
• An active email address for communications and account verification
• Mobile phone number for two-factor authentication (2FA)
• Current residential address
• Payment method details (bank account number, account holder name, e-wallet)
• Identity documents for the KYC process (national ID, passport, driver's license)

2.2 Information Collected Automatically

When you use the bro178 platform, our systems automatically record technical information required for security purposes and to improve the user experience:

• Your device's IP address
• Type and version of web browser or app used
• Device operating system
• Gaming session history, betting, and transactions
• Geolocation data (state or city, not exact address)
• Login session time and duration
• Cookie data and device identifiers

3Purpose of Personal Data Use

Bro178 only uses your personal data for lawful and transparent purposes. The following table summarises the primary purposes of data use and their underlying legal basis:

Bro178 will not use your personal data for any purpose other than those stated above without first obtaining your additional consent.

4Data Sharing and Disclosure

4.1 Authorized Third Parties

In certain circumstances, bro178 may share your personal data with trusted third parties, subject to strict confidentiality agreements. These third parties include:

• Payment service provider — to process your deposits and withdrawals via DuitNow, FPX, and e-wallets
• KYC service provider — to securely verify your identity documents
• Cloud service provider — for secure, high-performance data storage
• Analytics platform — to understand user behaviour for platform improvement purposes (anonymised data only)

4.2 Disclosure to Authorities

Bro178 may be required to disclose your personal information to government authorities, regulatory bodies, or law enforcement agencies upon receipt of a valid request that complies with the relevant legal procedures. In such situations, we will notify you in advance where the law permits us to do so.

5Data Security and Protection

The security of your personal information is bro178's highest priority. We implement multiple layers of technical and procedural protection to ensure your data remains safe:

• End-to-end encryption: All data communications use TLS 1.3 protocol and 256-bit SSL encryption
• Layered access control: Only authorized personnel with a legitimate business need may access sensitive data
• 24/7 Monitoring: Our cybersecurity system operates around the clock to detect and prevent intrusion attempts
• Periodic security audits: Penetration testing is conducted regularly by independent security experts
• Data backups: Data is automatically backed up to a separate, geographically distinct secondary data center
• Two-factor authentication (2FA): Available for all accounts as an additional security layer

While we take all reasonable precautions, no online system can guarantee 100% absolute security. We encourage you to play your part in protecting your account by using a strong password, not sharing your login credentials, and enabling 2FA.

6Data Retention Period

Bro178 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by law. The following are general data retention period guidelines:

• Active account data: Retained for the duration your account is active and for 5 years after account closure
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial regulatory requirements
• KYC documents: Retained for 5 years after the last verification date or account closure
• Support communication logs: Retained for 3 years for reference and dispute resolution purposes
• Anonymized analytics data: May be retained indefinitely as it contains no personally identifiable information

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised using industry-standard methods.

7Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you:

8International Data Transfers

In the context of bro178's global operations, your personal data may be transferred to, stored in, or processed in countries outside Malaysia. Such international transfers occur only when necessary to deliver services to you and are subject to adequate safeguards.

Bro178 ensures that every international data transfer is protected by one of the following mechanisms: approved standard data transfer agreements, data protection adequacy assessments, or your explicit consent. We do not transfer your data to jurisdictions that do not provide a level of data protection equivalent to Malaysia's PDPA.

9Children's Privacy

The bro178 platform is exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store personal data from individuals under the age of 18. All registrations are subject to age verification during the KYC process.

If we discover that personal data has been unintentionally collected from underage individuals, we will take immediate action to delete the information and close the relevant account. If you believe a minor has registered an account, please contact us immediately at [email protected].

10Privacy Policy Amendments

Bro178 reserves the right to modify this Privacy Policy at any time to reflect changes in our data handling practices, new legal requirements, or service improvements. Any material amendments will be communicated to you via:

• Pop-up notifications upon logging in to the platform
• Notification email to your registered email address
• Update the "Last Updated" date at the top of this document

We encourage you to review this Privacy Policy periodically. Your continued use of the bro178 platform after any amendments are published will be considered your acceptance of those changes.

11Contact the Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, you may contact the bro178 Data Protection Officer (DPO) through the following channels: