This Privacy Policy explains what personal data bro33 collects from Members and visitors, how that data is used, with whom it is shared, and what rights you hold over your own information. Your privacy is a core commitment at bro33, not an afterthought.
1.1 bro33 ("we", "us", "our", or "the Company") operates the online betting and casino platform accessible at bro33.app (the "Platform"). In the course of providing our services — including sports betting, live casino, slot games, and togel (Indonesia's traditional numbers lottery) draw markets — we necessarily collect, store, and process personal data relating to our Members and visitors.
1.2 This Privacy Policy ("Policy") sets out in clear, plain language the types of personal data we collect, the purposes for which we use it, the parties with whom we may share it, and the controls and rights available to you. This Policy should be read alongside our Terms & Conditions, which govern the overall relationship between bro33 and its Members.
1.3 bro33 is committed to handling all personal data with the highest standards of care and confidentiality, consistent with internationally recognized data protection principles. While Indonesia's Personal Data Protection Law (UU PDP) and the broader framework of applicable data protection regulations inform our approach, this Policy is written in international English and reflects global best-practice standards.
1.4 If you have questions about this Policy at any time, please contact our Data Privacy team at [email protected] before using the Platform.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living individual, either alone or in combination with other data. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure, and destruction. |
| "Member" | An individual who has registered a bro33 account and accepted the Terms & Conditions. |
| "Visitor" | Any individual who accesses bro33.app without registering or logging in to a Member account. |
| "Data Controller" | The entity that determines the purposes and means of processing Personal Data — in this case, bro33. |
| "Data Processor" | A third party that processes Personal Data on behalf of bro33 in accordance with this Policy and a binding data processing agreement. |
| "Sensitive Data" | A subset of Personal Data requiring heightened protection: national identity numbers (NIK from KTP), financial account details, health information, and biometric data. |
| "Cookies" | Small text files placed on a user's device by a website to store preferences, session identifiers, and analytics data. |
3.1 Registration Data. When you create a bro33 account, we collect your full legal name, date of birth, residential address (including city — Jakarta, Surabaya, Bandung, Bali, Medan, Yogyakarta, or elsewhere in Indonesia), email address, and mobile phone number. This information is mandatory; without it we cannot open an account for you.
3.2 Identity Verification (KYC) Data. To comply with our age-verification and responsible gaming obligations, and to process withdrawals above applicable thresholds, we may collect copies of government-issued identity documents such as your Indonesian National Identity Card (KTP), passport, or driving license (SIM), as well as proof-of-address documents such as bank statements from BCA, BRI, BNI, Mandiri, or utility bills.
3.3 Financial Data. We collect details of deposit and withdrawal transactions including payment method type (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja), transaction amounts in Indonesian Rupiah (IDR), timestamps, and transaction reference numbers . We do not store full bank account numbers or e-wallet credentials on our servers; payment data is tokenized and handled by PCI-DSS compliant payment processors.
3.4 Gaming and Betting Activity Data. We record all bets placed, games played, wagering amounts, wins and losses, bonus usage, session durations, and responsible gaming tool activations (e.g., deposit limit changes, self-exclusion requests). This data is essential for delivering the Platform, resolving disputes, and identifying problem gambling patterns.
3.5 Technical and Device Data. When you access bro33.app, we automatically collect your IP address, device type and model, operating system and version, browser type and version, screen resolution, time zone setting (WIB/WITA/WIT), referring URL, and pages visited within the Platform.
3.6 Communications Data. When you contact our support team via live chat, email at [email protected], or any other channel, we retain records of those communications including the content of messages, timestamps, and resolution outcomes.
3.7 Preference and Marketing Data. Where you have opted in to marketing communications, we record your communication preferences, promotional history, and any feedback provided through surveys or rating prompts.
4.1 Directly from You. The majority of Personal Data we hold is provided directly by you — when you register an account, complete KYC verification, make a deposit or withdrawal request, contact support, or respond to a survey or promotion.
4.2 Automatically through Technology. Technical and device data is collected automatically through server logs, cookies, web beacons, and similar tracking technologies when you browse bro33.app. See Section 10 (Cookies & Tracking) for full details.
4.3 From Payment Processors. Our payment processing partners — which facilitate transactions through BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and ShopeePay — share transaction confirmation data with us to credit your wallet balance and reconcile accounts.
4.4 From Identity Verification Services. We may use third-party KYC and identity verification service providers to cross-check documents submitted during verification. These providers return a verification result (pass/fail/refer) and risk indicators; they do not retain your raw document data beyond the period required to complete the check.
4.5 From Fraud and Risk Screening Tools. We use automated fraud detection tools that may access public-record databases, device fingerprinting services, and IP geolocation providers to assess risk signals and detect prohibited conduct such as account duplication or money laundering.
bro33 processes your Personal Data for the following specific purposes:
bro33 relies on the following legal bases when processing your Personal Data:
| Legal Basis | Processing Activities Covered |
|---|---|
| Contractual Necessity | Account creation, service delivery, deposit/withdrawal processing, bet settlement, and customer support — all activities necessary to fulfill our contractual obligations to you under the Terms & Conditions. |
| Legal Obligation | KYC/AML identity verification, age verification, financial record keeping, sanctions screening, and cooperation with lawful regulatory or law enforcement requests. |
| Legitimate Interests | Fraud prevention, Platform security, responsible gaming monitoring, product analytics, and internal audit. Our legitimate interests do not override your fundamental privacy rights. |
| Consent | Marketing communications (email and in-platform notifications). Consent is freely given, specific, informed, and may be withdrawn at any time without penalty by adjusting your notification preferences in Account Settings or emailing [email protected]. |
7.1 We Do Not Sell Your Data. bro33 does not sell, rent, lease, or otherwise commercially transfer your Personal Data to third parties for their own marketing or commercial purposes.
7.2 Sharing with Data Processors. We share Personal Data with carefully selected third-party service providers who act as Data Processors on our behalf under binding contractual obligations. These include:
7.3 Sharing with Authorities. bro33 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required by a valid legal order, warrant, or binding regulatory requirement. We will notify affected Members of such disclosures where legally permitted to do so.
7.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of bro33's business, Member data may be transferred to the acquiring entity, which will be bound by obligations no less protective than those set out in this Policy. We will notify affected Members of any such transfer.
7.5 Aggregate and Anonymized Data. bro33 may share aggregated, de-identified statistical data (e.g., platform-wide betting volume trends, game popularity statistics) with analytics partners or publish such data publicly. This aggregated data cannot be used to identify any individual Member.
8.1 bro33 retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations.
8.2 The following retention periods apply as a general guide:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of active account + 5 years after closure |
| KYC identity documents | Duration of active account + 7 years after closure |
| Financial transaction records | 7 years from transaction date (financial regulation requirement) |
| Betting and gaming activity logs | 5 years from the date of activity |
| Customer support communications | 3 years from the date of last communication |
| Technical and device logs | 12 months on a rolling basis |
| Marketing consent records | Duration of consent + 3 years after withdrawal |
| Self-exclusion records | Permanent (to prevent re-registration during exclusion periods) |
8.3 Where Personal Data is no longer required and no legal basis exists to retain it, bro33 will securely delete or irreversibly anonymize that data within 90 days of the applicable retention period expiring.
9.1 bro33 implements industry-standard technical and organizational security measures to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. These measures include:
9.2 In the event of a personal data breach that poses a material risk to affected individuals, bro33 will notify impacted Members without undue delay and take all necessary steps to contain and remediate the breach.
10.1 bro33 uses cookies and similar technologies (web beacons, pixel tags, local storage) to deliver a functional and personalized experience on bro33.app. The following categories of cookies are in use:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, authentication tokens, security checks, load balancing. Without these, the Platform cannot function. | No — required for service delivery |
| Functional | Remembering language preferences, game lobby layout choices, and deposit method defaults to improve your experience across visits. | Yes — via cookie settings |
| Analytics | Aggregated, anonymized data on page views, session durations, and navigation paths used to improve Platform design and performance. No personally identifiable data is shared with analytics providers. | Yes — via cookie settings |
| Security & Fraud | Device fingerprinting and behavioral signals used by our fraud prevention systems to detect bot activity, account sharing, and suspicious login patterns. | No — required for platform security |
10.2 You can manage functional and analytics cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. bro33 does not use third-party advertising or retargeting cookies.
Subject to applicable law and certain exemptions, you have the following rights over your Personal Data held by bro33:
To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Subject Request". We will verify your identity before processing any request and will respond within 30 calendar days. Complex requests may require up to 60 days; we will notify you if an extension is necessary.
12.1 bro33 is strictly an adults-only platform. You must be at least 21 years of age to register an account, deposit funds, or place any bet or wager on the Platform. This age restriction is consistent with responsible gaming best practices for the Indonesian market.
12.2 bro33 does not knowingly collect Personal Data from individuals under 21. If we discover or are notified that a Minor has successfully registered an account, we will immediately close that account, void any transactions, and permanently delete all associated Personal Data.
12.3 If you are a parent or guardian and believe your child has registered a bro33 account, please contact us immediately at [email protected]. We will investigate and act within 24 hours of receiving a verified report.
13.1 bro33 operates internationally, and your Personal Data may be stored on or transferred to servers located outside Indonesia. Where such transfers occur, bro33 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.
13.2 Safeguards used for international transfers include binding contractual clauses with all third-party recipients that impose data protection obligations equivalent to those applied by bro33, and the selection of processors operating under recognized security certification frameworks (e.g., ISO 27001, SOC 2 Type II, PCI-DSS).
13.3 If you have questions about the specific countries to which your data may be transferred or the safeguards in place, please contact our Data Privacy team at [email protected].
14.1 bro33 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform services. All updates will be published at bro33.app/privacy-policy with a revised "Last Updated" date at the top of the document.
14.2 Where changes are material — for example, a new category of data being collected or a new third-party data-sharing arrangement — bro33 will notify registered Members via email or in-platform notification at least 14 days before the changes take effect.
14.3 Your continued use of bro33.app after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should stop using the Platform and contact us to close your account.
If you have any questions, concerns, or complaints regarding this Privacy Policy or bro33's data handling practices, please reach out through the following channels:
If you are not satisfied with bro33's response to a privacy complaint, you have the right to escalate the matter by emailing [email protected] with the subject line "Formal Privacy Complaint". Our dedicated Complaints Resolution team will review the matter independently and provide a final written response within 15 business days.
bro33 is committed to resolving all privacy concerns transparently and fairly. We view every complaint as an opportunity to improve our data practices and your experience on the Platform.
Six core principles guide every data-handling decision at bro33 — from the moment you register to the day you close your account.
Every byte of data exchanged between your browser and bro33.app is encrypted with industry-standard 256-bit SSL/TLS technology — the same level used by major Indonesian banks including BCA, BRI, and BNI. Your login credentials, payment details, and personal information are never transmitted in plain text.
bro33 has never sold, rented, or traded Member personal data to third-party advertisers, data brokers, or marketing firms — and we never will. Your data is used exclusively to deliver and improve the bro33 Platform, meet legal obligations, and keep the environment safe and fair for all Members.
You hold meaningful rights over your Personal Data: access it, correct it, restrict how it's used, port it to another service, or request deletion — all via a simple written request to [email protected]. We respond within 30 days, at no cost to you, with no penalty for exercising your rights.
We collect only the data we genuinely need. Registration requires your name, date of birth, address, email, and phone number — nothing more until KYC verification is triggered. We do not harvest behavioral data for profiling beyond what is necessary to deliver the Platform and detect fraud.
Every category of data we hold has a defined maximum retention period — from 12-month rolling device logs to 7-year financial records required by regulation. When retention periods expire, data is securely deleted or irreversibly anonymized within 90 days. We do not keep your data indefinitely.
Where your data is processed by third-party providers outside Indonesia — such as cloud infrastructure or KYC verification partners — bro33 requires binding contractual data protection clauses and only works with partners certified under ISO 27001, SOC 2 Type II, or PCI-DSS frameworks.
Now that you understand how bro33 handles your data, log in and explore Indonesia's most comprehensive online betting platform — sports, live casino, slots, and togel markets, all in one secure Rupiah wallet.
🔞 Adults only (21+). Play responsibly. Visit our Responsible Gaming page for tools and support.