bro33 is committed to protecting the personal data of every member. This Privacy Policy explains clearly what information we collect, why we collect it, and how we keep it safe.
Every aspect of how bro33 handles your personal data is governed by the following six core principles. They apply to all members, across all services, at all times.
Every page of the bro33 Platform — including registration, login, deposit, and withdrawal flows — is protected by industry-standard 256-bit SSL encryption. Your data is never transmitted in plain text over any network connection.
bro33 does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data is used solely to operate, maintain, and improve the services you use on the bro33 Platform.
This Privacy Policy sets out every category of data we collect and the specific purpose for which it is used. If we change how we process your data, we will update this policy and notify you before the change takes effect.
You have the right to access, correct, export, or request deletion of your personal data at any time. bro33 provides a clear process for exercising each of these rights and commits to responding within statutory timeframes.
bro33 uses cookies and similar tracking technologies only for purposes that are disclosed in this policy — session management, fraud prevention, performance analytics, and personalisation. We do not use cookies to build third-party advertising profiles.
bro33 processes all member data in accordance with internationally recognised data protection standards. Our data handling practices are aligned with the requirements of our operating licence and the expectations of our Indonesian member base.
1.1 This Privacy Policy ("Policy") describes how bro33 ("we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals who access or use the bro33 online betting platform at https://bro33.cam (the "Platform"). It applies to all registered members, prospective members who initiate but do not complete registration, and visitors who browse the Platform without creating an account.
1.2 By accessing the Platform or registering a member account, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.
1.3 This Policy should be read in conjunction with our Terms and Conditions, which govern the overall contractual relationship between you and bro33. In the event of any conflict between this Policy and the Terms and Conditions on a privacy-specific matter, this Policy shall prevail.
1.4 bro33 primarily serves members in Indonesia, including those accessing the Platform from Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, Palembang, and Makassar. The data practices described in this Policy are designed to meet the privacy expectations of our Indonesian member base while aligning with internationally recognised data protection standards.
The following terms carry specific meanings throughout this Privacy Policy.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably be used to identify a living individual — including name, national identity number (NIK), email address, phone number, bank account details, IP address, and device identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure, or destruction — whether automated or manual. |
| "Data Controller" | bro33, which determines the purposes and means of Processing your Personal Data on the Platform. |
| "Data Processor" | A third party that Processes Personal Data on behalf of bro33 under a contractual data-processing agreement — for example, a payment gateway or KYC verification service. |
| "Member" | An individual who has completed registration on the bro33 Platform and holds an active account. |
| "Cookies" | Small text files placed on your device by the Platform to store session state, preferences, and anonymised analytics data. |
| "KYC" | Know Your Customer — the identity and document verification process required before a Member's first withdrawal. |
| "Sensitive Data" | A sub-category of Personal Data that warrants heightened protection — including government-issued ID numbers (NIK, passport), financial account details, and biometric verification data submitted during KYC. |
3.1 bro33 collects only the information that is necessary to provide and improve the Platform's services, comply with applicable legal obligations, and protect the integrity of the betting environment. The categories of data we collect, and the context in which we collect them, are set out in the table below.
| Data Category | Specific Data Points | Collection Context |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, national identity number (NIK) or passport number | Account registration; KYC verification |
| Contact Data | Email address, mobile phone number, city / province of residence (e.g., Jakarta, Bandung, Surabaya) | Account registration; support interactions |
| Financial Data | Bank account number, bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, etc.), e-wallet account (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal amounts in IDR | Deposit / withdrawal processing; AML compliance |
| KYC Documents | Scanned or photographed government-issued ID, selfie with ID (liveness check), proof of payment method ownership | First-withdrawal KYC process |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, time zone (WIB / WITA / WIT) | Automatic collection on Platform access |
| Behavioural Data | Pages visited, session duration, bet history, game preferences, promotional interactions, responsible gaming tool usage | Automatic collection during Platform use |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support and dispute resolution |
3.2 bro33 does not knowingly collect Sensitive Data beyond what is strictly required for KYC compliance and fraud prevention. We do not collect racial or ethnic origin data, political opinions, religious beliefs, health data, or biometric data beyond what is inherent in a standard liveness-check photograph.
3.3 Where you choose not to provide certain data — for example, declining to complete KYC — bro33 may be unable to provide the relevant service (such as processing a withdrawal) but your access to the Platform as a whole will not necessarily be affected.
4.1 bro33 uses your Personal Data for the following purposes only. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your explicit consent or establishing a separate legal basis for the new use.
5.1 bro33 relies on one or more of the following legal bases when Processing your Personal Data. The applicable basis depends on the specific Processing activity and its purpose.
5.2 bro33 does not make solely automated decisions that produce legal or similarly significant effects on Members without providing an opportunity for human review. Where automated risk-scoring results in an account action (such as a temporary hold on withdrawals), you may request a human review by contacting [email protected].
6.1 bro33 does not sell, rent, or trade your Personal Data. We share Personal Data with third parties only in the circumstances described below, and only to the extent necessary for the specific purpose.
6.2 All third-party Data Processors engaged by bro33 are contractually required to implement appropriate technical and organisational security measures, process Personal Data only for the specified purpose, and not retain Personal Data beyond what is necessary for that purpose.
7.1 bro33 uses cookies, web beacons, and similar tracking technologies on the Platform. The following table describes the categories of cookies we use and their purpose.
| Cookie Type | Purpose | Retention |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens, CSRF protection. Cannot be disabled without breaking core Platform functionality. | Session (deleted on browser close) |
| Functional | Remembering your language preferences, odds format (Asian Handicap, Decimal, Fractional), and responsible gaming settings between sessions. | Up to 12 months |
| Analytics | Anonymised page-view counts, session durations, error logging, and performance monitoring. Data is aggregated and does not identify individual Members. | Up to 24 months (anonymised) |
| Fraud Detection | Device fingerprinting and behavioural signals used to detect bot activity, multiple-account patterns, and unusual login behaviour. | Up to 12 months |
7.2 bro33 does not use third-party advertising cookies or cross-site tracking pixels. We do not participate in real-time bidding (RTB) advertising networks or share cookie data with advertising technology platforms.
7.3 You can control cookie settings through your browser's built-in preferences. Disabling strictly necessary cookies will impair your ability to log in and use core Platform features. Disabling functional or analytics cookies will not prevent you from using the Platform but may reduce the quality of your experience.
8.1 bro33 implements a layered technical and organisational security framework to protect your Personal Data against unauthorised access, loss, destruction, or alteration. Our key security controls include:
8.2 While bro33 implements industry-standard security controls, no online system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying bro33 immediately if you suspect that your account has been compromised.
9.1 bro33 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, and to resolve any disputes or enforce our agreements. The retention periods below reflect our standard practice.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of membership + 5 years after account closure | Licensing & AML legal obligation |
| Financial Transaction Records | 7 years from transaction date | AML and audit legal obligation |
| KYC Documents | 5 years from account closure or last transaction | Licensing legal obligation |
| Betting & Game History | 5 years from account closure | Dispute resolution; legal obligation |
| Support Communications | 3 years from resolution of the relevant inquiry | Legitimate interest (quality assurance) |
| Analytics Data (anonymised) | Up to 24 months (anonymised — not Personal Data) | Legitimate interest (platform improvement) |
9.2 Upon expiry of the applicable retention period, bro33 will securely delete or irreversibly anonymise your Personal Data. Where deletion is not technically feasible (for example, in backup archives), the data will be isolated from further processing until deletion is possible.
9.3 If you request Account closure, bro33 will cease active processing of your Personal Data for service delivery purposes immediately. However, certain data categories will be retained for the periods specified above to fulfil legal and audit obligations.
10.1 bro33 recognises and respects the following rights in relation to your Personal Data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request — [Your Account ID]". We will respond within 30 days of receiving a valid request.
Request a copy of the Personal Data bro33 holds about you, including the purposes for which it is processed and the third parties with whom it has been shared.
Request that inaccurate or incomplete Personal Data be corrected. For account-level data such as your registered name or email, you may update this directly via your account settings.
Request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, subject to bro33's legal retention obligations described in Clause 9.
Request that bro33 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
Request a machine-readable export of the Personal Data you have provided to bro33, where technically feasible, to transfer to another service provider of your choosing.
Object to the processing of your Personal Data where bro33 relies on legitimate interests as the legal basis, including objecting to receiving direct marketing communications at any time.
10.2 bro33 will not charge a fee for handling data rights requests submitted in good faith. However, we reserve the right to charge a reasonable administrative fee for requests that are manifestly unfounded, repetitive, or excessive.
10.3 Where bro33 is unable to fulfil a data rights request — for example, because doing so would conflict with a legal retention obligation — we will explain the reason for the refusal in our response.
11.1 The bro33 Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect Personal Data from individuals under the age of 21. If bro33 discovers that Personal Data has been collected from a person under 21, that account will be immediately closed and all associated data will be deleted, with the exception of records required to be retained for legal compliance purposes.
11.2 Age verification is a mandatory step in the bro33 KYC process. A government-issued photo ID (KTP, passport, or driver's licence) confirming the Member's date of birth is required before the first withdrawal can be processed. bro33 employs automated age-checking at the point of registration to flag potentially underage registrations for manual review.
12.1 bro33 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform functionality. The revised Policy will be published on the Platform with an updated "Last Updated" date at the top of the page.
12.2 Where a change to this Policy materially affects the way we process your Personal Data — for example, by introducing a new data-sharing arrangement or a new purpose for processing — bro33 will notify you in advance via the email address registered to your Account or via a prominent notice on the Platform before the change takes effect.
12.3 Your continued use of the Platform following publication of a revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not accept the revised Policy, you may request Account closure by contacting [email protected].
13.1 For all privacy-related questions, data rights requests, or concerns about how bro33 handles your Personal Data, please contact our Data Support team using one of the channels below. All communications about Personal Data matters will be handled with strict confidentiality.
13.2 When submitting a data rights request, please include your registered Account ID or the email address associated with your account so that we can verify your identity before processing the request. This step is necessary to protect your data from unauthorised access requests made by third parties.
Our support team is available around the clock to answer any privacy-related question. You can also review our full Terms and Conditions or visit our FAQ for quick answers.