At bro138, your privacy is more than a formality — it is a genuine commitment. We understand that your trust depends on how we handle your personal information. This document clearly and transparently explains how your data is collected, used, stored, and protected.
Military-grade encryption to protect your information.
Your data is never sold or shared for commercial purposes.
You have the right to access, update, or delete your data.
Cookies are used transparently to enhance your experience.
Marketing communications are only sent with your consent.
Fully compliant with Malaysia's Personal Data Protection Act.
This Privacy Policy is published by BRO138, an online casino entertainment platform operating in bro138.vin. This document outlines our commitment to protecting your personal information and our compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.
By using the BRO138 platform — whether through the official website, mobile app, or any of our other service channels — you acknowledge that you have read, understood, and agreed to this Privacy Policy. This Policy applies to all BRO138 users, including visitors without an account, registered members, and former members whose accounts have been closed.
Our Core Principles: BRO138 only collects data that is genuinely necessary to deliver our services safely and effectively. We do not collect excessive information, we do not sell your data to third-party advertisers, and we are committed to ensuring your data is stored securely and shared only under the conditions set out in this policy.
If you have any questions regarding how we manage your personal data, you may contact our Data Protection Officer (DPO) team at any time through the support channels stated at the end of this document.
BRO138 collects various types of personal information depending on the nature of your interaction with our platform. Data collection occurs directly from you or automatically as you use our services. The following are the categories of information we collect:
| Data Category | Example Information | How Collected |
|---|---|---|
| Personal Identity | Full name, date of birth, MyKad/passport number | Registration & KYC |
| Contact Information | Phone number, email address, residential address | Account Registration |
| Financial Data | Bank account number, bank name, transaction records | Deposit & Withdrawal |
| Gaming Data | Betting history, win/loss records, game preferences | Platform activity |
| Technical Data | IP address, device type, web browser, operating system | Automatic (system logs) |
| Behavioural Data | Pages visited, session duration, clicks, and interactions | Cookies & Analytics |
Information collection takes place through several key mechanisms: registration forms and KYC verification directly, deposit and withdrawal transactions, gameplay activity within the platform, customer support via live chat or email, as well as cookie and tracking technologies that operate automatically in the background.
Sensitive Data: For age and identity verification purposes (KYC), BRO138 may collect copies of identification documents such as MyKad or passport. These documents are handled with a higher level of security and securely deleted once verification is complete, unless the law requires retention for a specified period.
Every piece of data we collect has a clear and legitimate purpose. bro138 does not use your data for purposes unrelated to platform operations without first obtaining your consent. The following are the primary purposes of data use:
Legal Basis: BRO138 ensures that every instance of data processing has a valid legal basis — whether based on contractual necessity (to fulfil our service agreement with you), legal obligation (regulatory compliance), legitimate interest (platform security), or explicit consent you have provided.
BRO138 does not sell, rent, or trade your personal information to any third party for their own commercial purposes. However, there are limited situations where we may need to share your data with certain parties, all within the scope of delivering our services or fulfilling legal obligations:
Cross-Border Data Transfers: In situations where data must be transferred outside Malaysia (for example, to international service providers), BRO138 ensures such transfers are safeguarded by adequate protection mechanisms, including data processing agreements that comply with international standards.
Every third party involved in processing your data is required to sign a strict confidentiality and data protection agreement. They are only permitted to use your data for the specific purposes defined and may not process it for any other purpose without bro138's consent.
BRO138 continually invests in cybersecurity infrastructure to ensure your personal data is always protected against unauthorised access, loss, misuse, or accidental disclosure. We employ a multi-layered security approach that includes:
All communications between your browser and the bro138 server are protected by industry-standard 256-bit SSL encryption.
Data is stored on servers protected by multi-layered firewalls and subject to regular security audits by independent experts.
Only licensed personnel with a legitimate job requirement are permitted to access member personal data, with a full audit log maintained.
An intrusion detection system (IDS) operates around the clock to detect and respond to security threats.
Data Breach Response: In the event of any security incident involving your personal data, bro138 is committed to notifying you within 72 hours of confirming the incident, in accordance with PDPA requirements. The notification will include details of the incident, the data involved, remediation steps taken, and guidance on how to protect yourself.
While BRO138 takes all reasonable steps to protect your data, no security system can provide an absolute guarantee. We encourage you to play an active role in keeping your account secure by using a strong password, enabling two-factor authentication, and never sharing your login credentials with anyone.
BRO138 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:
| Cookie Type | Purpose | Duration | Status |
|---|---|---|---|
| Essential Cookies | Login sessions, security, core platform functions | Session / 30 days | |
| Functional Cookies | Language settings, display preferences, user preferences | 1 year | |
| Analytics Cookies | Usage statistics, platform improvements, navigation patterns | 2 years | |
| Security Cookies | Fraud detection, account protection, device verification | 90 days |
You can manage your cookie settings through your web browser at any time. Please note, however, that disabling essential cookies may affect certain functions of the BRO138 platform, including the ability to log in to your account. Functional and analytics cookies can be disabled without affecting core platform functionality.
No Third-Party Advertising Cookies: BRO138 does not use third-party cookies for advertising or cross-site behavioural profiling purposes. Our tracking technologies are limited to operational, security, and internal service improvement purposes only.
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection principles, you have the following rights regarding your personal data held by us:
You have the right to request a copy of all personal data we hold about you within 21 working days.
You may request the correction of any inaccurate, outdated, or incomplete personal data we hold.
You may request the deletion of your personal data, subject to specific legal data retention requirements.
You may object to the processing of your data for direct marketing purposes at any time without providing a reason.
You have the right to receive your data in a structured, machine-readable format for transfer to another platform.
You may request that BRO138 restrict the processing of your data in certain circumstances provided for by law.
To exercise any of the above rights, please contact our Data Protection Officer through the support channels listed in Section 11. We will process your request within 21 business days and may require identity verification before fulfilling it to ensure the security of your data. Please note that the right to erasure may be limited in cases where we are required to retain certain data under Malaysian law.
BRO138 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our principle is to never retain data longer than necessary.
Secure Deletion: Upon expiry of the retention period, BRO138 will delete or anonymise your personal data using secure, irreversible methods, ensuring it cannot be accessed or recovered by any party.
In cases where data must be retained beyond the standard period due to legal disputes, investigations, or regulatory requirements, BRO138 will inform you of such extended retention and the reasons for it wherever possible.
The bro138 platform is strictly for individuals aged 18 and above. We do not knowingly collect, store, or process any personal information from individuals under the age of 18.
Important Notice: If we discover that personal information of a minor has been collected without our knowledge, we will promptly delete all related data and close the account. Parents or guardians who suspect their child may have registered on our platform are encouraged to contact our support team immediately.
BRO138 employs a robust age verification process during registration, including identity document checks, to ensure all members meet the minimum age requirement. These measures form part of our commitment to responsible gaming and the protection of vulnerable individuals.
BRO138 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our business practices, new legal requirements, or improvements in how we protect your data. The date of the most recent amendment will always be displayed at the top of this page.
Continued Acceptance: Continued use of the bro138 platform after the specified amendment date constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we manage your personal data, the bro138 Data Protection Officer (DPO) team is ready to assist you.
We are committed to responding to every privacy-related enquiry within 5 business days. For formal requests regarding your personal data rights, please clearly state the type of request and provide the required identity verification to expedite the process.
Now that you understand how we protect your privacy, register a bro138 account and enjoy a safe, transparent, and responsible online casino experience in Malaysia.
Secure registration in 2 minutes. All your data is protected by 256-bit SSL encryption from the moment you register.
Register FreeThe BRO138 mobile app is equipped with advanced security features including biometric authentication to protect your account.
Download AppPrivacy goes hand in hand with responsible gaming. Learn more about the control tools we provide for you.
Learn More