bro126 Privacy Policy

Last Updated: 1 January 2026  |  Version 3.1

At bro126, the privacy and security of your personal data is a core commitment — not an afterthought. This Privacy Policy explains exactly what information we collect, why we collect it, how we use and protect it, who we share it with, and what rights you hold over your own data. Please read this document carefully before registering an account.

Section 1

Definitions

Throughout this Privacy Policy, the following terms carry the meanings defined below:

Term Meaning
"Personal Data" Any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data — including name, email address, Indonesian National Identity Number (NIK), IP address, device identifiers, and transaction records.
"Processing" Any operation performed on Personal Data, whether by automated or manual means, including collection, recording, storage, use, disclosure, transfer, or deletion.
"Data Controller" The entity that determines the purposes and means of processing Personal Data. For all data collected via the bro126 platform, the Data Controller is bro126 International Gaming Ltd.
"Data Processor" A third party that processes Personal Data on behalf of and under the instruction of the Data Controller.
"You" / "User" Any individual who visits, registers on, or otherwise interacts with the bro126 platform at https://bro126.cam.
"Platform" The bro126 website, mobile web interface, and any associated applications or services operated by bro126 International Gaming Ltd.
"Consent" A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose, expressed by a clear affirmative action such as ticking a checkbox or clicking "I Agree".
Section 2

Data Controller

The Data Controller responsible for your Personal Data collected through the bro126 platform is:

bro126 International Gaming Ltd.
Website: https://bro126.cam
Email (Data Protection inquiries): [email protected]
Support Hours: 00:00–24:00 WIB, every day

bro126 International Gaming Ltd. holds an international gaming license and operates under the data protection obligations imposed by that license, including requirements that are substantively consistent with internationally recognized data protection principles. Where Indonesian residents' data is concerned, bro126 handles it with reference to applicable Indonesian data protection law, including Law No. 27 of 2022 on Personal Data Protection (UU PDP).

Section 3

Data We Collect

bro126 collects Personal Data across several categories, depending on your interactions with the platform:

3.1 Identity & Registration Data

When you register an account on bro126, we collect your full legal name, date of birth, gender, nationality, Indonesian National Identity Number (NIK) or equivalent government-issued identification number, username, and password (stored as a one-way cryptographic hash — we never store your plaintext password).

3.2 Contact Data

We collect your email address, Indonesian mobile phone number, and residential address, including city (e.g., Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Makassar) and postal code. This information is used to communicate with you and to satisfy KYC address-verification requirements.

3.3 Financial & Transaction Data

We collect records of all deposits, withdrawals, bonus claims, and bets placed on the platform. This includes the payment method used (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja), transaction amounts in Indonesian Rupiah (IDR / Rp), transaction timestamps, and payment reference numbers. We do not store full bank account numbers or e-wallet PINs — only the masked identifiers necessary for transaction reconciliation.

3.4 KYC & Verification Documents

To satisfy our identity verification obligations, we collect copies of government-issued photo ID (KTP, passport, or SIM), proof of address documents, and — where required — selfie photographs or video verification. These documents are stored in an encrypted, access-controlled document management system accessible only to authorized compliance personnel.

3.5 Technical & Device Data

We automatically collect technical data when you access the platform, including your IP address, browser type and version, operating system, device model, screen resolution, referring URL, session duration, pages visited, and unique device identifiers. This data is used for security monitoring, fraud detection, and platform optimization.

3.6 Behavioral & Gaming Data

We collect records of your betting and gaming activity, including markets wagered on, stakes placed, games played, win/loss outcomes, session frequency, and time-on-platform metrics. This data supports responsible gaming monitoring, personalized promotions (where you have consented), and regulatory compliance reporting.

3.7 Communications Data

We retain records of all communications between you and bro126 support, including live chat transcripts, email correspondence, and WhatsApp message logs. These records are retained for dispute resolution, quality assurance, and compliance purposes.

Section 4

How We Collect Data

bro126 collects your Personal Data through the following channels:

  • Directly from you: Information you provide when registering an account, completing KYC, making a deposit or withdrawal, contacting support, or participating in a promotion.
  • Automatically via the platform: Technical and behavioral data collected via server logs, cookies, and analytics tools as you navigate the bro126 platform.
  • From identity verification providers: Data returned from third-party KYC and AML screening services that verify the authenticity of your identity documents and check your name against sanctions and politically exposed persons (PEP) lists.
  • From payment service providers: Transaction confirmation data from Indonesian bank transfer intermediaries and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja).
  • From fraud prevention providers: Risk scores and device fingerprint data from third-party fraud detection services used to protect the integrity of the platform.
Section 5

Purposes of Processing

bro126 processes your Personal Data for the following clearly defined purposes:

Purpose Description
Account Management Creating, maintaining, and administering your bro126 account, including processing deposits, withdrawals, and bet settlements.
Identity Verification (KYC) Verifying that you meet bro126's eligibility requirements, including age (21+) and identity authenticity, in compliance with our international gaming license obligations.
Fraud & AML Prevention Detecting, investigating, and preventing fraudulent activity, money laundering, and other financial crime on the platform.
Customer Support Responding to your queries, complaints, and requests via live chat, email, and WhatsApp.
Responsible Gaming Monitoring your gaming activity for signs of problem gambling and enforcing responsible gaming tool settings (deposit limits, self-exclusion) you have requested.
Marketing Communications Sending you promotional offers, bonus notifications, and platform updates — only where you have provided explicit consent. You may withdraw this consent at any time.
Platform Security Protecting the technical integrity of the bro126 platform against unauthorized access, DDoS attacks, and other cybersecurity threats.
Regulatory Compliance Maintaining records and producing reports as required by our international gaming license and applicable law, including Indonesian data protection law (UU PDP).
Section 7

Data Sharing

bro126 does not sell your Personal Data to unaffiliated third parties for their own commercial purposes. We share Personal Data only with the following categories of recipients, and only to the extent strictly necessary for the stated purpose:

7.1 Service Providers (Data Processors)

We engage carefully vetted third-party service providers to perform functions on our behalf, including identity verification and KYC processing, payment processing and bank transfer intermediation, fraud detection and device fingerprinting, cloud infrastructure and data hosting, customer support platform software, and email and SMS delivery services. All service providers are bound by data processing agreements that restrict their use of your data to the specific service they are contracted to perform.

7.2 Game Studios

When you play games supplied by third-party studios — such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft (PG Soft), or Spribe — limited technical data (a pseudonymous player identifier, session token, and game result data) is transmitted to the studio's gaming server to render the game and record the outcome. No directly identifiable Personal Data such as your full name, NIK, or bank details is shared with game studios.

7.3 Regulatory and Law Enforcement Authorities

bro126 may disclose Personal Data to our licensing authority, financial intelligence units, or law enforcement agencies where required by law, a valid court order, or our gaming license conditions. Such disclosures are made only to the extent required and are logged internally for audit purposes.

7.4 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of bro126's business assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified via your registered email address prior to any such transfer, and the receiving entity will be bound by privacy obligations at least as protective as those in this Policy.

No Sale of Data: bro126 has never sold, rented, or traded user Personal Data to advertising networks, data brokers, or unaffiliated marketing platforms, and has no intention of doing so.
Section 8

International Data Transfers

As an internationally licensed gaming platform serving users across Indonesia, bro126 may transfer your Personal Data to, and process it in, countries outside Indonesia. This includes the jurisdiction in which bro126 International Gaming Ltd. is incorporated, as well as the locations of our cloud infrastructure providers and key service partners.

Where Personal Data is transferred internationally, bro126 ensures that appropriate safeguards are in place to maintain a level of protection equivalent to that afforded under Indonesian data protection law (UU PDP). These safeguards include contractual clauses incorporated into agreements with service providers that impose binding data protection obligations, and where applicable, transfers to jurisdictions recognized as providing an adequate level of data protection.

By registering an account on bro126 and accepting this Privacy Policy, you acknowledge and consent to the international transfer of your Personal Data as described in this section, subject always to the safeguards outlined above.

Section 9

Data Retention

bro126 retains your Personal Data for as long as your account remains active and for a defined period thereafter, in accordance with the following retention schedule:

Data Category Retention Period
Account & Identity Data Duration of active account, plus five (5) years following account closure — in line with our international gaming license requirements and AML obligations.
KYC Documents Five (5) years from the date of submission or from the date of account closure, whichever is later.
Financial & Transaction Records Five (5) years from the date of each transaction, in compliance with AML record-keeping standards.
Communications & Support Records Three (3) years from the date of the communication, for dispute resolution and quality assurance purposes.
Technical & Device Logs Twelve (12) months from collection, unless retained longer in connection with a specific fraud or security investigation.
Marketing Consent Records Duration of active marketing consent, plus three (3) years to demonstrate compliance in the event of a regulatory inquiry.

Once the applicable retention period expires, Personal Data is securely and irreversibly deleted or anonymized so that it can no longer be associated with a specific individual. Anonymized, aggregated data may be retained indefinitely for statistical and business intelligence purposes.

Section 10

Security Measures

bro126 applies a layered, defense-in-depth security architecture to protect your Personal Data against unauthorized access, accidental loss, alteration, or disclosure. Our key security measures include:

  • TLS/SSL Encryption: All data transmitted between your browser and the bro126 platform is encrypted in transit using industry-standard TLS 1.2 or higher, indicated by the HTTPS padlock in your browser.
  • Encryption at Rest: Sensitive Personal Data — including KYC documents, financial records, and identity data — is encrypted at rest using AES-256 or equivalent encryption standards on our cloud storage infrastructure.
  • Password Security: User passwords are stored exclusively as salted cryptographic hashes using modern hashing algorithms. bro126 staff cannot view or retrieve your plaintext password under any circumstances.
  • Access Controls: Access to Personal Data is restricted on a strict need-to-know basis, enforced through role-based access controls. All staff access to production data systems is logged and audited regularly.
  • Two-Factor Authentication (2FA): bro126 strongly recommends — and for certain account actions requires — two-factor authentication to prevent unauthorized account access.
  • Penetration Testing: bro126 commissions periodic independent penetration tests of its platform infrastructure to proactively identify and remediate security vulnerabilities.
  • Data Breach Response: In the event of a Personal Data breach that is likely to result in a risk to your rights and freedoms, bro126 will notify you and the relevant regulatory authority within the timeframes required by applicable law.
Your Responsibility: The security of your bro126 account also depends on the strength of the password you choose and your protection of your login credentials. Never share your password with anyone — including individuals claiming to be bro126 staff. bro126 will never ask for your full password.
Section 11

Cookies & Tracking Technologies

11.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognize your device on subsequent visits and to store preferences or session information. bro126 uses cookies and similar technologies including local storage, session storage, and device fingerprinting scripts.

11.2 Types of Cookies We Use
Cookie Type Purpose Consent Required
Strictly Necessary Essential for the platform to function — maintaining your login session, storing your cart/bet slip, and enabling security features. These cannot be disabled without breaking core platform functionality. No — used on legitimate-interest basis
Functional Remembering your preferences such as language, odds format, and display settings to provide a more personalized experience. No — used on legitimate-interest basis
Analytics Collecting aggregated, pseudonymous data about how users navigate the platform to help us improve usability and performance. bro126 uses privacy-respecting first-party analytics only. Yes — opt-in consent
Marketing / Retargeting Tracking your activity to serve you relevant promotional content. bro126 does not use third-party advertising networks or retargeting pixels that share your data with external advertisers. Yes — opt-in consent
11.3 Managing Cookies

You can manage or disable non-essential cookies at any time through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use core platform features. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

Section 12

Your Data Rights

As a user of the bro126 platform and a resident of Indonesia, you hold the following rights over your Personal Data under Indonesian data protection law (UU PDP No. 27 of 2022) and the data protection principles of our international gaming license:

Right of Access

Request a copy of the Personal Data bro126 holds about you and information about how it is processed.

Right to Rectification

Request correction of inaccurate or incomplete Personal Data held about you.

Right to Erasure

Request deletion of your Personal Data where it is no longer necessary for the purpose collected, subject to our legal retention obligations.

Right to Restriction

Request that we restrict processing of your data — for example, while a dispute about its accuracy is resolved.

Right to Portability

Receive your Personal Data in a structured, commonly used, machine-readable format and transmit it to another controller where technically feasible.

Right to Object

Object to processing based on legitimate interests — including direct marketing — at any time.

Rights re: Automated Decisions

Request human review of any automated decision that produces a significant legal or similarly significant effect on you.

Right to Withdraw Consent

Withdraw any consent you have given to processing — including marketing emails — at any time, without affecting prior lawful processing.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within forty-eight (48) hours and respond substantively within thirty (30) calendar days. Where a request is complex or numerous, we may extend this period by a further thirty (30) days, with prior notification to you.

Identity Verification: To protect your data from unauthorized access requests, bro126 will verify your identity before processing any data rights request. You may be asked to confirm details associated with your account or complete a brief verification step.
Section 13

Minors

The bro126 platform is strictly intended for adults aged 21 years and older. bro126 does not knowingly collect, process, or retain Personal Data from individuals under the age of 21. If we discover that Personal Data has been collected from a person under 21, we will immediately close the associated account, delete all collected data, and — where required — report the matter to the relevant authorities.

If you are a parent or guardian and believe that a person under your care has registered on bro126, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate and act on all such reports within twenty-four (24) hours.

Section 14

Third-Party Links & Embedded Content

The bro126 platform may contain references to third-party game studios, payment providers, and sports data sources. While bro126 takes care to work only with reputable partners, we do not control the privacy practices of third-party entities and are not responsible for their data handling. Each third party's privacy practices are governed by their own privacy policy, which you should review independently.

bro126 does not embed third-party advertising scripts, social media tracking pixels, or external analytics platforms that would transfer your browsing data to unaffiliated commercial entities without your explicit consent.

Section 15

Changes to This Privacy Policy

bro126 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory guidance. Material changes — those that meaningfully affect your rights or how we use your data — will be communicated to you by email to your registered address not less than fourteen (14) days before the changes take effect.

Non-material changes (such as clarifications, formatting corrections, or updates to contact information) may take effect immediately upon publication. The "Last Updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed of how bro126 protects your data.

Your continued use of the bro126 platform after a revised Privacy Policy takes effect constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should stop using the platform and contact support to request account closure.

Section 16

Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact bro126 using the following details. All contact information is provided as plain text only — none of these are clickable links:

  • Email: [email protected] — for data rights requests, use the subject line "Data Rights Request"; for complaints, use "Privacy Complaint".
  • WhatsApp: +62 811 2680 126 — for general privacy inquiries during support hours.
  • Live Chat: Available 24 hours a day, 7 days a week via the bro126 platform, including Indonesian public holidays.
  • Support Hours: 00:00–24:00 WIB (Western Indonesia Time, UTC+7), every day.

If you are not satisfied with bro126's response to your privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. For Indonesian residents, the supervisory authority for personal data protection matters is the Ministry of Communication and Information Technology (Kementerian Komunikasi dan Informatika — Kominfo) or any successor authority established under UU PDP.

Response Commitment: bro126 acknowledges all privacy-related inquiries within forty-eight (48) hours and aims to resolve substantive complaints within thirty (30) calendar days. Complex cases may require up to sixty (60) days, with prior notification to you.

How bro126 Protects Your Data

Our approach to data privacy goes beyond legal compliance. Here are six concrete commitments that define how bro126 handles your Personal Data.

End-to-End Encryption

Every byte of data exchanged between you and bro126 is protected by TLS encryption in transit and AES-256 encryption at rest. Your KYC documents, financial records, and identity data are stored in an encrypted, access-controlled vault — never in plaintext.

No Data Sales — Ever

bro126 has never sold, rented, or traded your Personal Data to advertisers, data brokers, or any unaffiliated commercial entity. We process your data only for the purposes set out in this Policy, and we intend to keep it that way permanently.

Meaningful Data Rights

Your rights to access, correct, delete, or export your Personal Data are real and actionable — not buried in fine print. Submit a request to our support team and we will respond within forty-eight hours and resolve it within thirty days.

Minimal Data Collection

bro126 applies a data minimization principle: we collect only the Personal Data genuinely necessary for the purposes stated in this Policy. We do not collect data speculatively or for undefined future uses.

Defined Retention Limits

Every category of Personal Data bro126 holds is subject to a clearly defined retention period, published in this Policy. When the retention period expires, data is securely deleted or anonymized — it is not retained indefinitely by default.

Proactive Breach Notification

In the event of a data breach that poses a risk to your rights, bro126 is committed to notifying affected users and the relevant supervisory authority within the timeframes required by law — not after weeks of internal deliberation.

Questions About Your Privacy?

Our support team is available around the clock to address any data privacy concern. You can also review our Terms & Conditions, visit our FAQ for quick answers, or return to the homepage.

Adults only (21+). Please gamble responsibly. Visit our Responsible Gaming page for tools and support.