Privacy Policy — bro178
At bro178, the privacy and security of our members' personal data is a responsibility we take seriously. This Privacy Policy sets out how we collect, process, store and protect the personal information you provide when using the bro178.buzz platform, in accordance with applicable data protection principles.
Introduction
This Privacy Policy (the "Policy") is issued by bro178 (hereinafter "bro178", "we", "us" or "our"), the operator of the online gaming and sports betting platform accessible at bro178.buzz (the "Platform"). bro178 acts as the data controller in respect of all personal data collected through the Platform.
This Policy describes in detail the categories of personal data we collect from members and visitors located across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya and Shah Alam — the purposes for which that data is processed, the legal bases underpinning such processing, and the rights available to you as a data subject.
By registering an account on the Platform, accessing our services or otherwise providing us with personal information, you acknowledge that you have read, understood and accepted this Policy. This Policy is to be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy.
Definitions
The following terms have specific meanings within this Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other data. Includes name, email address, payment details, device identifiers and IP address. |
| "Processing" | Any operation performed on personal data, including collection, recording, organisation, storage, retrieval, use, disclosure, erasure or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data. bro178 is the Data Controller for all personal data collected via the Platform. |
| "Data Processor" | A third party that processes personal data on behalf of bro178, under our instruction and subject to data processing agreements. |
| "Member" | Any individual who has registered and holds an active account on the bro178 Platform. |
| "Cookies" | Small text files placed on your device by the Platform to store session preferences, analytics data and other functional information. |
Personal Data We Collect
bro178 collects personal data across several categories depending on how you interact with the Platform:
3.1 Registration & Identity Data
- Full legal name
- Date of birth (for age verification — 21+ requirement)
- Residential address (including city, postcode, country)
- Email address and contact telephone number
- Username and encrypted password credentials
- Government-issued identification documents submitted for KYC verification (e.g., Malaysian MyKad, passport)
3.2 Financial & Transaction Data
- Deposit and withdrawal transaction records, including amounts in MYR
- Payment method identifiers (e.g., Maybank account reference, Touch 'n Go eWallet ID, DuitNow proxy — partial references only, never full account numbers)
- Transaction timestamps and processing status
- Cryptocurrency wallet addresses used for deposits (BTC, ETH, USDT, LTC)
- Chargeback or dispute records where applicable
3.3 Gaming Activity Data
- Game history, bet records, stakes, odds and outcomes
- Bonus claims and wagering requirement completion status
- Sports betting selections including EPL, Liga Super Malaysia, UFC and other events
- Session duration, login times and gaming frequency
- Responsible gambling tool settings (deposit limits, loss limits, self-exclusion status)
3.4 Technical & Device Data
- IP address and approximate geolocation derived therefrom
- Device type, operating system and browser type
- Unique device identifiers and session tokens
- Platform interaction logs (pages visited, features accessed, error reports)
3.5 Communications Data
- Records of correspondence with our customer support team via live chat or email
- Feedback, complaints and dispute records
- Email and notification preferences
How We Collect Personal Data
bro178 collects personal data through the following means:
- Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account settings.
- Automatically — through cookies, session tracking technologies and server logs when you access and navigate the Platform.
- From third-party payment processors — transaction confirmation data from Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX and cryptocurrency network confirmations.
- From identity verification providers — document verification and fraud screening services used to confirm your identity in compliance with KYC obligations.
- From analytics providers — aggregated and anonymised data from platform analytics tools used to improve user experience.
Purposes of Data Processing
bro178 processes personal data for the following specific and legitimate purposes:
| Purpose | Data Categories Used |
|---|---|
| Account registration & management | Identity data, contact data, credentials |
| KYC & age verification | Identity documents, date of birth |
| Payment processing | Financial data, transaction records |
| Provision of gaming services | Gaming activity data, session data |
| Responsible gambling monitoring | Gaming frequency, limit settings, self-exclusion status |
| Fraud prevention & AML compliance | Transaction data, IP/device data, identity data |
| Customer support | Communications data, account data |
| Platform security | Technical data, session tokens, login records |
| Platform analytics & improvement | Anonymised/aggregated technical data |
| Marketing communications (where consented) | Contact data, communication preferences |
bro178 will not use your personal data for any purpose incompatible with those listed above without providing prior notice and, where required, obtaining your explicit consent.
Legal Basis for Processing
bro178 processes your personal data on the following legal grounds:
- Contractual necessity: Processing is required to perform our contract with you — namely to provide the gaming, betting and payment services you have registered to receive.
- Legal obligation: We are required by applicable regulations to process certain personal data for KYC identity verification, anti-money laundering (AML) compliance, and responsible gambling obligations. Failure to provide data for these purposes may result in service restrictions.
- Legitimate interests: We process technical and analytics data to operate, secure and improve the Platform — activities that are balanced against your right to privacy and conducted with appropriate safeguards.
- Consent: Where we send you direct marketing communications (such as promotional bonus offers), we do so on the basis of your freely given, specific and informed consent, which you may withdraw at any time via your account notification settings.
Data Sharing & Disclosure
7.1 Third-Party Service Providers
bro178 engages carefully selected third-party Data Processors to assist in delivering our services. These include payment gateway operators (for processing MYR transactions via FPX, DuitNow and e-wallet providers), identity verification service providers, fraud screening platforms, cloud hosting infrastructure providers and analytics services. All third-party processors operate under written data processing agreements that restrict their use of your data to the specific services they provide.
7.2 Regulatory & Legal Disclosure
bro178 may be required to disclose personal data to regulatory authorities, law enforcement agencies, courts or other government bodies where required by applicable law, court order or legal process. We will notify you of any such disclosure where legally permissible to do so.
7.3 No Sale of Personal Data
bro178 does not sell, rent, lease or otherwise transfer your personal data to third parties for their independent marketing or commercial purposes. Any data sharing is strictly limited to what is necessary for the purposes described in this Policy.
Cookies & Tracking Technologies
8.1 Types of Cookies Used
bro178 uses the following categories of cookies on the Platform:
| Cookie Type | Purpose | Duration |
|---|---|---|
| essential | Session management, authentication, security tokens. Required for the Platform to function. Cannot be disabled. | Session |
| functional | Remembers your language preference, display settings and responsible gambling tool configurations. | Up to 12 months |
| analytics | Anonymised usage data to help us understand how the Platform is navigated and identify areas for improvement. | Up to 24 months |
| marketing | Used to deliver relevant promotional content. Only placed with your consent. | Up to 90 days |
8.2 Managing Cookie Preferences
You can manage non-essential cookie preferences through your browser settings at any time. Please note that disabling essential cookies may impair the functionality of certain Platform features, including secure login and payment processing. For full details on cookie management for your specific browser, refer to your browser's help documentation.
Data Retention
bro178 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period |
|---|---|
| Account registration & identity data | Duration of account plus 5 years post-closure (regulatory requirement) |
| Financial transaction records | Minimum 7 years (AML compliance) |
| KYC verification documents | 5 years from date of verification or account closure |
| Gaming activity logs | Duration of account plus 3 years post-closure |
| Customer support records | 2 years from date of last interaction |
| Analytics data (anonymised) | Up to 24 months |
| Marketing consent records | Until withdrawal of consent plus 1 year |
Upon expiry of the relevant retention period, personal data will be securely deleted or irreversibly anonymised so that it can no longer be attributed to you.
Data Security
bro178 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or alteration:
- 256-bit SSL/TLS encryption for all data transmitted between your browser and the Platform.
- AES-256 encryption at rest for stored sensitive data including KYC documents and payment references.
- Two-factor authentication (2FA) available to all Members and mandatory for administrative access.
- Access controls and role-based permissions limiting staff access to personal data on a strictly need-to-know basis.
- Regular security audits and penetration testing conducted by independent third-party security specialists.
- Intrusion detection systems and real-time monitoring of all platform infrastructure.
- Secure data centres with physical access controls and redundant infrastructure.
In the event of a personal data breach that poses a risk to your rights and freedoms, bro178 will notify affected Members and relevant regulatory authorities in accordance with applicable law, within the timeframes required.
Your Rights as a Data Subject
Subject to applicable data protection law, you have the following rights in relation to your personal data held by bro178. To exercise any of these rights, please contact us at support@bro178.buzz.
Right of Access
Request a copy of the personal data we hold about you and information on how it is being used.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held in your account.
Right to Erasure
Request deletion of your personal data, subject to retention obligations under applicable law.
Right to Restriction
Request restriction of processing while a query about accuracy or lawfulness is being resolved.
Right to Portability
Request a copy of data you have provided to us in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests or for direct marketing purposes.
Withdraw Consent
Where processing is based on consent, withdraw that consent at any time via account settings or by contacting support.
Automated Decisions
Request human review of any decision made about you solely by automated processing that significantly affects you.
We will respond to all substantiated data subject requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days with notification provided to you. There is no charge for exercising your rights unless a request is manifestly unfounded or excessive, in which case a reasonable fee may apply.
Children's Privacy
The bro178 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect or process personal data from persons under the age of 21. All new account registrations are subject to age verification through our KYC process.
If we become aware that personal data has been collected from a person under the age of 21 without appropriate verification having been completed, we will immediately suspend that account, delete the associated personal data, and return any deposited funds to the extent practicable. If you believe a minor has registered on the Platform, please notify us immediately at support@bro178.buzz.
International Data Transfers
bro178 may transfer personal data to infrastructure providers, payment processors and other service providers whose systems are located outside Malaysia. Where such transfers occur, bro178 ensures that appropriate safeguards are in place to protect your personal data, including:
- Contractual clauses that impose equivalent data protection obligations on recipient entities;
- Transfer only to jurisdictions with adequate data protection frameworks as recognised by applicable standards;
- Technical security measures, including encryption in transit and at rest, applied regardless of the geographic location of the processing.
By using the Platform, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia. We apply the same security and access control standards to all processing regardless of geographic location.
Amendments to This Policy
bro178 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law or Platform functionality. Any material changes will be communicated to registered Members by email to the address associated with their account, and by a prominent notice on the Platform, no less than 14 days before the changes take effect.
The effective date at the top of this Policy indicates when the current version was last updated. We recommend that you review this Policy periodically. Continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy.
The current version of this Policy is dated 1 January 2026 and supersedes all prior versions.
Contact Us — Data Enquiries
For all privacy-related enquiries, data subject requests or complaints regarding our handling of your personal data, please contact the bro178 Data Protection team:
Live Chat
Available 24 / 7 on the PlatformResponse Time
Data subject requests responded to within 30 calendar days. General enquiries within 2 business hours.We serve Members across all major Malaysian cities including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya and Shah Alam. All privacy-related correspondence is handled with the same confidentiality and security standards applied to your personal data on the Platform.
Our Privacy Commitments
How bro178 Protects Your Data
Six concrete commitments underpinning every aspect of our data handling practices for Malaysian members.
256-Bit Encryption Standard
All data transmitted to and from the Platform is protected by bank-grade 256-bit SSL/TLS encryption. Stored sensitive data is encrypted at rest using AES-256 — the same standard used by financial institutions.
No Data Sales — Ever
bro178 does not sell, rent or broker your personal data to any third party for their independent commercial purposes. Your information belongs to you, and we treat it that way.
Minimum Data Collection
We collect only the data strictly necessary for the service you are using. No extraneous fields, no speculative data gathering — every data point collected has a defined and documented purpose.
Full Control Over Your Data
Access, correct, export or request deletion of your personal data at any time by contacting support@bro178.buzz. We respond to all substantiated data subject requests within 30 calendar days.
Defined Retention Periods
Every category of personal data we hold is subject to a documented retention schedule. When the retention period expires, data is securely deleted or irreversibly anonymised — no indefinite holding of stale data.
Breach Notification Commitment
In the unlikely event of a data breach affecting your personal information, bro178 will notify you and relevant authorities within the timeframes required by applicable law — no concealment, no delay.
Questions About Your Privacy?
We're Here to Help
If you have any questions about how bro178 handles your personal data, or would like to exercise your data rights, our support team is available around the clock.