bro999 Privacy Policy

bro999 is an online casino and sports betting platform accessible at bro999.app, operated by an entity licensed under an international gaming authority. bro999 serves registered Members across Pakistan, including players in Karachi, Lahore, Islamabad, Faisalabad, and other cities. For the purposes of this Privacy Policy, bro999 acts as the Data Controller — meaning we determine the purposes and means by which your personal data is processed.

If you have any questions about how bro999 handles your personal data, or if you wish to exercise any of your data rights, you may contact our Data Protection contact point at [email protected]. We are committed to responding to all data-related enquiries within 30 calendar days of receipt.

bro999 collects only the personal data that is necessary for the purposes described in this Privacy Policy. The categories of personal data we collect include the following:

bro999 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data. If any such data is incidentally disclosed in support communications, it will not be processed for any purpose beyond resolving the immediate query.

bro999 collects personal data through the following channels:

• Direct registration: When you create a bro999 account, you provide identity and contact data directly through the registration form.
• KYC verification: When you submit identity documents to complete our Know Your Customer process, we collect and retain copies of those documents for the period required by our licensing obligations.
• Payment transactions: When you make a deposit or request a withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, or 1LINK, financial data is captured to process and record the transaction.
• Platform use: Technical and usage data is collected automatically as you navigate the Platform, place bets, or play casino games and slots. This is done via server logs, session tracking, and first-party cookies.
• Support interactions: When you contact bro999 support via live chat or email, the content of those communications is recorded and stored.
• Third-party verification services: bro999 may receive identity verification data from licensed KYC and AML screening providers as part of our regulatory compliance obligations.

bro999 uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your bro999 account, processing your bro999 Login, and communicating important account updates.
• Payment processing: Facilitating PKR deposits and withdrawals through your chosen payment method, verifying transaction authenticity, and preventing payment fraud.
• KYC and AML compliance: Verifying your identity and age (21+ requirement), screening against sanctions lists, and complying with anti-money laundering obligations imposed by our gaming licence.
• Responsible gaming: Monitoring your usage patterns to identify signs of problem gambling behaviour and enabling the Responsible Gaming Tools available in your account dashboard, including deposit limits, session reminders, and self-exclusion.
• Fraud detection and platform security: Analysing IP addresses, device fingerprints, and login patterns to detect and prevent unauthorised access, multi-accounting, and bonus abuse.
• Platform improvement: Understanding how Members use bro999's cricket betting markets, live casino tables, slot games, and bingo rooms to improve content, performance, and user experience.
• Legal compliance and dispute resolution: Retaining records necessary to comply with our licensing authority requirements and to respond to disputes, regulatory enquiries, or legal proceedings.
• Marketing communications: Sending promotional offers, bonus updates, and PSL cricket betting notifications to Members who have opted in to receive such communications.

bro999 processes your personal data only where a valid legal basis applies. The primary legal bases we rely upon are:

• Contractual necessity: Processing required to perform the contract between bro999 and you as a registered Member — including account creation, payment processing, and game access.
• Legal obligation: Processing required to comply with applicable laws and our gaming licence conditions, including KYC identity verification, AML screening, age verification (21+), and record-keeping obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, where you have explicitly opted in. You may withdraw consent at any time by contacting [email protected] or using the unsubscribe option in any marketing email.

bro999 does not sell or rent your personal data to any third party. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to binding data processing agreements:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK receive only the transaction data required to process your deposits and withdrawals.
• KYC and AML service providers: Licensed identity verification and sanctions screening providers who assist bro999 in meeting its regulatory obligations under our international gaming licence.
• Hosting and infrastructure providers: Cloud and server infrastructure providers who host the bro999 Platform are contractually bound to maintain data confidentiality and security standards equivalent to those applied by bro999 directly.
• Customer support technology providers: Live chat and helpdesk software providers who process support communications on bro999's behalf.
• Regulatory and licensing authorities: bro999 may be required to disclose Member data to its licensing authority, relevant financial intelligence units, or law enforcement agencies where legally compelled to do so.

All third-party service providers engaged by bro999 are subject to thorough due diligence and are required to implement appropriate technical and organisational security measures. bro999 remains responsible for ensuring that your data is handled appropriately by all parties acting on its behalf.

bro999 uses first-party cookies and similar tracking technologies to operate the Platform effectively, maintain your session after bro999 Login, remember your preferences, and analyse Platform usage patterns. We do not use third-party advertising cookies or behavioural profiling cookies.

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing identifiers. These cannot be disabled without preventing use of the Platform.
• Functional cookies: Store your language preferences, display settings, and last-visited game category to improve your experience on return visits.
• Analytics cookies: First-party analytics data is collected to understand how Members navigate the bro999 Platform — which cricket betting markets are most popular, which slot titles generate the highest engagement, and where users encounter friction. This data is aggregated and not used to personally identify individual Members in analytics reports.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent you from accessing your bro999 account. For functional and analytics cookies, you may opt out without affecting core Platform functionality.

bro999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable laws and our licensing obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your membership plus a minimum of five years after account closure, in accordance with AML record-keeping requirements.
• KYC documents: Retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later.
• Financial transaction records: Retained for a minimum of five years from the date of the transaction to satisfy anti-money laundering and tax record-keeping obligations.
• Support communications: Retained for three years from the date of the last interaction, unless the communication relates to an ongoing dispute, in which case it is retained until the dispute is fully resolved.
• Technical and usage data: Server logs and session data are retained for 12 months for security and fraud prevention purposes, after which they are anonymised or deleted.
• Marketing consent records: Retained for the duration of your membership and for three years after consent is withdrawn, as evidence of lawful processing.

Upon expiry of the applicable retention period, bro999 will securely delete or irreversibly anonymise your personal data. Where data is anonymised rather than deleted, the anonymised data set may be retained indefinitely for analytical purposes.

As a bro999 Member, you hold the following rights in respect of your personal data. To exercise any of these rights, contact bro999 at [email protected] with your full name, registered email address, and a clear description of your request.

• Right of Access: You may request a copy of all personal data bro999 holds about you. We will provide this within 30 calendar days of a verified request, in a structured, machine-readable format where technically feasible.
• Right to Rectification: If any of your personal data held by bro999 is inaccurate or incomplete, you have the right to request correction. Minor contact details such as your email address or city of residence can be updated directly from your account dashboard.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no overriding legal basis applies. Note that regulatory record-keeping obligations may prevent complete erasure of certain data categories.
• Right to Restriction: You may request that bro999 restricts the processing of your data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being evaluated.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request that bro999 provides your personal data in a portable, structured format for transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. Where you object to marketing, bro999 will cease processing your data for that purpose immediately.

bro999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security controls include:

• Encryption: All data transmitted between your device and the bro999 Platform is protected by TLS 1.3. Stored personal and financial data is encrypted using AES-256 at rest.
• Access controls: Access to Member personal data within bro999's internal systems is restricted on a strict need-to-know basis, with role-based access controls, multi-factor authentication for staff, and comprehensive access logging.
• Two-factor authentication: bro999 strongly encourages all Members to enable 2FA linked to their Pakistani mobile number to protect account access independently of bro999's server-side controls.
• Penetration testing: bro999's Platform and infrastructure undergoes regular independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: bro999 maintains a documented data breach response plan. In the event of a breach that is likely to result in risk to Member rights and freedoms, affected Members will be notified promptly with details of the breach and the steps bro999 is taking to address it.

While bro999 takes all reasonable steps to protect your personal data, no electronic system is completely immune from all threats. Members are encouraged to use strong, unique passwords for their bro999 account and to report any suspected unauthorised activity immediately to [email protected].

The bro999 Platform is strictly intended for persons aged 21 years and above. bro999 does not knowingly collect personal data from individuals under the age of 21. If bro999 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be permanently closed.

bro999 employs age verification controls at the point of registration and during KYC processing to enforce this age restriction. If you are a parent or guardian and have reason to believe that a minor has registered on the bro999 Platform, please contact us immediately at [email protected] with supporting information so that we may take appropriate action without delay.

bro999 may send you promotional communications about cricket betting offers, PSL season bonuses, new slot releases, live casino promotions, and other platform news, but only where you have provided explicit consent to receive such communications at the time of registration or subsequently through your account preferences.

Marketing communications are sent via email and, where you have provided consent, via SMS to your registered Pakistani mobile number. bro999 does not engage in unsolicited phone marketing calls.

• You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting [email protected].
• Opting out of marketing will not affect transactional communications such as deposit confirmations, withdrawal notifications, account security alerts, or KYC requests.
• bro999 does not share your contact details with third-party marketers for their own promotional purposes.

bro999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform functionality. Where changes are material — meaning they significantly affect your privacy rights or how your data is processed — bro999 will notify registered Members by email to their registered address and will post a prominent notice on the Platform at least 14 days before the changes take effect.

The updated Privacy Policy will always be available at bro999.app/privacy-policy and will display the effective date at the top of the document. Continued use of the bro999 Platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with a material change, you may request account closure before the change takes effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or to bro999's handling of your personal data, please contact our support team using the details below. We are committed to handling all privacy enquiries with care and within the response timeframes stated in this policy.

• Email: [email protected] (plain text — not a clickable link)
• Method: Written correspondence via email is the primary channel for all data rights requests. Please include your registered email address and a clear description of your query to help us locate your records and respond efficiently.
• Response time: Acknowledgement within 5 business days; substantive response within 30 calendar days.
• Escalation: If you are not satisfied with bro999's response to a data rights request or privacy complaint, you may escalate the matter to the independent dispute resolution body designated by bro999's licensing authority.