bro999 Privacy Policy

1. Overview

This Privacy Policy ("Policy") describes how bro999 ("we", "us", "our", "the Platform") — the online casino and sports betting service available at bro999.vip — collects, processes, stores, and protects personal data relating to individuals ("you", "the User", "the Player") who access or use the Platform.

This Policy applies to all services offered under the bro999.vip domain, including the casino, live dealer tables, sportsbook (covering cricket, PSL, golf, and other markets), slot games, promotional programmes, and all associated support and account management functions. It applies to users accessing the Platform from Karachi, Lahore, Islamabad, Faisalabad, and all other locations.

By registering for or using any bro999 service, you acknowledge that you have read and understood this Privacy Policy. This Policy must be read alongside our Terms & Conditions and Responsible Gaming Policy.

2. Data Controller

bro999 is the data controller in respect of all personal data collected through the bro999.vip platform. As data controller, bro999 determines the purposes and means by which your personal data is processed. All data protection enquiries, access requests, and complaints should be directed to our support team, whose contact details are provided in Section 14 of this Policy.

Where bro999 engages third-party service providers who process personal data on its behalf (such as payment processors, KYC verification providers, and game software suppliers), those providers act as data processors under written agreements that bind them to confidentiality and data protection obligations no less stringent than those set out in this Policy.

3. Data We Collect

bro999 collects personal data across several categories depending on the stage and nature of your interaction with the Platform.

3.1 Registration Data

When you create a bro999 account we collect the information you provide directly, including:

• Full legal name as per your CNIC or passport.
• Date of birth (used to verify 21+ age eligibility).
• Email address and contact number.
• City of residence (e.g., Karachi, Lahore, Islamabad, Faisalabad).
• Preferred currency (Pakistani Rupee / PKR).
• Username and password (password stored in hashed form only — never in plain text).

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) obligations and to verify your identity and age, bro999 may request:

• A copy of a valid government-issued photo ID (CNIC, passport, or driving licence).
• Proof of residential address (utility bill, bank statement, or similar document dated within 90 days).
• Proof of payment method ownership (screenshot or statement from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT wallet, as applicable).
• Source of funds documentation, where required by risk assessment procedures.

3.3 Transaction & Financial Data

We record all financial activity associated with your account, including deposit amounts, withdrawal requests, payment method identifiers (masked card or account numbers), transaction timestamps, and currency amounts in PKR. We do not store full payment card numbers or online banking passwords.

3.4 Gameplay & Betting Data

We record all games played, bets placed, bet amounts in PKR, game outcomes, session durations, RTP data, and bonus claim history. This data is used to operate the Platform, resolve disputes, detect fraud, and fulfil responsible gaming obligations.

3.5 Technical & Device Data

When you access the bro999 Platform, our servers automatically collect technical data including your IP address, browser type and version, operating system, device type, referring URL, pages visited, session duration, and time zone. This data is collected via server logs and, where applicable, first-party cookies.

3.6 Communications Data

We retain records of all communications between you and bro999 support staff, including live chat transcripts and email correspondence. These records are used for quality assurance, dispute resolution, and compliance auditing.

4. How We Use Your Data

The table below summarises the primary purposes for which bro999 processes your personal data.

5. Legal Basis for Processing

5.1 Contract Performance. The majority of data processing at bro999 is necessary to perform our contractual obligations to you — specifically, to operate your account, process your transactions, and provide access to games and betting markets.

5.2 Legal Obligation. Certain processing activities are mandated by applicable law, including age verification (21+ requirement), anti-money laundering checks, and the maintenance of financial records for regulatory audit purposes. bro999 cannot offer its services to you without performing these legally required checks.

5.3 Legitimate Interest. Where processing is not strictly required by contract or law, bro999 processes data on the basis of its legitimate interests — for example, to detect and prevent fraud, to maintain the security and integrity of the Platform, and to improve service quality. We conduct proportionality assessments to ensure our legitimate interests do not override your fundamental privacy rights.

5.4 Consent. Where bro999 sends you optional promotional communications (such as bonus alerts, PSL betting promotions, or new game announcements), we do so only with your prior explicit consent, obtained at registration or through your account communication preferences. You may withdraw consent at any time without affecting your ability to use the Platform.

6. Sharing Your Data

bro999 does not sell, rent, or trade your personal data to any third party. We share your data only in the following limited circumstances:

• Payment processors: JazzCash, EasyPaisa, SadaPay, HBL, UBL, Meezan Bank, and USDT TRC20 processors receive transaction data necessary to execute your deposit and withdrawal instructions. Each processor is contractually bound to use this data only for payment processing purposes.
• KYC verification providers: Accredited third-party identity verification services may receive your KYC documents for automated or manual verification. These providers operate under strict data processing agreements.
• Game software providers: Licensed game suppliers receive gameplay session data necessary to operate their games within the bro999 Platform. They do not receive your full personal profile.
• Legal and regulatory authorities: bro999 will disclose personal data to competent authorities where required to do so by applicable law, court order, or regulatory direction. We will notify you of such a disclosure where legally permitted to do so.
• Professional advisers: Our legal, audit, and compliance advisers may access personal data on a strictly need-to-know basis and under confidentiality obligations.

7. Data Retention

7.1 Active Accounts. While your bro999 account remains open, we retain all personal data associated with the account for as long as it is necessary to operate the account and comply with our legal obligations.

7.2 Closed Accounts. Following account closure — whether initiated by you or by bro999 — we retain your personal data for a minimum period of five (5) years. This retention period reflects our AML obligations, the potential for regulatory audit, and the resolution of any pending disputes or chargebacks.

7.3 KYC Documents. Identity and address verification documents are retained for no longer than is necessary to satisfy applicable regulatory requirements. Original document images are deleted or anonymised once retention obligations are fulfilled.

7.4 Technical Logs. Server and access logs are retained for a rolling period of twelve (12) months and are then permanently deleted or anonymised.

7.5 Marketing Data. Where you have consented to receiving marketing communications, we retain your contact preferences until you withdraw consent or until your account is closed, whichever is earlier.

8. Security Measures

bro999 implements a multi-layered security architecture to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bro999 servers.
• AES-256 encryption at rest for all sensitive data fields stored in our databases.
• Bcrypt hashing for all account passwords — your password is never stored or transmitted in plain text.
• Two-factor authentication (2FA) available on all bro999 accounts.
• Role-based access controls ensuring that internal staff can only access personal data on a strict need-to-know basis.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• 24/7 automated fraud and anomalous activity monitoring across all accounts and transactions.

Despite these measures, no internet-based system can be guaranteed to be 100% secure. In the unlikely event of a data breach that is likely to result in a risk to your rights, bro999 will notify affected users promptly and take all reasonable steps to contain and remediate the breach.

9. Cookies & Tracking Technologies

9.1 What Are Cookies. Cookies are small text files placed on your device when you visit bro999.vip. They allow the Platform to recognise your browser, maintain your session, remember your preferences, and gather aggregate usage statistics.

9.2 Cookies We Use. bro999 uses the following categories of first-party cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that keep you logged in during a visit and security tokens that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, chosen payment method, and responsible gaming tool configurations.
• Analytics cookies: Collect anonymised data about how users navigate the Platform — which pages are visited most, where users drop off, and how long sessions last. This data is used exclusively to improve Platform performance and user experience.

9.3 No Third-Party Advertising Cookies. bro999 does not deploy third-party advertising cookies, retargeting pixels, or social media tracking scripts. We do not allow external advertising networks to place cookies on bro999.vip.

9.4 Cookie Management. You can manage or disable non-essential cookies through your browser settings at any time. Disabling strictly necessary cookies will prevent the Platform from functioning correctly. Disabling functional cookies may result in loss of personalised settings.

10. International Data Transfers

bro999's primary server infrastructure is located in secure data centres. Certain third-party service providers (such as game software suppliers and KYC verification partners) may process data in jurisdictions outside Pakistan. Where such transfers occur, bro999 ensures that appropriate safeguards are in place, including:

• Data processing agreements that impose privacy obligations equivalent to those in this Policy.
• Transfer only to service providers who operate under recognised privacy frameworks or equivalent data protection standards.
• Encryption of all data in transit using TLS 1.2 or higher.

11. Your Privacy Rights

As a bro999 user, you have the following rights in respect of your personal data. To exercise any of these rights, contact us via live chat or at [email protected]. We will respond to all verified requests within thirty (30) days.

12. Minors & Age Restriction

The bro999 Platform is strictly for adults aged 21 years and over. We do not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the bro999 registration process and may be supplemented by documentary KYC checks at any time.

If bro999 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately closed, all associated data will be deleted, and any funds on account will be returned to the originating payment method after identity verification. If you believe a minor has registered on the Platform, please contact us immediately at [email protected].

13. Changes to This Policy

bro999 reserves the right to update or amend this Privacy Policy at any time. Where a material change is made — for example, a change to the categories of data we collect, the purposes for which we use data, or the third parties with whom we share data — we will notify registered users via the email address on file no fewer than fourteen (14) days before the change takes effect.

For non-material changes (such as clarifications of existing language or corrections of typographical errors), the revised Policy will be published at bro999.vip/privacy-policy with an updated effective date, without individual notification. Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

14. Contact Us

For all privacy-related enquiries, data access requests, complaints, or to exercise any of your rights described in Section 11, please contact the bro999 data protection team through the following channels:

• Live Chat: Available 24/7 on all pages of bro999.vip. Fastest response — typically under 2 minutes.
• Email: [email protected] — plain text address, not a clickable link. Please include "Privacy Request" in the subject line.

bro999 aims to acknowledge all data-related correspondence within forty-eight (48) hours and to resolve requests fully within thirty (30) calendar days. Where a request is complex or where bro999 receives a high volume of requests, this period may be extended by a further thirty (30) days with notice to you.