br0178 Privacy Policy

Introduction

This Privacy Policy governs the collection, processing, storage, and use of personal data by the br0178 online gambling platform, accessible at https://br0178.app and all associated subdomains and services (collectively, the "Platform"). br0178 operates as Indonesia's premier online gambling destination, offering live casino, sportsbook betting, slot games, togel (Indonesia's traditional numbers lottery), Keno, and e-sports betting to Indonesian members.

This Policy applies to all individuals who access or use the Platform in any capacity, including registered Members, prospective registrants who browse the Platform without creating an account, and any individual who contacts br0178's customer support team. It applies regardless of whether you access the Platform via desktop browser, mobile browser, or any other interface.

This Privacy Policy should be read alongside the br0178 Terms & Conditions, which are incorporated by reference. Terms not defined herein carry the meanings assigned to them in the Terms & Conditions.

Data Controller

For the purposes of this Privacy Policy, br0178 is the data controller responsible for your personal data collected through the Platform. As data controller, br0178 determines the purposes and means by which your personal data is processed.

If you have any questions or concerns about how your personal data is handled, or wish to exercise any of your data rights described in Section 9, you may contact the br0178 Data Protection contact at the email address provided in Section 14 of this Policy. All data-related inquiries are handled by our dedicated compliance team within 30 calendar days of receipt.

Data We Collect

br0178 collects personal data across several categories depending on your interaction with the Platform. The following table summarizes the main categories of data we collect and examples of specific data points within each category:

br0178 collects only the minimum data necessary for the purposes described in this Policy. We do not collect sensitive data categories such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification under applicable KYC obligations.

How We Collect Data

br0178 collects personal data through the following mechanisms:

• Direct Submission: Data you provide voluntarily when registering an Account, completing KYC verification, submitting a deposit or withdrawal request, or contacting customer support via live chat or email.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser characteristics, and session activity logs. This collection occurs via server logs, cookies, and similar tracking technologies as described in Section 10.
• Third-Party Identity Verification Partners: Where required to complete KYC checks, br0178 may receive verification results and identity confirmation from accredited third-party identity verification service providers. These providers are contractually bound to handle your data in accordance with this Policy and applicable data protection standards.
• Payment Processors: Transaction confirmation data is received from Indonesian bank networks (including BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to confirm the status of deposits and withdrawal requests.
• Game Providers: Aggregate session and outcome data is received from certified third-party game studios including Evolution Gaming, Pragmatic Play, Microgaming, Spribe, and Pocket Games Soft for the purpose of settling wagers and maintaining accurate gaming records.

Purpose & Legal Basis for Processing

br0178 processes your personal data only for specified, legitimate purposes and only where a valid legal basis exists for doing so. The table below sets out the primary purposes for which we process personal data and the corresponding legal basis for each:

Data Sharing & Disclosure

br0178 does not sell, rent, or trade your personal data to third-party marketers under any circumstances. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment Service Providers: Your bank account or e-wallet details are shared with the relevant Indonesian payment network solely for the purpose of processing your deposit or withdrawal transaction. Providers include BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Identity Verification Partners: Identity data submitted during KYC is shared with accredited verification providers to confirm your identity and age. These providers operate under strict data processing agreements and may not use your data for any other purpose.
• Game Studio Providers: Pseudonymized session identifiers may be shared with certified game studios (Evolution Gaming, Pragmatic Play, Microgaming, etc.) to enable game initialization, outcome settlement, and jackpot processing. No personally identifiable contact or financial data is shared with game studios.
• Regulatory and Law Enforcement Authorities: br0178 may disclose personal data to competent regulatory, law enforcement, or judicial authorities when required to do so by applicable law, court order, or regulatory directive. br0178 will notify you of any such disclosure to the extent permitted by law.
• Anti-Fraud and Security Networks: In cases of suspected fraud, money laundering, or multi-account abuse, br0178 may share relevant account data with industry anti-fraud networks and licensed investigation bodies to protect the integrity of the Platform and its Members.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of br0178's assets, personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations being imposed on the recipient.

All third parties with whom br0178 shares personal data are subject to contractual data processing agreements that require them to implement appropriate technical and organizational security measures and to process data only for the specific purposes authorized by br0178.

Data Retention

br0178 retains personal data for as long as is necessary to fulfill the purposes described in this Policy, or for as long as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply as a general guide:

• Active Account Data: Retained for the full duration of your Account with br0178, plus a minimum of 5 years following Account closure, to satisfy anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping standards applicable to international online gambling operators.
• KYC Verification Documents: Retained for a minimum of 5 years following the completion of verification, or for a longer period if required by applicable law or regulatory directive.
• Customer Support Communications: Retained for 3 years from the date of the interaction, to support dispute resolution and service quality review.
• Marketing Preference Records: Retained for the duration of your Account relationship, and for 2 years following Account closure or opt-out, to demonstrate compliance with consent obligations.
• Technical Logs (IP address, session data): Retained for a rolling 12-month period for fraud detection and security purposes, after which they are anonymized or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized so that it can no longer be linked to an identifiable individual.

Data Security

The security of your personal data is a core operational priority at br0178. We implement a layered set of technical and organizational security measures designed to protect your data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and br0178's servers is encrypted using industry-standard Transport Layer Security (TLS). The padlock icon in your browser confirms that your connection is secure.
• Encrypted Data Storage: Sensitive personal data — including financial account details and KYC documents — is stored in encrypted form in our secure data infrastructure. Encryption keys are managed separately from the encrypted data.
• Access Controls: Access to personal data within br0178's systems is strictly limited to authorized personnel on a need-to-know basis. All staff with access to personal data receive mandatory data protection training and are bound by confidentiality obligations.
• Intrusion Detection and Monitoring: br0178's infrastructure is monitored continuously for unusual activity, unauthorized access attempts, and potential security incidents. Automated alerts and human oversight are both employed.
• Two-Factor Authentication: br0178 supports and encourages the use of two-factor authentication (2FA) on Member accounts to provide an additional layer of protection beyond username and password.
• Penetration Testing: Our platform infrastructure undergoes regular security assessments and penetration tests conducted by independent security specialists to identify and remediate vulnerabilities proactively.

Your Data Rights

As a br0178 Member whose personal data is processed by us, you hold a set of rights in relation to that data. br0178 is committed to facilitating the exercise of these rights promptly and without undue obstruction:

• Right of Access: You may request a copy of the personal data br0178 holds about you, along with information about how it is processed. We will respond to access requests within 30 calendar days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Many common data fields (email address, phone number) can be updated directly from your Account dashboard.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing and no overriding legitimate grounds exist. Note that certain data must be retained to comply with legal obligations (see Section 7) and cannot be erased on request.
• Right to Restriction of Processing: In certain circumstances — for example, while a data accuracy dispute is being resolved — you may request that processing of your data be temporarily restricted.
• Right to Data Portability: You may request that personal data you have provided to br0178 be delivered to you in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on br0178's legitimate interests. You also have an absolute right to object to the use of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of the above rights, please contact us using the details provided in Section 14. We may need to verify your identity before processing a request to protect against unauthorized access to another person's data.

Cookies & Tracking Technologies

br0178 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. The following categories of cookies are used:

You may control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use core Platform features. Third-party cookies set by game studio iframes are governed by the respective studio's cookie policies; br0178 does not control these.

Protection of Minors

The br0178 Platform is strictly intended for adults aged 21 years and over. br0178 does not knowingly collect personal data from individuals under the age of 21. Our registration process includes a mandatory date-of-birth declaration, and KYC verification is used to confirm age eligibility prior to the processing of any financial transaction.

If br0178 discovers or is made aware that an Account has been registered by a person under the age of 21, the Account will be suspended immediately, all balances will be handled in accordance with applicable policy, and any personal data collected in connection with that Account will be deleted as soon as reasonably practicable. If you are a parent or guardian and believe that a minor has created a br0178 Account using your details or their own, please contact us immediately at the address in Section 14.

Third-Party Services

The br0178 Platform integrates with a number of third-party service providers to deliver its full range of features. These include certified game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft), payment processors (Indonesian bank networks, OVO, DANA, GoPay, ShopeePay, LinkAja), and infrastructure providers. Each of these parties operates under its own privacy and data handling policies.

While br0178 selects third-party partners carefully and requires all of them to maintain appropriate data security standards via contractual data processing agreements, br0178 is not responsible for the privacy practices of third-party services beyond the contractual obligations imposed on them. We encourage you to review the privacy policies of any third-party platforms you access in connection with your br0178 membership.

The Platform does not contain links to external third-party websites for the purposes of this Policy. All navigation on the Platform remains within the br0178 domain ecosystem.

Policy Amendments

br0178 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or Platform features. When material changes are made, br0178 will notify registered Members by email to the address on file and by placing a prominent notice on the Platform. The updated Policy will carry a revised "Last Updated" date at the top of the page.

Your continued use of the br0178 Platform after the effective date of any amendment constitutes your acknowledgment of the revised Policy. If you do not agree with the amended Policy, you must cease using the Platform and may request Account closure by contacting customer support.

Contact & Data Protection Inquiries

For any questions, concerns, or requests relating to this Privacy Policy or to the exercise of your data rights, please contact the br0178 Data Protection team through the following channels:

• Email: [email protected] — please include "Privacy Inquiry" in the subject line for fastest routing to our compliance team.
• Live Chat: Available 24/7 within the br0178 Platform. Indonesian-speaking agents are available across WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9) time zones.

br0178 aims to respond to all privacy-related inquiries and data rights requests within 30 calendar days of receipt. In cases of high complexity or volume, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.

If you are dissatisfied with br0178's response to a data rights request or privacy complaint, you may escalate the matter through the dispute resolution channels described in our FAQ or through the applicable regulatory authority in your jurisdiction.