bro222 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by bro222 ("the Platform", "we", "us", "our") and applies to all users ("you", "your", "User") who access, register on or interact with the bro222 website at https://bro222.cam and any associated services, applications or features made available through the Platform.

bro222 is an English-language online gaming information and services platform targeting users in Pakistan. We understand that Pakistani users — from Karachi and Lahore to Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — place great value on their personal information and digital privacy. This Policy reflects our commitment to handling that information responsibly, securely and in a manner that is consistent with the data protection standards required by our operating framework.

By creating an Account or using the bro222 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should refrain from using the Platform and contact support to arrange Account closure.

2. Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can be used to identify a natural person, directly or indirectly, including name, email address, date of birth, CNIC number, IP address and financial transaction data.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" means bro222, the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means any third-party service provider that processes Personal Data on behalf of bro222 under a contractual data-processing agreement.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement by the User to the processing of their Personal Data.
• "KYC" (Know Your Customer) means the identity and age verification process required under applicable anti-money laundering regulations.
• "PKR" means the Pakistani Rupee, the primary transaction currency on the bro222 Platform.
• "Sensitive Personal Data" means personal data revealing racial or ethnic origin, political opinions, religious beliefs, health data, biometric data or financial account details.

3. Data We Collect

When you register, verify your identity, make a deposit or contact customer support, you provide us with Personal Data, which may include:

• Full legal name, date of birth and gender.
• Residential address (including city — e.g., Karachi, Lahore, Islamabad).
• Email address and account password (stored in hashed, non-recoverable form).
• Government-issued identity documents (e.g., CNIC, passport) submitted for KYC verification.
• Financial information, including PKR transaction amounts, payment method references and bank account details where required for withdrawals.
• Support communications, including chat transcripts and email correspondence.

When you use the Platform, we automatically collect certain technical and behavioural data, including:

• IP address, browser type, operating system and device type.
• Session timestamps, pages viewed, features accessed and navigation patterns.
• Cookie and tracking technology data (see Section 9 for full details).
• Wagering history, game activity, bet amounts and outcomes.

bro222 does not intentionally collect Sensitive Personal Data beyond what is strictly required for regulatory compliance (e.g., biometric verification for KYC where mandated). We do not collect health data, political opinions or religious affiliation. We do not collect data from users known to be under 18 years of age.

4. Lawful Basis for Processing

bro222 processes Personal Data on the following lawful bases:

• Contractual Necessity: Processing required to perform the contract between bro222 and the User — including Account creation, transaction processing, KYC completion and support delivery.
• Legal Obligation: Processing required to comply with applicable law, including anti-money laundering regulations, age verification requirements and regulatory reporting obligations.
• Legitimate Interests: Processing carried out in the legitimate interests of bro222, such as fraud prevention, network security and service improvement, provided those interests do not override the rights and freedoms of Users.
• Consent: Where processing is based on consent (e.g., for certain marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

5. Data Processing

Your Personal Data is used to create, maintain and administer your bro222 Account. This includes processing deposits and withdrawals in PKR, applying Responsible Gambling limits you have set, maintaining your wagering history and providing Account statement data.

KYC data — including government-issued identity documents — is processed to verify your identity and age in compliance with applicable anti-money laundering (AML) and regulatory requirements. KYC documents are processed by authorised personnel and, where applicable, by contracted third-party verification service providers bound by equivalent data protection obligations.

We process transaction data, IP addresses, device fingerprints and usage patterns to detect and prevent fraudulent activity, account takeover attempts, bonus abuse and other prohibited conduct. Where suspicious activity is detected, we reserve the right to suspend Account access pending investigation, in accordance with our Terms and Conditions.

Support interactions — including live chat transcripts, email correspondence and any documents shared — are processed to resolve your enquiry and to maintain a record of the interaction for quality assurance and dispute resolution purposes. Support is provided in English; Urdu assistance is available where staffing permits.

Where you have provided consent, we may send you promotional communications about bro222 offers, new product features or sports content updates by email. You may withdraw consent at any time by using the unsubscribe mechanism in any marketing email or by contacting support. Withdrawal of marketing consent does not affect your Account status or the processing of your Account data.

Aggregate, anonymised usage data is analysed to understand how users interact with the Platform, identify areas for improvement and optimise the user experience. This analytics processing does not involve decisions that produce legal or similarly significant effects on individual users.

6. Data Sharing & Third-Party Disclosure

bro222 engages third-party Data Processors to support Platform operations. These may include payment processing services, KYC and identity verification providers, fraud detection technology providers, IT infrastructure and cloud hosting services, and customer support platform providers. All third-party processors are contracted under agreements that require them to process data only on our documented instructions and to maintain standards of data protection equivalent to those described in this Policy.

We may disclose Personal Data to competent regulatory authorities, law enforcement agencies or courts where required to do so by applicable law, court order, regulatory direction or in connection with the investigation of actual or suspected criminal activity, including money laundering and fraud. Such disclosures will be made only to the extent required by law and, where legally permissible, we will inform you of any such disclosure.

• We do not sell, rent or trade your Personal Data to third-party marketers or data brokers.
• We do not share your data with payment providers such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah beyond what is strictly necessary to process a specific transaction you have initiated.
• We do not use your wagering data to build advertising profiles for sale to third parties.

7. International Data Transfers

bro222 operates internationally and your Personal Data may be transferred to, and processed in, countries outside your country of residence, including countries outside Pakistan. Where such transfers occur, bro222 will take appropriate safeguards to ensure that Personal Data continues to receive a level of protection that is consistent with this Policy and applicable data protection requirements.

Appropriate safeguards may include entering into contractual data processing agreements incorporating standard data protection clauses, or ensuring that the recipient jurisdiction provides an adequate level of data protection as assessed by relevant authorities.

8. Data Retention

bro222 retains Personal Data for as long as necessary to fulfil the purposes for which it was collected, comply with legal and regulatory obligations and resolve any disputes or enforce our agreements. Specific retention periods are guided by the following principles:

• Active Account Data: Retained for the duration of your Account's active status plus any legally required post-closure period.
• KYC and Identity Documents: Retained for the period required by applicable AML regulations, typically a minimum of five years from Account closure or the date of the relevant transaction, whichever is later.
• Transaction Records: Retained for the period required for financial regulatory compliance, dispute resolution and audit purposes.
• Support Communications: Retained for a reasonable period sufficient to manage follow-up queries and quality assurance review.
• Marketing Consent Records: Retained until consent is withdrawn, plus a reasonable additional period for compliance documentation.

Once the applicable retention period expires, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.

9. Cookies & Tracking Technologies

bro222 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device when you visit a website. The table below summarises the categories of cookies used on bro222:

You can manage or delete cookies through your browser settings. Note that disabling functional or performance cookies may affect your experience on the Platform. Strictly necessary and fraud-detection cookies cannot be disabled without impairing core Platform functionality and security.

10. Security Measures

bro222 implements industry-standard technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the bro222 Platform.
• Hashed, salted storage of account passwords — bro222 does not store passwords in recoverable plaintext format.
• Restricted access controls ensuring that Personal Data is accessible only to authorised personnel who require it for specific, documented operational purposes.
• Regular security assessments and penetration testing of Platform infrastructure.
• Documented data breach response procedures, including notification obligations in the event of a material data breach affecting Users.

Notwithstanding these measures, no data transmission over the internet or method of electronic storage is completely secure. bro222 cannot guarantee the absolute security of your Personal Data. If you become aware of any security vulnerability or suspect that your Account credentials have been compromised, please contact our support team immediately.

11. User Rights

Subject to applicable law and certain limited exceptions, you have the following rights in relation to your Personal Data held by bro222. To exercise any of these rights, contact our support team using the details in Section 15.

We will respond to verifiable data rights requests within a reasonable period, consistent with the requirements of applicable law. We may need to verify your identity before processing a rights request. Certain rights may be limited where legal obligations, regulatory requirements or legitimate fraud-prevention activities override the exercise of individual rights.

12. Minors — Under-18 Users

The bro222 Platform is strictly intended for adults aged 18 years or older — or the higher minimum age required by the applicable operator license jurisdiction. We do not knowingly collect Personal Data from individuals under 18 years of age.

If bro222 becomes aware that Personal Data has been collected from a person under the applicable minimum age, that Account will be closed immediately, any associated balance will be handled in accordance with applicable regulations and all Personal Data associated with that Account will be deleted from our systems except where retention is required for legal or regulatory purposes.

Parents and guardians are encouraged to monitor the online activities of minors in their care and to use available parental controls and internet filtering tools to restrict access to gambling platforms. If you believe a minor has created an Account on bro222, please contact our support team immediately.

13. Third-Party Links & Services

The bro222 Platform may contain references to third-party payment services that are familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah. These references are for contextual familiarity only and do not constitute an endorsement, partnership or claim of integration with those providers.

Where third-party services are involved in transaction processing (for example, a payment gateway used to process a PKR deposit), such services operate under their own privacy policies and terms of use. bro222 is not responsible for the data practices of third-party services. We encourage you to review the privacy policies of any third-party service you use in connection with your bro222 Account.

14. Policy Amendments

bro222 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, data processing practices or Platform functionality. The "Last reviewed" date at the top of this document will be updated to reflect the most recent revision.

Where a material change is made to this Policy, we will use reasonable efforts to notify registered Users by email or via an on-screen notification prior to the change taking effect. Your continued use of the Platform following notification of an amendment constitutes your acceptance of the revised Policy. If you do not accept the revised terms, you should cease using the Platform and contact support to arrange Account closure.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please contact the bro222 support team through the following channels:

Support is provided in English. Urdu-language assistance is available where staffing permits. We will respond to data rights requests within a reasonable timeframe consistent with applicable requirements, and in any event within 30 calendar days of receiving a verifiable request.