bro222
Privacy Policy

1.1 bro222, operating at bro222.net under an international gaming license, is the data controller responsible for the personal data of registered players and visitors to the platform.

1.2 As data controller, bro222 determines the purposes and means by which your personal data is processed. We are accountable for ensuring that processing is carried out lawfully, fairly, and transparently in accordance with this Privacy Policy and applicable data protection standards.

1.3 Questions regarding this Policy and how bro222 handles your personal data may be directed to our support team at the contact information provided in Section 14 of this document.

2.1 bro222 collects personal data through several channels: directly from you at registration and through your use of the platform, automatically through platform interaction data, and from third-party verification services where required by our regulatory obligations.

2.2 The categories of personal data bro222 collects are set out in the table below:

2.3 bro222 does not intentionally collect special category data (such as health information, racial or ethnic origin, or religious beliefs) unless it is voluntarily provided in the context of a responsible gaming support interaction, in which case it is handled with the highest level of confidentiality.

3.1 bro222 uses your personal data for the following purposes:

• Account Registration and Management: To create and maintain your bro222 account, authenticate your identity at login, and provide access to platform services;
• Identity Verification (KYC): To verify your identity and age (21+) as required by our international gaming license and anti-money laundering obligations;
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and USDT in PKR;
• Fraud Prevention and AML Compliance: To detect, investigate, and prevent fraudulent activity, money laundering, and abuse of platform services;
• Responsible Gaming: To monitor for problem gambling indicators and apply responsible gaming restrictions where appropriate or requested;
• Customer Support: To respond to queries, process complaints, and provide account assistance;
• Platform Improvement: To analyse usage patterns and technical performance data for the purpose of improving the bro222 platform and user experience;
• Marketing Communications: To send promotional offers and platform updates via your registered mobile number or email, where you have provided consent to receive such communications. You may opt out at any time.

3.2 bro222 does not use personal data for automated decision-making that produces legal or significant effects on players without human review, except where such processing is required for fraud detection or anti-money laundering screening under our regulatory obligations.

4.1 bro222 processes your personal data on the following legal bases, which vary depending on the purpose of processing:

• Contractual Necessity: Processing your data to register your account, process payments, and deliver platform services is necessary for the performance of our contract with you as a registered player;
• Legal Obligation: Processing for KYC verification, anti-money laundering compliance, and regulatory reporting is required by the conditions of our international gaming license and applicable financial crime prevention requirements;
• Legitimate Interests: Processing for fraud prevention, platform security, and customer support improvement is carried out on the basis of bro222's legitimate interests, balanced against your rights and interests;
• Consent: Processing for direct marketing communications is based on your consent, which may be withdrawn at any time without affecting the lawfulness of prior processing.

5.1 bro222 does not sell personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and USDT payment processors receive transaction data necessary to complete deposits and withdrawals;
• Identity Verification Providers: Third-party KYC service providers receive identity documents and related data for the purpose of verifying player identity in compliance with our gaming license conditions;
• Regulatory and Law Enforcement Authorities: bro222 will disclose personal data to regulatory bodies, financial intelligence units, and law enforcement agencies where required to do so by applicable law, court order, or the conditions of our gaming license;
• Technology and Platform Service Providers: Cloud hosting, platform software, and security service providers who process data on bro222's behalf under contractual data processing agreements that impose equivalent data protection obligations;
• Responsible Gaming Organisations: In cases where a self-exclusion or player protection referral is made, bro222 may share limited data with recognised responsible gaming bodies, with your knowledge and where appropriate your consent.

5.2 All third parties who receive personal data from bro222 are required to implement appropriate technical and organisational security measures and to process data only for the specific purposes for which it was shared.

6.1 Given the international nature of bro222's gaming operations, personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, bro222 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Pakistan.

6.2 Safeguards used for international data transfers include contractual data protection clauses with recipient entities, selection of service providers in jurisdictions with adequate data protection frameworks, and additional technical security measures for cross-border transfers.

6.3 Players may request information about the specific safeguards applied to international transfers of their data by contacting bro222 support.

7.1 bro222 retains personal data only for as long as is necessary for the purposes set out in this Policy, or as required by our regulatory and legal obligations.

7.2 The following indicative retention periods apply:

• Account and Identity Data: Retained for the duration of the active account relationship plus five years following account closure, as required by anti-money laundering regulations applicable under our gaming license;
• Transaction Records: Retained for a minimum of five years from the date of each transaction, in line with financial record-keeping requirements;
• Customer Support Records: Retained for three years from the date of the last interaction to enable resolution of future disputes;
• Technical and Usage Data: Retained for up to 24 months for platform analysis and security purposes, after which it is anonymised or deleted;
• Self-Exclusion Records: Retained for the duration of the exclusion period plus a further period as required to prevent re-registration in breach of the exclusion.

8.1 bro222 uses cookies and similar tracking technologies to operate the platform, maintain session integrity, and improve platform performance. The categories of cookies used are:

• Strictly Necessary Cookies: Required for the platform to function, including session authentication, account login persistence, and payment security tokens. These cannot be disabled without preventing platform access;
• Functional Cookies: Store your preferences such as language settings, responsible gaming limit configurations, and display preferences;
• Analytical Cookies: Collect anonymised data about how players use bro222, which pages are visited most, and where technical errors occur. This data is used solely to improve platform performance and is not used for advertising targeting;

8.2 bro222 does not use third-party advertising or retargeting cookies. We do not allow third-party ad networks to place tracking cookies on bro222.net.

8.3 You may manage or disable cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent login and platform functionality. bro222's analytical cookies do not collect personally identifiable information.

9.1 Subject to applicable data protection law and regulatory retention obligations, registered bro222 players hold the following rights in relation to their personal data:

• Right of Access: You may request a copy of the personal data bro222 holds about you. bro222 will respond to access requests within 30 calendar days;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Corrections to identity information may require supporting documentation;
• Right to Erasure: You may request deletion of your personal data. This right is subject to bro222's legal and regulatory data retention obligations — data held for AML compliance or gaming license requirements cannot be deleted until the mandatory retention period has expired;
• Right to Restriction: You may request that bro222 restrict processing of your data in certain circumstances, for example while a correction request is under review;
• Right to Data Portability: You may request that bro222 provide your personal data in a structured, machine-readable format where technically feasible;
• Right to Object: You may object to processing carried out on the basis of legitimate interests or for direct marketing purposes. Marketing opt-outs take effect immediately;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

9.2 To exercise any of the above rights, contact bro222 support via live chat or email at [email protected]. Please include your registered mobile number and a description of your request. bro222 may request identity verification before processing data rights requests.

10.1 bro222 is strictly a 21+ platform. We do not knowingly collect personal data from individuals under the age of 21. Registration on bro222 requires confirmation that the registrant is 21 years of age or older.

10.2 If bro222 becomes aware that an account has been registered by a person under the age of 21, the account will be suspended immediately, all funds will be held pending review, and the personal data associated with the account will be handled in accordance with applicable law and our responsible gaming obligations.

11.1 bro222 implements a layered approach to data security, combining technical, organisational, and physical measures to protect player data against unauthorised access, disclosure, alteration, or destruction.

11.2 Key security measures implemented by bro222 include:

• 256-bit SSL/TLS encryption for all data transmitted between player devices and bro222 servers;
• Encryption at rest for databases containing personal and financial data;
• Multi-factor authentication options for player accounts and mandatory MFA for all bro222 administrative access;
• Role-based access controls ensuring bro222 staff access only the data required for their specific function;
• Regular third-party security audits and penetration testing;
• Intrusion detection systems and real-time security monitoring;
• Staff data protection training and confidentiality obligations.

11.3 Notwithstanding the above, no security system is impenetrable. In the event of a data breach that presents a risk to player rights and freedoms, bro222 will notify affected players and relevant authorities in accordance with applicable breach notification requirements.

12.1 The bro222 platform does not contain links to third-party websites for advertising or promotional purposes. Any links present on bro222.net are to bro222's own internal pages.

12.2 Where a player independently navigates to a third-party site, bro222 has no responsibility or liability for the privacy practices of that site. Players should review the privacy policy of any third-party site before providing personal information to it.

13.1 bro222 may update this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or regulatory requirements. Material updates will be communicated to registered players via their registered mobile number or email address with a minimum of 14 days' notice before the changes take effect.

13.2 The current version of this Privacy Policy is always available at bro222.net/privacy-policy. The effective date at the top of this document indicates the version currently in force.

13.3 Continued use of the bro222 platform following the effective date of any update constitutes acceptance of the revised Policy. Players who do not accept material changes may request account closure.

14.1 For questions, data rights requests, or complaints regarding this Privacy Policy or how bro222 handles your personal data, please contact our support team:

• Live Chat: Available 24/7 directly from any page of the bro222 platform;
• Email: [email protected] — plain text address, not a clickable link. Include your registered mobile number and the subject heading "Privacy Request" or "Data Complaint".

14.2 bro222 will acknowledge privacy-related contacts within 48 hours and provide a substantive response within 30 calendar days. Complex requests may take longer, in which case bro222 will provide a status update within the initial 30-day period.

14.3 If you are not satisfied with bro222's response to a privacy complaint, you may escalate the matter to the data protection authority relevant to our licensing jurisdiction, or to the dispute resolution body designated under our international gaming license. Details of these bodies are available from bro222 support upon request.