Your privacy matters to us. This Privacy Policy explains exactly what personal data bro17 collects, why we collect it, how we store and protect it, and what rights you hold as a player based in Indonesia. We encourage you to read it in full before creating or continuing to use your bro17 account.
These six principles guide how bro17 handles your personal information — every day, across every product we operate.
bro17 collects only the personal data that is strictly necessary to operate your account, process transactions, and comply with our legal obligations. We do not gather data speculatively or sell your information to advertisers or unaffiliated third parties.
All data transmitted between your device and bro17 is protected by industry-standard 256-bit SSL/TLS encryption. Sensitive fields such as passwords and payment details are additionally hashed and stored using one-way cryptographic functions that are computationally infeasible to reverse.
You have the right to access, correct, export, and in certain circumstances delete the personal data bro17 holds about you. Requests are handled within five business days. Where deletion is not possible due to legal retention obligations, we will inform you and explain the reason clearly.
bro17 does not share your personal data with advertising networks, social media platforms, or data brokers for the purpose of building advertising profiles about you. Any data sharing with third parties is limited to what is operationally required — such as payment processors and identity verification providers.
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Account data is retained for a minimum of five years following account closure to satisfy anti-money laundering and financial record-keeping obligations.
In the unlikely event of a data security incident that materially affects your personal data, bro17 will notify affected players as promptly as practicable and will cooperate fully with relevant regulatory authorities. We maintain a dedicated incident response team to investigate and contain breaches swiftly.
This Privacy Policy ("Policy") describes how bro17 ("bro17", "we", "us", or "our") collects, processes, stores, and protects the personal data of individuals ("Player", "you", or "your") who register for, access, or use the bro17 platform at https://bro17.pro and all associated interfaces, products, and services (collectively, the "Platform").
bro17 is committed to handling your personal data with the highest standards of care, transparency, and security. This Policy is intended to give you a clear and complete understanding of our data practices so that you can make informed decisions about your use of the Platform. It should be read alongside our Terms & Conditions, which govern your overall use of the Platform.
By registering an account, logging in, or continuing to use the bro17 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.
Indonesia Market Notice: This Platform is operated for players based in Indonesia. All data practices described in this Policy are designed to align with internationally recognised data protection principles. bro17 acknowledges the unique privacy expectations of Indonesian players and is committed to upholding them.
The following terms, when used in this Policy, carry the meanings set out below.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably be used to identify a living individual, directly or indirectly — including name, national identity number, date of birth, contact details, IP address, device identifiers, and financial account details. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, organisation, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction. |
| "Controller" | bro17, in its capacity as the entity that determines the purposes and means of processing your personal data. |
| "Processor" | A third-party service provider that processes personal data on behalf of bro17 under a binding contractual arrangement and strictly in accordance with bro17's instructions. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose, provided through a clear affirmative action. |
| "KYC" | Know Your Customer — the identity and age-verification process bro17 uses to confirm that players meet eligibility requirements, principally the requirement to be at least 21 years of age and resident in Indonesia. |
| "Sensitive Data" | A subset of personal data requiring heightened protection, including government-issued identity document numbers, financial account details, and data relating to health or self-exclusion status. |
When you create a bro17 account, we collect the information you provide during the registration process. This typically includes your full legal name, date of birth, Indonesian residential address, email address, phone number, and the username and password you choose. This data is necessary to open and maintain your account and is used for identity verification and account security purposes.
To comply with our obligations and to protect all players, bro17 requires identity verification before processing your first withdrawal or whenever we consider additional verification to be necessary. KYC data may include a scanned or photographed copy of your Indonesian National Identity Card (KTP), passport, or SIM driving licence; proof of your residential address; and evidence confirming ownership of the payment method(s) linked to your account. This data is treated as sensitive and is subject to enhanced security controls.
bro17 records all deposits, withdrawals, bonus credits, wagers, and associated transaction metadata for every account. Payment instrument details — such as the bank account number, e-wallet identifier (OVO, DANA, GoPay, ShopeePay, LinkAja), or card details — are collected to process transactions. Full payment credentials are not stored on bro17 servers; tokenisation and secure vaulting via our payment processors are used wherever possible.
When you interact with the Platform, we automatically collect certain technical and behavioural data. This includes your IP address, device type, operating system, browser type and version, pages visited, features used, games played, session duration, click-stream data, and referral source. This data helps us improve the Platform experience, detect fraud, and tailor promotional offers to your preferences.
We retain records of communications between you and bro17's customer support team, including live chat transcripts, email correspondence, and WhatsApp message threads. These records are used to resolve disputes, improve service quality, and fulfil our regulatory obligations.
If you voluntarily set deposit limits, request a time-out, or activate self-exclusion, bro17 records those preferences as part of your account profile. This data is treated as sensitive and is used exclusively to enforce your chosen responsible gaming settings. It will not be used for marketing purposes.
bro17 uses the personal data we collect for the following purposes:
| Purpose | Detail |
|---|---|
| Account Management | Creating and administering your account, authenticating your identity on each login, and maintaining accurate records of your preferences and activity. |
| Payment Processing | Executing deposits and withdrawals via your chosen local bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), and maintaining a complete transaction history for your records and ours. |
| KYC & Compliance | Verifying your identity and age, detecting and preventing money laundering and fraud, and meeting any applicable regulatory or legal reporting obligations. |
| Customer Support | Responding to your enquiries, resolving disputes, and improving the quality of our support services through review of past interactions. |
| Platform Improvement | Analysing aggregated usage data to identify usability issues, optimise page performance, and develop new features and products that better serve our Indonesian players. |
| Personalisation | Tailoring the content, promotions, and game recommendations you see on the Platform based on your betting history and preferences, where you have not opted out of personalisation. |
| Marketing Communications | Sending promotional emails, SMS messages, or WhatsApp notifications about bonuses, new games, and seasonal offers — only where you have given explicit prior consent and subject to your right to opt out at any time. |
| Responsible Gaming | Monitoring gameplay patterns to identify potential signs of problem gambling and enforcing any responsible gaming limits, time-outs, or self-exclusions you have set. |
| Security & Fraud Prevention | Detecting, investigating, and preventing fraudulent activity, unauthorised account access, bonus abuse, and any other conduct that violates our Terms & Conditions. |
bro17 processes your personal data only where a valid legal basis exists. The primary legal bases on which we rely are as follows:
Withdrawing Consent: To withdraw marketing consent or opt out of personalisation, contact our support team at support@bro17.pro or use the preference settings within your account dashboard. Withdrawal of consent for marketing will not affect the operation of your account.
bro17 engages carefully selected third-party service providers to assist in delivering the Platform. These providers act as data processors and are contractually bound to process personal data only on bro17's instructions and to maintain appropriate security measures. Categories of processors include payment processors handling transactions via BCA, BRI, BNI, Mandiri, and the supported e-wallets; identity verification and KYC providers; fraud detection and cybersecurity specialists; cloud infrastructure and data hosting providers; and customer support platform operators.
bro17 sources casino and slot content from licensed third-party studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers may receive certain technical data — such as session tokens and game-round identifiers — to operate their games within the bro17 Platform. They do not receive your full personal profile and are not permitted to use the data they receive for any purpose other than delivering the game service.
bro17 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, by legal process, or in order to protect the rights, property, or safety of bro17, its players, or third parties. Where legally permissible, bro17 will notify you of such disclosure requests.
In the event of a merger, acquisition, restructuring, or sale of all or part of bro17's business, personal data held by bro17 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any resulting changes to this Policy that materially affect your privacy rights.
bro17 does not sell, rent, or trade your personal data to any unaffiliated third party for their own commercial purposes. Data sharing is strictly limited to the categories described in this Section 6.
bro17 uses cookies and similar technologies (including local storage objects and session tokens) to operate the Platform effectively and to improve your experience. The categories of cookies we use are as follows:
You can control and delete cookies via your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from logging in or completing transactions. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.
bro17 implements a multi-layered security architecture to protect the personal data we hold against unauthorised access, loss, alteration, disclosure, or destruction. Our security measures include, but are not limited to, the following:
While bro17 takes every reasonable technical and organisational precaution to secure your data, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and should contact our support team immediately at support@bro17.pro if you suspect that your account has been compromised.
bro17 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account & Registration Data | Duration of account plus a minimum of 5 years following account closure, to meet anti-money laundering record-keeping obligations. |
| KYC & Identity Documents | Duration of account plus 5 years following closure, or longer where required by applicable law or ongoing regulatory investigation. |
| Transaction & Financial Records | Minimum 5 years from the date of each transaction, consistent with standard financial record-keeping requirements. |
| Customer Support Communications | 3 years from the date of each interaction, or longer if the communication relates to an unresolved dispute or ongoing legal matter. |
| Responsible Gaming Records | Duration of account plus 5 years, to enable enforcement of historic self-exclusion requests should a player attempt to re-register. |
| Analytics & Usage Data | Up to 2 years in identifiable form; may be retained indefinitely in fully anonymised, aggregated form thereafter. |
| Marketing Consent Records | Until consent is withdrawn, plus 3 years thereafter to demonstrate compliance with consent obligations. |
Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised in accordance with bro17's internal data disposal procedures.
Subject to applicable law, you hold the following rights in relation to the personal data bro17 holds about you. To exercise any of these rights, please contact us using the details in Section 14.
Response Timeline: bro17 aims to respond to all data rights requests within five business days. In complex cases, or where a large volume of data is involved, we may extend this to a maximum of 30 calendar days and will notify you of the extension and the reason for it.
The bro17 Platform is strictly intended for adults aged 21 and over. bro17 does not knowingly collect personal data from any person under the age of 21. Registration requires confirmation that the applicant meets the minimum age requirement, and age is verified as part of the mandatory KYC process.
If bro17 discovers or is notified that personal data has been collected from a person under the age of 21, the affected account will be immediately suspended, all associated balances will be frozen pending investigation, and the personal data of the underage individual will be deleted as promptly as is practicable given any applicable legal retention obligations. Parents or guardians who believe that a minor has registered on the Platform are encouraged to contact us immediately at support@bro17.pro.
bro17 operates globally, and your personal data may be processed by us or our third-party processors in countries outside Indonesia. Where personal data is transferred to a country that does not provide a level of data protection equivalent to that required by internationally recognised standards, bro17 will implement appropriate safeguards to ensure your data remains protected. These safeguards may include standard contractual clauses, binding corporate rules, or other legally recognised transfer mechanisms.
By using the bro17 Platform, you acknowledge that your personal data may be transferred to, stored in, and processed in countries outside Indonesia, subject to the protections described in this Policy. If you would like further information about the specific safeguards applied to any particular international transfer, please contact us using the details in Section 14.
bro17 reserves the right to update or amend this Privacy Policy at any time. When material changes are made — those that meaningfully affect your rights or how your data is used — we will notify you by posting a prominent notice on the Platform and, where we hold a valid email address for you, by sending a notification to that address. The "Last updated" date at the top of this page reflects the date of the most recent revision.
Your continued use of the bro17 Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with a material change, you must discontinue use of the Platform and may request account closure in accordance with our Terms & Conditions. We encourage you to review this Policy periodically to stay informed of how bro17 protects your data.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a privacy concern, please reach out to the bro17 privacy team using any of the channels below. All enquiries are handled in both English and Indonesian.
For responsible gaming enquiries, including requests to set deposit limits, activate a time-out, or self-exclude, please visit our dedicated Responsible Gaming page. These requests are treated as a priority and processed ahead of standard support queue.
Now that you understand how bro17 protects your personal information, log in and explore Indonesia's premier sportsbook, live casino, and slots — all backed by fast IDR payments and 24/7 support.
21+ only. Please gamble responsibly. Visit our Responsible Gaming page for tools and support.