Privacy Policy bro500 — Member Personal Data Protection

Bro500 cares about the privacy of every individual using our platform. This privacy policy explains in detail how we manage your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

This policy applies to all registered members, visitors to bro500.pro, users of the bro500 mobile app, and any individual who interacts with any service provided by our platform. By registering or continuing to use bro500's services, you are deemed to have read, understood, and agreed to this privacy policy in full.

In the event of any conflict between versions of this privacy policy in other languages, the Bahasa Melayu version shall prevail and supersede all other versions.

Bro500 collects your personal data through several different means, including during the account registration process, platform usage, communications with the customer support team, and through standard tracking technologies such as cookies.

The data categories we collect include:

• Identity Data: Full name, Malaysian identity card number (MyKad), date of birth, and gender provided during registration or the KYC process.
• Contact Data: Active email address, Malaysian mobile number, and current residential address.
• Financial Data: Bank account details, bank name, account number (last four digits only), deposit and withdrawal records, and transaction history within the platform.
• Usage Data: Game records, betting history, game preferences, session duration, and activity within the bro500 platform.
• Technical Data: IP address, device type, operating system, browser version, general geographic location, and cookie data collected automatically.
• Communication Data: Records of conversations with the customer support team via live chat, email, and any feedback you provide to us.

Bro500 does not collect data considered sensitive under Malaysia's PDPA, such as health data, political affiliations, or religious beliefs, unless specifically required by applicable law.

Bro500 uses collected personal data solely for lawful and transparent purposes. We do not process your data for any purpose not stated in this privacy policy without first obtaining your additional consent.

The primary purposes for which your personal data is used:

• Account Management: Registering and maintaining your account, verifying your identity during login, and securely processing withdrawal and deposit requests.
• Legal Compliance: Meeting KYC requirements, preventing money laundering (AML), and reporting to relevant authorities when required by Malaysian law.
• Platform Security: Detecting and preventing fraudulent activity, hacking, bonus abuse, and any security threats that could affect other members.
• Service Improvement: Analysing usage patterns to improve the interface, introduce new features, and personalise your gaming experience according to your preferences.
• Service Communications: Sending important notifications about your account, changes to terms, security updates, and withdrawal information.
• Marketing (With Consent): Sending promotional information, bonus offers, and platform news only to members who have given consent to receive marketing communications.

Bro500 values the trust of its members. We only share your personal data in limited circumstances and with appropriate safeguards. bro500 does not sell members' personal data to any external party for commercial purposes.

Circumstances under which data may be shared:

• Third-Party Service Providers: Payment providers such as FPX, TnG eWallet, GrabPay, and crypto processors required to process your financial transactions. All providers are bound by strict confidentiality agreements.
• Legal Compliance: Malaysian authorities or competent regulatory bodies when required by law, court order, or valid legal process.
• Fraud Prevention: Third parties providing identity verification and fraud prevention services, solely to protect the security of your account and the bro500 platform.
• Game Providers: Licensed game development companies may receive limited technical data (not identity data) for the purposes of game fairness audits and licence compliance.

All third parties receiving data from bro500 are required to comply with data protection standards equal to or higher than those we uphold. We are not responsible for the privacy practices of third parties operating outside bro500's direct control.

Bro500 continuously invests in the latest security infrastructure to ensure members' personal data is always protected against cyber threats, unauthorised access, and data breaches. We adopt a multi-layered protection approach covering multiple aspects of security.

Key security measures we practise:

• End-to-End Encryption: All data transmitted between your device and bro500's servers is encrypted using TLS 1.3 protocol with SSL 256-bit encryption, making it unreadable to anyone attempting to intercept the connection.
• Two-Factor Authentication (2FA): bro500 offers two-factor authentication for account login, adding an extra layer of security that protects your account even if your password is compromised.
• Server Segregation: Member personal data is stored on separate, dedicated servers with strict access controls, full audit logs, and continuous 24-hour anomaly monitoring.
• Regular Penetration Testing: bro500 conducts regular penetration testing by qualified third parties to identify and address any security vulnerabilities before they can be exploited.
• Staff Training: All bro500 staff with access to members' personal data undergo strict data security training and are bound by comprehensive confidentiality agreements.

Although bro500 takes all reasonable precautions, no online security system can guarantee absolute protection. You are also responsible for keeping your account password secure and not sharing your login credentials with anyone.

Bro500 uses cookies and similar tracking technologies to enhance the user experience, analyse usage patterns, and maintain the security of your login session. Cookies are small text files stored on your device when you visit the bro500.pro website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification, language preferences, and security settings. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how you use the bro500 platform to help us identify technical issues and improve service speed and performance.
• Functional Cookies: Saving your preferences such as language selection, display settings, and login details to make the platform easier to use on future visits.
• Analytics Cookies: Used to understand how members interact with our platform as a whole, enabling us to make data-driven decisions for continuous improvement.

You can manage or disable cookies through your browser settings at any time. However, disabling certain cookies may affect the functionality and user experience of the bro500 platform.

Under Malaysia's Personal Data Protection Act 2010, you have certain rights regarding your personal data held by bro500. We are committed to respecting and facilitating the exercise of these rights in a straightforward and efficient manner.

To submit any request related to your privacy rights, please contact the bro500 customer support team via 24/7 live chat. Requests will be processed within 14 business days from the date of receipt.

In the context of online platform operations, member personal data may be stored or processed on servers located outside Malaysia. bro500 ensures that any cross-border data transfers are carried out with adequate safeguards and in compliance with Malaysia's PDPA.

All cross-border data transfers carried out by bro500 are subject to the following conditions without exception:

• The destination country must provide a level of data protection equivalent to Malaysia, or a specific data transfer agreement must be in place.
• Third-party service providers that receive data must be bound by strict data processing agreements and comply with recognised international standards.
• Transfers will only occur when genuinely necessary to deliver the service you have requested or to fulfil applicable legal requirements.

The bro500 platform is strictly for individuals aged 18 and above. We do not knowingly collect any personal data from individuals under 18 years of age. Should we discover that a child's personal data has been collected without valid parental or guardian consent, we will take immediate action to delete that data and close the account in question.

If you become aware that someone under the age of 18 has registered an account on bro500, please contact our customer support team immediately so that appropriate action can be taken.

If you have any questions, concerns, or complaints regarding this privacy policy or how bro500 handles your personal data, our team is ready to assist you.

You can reach us via:

• Live Chat 24/7: The fastest method — available directly within the bro500 platform at any time.
• Support Email: [email protected] — we will reply within 24 business hours.

For official complaints relating to personal data protection that cannot be resolved through our support channels, you also have the right to lodge a complaint directly with the Department of Personal Data Protection Malaysia (JPDP).