bro44 Privacy Policy — How We Protect Your Data in Pakistan

bro44 (accessible at bro44.click) is an online gaming and sports betting platform built for Pakistani players. bro44 is the data controller responsible for all personal data collected through this website and all related services, including account management, payment processing, customer support interactions, and marketing communications where applicable.

This Privacy Policy applies to all users who access bro44 — whether you are browsing without an account, have registered as a player, or are a current active member of the bro44 VIP Club. Every time you interact with bro44 in any capacity, this policy governs how your data is handled.

If you have questions about anything in this policy, you can reach the bro44 data team at privacy@bro44.click or via the 24/7 live chat on the website. We take all privacy enquiries seriously and will respond within 48 hours.

bro44 collects personal data in three main ways: information you provide directly, information generated automatically when you use the platform, and information shared with us by our trusted payment and verification partners. Here is a clear breakdown of what falls into each category:

Every piece of data bro44 collects has a specific, justified purpose. We do not collect data without a clear reason, and we do not use data collected for one purpose for something unrelated without your knowledge. Below are the primary purposes for which bro44 processes personal data:

• Account operation: Creating and managing your bro44 account, verifying your identity, enabling you to log in securely, and maintaining your account history and preferences.
• Payment processing: Processing deposits and withdrawals in PKR via your chosen payment method (Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, or Visa/Mastercard). This includes reconciling transactions and investigating disputed payments.
• Customer support: Responding to your queries, resolving complaints, and improving the quality of our support based on interaction data.
• Fraud prevention and security: Detecting and preventing fraudulent activity, multiple accounts, money laundering, and unauthorised access to player accounts. Device fingerprinting and behavioural analysis are part of this process.
• Responsible gaming: Monitoring gaming patterns that may indicate problem gambling behaviours and proactively reaching out to players who may need support. This is a duty bro44 takes seriously.
• Regulatory compliance: Meeting anti-money laundering (AML) obligations, age verification requirements, and any other legal or regulatory requirements applicable to bro44's operations.
• Platform improvement: Analysing aggregated, anonymised usage data to improve games, features, and the overall bro44 player experience.
• Marketing communications: Sending you promotional messages about bro44 bonuses, PSL betting events, and platform updates — but only if you have opted in to receive these communications. You can opt out at any time through your account settings.

bro44 processes personal data on the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing your account data and payment data is required to fulfil our contract with you — i.e., to provide the bro44 gaming service you registered for.
• Legal obligation: Identity verification, KYC checks, transaction monitoring, and record-keeping for AML purposes are required by applicable law. bro44 has no discretion to skip these processes.
• Legitimate interests: Fraud detection, security monitoring, platform improvement, and certain internal analytics are processed under bro44's legitimate interest in running a safe and functional platform, provided this interest does not override your rights.
• Consent: Marketing communications (SMS, email, push notifications) are sent only where you have given explicit consent through your bro44 account preferences. You can withdraw this consent at any time with immediate effect.

bro44 does not sell your personal data to any third party under any circumstances. We share data only in the following specific and limited situations:

• Payment processors: Your payment details are shared with our certified payment partners (Easypaisa, JazzCash, NayaPay, SadaPay, and our card processing provider) solely to execute your deposit and withdrawal transactions. These partners operate under their own privacy policies and are contractually bound to protect your data.
• Identity verification providers: For KYC processing, bro44 uses a certified identity verification service. Your CNIC data and verification selfie are processed by this provider under strict contractual data protection obligations and are not retained beyond the verification purpose.
• Fraud prevention services: Anonymised device fingerprint and behaviour data may be shared with our fraud detection technology partner to identify and block fraudulent activity. No directly identifiable personal data is included in these transfers.
• Legal authorities: Where required by a court order, official investigation, or applicable Pakistani law, bro44 may disclose account or transaction data to law enforcement or regulatory authorities. bro44 will notify the affected player where legally permitted to do so.
• Business transfers: If bro44 undergoes a merger, acquisition, or sale of assets, your data may be transferred to the successor entity. You will be notified in advance and given the option to close your account if you prefer.

bro44 uses cookies and similar tracking technologies to operate the platform, maintain your login session, detect fraud, and — where you have consented — analyse platform usage patterns. When you first visit bro44, you are presented with a cookie consent notice that lets you choose which categories of cookies to accept beyond the strictly necessary ones.

The categories of cookies bro44 uses are:

• Strictly necessary cookies: Required for the platform to function. This includes session management, security tokens, and login state. These cannot be disabled without breaking the site.
• Functional cookies: Remember your preferences such as language, notification settings, and display preferences. Disabled by default, enabled if you accept.
• Analytics cookies: Anonymised usage data used to understand how Pakistani players navigate bro44 so we can improve the experience. No personally identifiable information is included. Disabled by default.
• Fraud detection cookies: Used to identify suspicious device behaviour and protect your account. These are categorised as security-necessary and cannot be disabled.

You can review and update your cookie preferences at any time through the bro44 cookie settings panel. Refusing non-essential cookies will not affect your ability to use the core bro44 platform.

Protecting the personal data of Pakistani bro44 players is a technical and operational priority, not an afterthought. The security measures bro44 has in place include:

• 256-bit SSL/TLS encryption for all data in transit between player devices and bro44 servers
• AES-256 encryption for sensitive data stored at rest on bro44 infrastructure
• Two-factor authentication (2FA) available on all player accounts
• Automated real-time fraud detection monitoring account login attempts, payment patterns, and device behaviour
• Regular penetration testing and security audits conducted by independent third-party security specialists
• Strict internal access controls — bro44 staff access to player data is granted on a need-to-know basis only, with all access logged
• Secure destruction procedures for data that has reached the end of its retention period

bro44 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by law, whichever is longer. Here are the specific retention periods applicable to different categories of data:

• Account and profile data: Retained for the duration of your account and for 5 years after account closure, to meet anti-money laundering record-keeping obligations.
• Transaction records: Retained for 7 years from the date of the transaction, as required for financial record-keeping compliance.
• KYC and identity documents: Retained for 5 years after account closure or the last transaction, whichever is later.
• Customer support records: Retained for 3 years from the date of the last interaction, to support dispute resolution.
• Game history and session logs: Retained for 2 years from the session date for platform integrity and dispute resolution purposes.
• Marketing consent records: Retained for the duration of your account plus 3 years, to evidence consent history.
• Cookie and analytics data: Anonymised analytics data is retained for 26 months. Non-anonymised session cookies expire at the end of each browser session.

When data reaches the end of its applicable retention period, it is securely and permanently deleted from bro44 systems using certified data destruction procedures. Deletion is not reversible.

As a bro44 player and the owner of your personal data, you have the following rights. All of these can be exercised by contacting the bro44 data team at privacy@bro44.click or via live chat. We will respond within 30 days.

bro44 is strictly intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes age verification steps to prevent underage access. If bro44 becomes aware that personal data has been collected from a person under 18, that data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian and believe your child may have registered on bro44, please contact us immediately at privacy@bro44.click or via live chat. We will investigate and take appropriate action as a priority.

bro44 reviews this Privacy Policy regularly and updates it when our data practices change, when we add new features that involve new data collection, or when regulatory requirements change. The effective date at the top of this document is updated with every revision.

When a material change is made to this Privacy Policy — one that meaningfully affects how your data is used — we will notify registered Pakistani players via their registered mobile number or through a prominent notice on the bro44 platform before the change takes effect. Minor changes, such as formatting updates or improved clarity without substantive change, may be made without advance notice.

Your continued use of bro44 after a policy update constitutes acceptance of the revised Privacy Policy. If you do not agree with the updated policy, you should stop using bro44 and may request account closure and data deletion in accordance with Section 9 above.

For any privacy-related query, data subject request, or concern about how bro44 handles your personal data, please get in touch through any of the following channels:

• Email: privacy@bro44.click — for formal data subject requests, privacy complaints, and detailed enquiries. We aim to respond within 48 hours.
• Live Chat: Available 24/7 on the bro44 website in both English and Urdu. For quick questions and initial privacy enquiries.
• WhatsApp: Available through your bro44 account dashboard for convenient messaging.

When submitting a formal data subject request (access, rectification, deletion, etc.), please include your bro44 username and the mobile number registered to your account so we can verify your identity before processing the request. This verification step is in place to protect your data from being accessed or deleted by someone other than you.

bro44 takes all privacy matters seriously. If you are not satisfied with how we have handled your privacy concern, you have the right to escalate the matter to a senior internal reviewer by marking your email "Privacy Escalation" — we will acknowledge within 24 hours and resolve within 10 business days.