Broo55 values your privacy. This document explains how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
All data transmitted between your device and broo55's servers is protected by industry-standard 256-bit SSL encryption — the same level of security used by leading financial institutions in Malaysia.
Broo55 operates in full compliance with Malaysia's Personal Data Protection Act 2010. We only collect the data necessary and ensure that all data processing is carried out transparently and lawfully.
Your personal data will not be sold, rented, or shared with any third party for marketing purposes without your explicit consent. Your data belongs to you — broo55 acts only as a trusted custodian.
The 2FA feature is available for all broo55 accounts. By enabling two-factor authentication, every login attempt from a new device will require an additional verification code — preventing unauthorized access even if your password is compromised.
You have full control over which cookies are allowed to run in your browser while visiting broo55. Select the cookies you permit and disable any unnecessary ones through our cookie preference settings.
Under PDPA 2010, you have the right to request deletion or correction of your personal data at any time. broo55 will process such requests within 14 business days upon receipt of a complete application.
Important Note: This Privacy Policy applies to all users of the broo55.com website and the official broo55 mobile app. By using our platform, you agree to the terms set out in this document. Please read it carefully before registering an account.
Broo55 takes personal data protection extremely seriously. As an online entertainment platform serving members across Malaysia, we understand that your trust is the most valuable asset we must safeguard. This Privacy Policy is designed to give you a clear and comprehensive understanding of how your personal information is handled from the moment you register until you stop using our services.
This document covers all aspects of data processing at broo55, including data collection during registration, use of data for platform operations, limited data sharing with carefully selected partners, the technical protections we have in place, and your rights as a data subject under Malaysia's Personal Data Protection Act 2010.
Broo55 practises the principle of minimum data collection — we only collect information that is strictly necessary to provide a safe, fair, and efficient service to our members. The following are the categories of data we collect:
During account registration, you are required to provide your full name, date of birth, email address, mobile number, and password. This information is used to establish your account's unique identity, verify age eligibility, and enable official communications from broo55 to you.
As part of the process Know Your Customer required, broo55 requires a copy of a valid government-issued identity document (identity card or passport) and proof of current address dated within the last three months. KYC documents are stored in an encrypted environment and are accessible only by authorised personnel.
Details related to deposits, withdrawals, and transaction history are retained as required financial records. This includes payment method details (partially masked bank account numbers), transaction amounts, dates and times, and processing status. Bank card or e-wallet data not stored directly by broo55 — payment processing is handled by third-party payment gateways that comply with PCI-DSS standards.
Broo55 records your gaming activity, including games played, wagering amounts, session duration, and usage patterns. This data is used to ensure game integrity, detect suspicious activity, and help us improve the overall user experience.
| Data Categories | Purpose of Collection | Retention Period |
|---|---|---|
| Identity & KYC Data | Account verification, legal compliance | 5 years after account closure |
| Financial Transaction Data | Audit records, dispute resolution | 7 years (legal requirement) |
| Game Activity Data | Game integrity, customer support | 2 years from record date |
| Device & Technical Data | Account security, fraud detection | 1 year from last session |
| Communication Data | Customer support, complaint history | 3 years from last interaction |
Every piece of information broo55 collects has a clear and legitimate purpose. We do not use your data for purposes not stated in this Privacy Policy without obtaining fresh consent from you. The following are the primary purposes for data use:
Unsubscribe from Marketing: You may withdraw your consent to receive marketing communications at any time via the notification settings in your broo55 account or by contacting our support team. Withdrawing marketing consent will not affect essential service communications related to your account.
Broo55 is committed to does not sell or rent your personal data to any third party. However, in the operation of our platform, there are limited situations where data must be shared with carefully selected external parties:
Broo55 works with third-party service providers selected based on strict security and privacy standards. These include PCI-DSS compliant payment gateway providers, identity verification service providers for the KYC process, and cloud computing infrastructure providers. All such providers are contractually bound to protect your data and may only use that information for the purposes of the services rendered to broo55.
Broo55 may be required to disclose your personal data to Malaysian government authorities or law enforcement bodies where there is a valid court order, a directive from a competent enforcement agency, or in the context of financial crime investigations such as money laundering. In such situations, broo55 will provide only the data specifically required by the authorities.
If data needs to be transferred outside Malaysia (e.g., for cloud server services or technical support), broo55 ensures such transfers comply with the requirements of PDPA 2010 and that the recipient country provides an equivalent or higher level of data protection than Malaysia.
Broo55 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser when you visit the broo55 website. The following are the types of cookies we use:
Cookie Management: You can manage or delete cookies at any time through your browser settings. Please note that disabling essential cookies may affect the functionality of the broo55 platform. For guidance on managing cookies in your specific browser, please refer to your browser's official documentation.
Broo55 continually invests in cybersecurity infrastructure to ensure your personal data remains protected at all times. The technical and organisational measures we implement include:
Although broo55 takes all reasonable precautions, no internet security system can be guaranteed 100% safe. In the event of a security breach involving your personal data, broo55 will notify you and the Personal Data Protection Commissioner within the timeframe prescribed by law.
Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding the personal data we hold about you. broo55 fully respects and facilitates the exercise of these rights:
How to Submit a Request: To exercise any of the rights below, contact the broo55 customer support team via live chat within the platform. Please provide your account number and the details of your request. We will process and respond within 14 working days.
The broo55 platform is exclusively for users aged 18 and above. We do not intentionally collect any personal data from individuals under the age of 18. If we discover that a child's data has been collected without our knowledge, the account in question will be immediately closed and all related data will be permanently deleted from our systems.
If you are a parent or guardian and suspect that your underage child has registered an account at broo55, please contact our support team immediately via the live chat channel for prompt action.
Broo55 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in business practices, legal requirements, or improvements in how we manage data. When significant changes are made, we will notify you via:
The latest update date will always be displayed at the top of this document. Continued use of the broo55 platform after any changes is considered your acceptance of the updated policy.
If you have any questions, concerns, or complaints regarding broo55's Privacy Policy or how we handle your personal data, our team is always ready to assist you. Available contact channels:
Complaints to Authorities: If you are not satisfied with how broo55 has handled your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my. We encourage you to contact us first so we have the opportunity to resolve your issue directly.
Under PDPA 2010, you have full control over your personal data. broo55 makes it easy to exercise each of these rights through a simple and transparent process.
You may request a copy of all personal data that broo55 holds about you at any time. We will provide a comprehensive report in an easy-to-read format.
If any of your personal data is inaccurate or outdated, you have the right to request an immediate correction. Data updates can be made through your profile settings or via customer support.
Also known as the "right to be forgotten" — you may request the deletion of your personal data, subject to applicable legal retention obligations.
You have the right to object to the processing of your data for direct marketing purposes at any time. Your request will be actioned immediately, no questions asked.
In certain circumstances, you may request that broo55 restrict the processing of your data while a dispute or request is being handled.
You have the right to receive your personal data in a structured, machine-readable format and to transfer it to another data controller of your choice.