Understand how a28bet collects, uses, and protects your personal data in compliance with the General Data Protection Law (LGPD). Full transparency on every piece of information we process.
The core principles that guide personal data processing across the platform
A28bet processes all personal data in strict compliance with the General Data Protection Law (Law No. 13,709/2018). Your rights as a data subject are upheld at every stage of information processing on the platform.
All communication between your device and a28bet's servers is protected by 256-bit SSL encryption — the same standard used by Brazil's leading digital banks such as Nubank, Itaú, and Bradesco.
A28bet never sells, rents, or transfers your personal data to third parties for commercial purposes unrelated to the platform's operation. Your CPF, email, and betting history are yours alone.
At any time you can access, correct, port, or request the deletion of your personal data. a28bet provides direct channels to exercise all rights guaranteed under the LGPD — no red tape.
Every piece of data we collect has a clear, defined purpose. a28bet does not use your information for anything beyond what is described in this Policy — no side analytics, hidden profiles, or misuse of browsing behavior.
If a security incident involves your data, a28bet immediately notifies the affected users and the National Data Protection Authority (ANPD), as required by the LGPD, with full transparency about what occurred.
A a28bet, operator of the platform available at a28bet.best, is the data controller for personal data collected through the use of the sports betting and online casino services offered in Brazil. As the data controller, a28bet is responsible for defining the purposes and means by which your data is processed, always in compliance with the General Data Protection Law (Law No. 13,709/2018 — LGPD).
This Privacy Policy applies to all registered users and visitors of the platform a28bet, regardless of the device used to access it — desktop, Android phone, iPhone, or tablet. By creating an account or using any service on the platform, you acknowledge that you have read and understood the privacy practices described in this document.
A a28bet collects only the data necessary to operate the platform securely and deliver the best possible experience. The data collected falls into the following categories:
Registration data (provided by you):
Financial data (generated through platform use):
Usage data (collected automatically):
Verification documents (collected during the KYC process):
Each piece of data collected by a28bet has a specific purpose. We do not use your data for anything beyond what is listed below:
A a28bet processes your personal data based on the following legal grounds set out in the LGPD:
A a28bet does not sell, rent, or share your personal data with third parties for commercial purposes. Sharing only occurs in the following situations and with the following categories of recipients:
A a28bet uses cookies and similar technologies to improve your experience on the platform. The types of cookies used are:
You can manage cookie preferences through your browser settings. Disabling non-essential cookies may affect some personalization features on the platform, but will not prevent access to the core services of the a28bet.
A a28bet adopts robust technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or destruction:
A a28bet retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, in accordance with the minimum retention periods required by law:
Once retention periods expire, data is securely deleted or irreversibly anonymized so that it can no longer be linked to a specific individual.
The LGPD grants you, as a data subject, the following rights regarding your personal information processed by a28bet:
To exercise any of these rights, contact our Data Protection Officer at contato@a28bet.best or via live chat, available 24 hours. The a28bet responds to data subject requests within 15 calendar days, as required by the LGPD.
A a28bet is a platform intended exclusively for users aged 18 and over. We do not intentionally collect, process, or store personal data from individuals under 18.
During registration, date of birth is verified to prevent minors from signing up. The identity verification (KYC) process includes photo ID confirmation, which allows a28bet to identify and close accounts belonging to minors who may have provided false information during registration.
If you believe a minor under 18 has created an account at a28bet using false information, contact our support team immediately. The account will be suspended as a precaution and the data collected will be deleted once the situation has been verified and confirmed.
Some of the infrastructure and technology services used by the a28bet may involve processing data on servers located outside Brazil. When this occurs, a28bet ensures the transfer meets the requirements of the LGPD, specifically:
A a28bet prioritizes providers with operations in Brazil wherever available, minimizing the need for international data transfers. Information about the countries to which data may be transferred is available upon request to our Data Protection Officer.
In the event of a security incident that may pose a significant risk or harm to data subjects, the a28bet will follow these procedures:
A a28bet may update this Privacy Policy periodically to reflect changes in Brazilian law, data protection practices, or platform features. Whenever material changes occur:
If you do not agree with the changes, you may close your account and request data deletion before the new version takes effect. Continuing to use the a28bet after the changes take effect constitutes acceptance of the new privacy terms.
In compliance with the LGPD, a28bet a28bet has appointed a Data Protection Officer (DPO) responsible for receiving communications from data subjects and the ANPD, guiding employees on data protection practices, and ensuring LGPD compliance across all platform operations.
To exercise your rights as a data subject, ask questions about this Policy, or report any privacy-related concern, please get in touch:
If you are not satisfied with the response you received, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the regulatory authority responsible for enforcing the LGPD in Brazil.
The law gives you real control over your personal information — here's how to exercise each right
Request a complete copy of all personal data a28bet holds about you — betting history, documents, financial data, and browsing data. We respond within 15 days.
If your data is incorrect or out of date, request a correction directly in your account settings or through support. Incorrect data may affect withdrawals and verification processes.
Request the deletion of your personal data processed on the basis of consent. Data required to fulfill legal obligations is retained for the minimum periods established by law.
Receive your data in a structured format for transfer to another service. a28bet provides data in a machine-readable format upon request to the Data Protection Officer.
Object to the processing of your data in specific situations, especially for marketing communications. Consent withdrawal is instant via your account settings.
Find out who your data has been shared with, how long it is kept, and the legal basis for each processing activity. a28bet answers these questions with complete transparency.
A consolidated overview of what data a28bet collects, how it is used, and how long it is retained
| Data Category | Purpose | Legal Basis | Retention |
|---|---|---|---|
| Full name, CPF, date of birth | Registration and identity verification | Contract / Legal obligation | 5 years after closure |
| Email and mobile number | Communication, authentication, and support | Contract / Consent | 5 years after closure |
| Bank details and Pix | Processing of deposits and withdrawals | Contract / Legal obligation | 5 years after closure |
| Betting and casino history | Platform operation, compliance, anti-fraud | Contract / Legal obligation | 5 years after closure |
| KYC documents (national ID, driver's license, proof of address) | Mandatory identity verification | Legal obligation | 5 years after closure |
| IP address and device data | Security and fraud prevention | Legitimate interest | 6 months (Marco Civil da Internet) |
| Browsing cookies | Platform personalization and performance | Consent / Legitimate interest | As per browser settings |
| Customer support records | Quality, dispute resolution | Legitimate interest | 2 years |
Straight answers to the most common questions about how we handle your data
When you create an account on an online betting platform, you are sharing some of the most sensitive information there is: your CPF, banking details, financial history, and behavioral patterns. It is an act of trust, and the a28bet understands the full weight of that responsibility. This Privacy Policy was not written simply to satisfy a legal requirement on paper — it was designed to make clear, in plain language, exactly what we do with every piece of information you share with us.
The General Data Protection Law was a landmark moment for Brazil's digital market. Before it, platforms routinely collected data without clear criteria, shared information without transparency, and left users completely in the dark about what happened to their personal data. The LGPD changed that by establishing concrete rights for data subjects, and the a28bet was built from the ground up to be in full compliance with this legislation — not as a forced adaptation, but as a core business principle.
The core of our approach is purpose limitation. Every piece of data we collect has a clear reason behind it: your CPF is for identity verification and regulatory compliance — nothing else. Your Pix key is for processing withdrawals securely, not for side analyses of your financial behavior. Your betting history on Brasileirão Série A or Superliga de Vôlei is kept to meet legal obligations and to give you visibility into your own activity — not to be sold to third parties or fed into advertising profiles. That clarity of purpose is what sets a platform that genuinely respects privacy apart from one that only pretends to.
Technical security is the other pillar of this Policy. The a28bet uses 256-bit SSL encryption on all communications between your phone or computer and our servers — meaning that even if someone intercepted the data traffic, what they would see would be unreadable. Passwords are never stored in plain text, only as cryptographic hashes. Identity verification documents are kept in secure storage with restricted access controls. And our security team continuously monitors systems to detect any unauthorized access attempts before they can cause harm.
The identity verification process — KYC — is something many people approach with skepticism, and understandably so. Submitting documents like a national ID, driver's license, and proof of address to an online platform can feel like a risk. The a28bet understands this concern and is fully transparent about it: KYC is a regulatory requirement for betting platforms in Brazil, tied to anti-money laundering rules and the protection of all users against fraud. Submitted documents are stored with encryption, accessed only by the compliance team in specific situations, and retained for the legally required minimum period of 5 years after account closure. They are used solely for identity verification.
One aspect many users overlook is that privacy also protects them from third parties. When the a28bet implements rigorous identity checks and monitors suspicious access attempts, it is also ensuring that no one but you can access your account, withdraw your winnings, or use your registration data to open fraudulent accounts elsewhere. The security of your data is directly tied to your protection as a user of the platform.
If you have any questions about how a28bet processes your data, would like to exercise any of the rights guaranteed under the LGPD, or simply want to better understand any part of this Policy, our support team and our Data Protection Officer are available 24 hours a day via live chat and at contato@a28bet.best. We respond within 15 calendar days. Privacy here is not a vague promise — it is a commitment with a defined deadline and a named responsible party.
Our Data Protection Officer is available 24 hours a day to answer any questions about this Policy, handle requests for data access, correction, or deletion, and guide you on how to exercise your rights under the LGPD. Get in touch via live chat or by emailing contato@a28bet.best with the subject line "Data Protection". For additional information, please also refer to our Terms and Conditions and the Responsible Gambling.