At br888, privacy is not just a legal obligation — it is a commitment to everyone who trusts the platform. Here you will find, clearly and directly, how we collect, use, store, and protect your personal data in compliance with Brazil's General Data Protection Law (LGPD – Law No. 13,709/2018).
Six concrete commitments from br888 with the protection of your personal data — no unnecessary legal jargon.
All communications between your phone or computer and the servers of br888 use SSL/TLS encryption. This applies to login, Pix deposits, withdrawals, and all information exchanged during a session. Data at rest on our servers is also stored with encryption — intercepting traffic alone is not enough to access sensitive information.
The br888 does not sell, rent, or trade users' personal data with third parties for any purpose. The data we collect is used exclusively to operate the platform, verify identity, prevent fraud, and — with explicit consent — send communications related to your account. No exceptions.
The LGPD gives you the right to know what data we hold about you, correct inaccurate information, request deletion of your data, and withdraw consent for any non-essential use. In the br888, you can exercise all of these rights by emailing suporte@br888.best, with a response time of up to 15 business days.
The personal data collected by br888 are retained only for as long as necessary for the purposes for which they were collected, or for the minimum period required by law. Financial transaction data is kept for 5 years in accordance with regulatory obligations. After that period, data is anonymized or securely deleted.
The br888 offers two-factor authentication (2FA) to all users. With 2FA enabled, even if someone obtains your password, they cannot access your account without the second verification factor. It is an extra layer of protection we strongly recommend for everyone — especially for users who keep a balance on the platform.
The br888 follows the principle of data minimization: we collect only what is strictly necessary to operate the platform and meet legal obligations. We do not request unnecessary information during registration and do not track off-platform behavior for targeted advertising without explicit consent.
The LGPD grants specific rights to every personal data subject in Brazil. See what you can request from br888 at any time.
Request a complete copy of all personal data that br888 holds about you, including transaction history, access logs, and registration information.
Request the correction of any inaccurate, incomplete, or outdated data — such as address, phone number, or other registration details that have changed.
Request the deletion of data collected based on consent, where processing is no longer necessary or where consent has been withdrawn, subject to applicable legal retention periods.
Object to any data processing carried out on the basis of legitimate interest where your rights are being violated, including the sending of marketing communications.
Find out which third parties br888 shares your data, for what purposes, and on what legal basis — all described clearly in this Privacy Policy.
Request your data in a structured, machine-readable format for transfer to another controller, where technically feasible and within the limits of the LGPD.
Withdraw consent given for data processing at any time, without affecting the lawfulness of any processing carried out prior to withdrawal.
Request the temporary blocking of data that is unnecessary, excessive, or processed in violation of the LGPD while the matter is under review.
To exercise any of these rights, send an email to suporte@br888.best with the subject "LGPD Request — [your full name]". The response deadline is up to 15 business days.
This Privacy Policy describes how br888 (hereinafter "br888", "we", or "platform") collects, uses, stores, shares, and protects the personal data of br888.best users, in accordance with the General Personal Data Protection Law (LGPD – Law No. 13.709/2018). By creating an account or using any service of the br888, you confirm that you have read and understood this Policy.
The controller of the personal data processed under this Policy is br888, the operator of the br888.best platform. For LGPD purposes, the controller is the entity that makes decisions about the processing of personal data. Privacy-related inquiries and requests to exercise your rights can be directed to our privacy support channel at suporte@br888.best.
During registration and use of the platform, br888 collects the following data provided directly by the user:
When you access the platform, we automatically collect:
In some cases, we receive data from third parties for identity verification and fraud prevention purposes, such as credit bureaus and document validation services. This data is used solely to confirm the user's identity and is never retained beyond what is necessary for that purpose.
The br888 processes personal data for the following purposes:
Each instance of data processing carried out by br888 is grounded in a legal basis established under the LGPD:
Important: where processing is based on consent, you may withdraw it at any time without affecting processing already carried out. Withdrawing marketing consent does not impact your account's functionality.
The br888 does not sell personal data. Data sharing only takes place in the following situations:
All third parties with access to personal data of users of br888 are contractually required to handle this data with confidentiality, use it exclusively for the authorized purposes, and implement appropriate security measures.
Personal data is retained for the following periods:
Once retention periods expire, data is anonymized or permanently deleted in a secure and irreversible manner, in line with industry best practices.
Cookies are small text files stored in your browser that allow the platform to recognize your session, keep you logged in, and personalize your experience. The br888 uses both first-party and third-party cookies to operate the platform.
You can manage and disable non-essential cookies through your browser settings. Disabling essential cookies may prevent the platform from working correctly. To withdraw consent for marketing cookies, go to your account's privacy settings or send a request to suporte@br888.best.
The br888 implements technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or destruction:
Security incidents: in the event of a data breach that may pose a risk to data subjects, br888 will notify the National Data Protection Authority (ANPD) and affected users within the timeframes required by the LGPD.
The services of br888 are intended exclusively for users aged 18 and over. The platform does not intentionally collect personal data from minors. If we determine that a minor has created an account or provided personal data, the account will be closed immediately and all data will be deleted.
If you are a parent or guardian and believe a minor has provided personal data to br888, please contact us immediately at suporte@br888.best so we can take the necessary steps.
To exercise any of the rights guaranteed by the LGPD — access, correction, deletion, portability, withdrawal of consent, objection, or blocking — follow this process:
If you disagree with the response from br888 regarding an LGPD request, you have the right to file a complaint with the National Data Protection Authority (ANPD).
Some of the technology infrastructure and gaming service providers used by br888 may store or process data outside of Brazil. When this occurs, the br888 ensures that international transfers are carried out in accordance with ANPD guidelines, through specific contractual clauses requiring the recipient to maintain a level of protection equivalent to that required by the LGPD. Users are informed about relevant international transfers at the time their data is provided.
The br888 may update this Privacy Policy periodically to reflect changes in legislation, data processing practices, or the services offered. Significant changes will be communicated via email and an in-platform notification at least 15 calendar days before taking effect. The most recent version will always be available on this page, with the date of the last update indicated.
Current version: this Privacy Policy was last updated on January 2026 and supersedes all previous versions.
The br888 has appointed a Data Protection Officer (DPO) as required by the LGPD to oversee privacy practices and serve as a communication channel with the ANPD and data subjects.
For questions related to this Policy or the processing of personal data:
For unresolved complaints, you can contact the National Data Protection Authority (ANPD) directly through the official federal government portal.
When you deposit via Pix at br888, you provide your CPF, Pix key, and banking details. When completing KYC, you submit a copy of your RG or CNH. When you place a bet on the Brasileirão at 9 PM on a Wednesday, the platform logs a session with your IP address, device, and timestamp. All of this is personal data — and how the platform handles that information matters far more than most users realize at the time of registration. That is why the br888 treats this Privacy Policy as a real document, not a formality.
The LGPD — Brazil's General Data Protection Law, in effect since September 2020 — transformed the data protection landscape in Brazil. For the first time, Brazilians have legally guaranteed rights over their personal data: the right to know what is collected, how it is used, who it is shared with, and how it can be deleted. The br888 was built with this framework in mind from day one — not as a forced adaptation, but as a deliberate product choice. A platform that takes user data seriously is one that people trust with real money, and trust is the foundation of everything.
The KYC process — identity verification — is one of the moments when you share the most sensitive data: national ID, driver's license, proof of address, and sometimes a selfie with your document. At br888, this data is handled under specific protocols: access restricted to the compliance team, encrypted storage on secure servers, and retention for the minimum period required by law (5 years after account closure). No basic-level support staff has access to KYC documents — only the compliance team does, with an audit log of every access.
Financial transaction data — deposit history, withdrawals, amounts wagered — is also subject to special handling. This data is required by law for anti-money laundering purposes and is retained for 5 years. The br888 monitors transaction patterns to identify suspicious behavior — not to spy on users, but to meet the legal AML/CTF (anti-money laundering and counter-terrorism financing) obligations that any financial platform operating in Brazil must follow. This monitoring protects the entire user base, including you, from fraudulent activity that could compromise the integrity of the platform.
The cookies from br888 deserve attention because many platforms use the word "cookie" as an umbrella term for extensive tracking practices. At br888, the distinction is clear: essential cookies are required for the platform to function (keeping you logged in, processing bets, keeping your live casino session active) and cannot be disabled without compromising your use of the service. Marketing cookies — used to personalize advertising outside the platform — are only enabled with explicit consent, and you can withdraw that consent at any time. This transparency around cookie use is part of br888 with its users.
Data sharing with third parties is another point worth explaining in detail. When you make a deposit via Pix, the data required to process the transaction passes through the Central Bank's system and the payment gateway that partners with br888. When you play at a live blackjack table, a session identifier and balance information are shared with the table provider. This is operationally necessary and does not constitute a "sale of data". What br888 will never do is share your name, CPF, email address, or betting history with marketing companies, data brokers, or any third party that is not operationally necessary to deliver the service. That line is clear, and we do not cross it.
Two-factor authentication (2FA) is one of the most effective tools available to protect your account on br888 — and the platform makes it available to everyone. With 2FA enabled, an attacker who obtained your password through phishing or a data breach from another platform would still need the second factor — typically a code generated on your phone — to access your account. We strongly recommend that all users enable 2FA, especially those who keep a significant balance on the platform. The setup is available in your account security settings and takes less than 2 minutes.
Finally, a note on transparency: this Privacy Policy is a living document. Brazil's data protection landscape is constantly evolving — the ANPD publishes new guidelines, case law develops, and best practices advance. The br888 is committed to updating this Policy whenever a relevant change occurs, communicating updates in advance, and keeping the current version always available on this page. If you have any questions about how your data is handled that this document does not address, please reach out via live chat or at suporte@br888.best — the privacy team is available to clarify any questions.
The br888 operates in full compliance with the General Data Protection Law (LGPD – Law No. 13.709/2018). You have the right to access, correct, delete, and port your personal data at any time. To exercise these rights, send an email to suporte@br888.best with the subject "LGPD Request — [your name]". Response time: up to 15 business days.
The most common questions about how we handle your personal data.
Play on br888 with the security of a platform in full compliance with the LGPD. Free registration, deposits via Pix, and a 100% welcome bonus up to R$ 500.00.