🔒 Privacy Policy updated  2026 🛡️ LGPD Compliance  Law No. 13.709/2018 ⚡ Deposits and withdrawals via Pix  INSTANT 🎁 Welcome Bonus  100% up to R$ 500 🏆 Football · Live Casino · E-sports · Blackjack 📞 24/7 Support in Portuguese  LIVE CHAT 🔒 Privacy Policy updated  2026 🛡️ LGPD Compliance  Law No. 13.709/2018 ⚡ Deposits and withdrawals via Pix  INSTANT 🎁 Welcome Bonus  100% up to R$ 500 🏆 Football · Live Casino · E-sports · Blackjack 📞 24/7 Support in Portuguese  LIVE CHAT
🛡️ LGPD · OFFICIAL DOCUMENT · UPDATED IN 2026

Br888 Privacy Policy – LGPD Data Protection

At br888, privacy is not just a legal obligation — it is a commitment to everyone who trusts the platform. Here you will find, clearly and directly, how we collect, use, store, and protect your personal data in compliance with Brazil's General Data Protection Law (LGPD – Law No. 13,709/2018).

LGPD
Full compliance
SSL
Encryption on all transactions
0
Data sold to third parties
15
Days to respond to an LGPD request

What protects your privacy at br888

Six concrete commitments from br888 with the protection of your personal data — no unnecessary legal jargon.

End-to-end encryption

All communications between your phone or computer and the servers of br888 use SSL/TLS encryption. This applies to login, Pix deposits, withdrawals, and all information exchanged during a session. Data at rest on our servers is also stored with encryption — intercepting traffic alone is not enough to access sensitive information.

Your data is not sold

The br888 does not sell, rent, or trade users' personal data with third parties for any purpose. The data we collect is used exclusively to operate the platform, verify identity, prevent fraud, and — with explicit consent — send communications related to your account. No exceptions.

You control your data

The LGPD gives you the right to know what data we hold about you, correct inaccurate information, request deletion of your data, and withdraw consent for any non-essential use. In the br888, you can exercise all of these rights by emailing suporte@br888.best, with a response time of up to 15 business days.

Secure and limited storage

The personal data collected by br888 are retained only for as long as necessary for the purposes for which they were collected, or for the minimum period required by law. Financial transaction data is kept for 5 years in accordance with regulatory obligations. After that period, data is anonymized or securely deleted.

Two-factor authentication

The br888 offers two-factor authentication (2FA) to all users. With 2FA enabled, even if someone obtains your password, they cannot access your account without the second verification factor. It is an extra layer of protection we strongly recommend for everyone — especially for users who keep a balance on the platform.

Minimum necessary data

The br888 follows the principle of data minimization: we collect only what is strictly necessary to operate the platform and meet legal obligations. We do not request unnecessary information during registration and do not track off-platform behavior for targeted advertising without explicit consent.

Your rights as a data subject

The LGPD grants specific rights to every personal data subject in Brazil. See what you can request from br888 at any time.

Access

Request a complete copy of all personal data that br888 holds about you, including transaction history, access logs, and registration information.

Correction

Request the correction of any inaccurate, incomplete, or outdated data — such as address, phone number, or other registration details that have changed.

Deletion

Request the deletion of data collected based on consent, where processing is no longer necessary or where consent has been withdrawn, subject to applicable legal retention periods.

Objection

Object to any data processing carried out on the basis of legitimate interest where your rights are being violated, including the sending of marketing communications.

Information

Find out which third parties br888 shares your data, for what purposes, and on what legal basis — all described clearly in this Privacy Policy.

Portability

Request your data in a structured, machine-readable format for transfer to another controller, where technically feasible and within the limits of the LGPD.

Consent withdrawal

Withdraw consent given for data processing at any time, without affecting the lawfulness of any processing carried out prior to withdrawal.

Block

Request the temporary blocking of data that is unnecessary, excessive, or processed in violation of the LGPD while the matter is under review.

To exercise any of these rights, send an email to suporte@br888.best with the subject "LGPD Request — [your full name]". The response deadline is up to 15 business days.

Last updated: January 2026

This Privacy Policy describes how br888 (hereinafter "br888", "we", or "platform") collects, uses, stores, shares, and protects the personal data of br888.best users, in accordance with the General Personal Data Protection Law (LGPD – Law No. 13.709/2018). By creating an account or using any service of the br888, you confirm that you have read and understood this Policy.

1. Data Controller

The controller of the personal data processed under this Policy is br888, the operator of the br888.best platform. For LGPD purposes, the controller is the entity that makes decisions about the processing of personal data. Privacy-related inquiries and requests to exercise your rights can be directed to our privacy support channel at suporte@br888.best.

2. Data We Collect

2.1 Data provided directly by you

During registration and use of the platform, br888 collects the following data provided directly by the user:

  • Identification: full name, date of birth, CPF, identity document number (RG, CNH, or passport);
  • Contact: email address, mobile number, full residential address;
  • Financial: payment method data used (Pix key linked to CPF, tokenized credit or debit card details, PicPay or Mercado Pago account), deposit and withdrawal history;
  • KYC verification: copies of identity documents, proof of address, and a selfie with a document when requested by the compliance team;
  • Communications: content of messages exchanged with support via live chat or email.

2.2 Automatically collected data

When you access the platform, we automatically collect:

  • Access data: IP address, browser type and version, operating system, device model;
  • Browsing data: pages visited, session duration, clicks, and interactions with the platform;
  • Location data: approximate geolocation derived from IP address (GPS data is not collected without explicit consent);
  • Cookies and similar technologies: described in detail in section 7 of this Policy.

2.3 Third-party data

In some cases, we receive data from third parties for identity verification and fraud prevention purposes, such as credit bureaus and document validation services. This data is used solely to confirm the user's identity and is never retained beyond what is necessary for that purpose.

Data Category Examples Required
Identification Full name, CPF, date of birth Yes — registration
Contact Email, phone number, address Yes — registration
Financial Pix key (CPF), transaction history Yes — withdrawal
Documentary KYC National ID, driver's license, proof of address Yes — first withdrawal
Browsing IP, device, pages visited Automatic
Marketing Communication preferences Optional — consent

3. Purposes of Processing

The br888 processes personal data for the following purposes:

  • Account creation and management: user account registration, authentication, maintenance, and closure;
  • Service delivery: processing bets, payments, withdrawals, and participation in promotions;
  • Identity verification (KYC): confirming user identity and preventing fraud, in accordance with regulatory requirements;
  • Anti-money laundering (AML/CFT): transaction monitoring to meet legal obligations related to financial crime prevention;
  • Customer support: handling questions, complaints, and requests via chat and email;
  • Operational communications: account notifications, withdrawals, active promotions, and terms updates;
  • Marketing (with consent): sending personalized offers, promotional communications, and platform news;
  • Platform improvement: analysis of browsing data to identify usability issues and improve the experience;
  • Security and fraud prevention: detecting unauthorized access, multiple accounts, and other fraudulent activity;
  • Compliance with legal obligations: retention of financial data as required by applicable Brazilian law.

4. Legal Bases for Data Processing

Each instance of data processing carried out by br888 is grounded in a legal basis established under the LGPD:

  • Contract performance (art. 7, V): processing required to deliver the services contracted by the user upon account creation — registration, betting, payments, withdrawals, and KYC;
  • Compliance with a legal obligation (art. 7, II): retention of financial data for 5 years, anti-money laundering checks, and LGPD-related obligations;
  • Legitimate interest (Art. 7, IX): platform security, fraud prevention, browsing analysis for service improvement, and essential operational communications;
  • Consent (art. 7, I): sending marketing communications, using non-essential cookies, and any optional processing that is not required to deliver the service.

Important: where processing is based on consent, you may withdraw it at any time without affecting processing already carried out. Withdrawing marketing consent does not impact your account's functionality.

5. Sharing Data with Third Parties

The br888 does not sell personal data. Data sharing only takes place in the following situations:

  • Payment processors: transaction data is shared with payment gateways and financial institutions to process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago. These partners act as data processors under contract and comply with strict data protection standards;
  • Game and casino providers: minimum required data (session identifier and balance) is shared with certified game providers to enable the Live Casino and slots experience;
  • Identity verification services: KYC data may be verified with credit bureaus and document validation services to confirm identity and prevent fraud;
  • Competent authorities: data may be disclosed to regulatory, law enforcement, or judicial authorities upon a legally grounded request, in accordance with applicable Brazilian law;
  • Technology infrastructure providers: cloud hosting services, system monitoring, and DDoS protection, operating as processors under contract with confidentiality and data protection clauses.

All third parties with access to personal data of users of br888 are contractually required to handle this data with confidentiality, use it exclusively for the authorized purposes, and implement appropriate security measures.

6. Data Retention and Deletion

Personal data is retained for the following periods:

  • Registration data and active account: retained for the full duration of the account;
  • Financial and transaction data: retained for 5 years after the transaction, as required by anti-money laundering laws and Central Bank regulations;
  • KYC data: retained for 5 years after account closure, in accordance with regulatory requirements;
  • Access logs: retained for 6 months in accordance with the Brazilian Internet Civil Rights Framework (Law No. 12.965/2014);
  • Support communications: retained for 2 years after the support ticket is closed;
  • Marketing consent data: retained while consent is active; deleted within 30 days of withdrawal.

Once retention periods expire, data is anonymized or permanently deleted in a secure and irreversible manner, in line with industry best practices.

7. Cookies and Tracking Technologies

7.1 What are cookies

Cookies are small text files stored in your browser that allow the platform to recognize your session, keep you logged in, and personalize your experience. The br888 uses both first-party and third-party cookies to operate the platform.

7.2 Types of cookies used

  • Essential cookies: required for the platform's basic operation — authentication, game session, security. They cannot be disabled without compromising your use of the service;
  • Performance cookies: collect data on how users navigate the platform to identify errors and improve the experience. This data is aggregated and does not identify users individually;
  • Preference cookies: store settings such as language, preferred payment method, and interface preferences;
  • Marketing cookies (with consent): used to personalize communications and measure campaign effectiveness. Enabled only with explicit consent.

7.3 Managing cookies

You can manage and disable non-essential cookies through your browser settings. Disabling essential cookies may prevent the platform from working correctly. To withdraw consent for marketing cookies, go to your account's privacy settings or send a request to suporte@br888.best.

8. Data Security

The br888 implements technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or destruction:

  • SSL/TLS Encryption: across all communications between user and server;
  • Encryption at rest: sensitive data stored in encrypted format on our servers;
  • Two-factor authentication (2FA): available to all users;
  • Access control: internal access to personal data restricted by permission level, with audit logs;
  • Continuous monitoring: intrusion detection systems and 24-hour monitoring to identify suspicious activity;
  • Security testing: periodic vulnerability assessments and penetration tests carried out by specialized teams.

Security incidents: in the event of a data breach that may pose a risk to data subjects, br888 will notify the National Data Protection Authority (ANPD) and affected users within the timeframes required by the LGPD.

9. Protection of Minors

The services of br888 are intended exclusively for users aged 18 and over. The platform does not intentionally collect personal data from minors. If we determine that a minor has created an account or provided personal data, the account will be closed immediately and all data will be deleted.

If you are a parent or guardian and believe a minor has provided personal data to br888, please contact us immediately at suporte@br888.best so we can take the necessary steps.

10. How to Exercise Your Rights

To exercise any of the rights guaranteed by the LGPD — access, correction, deletion, portability, withdrawal of consent, objection, or blocking — follow this process:

  • Send an email to suporte@br888.best with the subject "LGPD Request — [your full name]";
  • Clearly describe which right you wish to exercise and provide enough information to identify your account (full name, CPF, registered email address);
  • The br888 will respond within 15 business days within the timeframe established by the LGPD;
  • In cases requiring additional identity verification, we may request supplementary documentation — this protects you from requests made by unauthorized third parties;
  • If a request is denied, we will provide a reasoned explanation based on applicable law.

If you disagree with the response from br888 regarding an LGPD request, you have the right to file a complaint with the National Data Protection Authority (ANPD).

11. International Data Transfers

Some of the technology infrastructure and gaming service providers used by br888 may store or process data outside of Brazil. When this occurs, the br888 ensures that international transfers are carried out in accordance with ANPD guidelines, through specific contractual clauses requiring the recipient to maintain a level of protection equivalent to that required by the LGPD. Users are informed about relevant international transfers at the time their data is provided.

12. Changes to this Privacy Policy

The br888 may update this Privacy Policy periodically to reflect changes in legislation, data processing practices, or the services offered. Significant changes will be communicated via email and an in-platform notification at least 15 calendar days before taking effect. The most recent version will always be available on this page, with the date of the last update indicated.

Current version: this Privacy Policy was last updated on January 2026 and supersedes all previous versions.

13. Contact and Data Protection Officer

The br888 has appointed a Data Protection Officer (DPO) as required by the LGPD to oversee privacy practices and serve as a communication channel with the ANPD and data subjects.

For questions related to this Policy or the processing of personal data:

  • Privacy email: suporte@br888.best (subject: "Privacy" or "LGPD Request");
  • Live chat: available 24 hours on the platform, in Portuguese;
  • Response time: up to 15 business days for formal LGPD requests; general privacy inquiries answered within 5 business days.

For unresolved complaints, you can contact the National Data Protection Authority (ANPD) directly through the official federal government portal.

Why your data privacy really matters at br888

When you deposit via Pix at br888, you provide your CPF, Pix key, and banking details. When completing KYC, you submit a copy of your RG or CNH. When you place a bet on the Brasileirão at 9 PM on a Wednesday, the platform logs a session with your IP address, device, and timestamp. All of this is personal data — and how the platform handles that information matters far more than most users realize at the time of registration. That is why the br888 treats this Privacy Policy as a real document, not a formality.

The LGPD — Brazil's General Data Protection Law, in effect since September 2020 — transformed the data protection landscape in Brazil. For the first time, Brazilians have legally guaranteed rights over their personal data: the right to know what is collected, how it is used, who it is shared with, and how it can be deleted. The br888 was built with this framework in mind from day one — not as a forced adaptation, but as a deliberate product choice. A platform that takes user data seriously is one that people trust with real money, and trust is the foundation of everything.

The KYC process — identity verification — is one of the moments when you share the most sensitive data: national ID, driver's license, proof of address, and sometimes a selfie with your document. At br888, this data is handled under specific protocols: access restricted to the compliance team, encrypted storage on secure servers, and retention for the minimum period required by law (5 years after account closure). No basic-level support staff has access to KYC documents — only the compliance team does, with an audit log of every access.

Financial transaction data — deposit history, withdrawals, amounts wagered — is also subject to special handling. This data is required by law for anti-money laundering purposes and is retained for 5 years. The br888 monitors transaction patterns to identify suspicious behavior — not to spy on users, but to meet the legal AML/CTF (anti-money laundering and counter-terrorism financing) obligations that any financial platform operating in Brazil must follow. This monitoring protects the entire user base, including you, from fraudulent activity that could compromise the integrity of the platform.

The cookies from br888 deserve attention because many platforms use the word "cookie" as an umbrella term for extensive tracking practices. At br888, the distinction is clear: essential cookies are required for the platform to function (keeping you logged in, processing bets, keeping your live casino session active) and cannot be disabled without compromising your use of the service. Marketing cookies — used to personalize advertising outside the platform — are only enabled with explicit consent, and you can withdraw that consent at any time. This transparency around cookie use is part of br888 with its users.

Data sharing with third parties is another point worth explaining in detail. When you make a deposit via Pix, the data required to process the transaction passes through the Central Bank's system and the payment gateway that partners with br888. When you play at a live blackjack table, a session identifier and balance information are shared with the table provider. This is operationally necessary and does not constitute a "sale of data". What br888 will never do is share your name, CPF, email address, or betting history with marketing companies, data brokers, or any third party that is not operationally necessary to deliver the service. That line is clear, and we do not cross it.

Two-factor authentication (2FA) is one of the most effective tools available to protect your account on br888 — and the platform makes it available to everyone. With 2FA enabled, an attacker who obtained your password through phishing or a data breach from another platform would still need the second factor — typically a code generated on your phone — to access your account. We strongly recommend that all users enable 2FA, especially those who keep a significant balance on the platform. The setup is available in your account security settings and takes less than 2 minutes.

Finally, a note on transparency: this Privacy Policy is a living document. Brazil's data protection landscape is constantly evolving — the ANPD publishes new guidelines, case law develops, and best practices advance. The br888 is committed to updating this Policy whenever a relevant change occurs, communicating updates in advance, and keeping the current version always available on this page. If you have any questions about how your data is handled that this document does not address, please reach out via live chat or at suporte@br888.best — the privacy team is available to clarify any questions.

Your LGPD Rights at a Glance

The br888 operates in full compliance with the General Data Protection Law (LGPD – Law No. 13.709/2018). You have the right to access, correct, delete, and port your personal data at any time. To exercise these rights, send an email to suporte@br888.best with the subject "LGPD Request — [your name]". Response time: up to 15 business days.

Frequently Asked Questions about Privacy at br888

The most common questions about how we handle your personal data.

No. The br888 does not sell, rent, or trade users' personal data with third parties for any purpose. Data is shared only with the operational partners required to deliver the service — payment processors such as the systems that handle Pix and card transactions, certified game providers, and identity verification services for KYC — all bound by contracts with strict confidentiality and data protection clauses.

Send an email to suporte@br888.best with the subject line "LGPD Request — Data Deletion — [your full name]". Include the CPF and email address registered on your account. The response deadline is up to 15 business days. Please note: some data cannot be deleted immediately due to legal obligations — financial data must be retained for 5 years under anti-money laundering regulations, and access logs for 6 months under the Brazilian Internet Civil Rights Framework. Once the legal retention periods have elapsed, data is anonymized or securely deleted.

KYC (Know Your Customer) is a regulatory requirement for financial platforms — it confirms that an account belongs to the person claiming it, helps prevent fraud, and fulfills anti-money laundering compliance obligations. At br888, submitted documents are stored with encryption on secure servers, with access restricted to the compliance team. After the legal retention period (5 years after account closure), documents are securely deleted. Standard customer support agents do not have access to copies of your documents.

You can unsubscribe from marketing emails in two ways: by clicking the "unsubscribe" link in the footer of any marketing email received from br888, or by sending a request to suporte@br888.best with the subject line "Marketing Unsubscribe". Unsubscribe requests are processed within 5 business days. After unsubscribing, you will continue to receive essential operational communications related to your account (such as withdrawal confirmations and security notifications), which are not marketing messages and cannot be disabled while your account is active.

The br888 may share data with competent authorities when there is a legally grounded request — such as a court order, a request from the Public Prosecutor's Office, or a request from a Brazilian regulatory body with an appropriate legal basis. Such sharing occurs within the limits of Brazilian law and does not happen on the basis of verbal or informal requests. The platform is under no obligation to notify the user about legal requests when a confidentiality order has been imposed by the requesting authority.

After account closure, br888 retains data for the minimum period required by law: financial and KYC data for 5 years, access logs for 6 months. Marketing data and preferences are deleted immediately upon account closure. Once legal retention periods expire, all data is anonymized or securely and irreversibly deleted. To confirm the deletion of your data after the legal retention period, simply submit a request to suporte@br888.best.

Your data protected. Your account, your choice.

Play on br888 with the security of a platform in full compliance with the LGPD. Free registration, deposits via Pix, and a 100% welcome bonus up to R$ 500.00.

Português