Privacy and Data Protection

Privacy Policy of p20bet — LGPD & Your Data

P20bet handles the personal data of Brazilian players responsibly, transparently, and in full compliance with the General Data Protection Law (LGPD). Learn what we collect, how we use it, who we share it with, and how you can exercise your rights as a data subject.

Last updated: January 2026
Language: Brazilian Portuguese
Applicable in Brazil

What p20bet guarantees about your data

Six concrete commitments that guide how p20bet handles the personal information of every Brazilian player.

SSL encryption across the board

All connections to the p20bet platform are protected by SSL encryption. Your registration data, betting history, Pix transactions, and any other information are transmitted in encrypted form — never in plain text.

Full LGPD compliance

P20bet operates in compliance with the General Data Protection Law (Law No. 13,709/2018). Every instance of data processing has a defined legal basis, a specific purpose, and a documented retention period — we collect nothing beyond what is strictly necessary.

No sale of data to third parties

P20bet never sells, rents, or transfers players' personal data to third parties for commercial purposes. Any sharing of information takes place only when necessary to deliver the service or as required by law, and is always documented.

Guaranteed data subject rights

You may request access to, correction, deletion, portability, or revocation of consent for your data at any time. p20bet responds to all requests within 15 business days through the dedicated Data Protection Officer (DPO) channel.

Protection against unauthorized access

P20bet employs two-factor authentication (2FA), suspicious session monitoring, and internal access controls to ensure that only you — and authorized p20bet staff — can view your account information.

Transparency at every step

This Privacy Policy is written in plain language, free of unnecessary legal jargon. p20bet notifies players in advance whenever there are material changes to data processing, before those changes take effect.

1 Who we are and how to contact us

P20bet is the controller of personal data collected and processed through the platform available at p20bet.net. This Privacy Policy applies to all services offered by p20bet in Brazil, including sports betting on football (Brasileirão Série A, Copa do Brasil, Libertadores, and other tournaments), online casino, live casino, crash games, slots, progressive jackpots, and any other current or future services made available on the platform.

For questions, personal data requests, or to exercise any of the rights provided under the LGPD, please contact p20bet's Data Protection Officer (DPO) through the channel below:

Official privacy channel
Live chat: available 24/7 on the p20bet platform
Response time: up to 15 business days from the request

2 What data p20bet collects

P20bet collects only the data necessary to provide the services requested by the user and to comply with legal obligations. The data collected falls into the following categories:

2.1 Data Provided Directly by the User

  • Registration data: full name, CPF, date of birth, email address, mobile number, residential address, and ZIP code;
  • Identity verification data (KYC): a photo ID (national ID, driver's license, or passport), proof of address, and, when requested, proof of source of funds;
  • Payment data: Pix key registered for withdrawals (CPF, email, mobile number, or random key), partial credit/debit card details (last 4 digits and card network only — never the full number), originating bank for TED transfers;
  • Communications: messages sent to support via chat or email, including message content and contact metadata.

2.2 Automatically Collected Data

  • Browsing data: IP address, device type (mobile, tablet, desktop), operating system, browser used, pages visited, and session duration;
  • Platform usage data: betting history, games accessed, amounts wagered, withdrawals made, bonuses used, and interactions with p20bet features;
  • Cookie and similar technology data: session identifiers, interface preferences, performance cookies, and analytics — detailed in section 7 of this policy.

Sensitive data: p20bet does not collect data classified as sensitive under the LGPD — such as health data, biometrics, racial or ethnic origin, religious beliefs, or political opinions — except where strictly required by regulation and with the data subject's explicit consent.

3 How p20bet Uses Your Data

Collected data is used exclusively for the purposes described below. No data is processed for purposes unrelated to platform operation or legal compliance without the explicit consent of the data subject:

Purpose Data used Category
Account Creation & Management CPF, full name, email, date of birth Sign Up
Processing deposits and withdrawals Pix key, partial banking details, transaction history Financial
Identity verification (KYC) Photo ID, proof of address Security
Fraud & Anti-Money Laundering Prevention IP, usage patterns, transaction history Security
Experience personalization Game history, betting preferences Product
Account & Promotional Communications Email, mobile number (with opt-out option) Marketing
Compliance with regulatory obligations Full registration data, financial history Legal
Customer Support Contact history, account data Support

4 Legal basis for data processing (LGPD)

The LGPD requires that all personal data processing have a defined legal basis. p20bet bases its data processing on the following grounds set out in Articles 7 and 11 of Law No. 13,709/2018:

  • Contract performance (Art. 7, V): processing required to provide the betting and casino services contracted by the user — account creation, bet processing, deposits, and withdrawals;
  • Compliance with a legal obligation (art. 7, II): processing required by Brazilian Central Bank regulations, anti-money laundering legislation (Law No. 9,613/1998), and other applicable sector regulations;
  • Legitimate interest (art. 7, IX): processing for fraud prevention, platform security, service improvement, and personalization of the player experience, always balanced against the rights of the data subject;
  • Consent (art. 7, I): processing for sending promotional communications, use of non-essential cookies, and other purposes for which consent is requested freely, informedly, and unambiguously.

Consent withdrawal: When processing is based on consent, you may withdraw it at any time through your account dashboard or by emailing suporte@p20bet.net. Withdrawal does not affect the lawfulness of any processing carried out before the request.

5 Sharing data with third parties

P20bet does not sell or share personal data with third parties for commercial purposes. Information is only shared in the situations below, always backed by a documented legal basis:

5.1 Essential Service Partners

To operate the platform, p20bet works with specialized service providers that process data on the company's behalf, including:

  • Payment processors: Pix gateways, card processors, and partner banks for deposit and withdrawal processing (Nubank, Itaú, Bradesco, Banco do Brasil, and other national financial institutions);
  • Game providers: Pragmatic Play, PG Soft, Spribe, Microgaming, and other certified studios that require anonymous session identifiers to operate their games;
  • IT infrastructure: cloud servers and digital security services that host and protect the platform;
  • Analytics tools: performance analytics platforms that process browsing data in anonymized form to improve the user experience.

All partners are contractually required to process data solely for the purposes defined by p20bet and in compliance with the LGPD.

5.2 Public authorities and legal obligations

P20bet may share data with Brazilian public authorities — such as the Federal Revenue Service, the Financial Activities Control Council (COAF), the Ministry of Finance, and public security agencies — when required by law, court order, or sector-specific regulation governing betting and entertainment.

No international transfers without protection: When data is processed by partners outside Brazil, p20bet ensures that the destination country offers a level of protection equivalent to the LGPD, or establishes specific contractual data protection clauses, in accordance with art. 33 of Law No. 13,709/2018.

6 Data security and storage

P20bet implements technical and organizational measures to protect personal data against unauthorized access, accidental loss, destruction, or improper disclosure. Key safeguards include:

  • SSL/TLS encryption across all communications between the user and the platform;
  • Encrypted storage passwords using secure hashing (bcrypt) — p20bet never stores passwords in plain text;
  • Two-factor authentication (2FA) available to all users and mandatory for financial transactions above certain thresholds;
  • Internal access controls based on the principle of least privilege — staff only have access to the data required for their role;
  • Continuous monitoring of suspicious activity and intrusion detection systems;
  • Regular backups with encryption, stored in separate locations to ensure service continuity.

In the event of a security incident that may affect users' personal data, p20bet will notify the National Data Protection Authority (ANPD) and the affected data subjects within the timeframes required by the LGPD, providing information about the nature of the incident, the data involved, and the steps taken to mitigate its effects.

7 Cookies & Tracking Technologies

P20bet uses cookies and similar technologies to ensure the platform functions correctly, analyze service performance, and personalize the player experience. The cookies used fall into the following categories:

7.1 Essential cookies (always active)

Required for the platform's core functionality — session authentication, bet slip management, language preferences, and security. These cannot be disabled without affecting p20bet's operation.

7.2 Performance and analytics cookies

Used to understand how players interact with the platform — which pages are visited most, average session time, and exit points. Data is anonymized and cannot be used to identify individual users. These can be disabled in your account's privacy settings.

7.3 Personalization cookies

These allow p20bet to remember player preferences — such as favorite games, catalog filters, and betting settings — to deliver a more personalized experience on every visit. They can be disabled without affecting core functionality.

7.4 Cookie Management

When you first access p20bet, a cookie consent banner is displayed where you can accept, decline, or customize non-essential cookie categories. Your preferences can be changed at any time in your account settings or through our privacy channel.

Third-party cookies: Some game providers and analytics tools used by p20bet may set their own cookies. These cookies are governed by the respective providers' privacy policies and follow the guidelines contractually established by p20bet.

8 Your rights as a data subject

The LGPD grants you, as the data subject whose personal data is processed by p20bet, the following rights, which may be exercised at any time:

Access

Request a copy of all personal data that p20bet holds about you.

Correction

Request the correction of incomplete, inaccurate, or outdated information in your account.

Deletion

Request the deletion of data processed on the basis of consent, subject to applicable legal retention obligations.

Portability

Receive your data in a structured, machine-readable format for transfer to another controller.

Withdrawal of consent

Withdraw consent given for processing based on this legal basis, at any time.

Information

Find out which third parties p20bet shares your data with and the legal basis for each processing activity.

To exercise any of these rights, submit a request to suporte@p20bet.net with the subject line "LGPD — [request type]" and include the email address and CPF linked to your p20bet account. A response will be provided within 15 business days. In cases requiring additional identity verification, the deadline may be extended by a further 15 days, with prior notice to the data subject.

Filing a complaint with the ANPD: If you feel that p20bet has not adequately addressed your request or has violated the LGPD, you have the right to file a complaint with the National Data Protection Authority (ANPD), the Brazilian regulatory body responsible for enforcing the law.

9 Data retention and deletion

P20bet retains players' personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with the minimum retention periods required under Brazilian law:

  • Registration and KYC data: a minimum of 5 (five) years after account closure, as required by anti-money laundering regulations (Law No. 9,613/1998);
  • Financial transaction history: minimum of 5 (five) years for tax and regulatory purposes;
  • Betting history: up to 2 (two) years after the last bet placed on the platform, unless a longer retention period is required by law;
  • Support communications: up to 2 (two) years after account closure;
  • Cookies and browsing data: according to the timeframes defined for each cookie category, generally between 30 days and 2 years.

Once retention periods have been met, data is securely and irreversibly deleted or anonymized for use in aggregated statistical analysis, with no possibility of individual identification.

10 Minors

P20bet is a betting and casino platform intended exclusively for users aged 18 and over. The intentional collection of data from individuals under 18 is not carried out and constitutes a violation of the platform's Terms and Conditions.

If p20bet identifies that data from a user under 18 has been inadvertently collected, that information will be deleted immediately and the associated account will be closed. Parents or legal guardians who become aware that a child or teenager has created a p20bet account should contact us immediately at suporte@p20bet.net so that the appropriate measures can be taken promptly.

Minor protection: If you suspect a minor is using the p20bet platform, report it immediately via support chat or by emailing suporte@p20bet.net. p20bet takes the protection of children and teenagers in digital environments very seriously.

11 Changes to this Privacy Policy

P20bet may update this Privacy Policy periodically to reflect changes in data processing practices, new services offered, updates to Brazilian legislation, or changes in betting sector regulations.

For significant changes — particularly those that affect your rights or introduce new and meaningful ways your data may be used — p20bet will notify users at least 7 (seven) days before the changes take effect, via email and a prominent notice on the platform.

The most recent version of this Policy is always available on this page, with the last updated date shown at the top of the document. Continued use of the platform after any changes take effect constitutes acceptance of the updated terms. If you do not agree with the changes, you may close your account and request deletion of your data as described in Section 8.

12 Contact channel — Data Protection Officer (DPO)

In accordance with article 41 of the LGPD, p20bet has appointed a data protection officer (DPO) responsible for:

  • Receiving and responding to communications from data subjects regarding the processing of their personal information;
  • Receive communications from the National Data Protection Authority (ANPD);
  • Train staff and third parties on p20bet's data protection practices;
  • Carry out all other responsibilities set forth in the LGPD and related regulations.

p20bet DPO channel: To exercise your rights, report a privacy concern, or ask questions about this policy, please contact us at suporte@p20bet.net with the subject line "LGPD" or use the live chat available 24 hours a day on the platform. All requests are responded to within 15 business days, in Brazilian Portuguese.

Exercise my rights

Access, correct, or request the deletion of your personal data. We respond within 15 business days.

suporte@p20bet.net
24h live chat
Response within 15 business days
Create Account Now
Already have an account? Log In
Summary of protections
SSL encryption on all connections
LGPD Compliance (Law No. 13,709/2018)
No sale of data to third parties
2FA available for all users
Designated DPO and dedicated channel
Data subject requests answered within 15 days

Data privacy at online casinos — what every Brazilian player needs to know

When you create an account on an online betting platform and deposit via Pix, you are providing personal and financial information that must be handled with care. CPF, email, phone number, banking details, betting history — each of these says something about you, and you have the right to know exactly what happens to that information once you provide it.

P20bet operates within the Brazilian regulatory framework, which includes the General Data Protection Law — the LGPD. The law came into effect in 2020 and changed how companies across all sectors, including betting and digital entertainment, must handle personal data. Collecting information without a defined purpose, sharing data without consent, or leaving users without access to their own information is no longer acceptable. The LGPD created real rights for users and real obligations for companies — and p20bet takes that seriously.

In the specific context of Sports Betting and casino, some data is unavoidably required. To process a Pix withdrawal, p20bet needs to verify that the key belongs to the account holder's CPF — this protects the player against fraud. To meet anti-money laundering obligations, certain transactions require identity verification. These are not unnecessary formalities; they are safeguards built into a regulated financial system.

What sets a responsible platform apart from one that merely meets the minimum requirements is its approach to data that isn't mandatory. p20bet does not use betting history to build behavioral profiles sold to advertisers. It does not share contact details with business partners without consent. It does not store passwords in plain text or send emails requesting banking information — this never happens through p20bet's official channels. If anyone contacts you claiming to be from p20bet and asks for your password or full card details, treat it as a scam and report it immediately.

In practice, exercising your rights under the LGPD on p20bet is straightforward. Want to know what data the platform holds about you? Send an email with the subject line "LGPD — Access". Noticed an error in your account details? Request a correction through support or update it directly in your account dashboard. Want your data deleted after closing your account? Just ask — p20bet retains only what is legally required for regulatory purposes and securely deletes the rest.

Whether you bet on football — following Brasileirão week by week, the Copa do Brasil, or the Libertadores — or play slots and crash games in p20bet's casino, privacy also shows up in everyday details. Your betting history is visible only to you and authorized p20bet staff. No other player has access to what you bet, how much you deposit, or which games you prefer. That confidentiality is part of the experience — and part of the trust p20bet aims to build with every player.

P20bet understands that trust isn't asked for — it's built, one action at a time. This Privacy Policy is one of those actions: a document written to be read and understood, not just filed away. If you have any questions about what's here or want more information on how your data is handled, our support channel is available 24 hours a day in Brazilian Portuguese, and the response time for any privacy request is up to 15 business days.

Your data protected. Your bets, your choice.

P20bet combines fun with responsibility. Create your account in under 2 minutes, deposit via Pix from R$ 20.00, and play knowing your data is in good hands.

LGPD — protected data SSL encryption No data selling 24/7 support in Portuguese
Questions about your privacy or your data at p20bet?

Contact p20bet's data protection officer (DPO) at suporte@p20bet.net with the subject line "LGPD". We respond within 15 business days, in Brazilian Portuguese. For general inquiries, use the live chat available 24 hours a day. Also see our Terms and Conditions and the Responsible Gambling.

Português