Your data protected by the LGPD at 399bet. Create a free account
Privacy Policy

399bet Privacy Policy — Your Data Protected by the LGPD

399bet takes your data privacy seriously. This document explains, in plain language, what data we collect, how we use it, who we share it with, and what your rights are as a data subject under the General Data Protection Law (LGPD — Law No. 13.709/2018).

Updated in June 2026
Brazilian Portuguese
Applicable LGPD
SSL 256-bit
Last updated on June 2026. Use the index on the side to navigate between sections.
🔒 Privacy summary
Full compliance with the LGPD (Law No. 13.709/2018)
256-bit SSL encryption on all transactions
Your data is never sold to third parties
You can request access, correction, or deletion at any time
Secure storage with minimum necessary retention
Designated DPO for handling LGPD requests

How 399bet protects your privacy

From encryption to the DPO, every security layer at 399bet exists so you can play with peace of mind.

LGPD
📋
LGPD Compliance

All personal data collection and processing at 399bet strictly follows the General Data Protection Law (Law No. 13.709/2018). Each processing purpose is documented with a clear legal basis — consent, contract performance, or legitimate interest.

Encryption
🔒
256-bit SSL Across All Communications

All communication between your device and 399bet's servers is protected with SSL 256-bit encryption — the same standard used by major Brazilian banks such as Itaú, Bradesco, and Banco do Brasil. No data is transmitted in plain text.

Transparency
👁️
Zero Data Sales to Third Parties

399bet does not sell, rent, or trade your personal data with anyone. Data sharing with partners is limited to the minimum necessary for platform operations — such as Pix processors and game providers — and is always governed by contractual data protection clauses.

Your Rights
✋
Full Control Over Your Data

You may, at any time, request access to your data, correct inaccurate information, request portability, or ask for your account and associated data to be deleted. All requests are processed within 15 business days by 399bet's DPO.

Security
🛡️
Storage with Minimum Retention

399bet retains only the data required for the stated purposes and for the minimum period required by law or contractual obligations. Unnecessary data is securely disposed of with no possibility of recovery.

DPO
👤
Designated Data Protection Officer (DPO)

399bet has a designated Data Protection Officer (DPO) responsible for receiving and responding to data subject requests, guiding the internal team on LGPD compliance, and serving as the communication channel with the ANPD when required.

399bet, the operator behind the Sports Betting, online casino, poker, and e-sports platform available at 399bet-play.net, is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, and protect the personal data of registered users on 399bet, in full compliance with the General Data Protection Law (LGPD — Law No. 13.709/2018).

By creating an account on 399bet, making a deposit via Pix, bank slip, or credit card, or simply browsing the platform, you acknowledge that you have read and understood this Privacy Policy. If you have any questions, 399bet support is available 24 hours a day in Portuguese via live chat or at suporte@399bet-play.net.

1

Who We Are — Data Controller

For the purposes of the LGPD, the 399bet is the controller of the personal data collected on the platform 399bet-play.net. The controller is the entity that makes decisions about the processing of personal data — that is, what data to collect, for what purposes, and for how long to retain it.

The official contact channel for questions related to personal data and privacy is:

  • DPO Email: suporte@399bet-play.net (subject: "LGPD Request")
  • Live chat: available directly on the 399bet platform, 24 hours a day
  • Platform address: 399bet-play.net

All personal data inquiries are handled exclusively in Brazilian Portuguese by 399bet team members. The response deadline for LGPD requests is up to 15 business days from receipt.

2

Data We Collect

399bet collects only the data necessary to provide the platform's services. Data is collected in three ways: information you provide directly, data generated through your use of the platform, and data received from third-party partners.

Data you provide directly during registration and use of 399bet:

  • Full legal name as shown on an official ID (RG or CNH);
  • CPF (Cadastro de Pessoa Física) — mandatory and unique per account;
  • Date of birth;
  • Full residential address including ZIP code in Brazil;
  • Valid email address;
  • Mobile number with Brazilian area code (DDD);
  • Identity verification documents (KYC): front and back photo of your ID (RG or CNH), proof of address, selfie with document;
  • Pix key registered for withdrawals (CPF, email, mobile number, or random key).

Data automatically generated by platform usage:

  • IP address and approximate geolocation;
  • Device type and version (mobile, tablet, desktop);
  • Operating system and browser version;
  • Sports betting history, casino games, poker tables, and e-sports;
  • Complete financial transaction history (deposits and withdrawals);
  • Access logs (date, time, session duration);
  • Interactions with customer support.

Data received from partners:

  • Transaction confirmations from payment processors (Pix, card, PicPay, Mercado Pago);
  • Results from anti-fraud checks performed by specialized providers.
3

How We Use Your Data

399bet uses your personal data solely for the purposes described below. No data is used for purposes not stated in this Policy without your prior consent.

Purpose Data used
Account creation and management Full name, CPF, email, phone number, date of birth, address
Identity Verification (KYC) Identification documents, selfie, proof of address
Deposit and withdrawal processing CPF, Pix key, credit or debit card details, financial history
Fraud and money laundering prevention IP address, device info, transaction history, behavioral patterns
Customer Support Name, email, interaction history, betting history
Experience personalization Gaming history, betting preferences (e.g., Brasileirão, casino, poker)
Marketing communications Email, mobile (with prior consent only)
Legal and regulatory compliance All data required to fulfill legal obligations in Brazil

Personalization includes, for example, highlighting Brasileirão Série A odds for users who frequently bet on football, or suggesting casino games similar to the slots a user plays most. This data is never used to build discriminatory profiles or send unsolicited communications.

4

Legal Basis for Processing

As required by the LGPD, each personal data processing operation carried out by 399bet is grounded in a specific legal basis. The legal bases used are:

  • Consent (Art. 7, I of the LGPD): for marketing communications via email or mobile, and for the use of analytics and marketing cookies. Consent may be withdrawn at any time;
  • Contract performance (Art. 7, V of the LGPD): for all operations required to deliver 399bet's services — account creation, processing deposits and withdrawals via Pix, boleto, or card, customer support, and bet management;
  • Compliance with a legal obligation (Art. 7, II of the LGPD): for identity verification (KYC), anti-money laundering compliance (Law No. 9.613/1998), and financial record retention;
  • Legitimate interest (Art. 7, IX of the LGPD): for fraud prevention, platform security, duplicate account detection, and suspicious behavior analysis — always in a proportionate and necessary manner.

Where processing is based on consent, you may withdraw that consent at any time without affecting any operations carried out prior to the withdrawal. To do so, contact the 399bet DPO at suporte@399bet-play.net.

5

Data Sharing with Third Parties

399bet does not sell, rent, or trade your personal data with third parties. Sharing only occurs in the situations described below, always to the minimum extent necessary and with contractual data protection guarantees:

  • Payment processors: to process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago. These partners receive only the data strictly necessary to complete the transaction;
  • Casino game providers: such as Pragmatic Play, PG Soft, Evolution Gaming, and others, which receive an anonymous session identifier to operate the games — with no access to your name, CPF, or full financial details;
  • Identity verification (KYC) providers: for document validation during the account verification process, especially prior to higher-value withdrawals;
  • Security and anti-fraud providers: that analyze access patterns, transactions, and behavior to protect the platform and its users against fraud and money laundering;
  • Regulatory and judicial authorities: when required by law, court order, or request from a competent Brazilian authority (Receita Federal, COAF, Ministry of Finance).

All 399bet partners with access to personal data are contractually required to handle that data in accordance with the LGPD and at a security level equivalent to or higher than that of 399bet.

6

International Data Transfers

Some of 399bet's technology and game providers operate infrastructure outside Brazil. When this is the case, personal data is transferred internationally only to countries that offer an adequate level of data protection, or through standard contractual clauses approved by the Autoridade Nacional de Proteção de Dados (ANPD).

399bet ensures that any international data transfer complies with the following requirements:

  • The destination country has data protection legislation equivalent to the LGPD or has been recognized as adequate by the ANPD;
  • Contracts with specific data protection clauses are in place with all international partners;
  • The data transferred is limited to the minimum necessary for the specific purpose;
  • International partners are subject to the same security and confidentiality obligations required of domestic partners.

You can request information about international data transfers involving your personal data by contacting 399bet's DPO at suporte@399bet-play.net.

7

Data Retention and Deletion

399bet retains your personal data only for as long as strictly necessary to fulfill the purposes for which it was collected or to comply with applicable legal obligations. The standard retention periods are:

  • Registration and identification data: for as long as the account is active and for up to 5 years after account closure, for legal compliance and dispute resolution purposes;
  • Financial transaction history: 5 years from the date of each transaction, as required by COAF (Financial Activities Control Council) and the Receita Federal do Brasil;
  • KYC verification documents: for the duration of the account plus 5 years, in accordance with anti-money laundering legislation (Law No. 9.613/1998);
  • Access logs and technical data: 12 months from registration, in accordance with the Brazilian Internet Civil Framework (Law No. 12,965/2014);
  • Betting history: for the duration of the account and 2 years after closure;
  • Customer support data: 2 years from the date each support ticket is closed.

Once retention periods expire, data is securely and irreversibly deleted from 399bet's systems. If you request early deletion of your data, 399bet will assess whether any legal obligations prevent immediate deletion and will inform you of the applicable timeline and scope.

8

Data Security

399bet implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or accidental or unlawful destruction. The security measures in place include:

  • 256-bit SSL/TLS encryption: all communication between your device (phone, tablet, or computer) and 399bet's servers is encrypted in transit;
  • Encryption at rest: sensitive data stored in 399bet's databases is encrypted with AES-256;
  • Two-factor authentication (2FA): available to all 399bet users as an additional layer of account protection;
  • Role-based access control: 399bet employees only have access to the data required for their specific roles — following the principle of least privilege;
  • Continuous monitoring: intrusion and anomaly detection systems monitor the infrastructure 24 hours a day;
  • Periodic penetration testing: security assessments conducted by independent specialists to identify and remediate vulnerabilities;
  • Incident response plan: in the event of a data breach, 399bet will notify affected users and the ANPD within the deadlines established by the LGPD.

No security system is 100% foolproof. We strongly recommend using a strong, unique password for your 399bet account, enabling 2FA, and never sharing your login credentials with anyone.

9

Cookies and Tracking Technologies

399bet uses cookies and similar technologies to ensure the platform functions correctly, enhance the user experience, and analyze service performance. The types of cookies used are listed below:

You can manage your cookie preferences directly in your 399bet account settings or through your browser settings. Declining non-essential cookies will not prevent you from using the platform, but may limit some personalization features.

10

Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the data subject whose personal data is processed by 399bet, a comprehensive set of rights that can be exercised at any time. See each right and how to exercise it below:

Right of Access

Request a copy of all personal data 399bet holds about you, including the purpose of processing, the partners it was shared with, and how long it will be retained.

Right to Rectification

Request the correction of incomplete, inaccurate, or outdated data. You can also update your name, address, and email directly in your 399bet account settings.

Right to Erasure

Request the deletion of your personal data processed on the basis of consent. Data retained due to a legal obligation cannot be deleted before the legal deadline, but 399bet will explain the reason.

Right to Data Portability

Request your data in a structured, machine-readable format (JSON or CSV) for transfer to another controller. 399bet will process portability requests within up to 15 business days.

Right to Object

Object to data processing carried out on the basis of legitimate interest when there are valid grounds to do so. 399bet will assess the request and, if warranted, cease the contested processing.

Right to Withdraw Consent

Withdraw previously given consents — such as for marketing communications — without affecting the lawfulness of any processing carried out before the withdrawal.

To exercise any of the rights above, send an email to suporte@399bet-play.net with the subject "LGPD Request" and specify which right you wish to exercise. 399bet will verify your identity before processing any request, to ensure that data is released only to the account holder. The response deadline is up to 15 business days.

If you believe that 399bet has not adequately responded to your request, you have the right to file a complaint with the National Data Protection Authority (ANPD), pursuant to Art. 18, § 1 of the LGPD.

11

Minors

The 399bet platform is intended exclusively for users aged 18 and over. 399bet does not knowingly collect personal data from minors and does not permit minors to create accounts, make deposits, or participate in any form of gaming available on the platform.

If you have reason to believe that a minor has created an account on 399bet or has provided personal data to the platform, please contact support immediately at suporte@399bet-play.net. 399bet will take the necessary steps to close the account and delete the minor's data as soon as the situation is confirmed.

Age verification is mandatory for all 399bet users. Using third-party data to circumvent age verification is prohibited and may result in immediate account closure and notification to the relevant authorities.

12

Changes to this Privacy Policy

399bet may update this Privacy Policy periodically to reflect changes in legislation (such as updates to the LGPD or ANPD regulations), in data processing practices, or in the services offered by the platform.

Material changes — such as updates to processing purposes, new partners gaining access to data, or modifications to user rights — will be communicated at least 7 days in advance via your registered email or through a prominent notification on the 399bet platform.

The current version of this Policy is always available at 399bet-play.net/privacy-policy, with the date of the latest update clearly indicated at the top of the page. Continued use of 399bet after the effective date of any changes constitutes acceptance of the updated Policy.

Current version: June 2026 · Next scheduled review: December 2026.

13

Contact & Data Protection Officer (DPO)

399bet has appointed a Data Protection Officer (DPO), as required by Art. 41 of the LGPD, to handle communications from data subjects and the ANPD, provide clarifications, and ensure that data processing practices comply with applicable law.

To contact 399bet's DPO or exercise any right provided under this Policy:

  • Email: suporte@399bet-play.net — use the subject line "LGPD Request" for priority handling;
  • Live chat: available on the 399bet platform, 24 hours a day, 7 days a week, including national holidays;
  • Response time: up to 15 business days for LGPD requests; up to 24 hours for general support inquiries.

All communications are answered in Brazilian Portuguese by members of the 399bet team. For complaints not resolved by 399bet's DPO, you may contact the National Data Protection Authority (ANPD) at gov.br/anpd.

Other important 399bet policies

Explore the supplementary documents that govern the use of the platform.

Frequently Asked Questions — Privacy

The most common questions about how 399bet handles your personal data.

No. 399bet does not sell, rent, or trade users' personal data with any company or third party. Data sharing only occurs in the situations described in the Privacy Policy — such as with Pix processors to facilitate withdrawals, casino game providers like Pragmatic Play and Evolution Gaming to run games, and identity verification (KYC) providers. In all these cases, sharing is limited to the minimum necessary and is governed by contracts with strict data protection clauses, in compliance with the LGPD.

To request the deletion of your personal data, send an email to suporte@399bet-play.net with the subject line "LGPD Request — Data Erasure". 399bet will verify your identity before processing the request. Data processed on the basis of consent may be deleted immediately after verification. Data retained due to a legal obligation — such as financial transaction history (Law No. 9,613/1998) and access logs (Marco Civil da Internet) — cannot be deleted before the applicable legal retention periods; however, 399bet will inform you exactly which data will be retained, on what legal basis, and for how long. The response deadline is up to 15 business days.

The Pix key registered to your 399bet account is stored in encrypted form to streamline future withdrawals — you can remove or update it at any time in your account settings. Full credit or debit card details are never stored directly by 399bet. Card processing is handled by PCI-DSS certified processors that tokenize your card data — meaning your real details are replaced by a token that has no value outside the specific payment context. This means neither 399bet nor any potential attacker would have access to your full card numbers.

After voluntary account closure, 399bet retains only the data required by legal obligations — primarily financial transaction history (for up to 5 years, as required by COAF and the Federal Revenue Service) and access logs (for 12 months, per the Brazilian Internet Civil Framework). Data not needed to fulfill legal obligations is securely deleted within 90 days of account closure. You will receive an email confirmation detailing which data is retained, under which legal basis, and for how long. If you wish to request full erasure — including legally retained data once the applicable period expires — simply notify 399bet's DPO.

In the event of a security incident resulting in unauthorized access to personal data — what the LGPD refers to as a data breach — 399bet will take the following steps: first, immediate containment of the incident and impact assessment; second, notification to the National Data Protection Authority (ANPD) within the timeframe established by the LGPD (as soon as reasonably possible); third, email notification to all data subjects whose data was affected, with a clear description of what happened, which data was compromised, the measures taken by 399bet, and what you can do to protect yourself. 399bet maintains a documented incident response plan that is periodically tested by its security team.

Your Data, Your Privacy, Our Responsibility

399bet processes your personal and financial data in full compliance with the LGPD (Law No. 13,709/2018). 256-bit SSL encryption, zero data sales, a designated DPO, and data subject rights you can exercise at any time. Play with the confidence of knowing your data is in good hands.

Privacy guaranteed, fun guaranteed at 399bet

Now that you know how 399bet protects your data, take the next step. Free registration in under 2 minutes, a welcome bonus on your first deposit, and Pix payouts in up to 30 seconds. Football, casino, poker, e-sports — all with security and transparency.

Available to users aged 18 and over. Please gamble responsibly. Amounts in R$.

Português