Privacy Policy – 88win: Data Protection in Brazil

88win handles your personal data with full transparency and in compliance with the LGPD. Here you'll find exactly what we collect, why we collect it, and how we protect every piece of information you entrust to us.

Last updated: January 1, 2026 Brazilian Portuguese Version LGPD Compliant
LGPD
Compliance with Law No. 13,709/2018
0
Data Sold or Shared Without Consent
256-bit
SSL Encryption for Data Transmission
15 days
Response Timeframe for Data Subject Requests

How 88win Protects Your Privacy

Six concrete commitments to protecting your personal data

End-to-End Encryption

All data transmitted between your device and 88win's servers is protected by 256-bit SSL encryption — the same standard used by Brazil's largest banks, including Itaú, Bradesco, and Nubank.

Your Data Is Not Sold

88win never sells, rents, or shares your personal information with third parties for marketing or advertising purposes. Your data is used solely to operate your account and improve your experience on the platform.

You Control Your Data

As a data subject, you have the right to access, correct, export, or request the deletion of your personal information at any time — with no need to justify your request or pay any fee.

Full LGPD Compliance

88win operates in full compliance with Brazil's General Data Protection Law (Lei nº 13.709/2018). We have a dedicated data protection officer (DPO) and internally audited processes that are reviewed on a regular basis.

Data Minimization

88win collects only the data strictly necessary for each purpose. If information is not needed to operate your account or fulfill a legal obligation, it is not collected — full stop.

Notification in the Event of an Incident

If any security incident occurs that may affect your data, 88win will notify the affected users and the National Data Protection Authority (ANPD) within the legal deadlines required by the LGPD.

Recommended reading: This Privacy Policy explains how 88win handles your personal data. By using the platform, you confirm that you have read and understood this document. If you have any questions, our support team is available 24 hours a day in Portuguese.

1. Introduction and Who the Controller Is

This Privacy Policy describes how 88win ("Platform", "we", "controller") collects, uses, stores, shares, and protects the personal data of users who access or use the services available at 88win-khelo.com, including Sports Betting, Live Casino, slots, crash games, and all other associated features.

88win is the entity responsible for processing the personal data collected on this platform, acting as controller as defined by Brazil's General Data Protection Law (LGPD — Law No. 13.709/2018). The data protection officer (DPO) can be reached at the email address provided in section 14 of this policy.

Core commitment: 88win follows the privacy by design principle — meaning data protection is built into every new feature from the ground up, not added as an afterthought.

2. What Personal Data We Collect

88win collects only the data necessary to operate its services, meet legal obligations, and improve user experience. The categories of data collected are:

Registration and identity data:

  • Full name, date of birth, and CPF — required to open an account;
  • Email address and mobile phone number;
  • Full residential address including postal code (CEP);
  • Identity documents (national ID or driver's license) and proof of address — requested during the KYC verification process.

Financial and payment data:

  • Pix key linked to the account (CPF, email, phone number, or random key);
  • Bank details for TED transfers (bank, branch, account number) — where applicable;
  • Last four digits of the credit or debit card — never the full card number or CVV;
  • Deposit and withdrawal history, including amounts, dates, and payment methods used.

Platform usage data:

  • Sports betting history (events, markets, amounts, outcomes);
  • Session history for casino, slots, and crash games;
  • Game preferences, account settings, and enabled notifications;
  • Access logs including IP address, device type, operating system, and browser;
  • Approximate geolocation data (country and state) derived from IP address.

Communication data:

  • Conversation history with support via live chat, email, and WhatsApp;
  • Responses to satisfaction surveys and feedback submitted voluntarily.
What we never collect: 88win never requests or stores plain-text passwords, full credit card numbers, biometric data, or information about users' health or sexual orientation. Any communication asking for this type of data is not legitimate — please contact our support team immediately.

3. How We Use Your Personal Data

The personal data collected by 88win is used for the following purposes:

  • Account creation and management: registration, authentication, password recovery, and profile data management;
  • Service delivery: processing of Sports Betting, casino access, result calculation, and prize crediting;
  • Financial processing: deposit confirmations via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED; withdrawal processing; and receipt generation;
  • Identity verification (KYC/AML): minimum age confirmation (18 years), CPF verification, and prevention of money laundering and terrorist financing, as required by Brazilian law;
  • Customer support: support via chat, email, and WhatsApp; service history recorded for continuity of assistance;
  • Security and fraud prevention: detection of unauthorized access, identification of multiple accounts, and prevention of bonus and promotion abuse;
  • Transactional communications: emails and notifications about account activity — confirmed deposits, processed withdrawals, bet results, security alerts;
  • Marketing communications: 88win promotions, bonuses, and updates — only for users who have explicitly consented to this type of communication;
  • Platform improvement: aggregated and anonymized analysis of usage behavior to improve the experience, develop new features, and adjust service offerings;
  • Fulfillment of legal obligations: compliance with court orders, requests from regulatory authorities, and applicable tax obligations.

4. Legal Basis for Data Processing

Under the LGPD, all personal data processing must have a legal basis. The legal bases used by 88win are:

Purpose of Processing Legal Basis (LGPD)
Account registration and operation Contract performance (Art. 7, V)
Payment processing (Pix, TED, card) Contract performance (Art. 7, V)
KYC/AML Identity Verification Legal obligation (Art. 7, II)
Fraud prevention and security Legitimate interest (Art. 7, IX)
Customer support Contract performance (Art. 7, V)
Marketing communications and promotions Consent (Art. 7, I)
Platform improvement (aggregated data) Legitimate interest (Art. 7, IX)
Compliance with court orders Legal obligation (Art. 7, II)

References to articles of Law No. 13,709/2018 (LGPD).

5. Data Sharing with Third Parties

88win does not sell, rent, or trade users' personal data. Data sharing occurs only in the situations below, with partners who have entered into contractual confidentiality and security commitments:

  • Payment processors: companies responsible for processing transactions via Pix, credit and debit card, PicPay, Mercado Pago, and bank transfer receive only the data necessary to confirm and process each specific transaction;
  • Game providers: Pragmatic Play, NetEnt, Microgaming, Evolution, and other casino and slots providers receive an anonymized session identifier to enable gameplay — no personal identity data is shared with game providers;
  • Identity verification services: KYC/AML partners who carry out CPF validation and document verification receive only the data strictly necessary for the requested verification;
  • Regulatory and judicial authorities: 88win complies with legitimate requests from Brazilian regulatory authorities, the Public Prosecutor's Office, and court orders, providing only the data specifically requested in each order received;
  • IT Infrastructure: cloud hosting providers and cybersecurity services that process data on behalf of 88win under contracts ensuring LGPD compliance.
Important: All 88win partners with access to users' personal data are contractually required to handle that information with the same level of protection demanded by the LGPD, regardless of where they are located.

6. International Data Transfers

Some of 88win's technology partners and game providers may process data on servers located outside Brazil. When this occurs, 88win applies the following safeguards to ensure your data remains protected in accordance with LGPD standards:

  • Execution of standard data protection contractual clauses with all partners that receive data outside Brazil;
  • Preference for partners located in countries with data protection legislation equivalent to the LGPD or recognized as adequate by the ANPD;
  • Periodic review of data protection practices among international partners, with audit rights stipulated in contracts;
  • Transfer of only the minimum data necessary to provide the specific contracted service.

For questions about specific international transfers, please contact our data protection officer (DPO) at the address provided in Section 14.

7. How Long We Retain Your Data

88win retains personal data for as long as necessary to fulfill the purposes for which it was collected or to meet legal obligations. General retention periods are:

  • Active account data: retained for as long as the account is active and for up to 5 years after closure, as required by Brazilian anti-money laundering regulations;
  • Financial history (deposits, withdrawals, bets): 5 years from each transaction, in accordance with Brazilian tax and regulatory legislation;
  • Identity verification documents (KYC): 5 years after the last transaction or account closure, whichever is longer;
  • Access and security logs: 6 months for browsing logs; 2 years for security and incident logs;
  • Support conversations: 2 years from the last interaction, for service continuity and dispute resolution purposes;
  • Marketing consent data: retained for as long as consent is active and for 2 years after consent is withdrawn, as evidence of compliance.

Once the applicable retention period expires, data is securely and permanently deleted or anonymized so it can no longer be linked to a specific individual.

8. Personal Data Security

88win implements robust technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The key measures include:

  • Encryption in transit: all communication between your device and our servers uses TLS 1.3 protocol with 256-bit encryption;
  • Encryption at rest: sensitive data stored on our servers is encrypted using AES-256;
  • Two-factor authentication (2FA): available and recommended for all accounts — adds an extra layer of protection against unauthorized access;
  • Internal access controls: 88win employees access only the data required for their specific role, with all access to sensitive data being logged;
  • Regular security testing: security audits, penetration testing, and vulnerability assessments carried out periodically by specialized teams;
  • Incident response plan: an established protocol for detection, containment, and notification in the event of any security incident affecting personal data.
Your responsibility matters too: The security of your account also depends on keeping your login credentials confidential. Never share your password with anyone — 88win will never ask for your password via email, chat, or phone. If you suspect unauthorized access, change your password immediately and contact our support team.

9. Cookies and Tracking Technologies

88win uses cookies and similar technologies to ensure the platform runs correctly, improve user experience, and analyze service performance. The types of cookies used are:

  • Essential cookies: required for the platform's basic operation — session authentication, bet slip management, and account preferences. These cannot be disabled without affecting your experience;
  • Performance cookies: collect information about how users interact with the platform — most visited pages, session duration, errors encountered — in aggregated and anonymized form, for continuous improvement purposes;
  • Functional cookies: store user preferences such as language, preferred payment method, and odds display settings, to personalize your experience across sessions;
  • Communication cookies: used to display relevant communications about promotions and bonuses within the platform — only for users who have consented to marketing communications.

You can manage your cookie preferences in your browser settings or directly in the preferences panel of your 88win account. Disabling essential cookies may affect the functionality of certain platform features.

88win does not use third-party cookies for behavioral tracking outside the platform — we do not display third-party ads within 88win, nor do we share browsing behavior data with advertising networks.

10. Your Rights as a Data Subject

Under the LGPD, as the owner of your personal data, you have the following rights regarding how 88win processes your information. All rights can be exercised by email with the subject line "LGPD — Data Subject Request":

1

Right of Access

Request a complete copy of all personal data 88win holds about you. We respond within 15 days with a detailed report.

2

Right to Rectification

If any of your data is incorrect or out of date — name, address, contact details — you can request a correction at any time, without any bureaucracy.

3

Right to Erasure

Request the deletion of your personal data when it is no longer necessary or when processing was based on consent you have since withdrawn.

4

Right to Data Portability

Receive your data in a commonly used, structured format (CSV or JSON) for transfer to another service, where technically feasible.

5

Right to Object

Object to the processing of your data for marketing purposes or when based on legitimate interest, and 88win will review your case immediately.

6

Right to Withdraw Consent

Withdraw consent for marketing communications or any consent-based processing at any time, with immediate effect.

How to exercise your rights: Send an email to privacidade@88win-khelo.com with the subject line "LGPD — Data Subject Request", specifying the right you wish to exercise. 88win will respond within 15 calendar days. A identity confirmation document may be requested to ensure we are serving the legitimate data subject.

11. Data of Minors

88win is a platform exclusively for users aged 18 and over. We do not intentionally collect, store, or process personal data from individuals under 18 years of age.

If you are under 18, do not use 88win or provide any personal data to the platform. If we identify that an account belongs to a minor, we will immediately close the account, delete the collected data within the limits permitted by law, and notify the relevant authorities where required.

If you are the guardian of a child or teenager and suspect they have created an account on 88win, please contact our support team or DPO immediately so we can take the necessary steps as quickly as possible.

12. Marketing, Communications, and Preferences

88win may send communications about promotions, bonuses, new games, and sporting events — but only to users who have expressly consented to this type of content at registration or later through their account settings.

88win marketing communications may be sent via:

  • Email to your registered address;
  • Push notifications on the mobile app, if installed and permission has been granted;
  • SMS to the registered mobile number, when enabled by the user;
  • Messages within the platform (internal notifications in the account dashboard).

You can opt out of marketing communications at any time:

  • By clicking the "Unsubscribe" link included in all 88win marketing emails;
  • Adjusting notification preferences in your account settings;
  • Contacting support or the DPO to request removal from marketing lists.
Important: Opting out of marketing communications does not affect the delivery of essential transactional communications — such as deposit confirmations, withdrawal alerts, account security notices, and legally required messages. These will continue to be sent regardless of your marketing preferences.

13. Changes to This Privacy Policy

88win may update this Privacy Policy periodically to reflect changes in data processing practices, applicable legislation, or the services offered. Any significant change will be communicated with a minimum advance notice of 30 days before taking effect, through:

  • Email to the address registered on the account;
  • A prominent notice displayed on the platform upon login;
  • In-app notification, if the mobile app is installed.

The date of the last update to this policy is always shown at the top of the page. Continued use of 88win after the effective date of any changes constitutes acceptance of the updated version. If you do not agree with the changes, you may close your account and request data deletion as described in Section 10.

Previous versions of this policy are archived and may be requested from the DPO for reference purposes or to resolve disputes relating to past periods.

14. Contact, DPO, and Complaints

To exercise your rights as a data subject, ask questions about this policy, or report any privacy concern at 88win, please contact us at:

  • DPO Email: privacidade@88win-khelo.com — subject: "LGPD — [describe your request]";
  • General support email: suporte@88win-khelo.com;
  • Live chat: available on the platform 24 hours a day, 7 days a week;
  • WhatsApp: available to users with an active account, via the link in the support center.

88win is committed to responding to data subject requests within 15 calendar days. In more complex cases, this deadline may be extended by an additional 15 days, with prior notice and a justification provided to the requester.

If you believe your rights have not been properly addressed by 88win, you have the right to file a complaint with the National Data Protection Authority (ANPD), as set out in the LGPD.

Current version: This is the most current version of the 88win Privacy Policy, last updated on January 1, 2026. 88win encourages you to review this document periodically to stay informed about how your data is handled.

Why Data Privacy Matters on a Betting Platform

When you create an account on an online betting platform, you are sharing more than just your name and email. CPF, banking details, transaction history, gambling behavior patterns — in the wrong hands, this information can cause real harm. 88win understands this, which is exactly why data protection is not treated as a compliance checkbox to be minimally satisfied, but as a core commitment to everyone who uses the platform.

The LGPD coming into force in 2020 fundamentally reshaped the data protection landscape in Brazil. Before the law, most companies collected data with little to no transparency about how it was used. 88win was built after that turning point — which means LGPD compliance was never a last-minute fix, but a feature built into the product from day one. Every registration field, every payment partner integration, every identity verification process was designed around one question: "Do we actually need this data? If so, how do we protect it?"

Identity verification (KYC) is a process that raises questions and, at times, some resistance. It's understandable that someone would rather just deposit via Pix and bet on Flamengo without having to submit an ID photo. But this process exists for a legitimate and mandatory reason: anti-money laundering compliance. Financial platforms in Brazil — and sports betting involves real financial transactions — are legally required to verify the identity of their users. 88win keeps this process as simple and fast as possible, and all submitted documents are stored with encryption, accessed only by the compliance team, and deleted within the legally required timeframes.

One area that often causes confusion is the difference between transactional and marketing communications. Emails confirming a deposit, alerting you to a login attempt from an unrecognized device, or notifying you that a withdrawal has been processed are essential communications — you will always receive them because they are directly tied to your account's security and operation. Emails about promotions, reload bonuses, and new game launches, on the other hand, only go to users who have opted in. If your inbox is filling up with 88win emails you don't want, simply click "unsubscribe" — the process is immediate and has no effect on any account functionality.

Cookies deserve some clarity too. 88win uses cookies to keep you logged in between sessions, remember your display preferences, and understand which parts of the platform are working well and which need improvement. We do not use cookies to track your behavior outside of 88win, we do not sell browsing behavior data to ad networks, and we do not show third-party ads within the platform. What happens on 88win, stays on 88win — your platform usage data does not feed into other networks' advertising algorithms.

Exercising your data subject rights is one of the most practical aspects of this policy. Many companies make this process deliberately difficult — complex forms, long wait times, vague responses. 88win is committed to responding to any request for access, correction, deletion, or portability within 15 calendar days, by email, in a clear and complete manner. If you want to know exactly what data we hold about you, just ask — we'll send you a detailed report. If you need to correct any inaccurate information, simply let us know. If you want everything deleted after closing your account, we'll process it within the limits permitted by law.

88win also maintains a dedicated Data Protection Officer (DPO), reachable directly at privacidade@88win-khelo.com. This professional serves as the point of contact for any privacy-related matter — whether a straightforward question about how the platform handles your CPF or a formal complaint about data processing. Having an accessible DPO is a requirement under the LGPD for organizations that process data at scale, and 88win fulfills this obligation through a real, responsive channel in Brazilian Portuguese.

88win's Privacy Principles

The principles behind every decision we make about personal data processing

Data Minimization
We collect only what is strictly necessary. If a piece of data is not essential to operating the service or meeting a legal obligation, it does not enter our system.
Specific Purpose
Every piece of data we collect has a stated purpose. We never use data collected for purpose X in a different purpose Y without a new legal basis or the data subject's consent.
Active Transparency
This policy is meant to be read and understood — not just to fulfill a formality. We keep the language straightforward and update it whenever something relevant changes.
Security by Default
Encryption, access controls, and regular security audits are standard practice at 88win — not optional or premium features.
User Control
You have real control over your data — access, correction, deletion, portability, and withdrawal of consent are rights you can exercise with a guaranteed response within 15 days.
Continuous Improvement
88win's privacy practices are reviewed on a regular basis. New threats, new technologies, and new regulatory requirements are incorporated proactively.

Privacy Policy Summary

The key points of this policy in a quick-reference format

We only collect the data necessary to operate your account and comply with the law Nothing beyond CPF, contact details, KYC documents, and transaction history
Your data is never sold or shared for marketing purposes Partners receive only the minimum data necessary to provide specific services
256-bit encryption protects all data in transit and at rest The same standard used by Brazil's leading digital banks
You can access, correct, or delete your data at any time We respond to data subject requests within 15 calendar days
Marketing emails only for those who have consented — unsubscribe in one click Essential transactional communications are sent regardless of your marketing preferences
Dedicated DPO with a direct channel for privacy inquiries privacidade@88win-khelo.com — guaranteed response, no generic auto-replies
Changes communicated 30 days in advance by email and platform notice You always know what is changing before it takes effect

Privacy FAQs at 88win

Common data protection questions answered directly

Your CPF is shared only with identity verification (KYC) partners and, when required, with Brazilian regulatory or judicial authorities. These disclosures are made under contractual confidentiality obligations and limited to the minimum necessary for the specific purpose. Your Pix key (which may be your CPF) is used solely to process financial transactions on your 88win account. No marketing or advertising partner receives your CPF.

After account closure, 88win retains your data for the period required by law — generally 5 years for financial and identity data, in accordance with Brazilian anti-money laundering legislation and tax obligations. After that period, data is securely deleted or fully anonymized. During the mandatory retention period, data is not used for any purpose beyond legal compliance. To request information about the status of your data after account closure, please contact our DPO.

Your Pix key and associated banking details are stored with AES-256 encryption on our servers and accessed only by payment processing systems and, in specific cases, by the compliance team. We never store banking app passwords or bank account login credentials — only the Pix key or TED account details provided by the user for withdrawal purposes. All transmission of this data between your device and our servers is protected by 256-bit SSL encryption.

Yes, you can request the deletion of your personal data. However, it is important to understand that some data cannot be deleted immediately due to legal obligations — such as financial transaction history, which must be retained for 5 years under Brazilian law. For data that can be deleted without legal conflict (such as preferences, browsing history, and marketing data), processing is immediate. Send your request to privacidade@88win-khelo.com with the subject line "LGPD — Erasure Request" and our team will respond within 15 days detailing what has been or will be deleted and what must be retained for the legally required period.

Betting history is used for three main purposes: to operate and record bet outcomes, to detect behavioral patterns that may indicate problem gambling (as part of our responsible gambling program), and — in aggregated, anonymized form — for internal platform performance analysis. Individual betting data is never shared with third parties for advertising, list selling, or any purpose beyond those listed above. Behavioral analysis for promotion personalization within 88win itself is only carried out when the user has consented to marketing communications.

88win maintains a security incident response plan that includes: detecting and containing the incident as quickly as possible; assessing the scope and potentially affected data; notifying the National Data Protection Authority (ANPD) within 72 hours for significant incidents, as required by the LGPD; and directly notifying affected users by email with a description of what occurred, which data may have been compromised, and what protective measures were taken. 88win will also provide guidance on steps users can take to safeguard their information in the event of an incident.

Bet Safely and Privately at 88win

Your data protected, your Pix secure, your Brasileirão right at your fingertips. Join over 1 million users who already trust 88win for Sports Betting, casino, and jackpots in BRL.

LGPD Compliant Data not sold Secure Pix 24/7 Support in pt-BR
Create Account Now Already have an account – Log In For users aged 18 and over only. T&C applicable.
Questions about your personal data at 88win?

Contact our Data Protection Officer (DPO) at privacidade@88win-khelo.com with the subject line "LGPD — Data Subject Request". For all other inquiries, visit our Frequently Asked Questions page or the Terms and Conditions of the platform.

Português