Official Document – LGPD

100bet Privacy Policy – How Your Data Is Protected

The 100bet takes every user's privacy seriously. This document explains, clearly and directly, what data we collect, how we use it, who we share it with, and what your rights are as a data subject — all in compliance with the General Data Protection Law (LGPD – Law No. 13,709/2018).

Last updated: January 2026
Applicable in: Brazil
Your rights at a glance
Access to your personal data at any time
Correction of inaccurate or outdated data
Deletion of data when no longer necessary
Withdrawal of consent at any time
Portability of your data to another platform
Filing a complaint with the ANPD in the event of any irregularity
Data Collected

We collect only what is necessary: registration data (name, CPF, email, mobile number), payment data (to process Pix, boleto, and card payments), and platform usage data.

How We Protect Your Data

SSL encryption on all transmissions, secure storage with strict access controls, and continuous monitoring against unauthorized access.

Data Sharing

Your data is never sold. We share it only with the operational partners required to run the service (payment providers, game providers) and when required by law.

Data Retention

We retain your data for as long as your account is active and for the minimum period required by Brazilian law after closure — generally 5 years for financial data.

Cookies

We use essential cookies for platform functionality and analytical cookies to improve your experience. You can manage your preferences at any time.

DPO Contact

To exercise your rights or ask questions about privacy, contact us at contato@100bet.world. We respond within 2 business days.

01Introduction and Controller Identification

This Privacy Policy describes how 100bet ("Controller", "we", "platform"), responsible for the website 100bet.world, collects, stores, uses, and protects the personal data of users who register and use the platform's services in Brazil.

The 100bet acts as the controller of personal data collected during registration, platform use, and financial transactions carried out by users. In certain specific situations — such as payment processing via Pix and the operation of games from partner providers — 100bet may act as a joint data controller alongside third parties.

This policy was drafted in compliance with:

  • General Data Protection Law (LGPD – Law No. 13,709/2018);
  • Brazilian Internet Civil Rights Framework (Law No. 12,965/2014);
  • Consumer Protection Code (Law No. 8,078/1990);
  • Central Bank of Brazil regulations applicable to digital financial transactions.

By creating an account at 100bet, you confirm that you have read and understood this Privacy Policy. If you disagree with any part of it, please do not create an account or use the platform's services.

02What Personal Data We Collect

2.1 Data provided directly by the user

During the registration process and use of the platform, the 100bet collects the following personal data provided directly by you:

  • Identification data: full name, CPF, date of birth, nationality;
  • Contact details: email address, mobile number, full residential address with ZIP code;
  • Document data (KYC): image of national ID, driver's license, or passport (front and back), proof of address, selfie with document;
  • Financial Data: Pix key, bank details for withdrawals (bank, branch, account number), credit or debit card information (tokenized — the full card number is never stored by 100bet);
  • Account preferences: configured deposit limits, communication preferences, responsible gambling settings.

2.2 Automatically collected data

The 100bet also automatically collects technical data when you access and use the platform:

  • Device data: device type (mobile, tablet, desktop), operating system, browser version;
  • Connection data: IP address, approximate geographic location (city and state), internet service provider;
  • Usage data: pages visited, events clicked, session duration, betting and gaming history, access frequency;
  • Cookie data: as described in Section 9 of this policy.

2.3 Summary Table of Data Collected

Category Examples Required
Identification Name, CPF, date of birth Required for registration
Contact Email, phone number, address Required for registration
Documents (KYC) National ID/Driver's License, proof of address, selfie Required for withdrawals above R$ 500.00
Financial Pix key, bank details Required for transactions
Device / Connection IP, browser, OS Automatic — required for security
Platform behavior Betting history, sessions Automatic — required for the service
Analytical cookies Browsing preferences Optional — user-managed

03Purposes of Data Processing

The 100bet uses your personal data solely for the purposes listed below. No data is used for any other purpose without a new legal basis or your explicit consent:

  • Account operation: create and manage your account, authenticate your access, and ensure account security;
  • Transaction processing: process deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago, as well as process withdrawals to your registered account;
  • Compliance with legal obligations: identity verification (KYC), anti-money laundering compliance under Law No. 9,613/1998, compliance with court orders and regulatory demands;
  • Provision of betting and gaming services: record and settle sports bets, process crash game, poker, and live casino results, and make activity history available;
  • Responsible gambling: monitor usage patterns that may indicate problematic behavior and enforce the limits and restrictions set by the user themselves;
  • Service communications: send transactional notifications (deposit confirmation, bet settlement, withdrawal status) and important account updates;
  • Marketing communications: send offers, promotions, and platform updates — only with your consent, which can be withdrawn at any time;
  • Product improvement: analyze aggregated and anonymized usage data to identify platform improvements, fix bugs, and develop new features;
  • Fraud prevention: detect and prevent fraud attempts, the creation of multiple accounts, and the abuse of promotions.

04Legal Basis for Processing (LGPD)

The LGPD requires that all personal data processing have a defined legal basis. 100bet processes your data under the following legal bases, as set out in Article 7 of Law No. 13,709/2018:

  • Contract performance (Art. 7, V): the processing of registration, financial, and betting data is necessary to perform the service agreement you accept when signing up on the platform;
  • Compliance with a legal obligation (Art. 7, II): data collected for KYC, anti-money laundering purposes, and reporting to regulatory authorities is processed on the basis of applicable legal obligations in Brazil;
  • Legitimate interest (Art. 7, IX): device, connection, and platform behavior data are processed on the basis of the legitimate interest of 100bet in preventing fraud, ensuring platform security, and improving the services we offer;
  • Consent (Art. 7, I): sending marketing communications and using non-essential analytics cookies are subject to your consent, which can be withdrawn at any time without affecting your access to the services.

Where processing is based on your consent, you may withdraw it at any time without affecting the validity of any processing carried out prior to that withdrawal. Revoking consent for marketing communications does not result in account closure.

05Data Sharing with Third Parties

The 100bet does not sell, rent, or trade your personal data with third parties for marketing purposes. Data sharing occurs only in the situations below, strictly necessary for service delivery or compliance with legal obligations:

5.1 Operational partners

  • Payment providers: Pix processors, credit/debit card operators, PicPay, and Mercado Pago receive only the minimum data required to process each transaction;
  • Game providers: crash game, poker, and live casino providers receive an anonymized user identifier, with no directly identifiable personal data;
  • Identity verification services: KYC bureaus that assist with document verification during the withdrawal enablement process;
  • IT Infrastructure: cloud hosting and CDN service providers that process data solely for the platform's technical maintenance.

5.2 Authorities and legal obligations

The 100bet may disclose personal data when legally required to do so, including in response to: court orders, determinations from the Central Bank of Brazil, requests from COAF (Financial Activities Control Council), and demands from other competent regulatory authorities under Brazilian law. In all cases, we disclose only the data specifically requested.

5.3 Contractual Obligations with Third Parties

All operational partners of the 100bet that process users' personal data are contractually required to: handle data in accordance with the instructions of 100bet; maintain security measures equivalent to those adopted by the platform; not subcontract the processing without prior authorization; and delete the data upon termination of the contractual relationship.

06International Data Transfers

Some of the infrastructure and game providers that 100bet operates may process data on servers located outside Brazil. When this occurs, the 100bet ensures that transfers only occur to countries that offer an adequate level of data protection, as defined by the National Data Protection Authority (ANPD), or through the adoption of standard contractual clauses that guarantee a level of protection equivalent to that of the LGPD.

Under no circumstances is payment data — including Pix key information, bank details, or card credentials — transferred outside Brazil. All financial transaction processing takes place on infrastructure located within the country.

07Data Retention and Deletion

7.1 Retention period while the account is active

While your account at 100bet is active, we retain all data necessary to operate the service, including the complete history of bets, financial transactions, and support communications.

7.2 Retention period after account closure

After account closure — whether at the user's request, through self-exclusion, or by the platform — the 100bet retains data for the minimum period required under Brazilian law:

  • Financial and transaction data: 5 (five) years, as required by anti-money laundering legislation (Law No. 9,613/1998) and Central Bank regulations;
  • KYC data (identity): 5 (five) years after the contractual relationship ends;
  • Betting and gaming data: 5 (five) years for audit and dispute resolution purposes;
  • Communication and support data: 2 (two) years after the last interaction;
  • Marketing data (with consent): deleted immediately upon consent withdrawal or account closure, whichever comes first.

7.3 Early deletion

You may request the early deletion of data that is no longer needed to fulfill legal obligations. We will review each request individually and respond within 15 business days with a reasoned decision.

08Information Security

The 100bet implements appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or improper disclosure. The key measures in place include:

  • Encryption in transit: all communication between the user's browser or mobile device and the servers of 100bet uses TLS 1.3 with a valid SSL certificate;
  • Encryption at rest: sensitive data at rest — including KYC documents and financial data — is encrypted using AES-256 algorithms;
  • Access controls: internal access to users' personal data is restricted to staff with a demonstrated operational need, with mandatory multi-factor authentication;
  • Continuous monitoring: intrusion detection systems and anomalous activity monitoring run 24 hours a day on the platform's servers;
  • Payment tokenization: credit and debit card data is tokenized — 100bet never stores the full card number in its systems;
  • Security testing: the platform conducts periodic penetration tests carried out by external firms specializing in information security.

In the event of a security incident that puts your personal data at risk, the 100bet will notify the ANPD and affected users within the legal timeframe established by the LGPD, including details about the nature of the incident and the measures taken.

09Cookies and Tracking Technologies

9.1 What are cookies

Cookies are small text files stored on your device when you access the 100bet. They are used to keep your session active, remember your preferences, and collect analytical data that helps us improve the service.

9.2 Types of cookies used

  • Essential cookies: required for the platform's basic operation — session authentication, security, and account preferences. These cannot be disabled without affecting core service functionality;
  • Analytical cookies: collect anonymized data on how users navigate the platform — pages visited, session time, and errors encountered. They are used exclusively to improve the product and can be disabled in your account's privacy settings;
  • Preference cookies: store your language settings, notifications, and betting preferences to personalize your experience — also manageable by the user.

9.3 Cookie management

You can manage your cookie preferences at any time in your account settings, under the "Privacy" section. You may also configure your browser to block cookies, but this may affect certain platform features — including the login process and real-time odds updates.

The 100bet does not use third-party cookies to track behavior outside the platform, nor social media pixels without explicit consent.

10Minors

The platform of 100bet is strictly intended for users aged 18 and over. We do not knowingly collect personal data from minors. The registration process requires age confirmation and CPF verification — which by nature ties account ownership to an individual aged 18 or older, as registered with the Brazilian Federal Revenue Service.

If we determine that an account was created by a minor, it will be immediately closed, all balances will be refunded to the identified legal guardian, and the data will be deleted in accordance with applicable legal retention periods. If you suspect that an account has been improperly created by a minor, please contact us at contato@100bet.world.

11Your Rights as a Data Subject

The LGPD grants you, as the data subject whose personal data is processed by 100bet, the following rights, which can be exercised at any time:

  • Confirmation and access (Art. 18, I and II): confirm whether the 100bet processes your data and to access it, including a copy of the data we hold;
  • Correction (Art. 18, III): request the correction of incomplete, inaccurate, or outdated data;
  • Anonymization, blocking, or deletion (Art. 18, IV): request the anonymization, blocking, or deletion of unnecessary, excessive, or improperly processed data under the LGPD;
  • Portability (Art. 18, V): request the portability of your data to another service provider, in a structured, machine-readable format;
  • Deletion upon revocation (Art. 18, VI): request the deletion of data processed on the basis of consent, following the withdrawal of that consent;
  • Right to information about sharing (Art. 18, VII): obtain information about the public and private entities with which 100bet shared your data;
  • Information on the right to non-consent (Art. 18, VIII): be informed of the option to withhold consent and the consequences of doing so;
  • Consent withdrawal (Art. 18, IX): withdraw any consent given at any time, without affecting processing carried out prior to that withdrawal;
  • Filing a complaint with the ANPD (Art. 18, §1): file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) if you believe your rights have been violated.

To exercise any of these rights, please contact us at contato@100bet.world with the subject line "LGPD Rights – [your full name]". The 100bet will respond within 15 business days of receiving the request.

12Marketing & Communications

12.1 Service communications

The 100bet sends transactional communications that are essential to account operation — deposit confirmations, bet settlements, security alerts, and updates to the Terms and Conditions. These communications are not subject to your marketing consent and cannot be disabled while your account is active.

12.2 Marketing Communications

The sending of promotional emails, SMS offers, and push notifications about Brasileirão promotions or boosted odds requires your explicit consent. You can manage these preferences in your account settings at any time, or click "unsubscribe" in any marketing email you receive.

12.3 Offer personalization

Based on your betting history and usage preferences, 100bet may personalize the promotions shown to you within the platform — for example, displaying boosted odds for the Brasileirão if you typically bet on football, or crash game offers if you frequently play Aviator. This personalization is based on in-platform behavioral data and does not rely on any external third-party data.

13Changes to This Privacy Policy

The 100bet may update this Privacy Policy periodically to reflect changes in legislation, services offered, or privacy practices. Significant changes will be communicated by email to the address registered on your account at least 7 days in advance.

The most up-to-date version of this policy is always available on this page at 100bet.world/privacy-policy, with the date of the latest update shown in the header. We recommend checking this page periodically to stay informed about how your data is handled.

Continued use of the platform after changes to this policy take effect constitutes acceptance of the new terms. If you do not agree with the changes, you may close your account as described in the Terms and Conditions.

14Contact, Data Protection Officer (DPO) & Privacy Channel

The 100bet has appointed a Data Protection Officer (DPO) as required by the LGPD. The DPO is the point of contact for all matters related to personal data processing, the exercise of data subjects' rights, and communication with the Autoridade Nacional de Proteção de Dados (ANPD).

To contact the DPO or exercise your rights as a data subject, please use the following channels:

  • Email: contato@100bet.world — use the subject line "Privacy / LGPD";
  • Live chat: available 24/7 within the platform for registered users — request to speak with the privacy team;
  • Response time: up to 15 business days for data subject rights requests; up to 2 business days for general privacy inquiries.

If you are not satisfied with the response from 100bet to a rights request, you have the right to file a complaint directly with the National Data Protection Authority (ANPD) through the authority's official website.

Your Privacy Rights at 100bet

Concrete guarantees the LGPD provides to you as a data subject

Right of Access

You may request a copy of all personal data that the 100bet holds about you — betting history, transactions, submitted documents, and account preferences. We respond within 15 business days.

Right to Correction

Found incorrect information in your profile? You can request a correction for any inaccurate or outdated data. For KYC data that requires re-verification, the process takes up to 48 hours after the correct documentation is submitted.

Right to Deletion

After account closure, you may request the early deletion of data that is not needed to fulfill legal obligations. Financial data is retained for the minimum period required by law — generally 5 years.

Right to Data Portability

You can request the portability of your data from 100bet to another service provider in a structured, machine-readable format. This includes betting history and profile data — except data subject to confidentiality under legal requirements.

Consent Withdrawal

Any consent granted — such as receiving promotional emails or accepting analytical cookies — may be withdrawn at any time without affecting your access to the platform's essential services.

Complaint to the ANPD

If you believe your rights have not been respected by the 100bet, you may file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), the public authority responsible for enforcing the LGPD in Brazil.

How 100bet Protects Your Data in Practice

Concrete security and privacy measures implemented on the platform

SSL/TLS Encryption Across the Board

All communication between your phone or computer and the servers of the 100bet is protected by TLS 1.3 encryption. The padlock icon in your browser guarantees that no data in transit can be intercepted — including login credentials, deposits, and KYC data submitted during account verification.

Payment Tokenization

The 100bet never stores your full credit or debit card number. When you pay by card, the data is tokenized by the certified payment processor — the platform receives only a token that cannot be used outside the context you have authorized.

24/7 Anti-Fraud Monitoring

Automated systems continuously monitor for unauthorized access attempts, the creation of multiple accounts, and suspicious transaction patterns. When an alert is triggered, the security team is notified immediately and the account may be temporarily locked pending identity verification.

Internal Access with Strict Controls

Within 100bet, only staff members with a verified operational need have access to users' personal data. Access is controlled by multi-factor authentication, logged in audit trails, and reviewed on a regular basis. No staff member may access financial data without senior-level authorization.

Encrypted Storage

KYC documents, financial data, and sensitive account information are stored with AES-256 encryption at rest. Even in the extreme scenario of unauthorized physical access to servers, the data remains unreadable without the decryption key, which is managed separately.

Audited LGPD Compliance

Compliance by 100bet with the LGPD is reviewed periodically by an internal compliance team and annually by a specialized external auditor. Audit findings feed directly into the platform's continuous privacy improvement program, ensuring practices stay current as the legislation evolves.

Frequently Asked Questions about Privacy at 100bet

Common questions about how your data is handled on the platform

No. The 100bet does not sell, rent, or trade your personal data with third parties for any purpose. We share data only with operational partners strictly necessary to provide the service — such as Pix processors and game providers — and when required by law or a regulatory authority. All partners are contractually obligated to protect your data and not use it for their own purposes.

You can request deletion by sending an email to contato@100bet.world with the subject line "Data Deletion – LGPD" and your full name and CPF in the body of the message. The privacy team will respond within 15 business days, letting you know which data can be deleted immediately and which must be retained as required by law. Financial data, for example, must be kept for 5 years under Brazilian anti-money laundering legislation.

Your CPF is required to ensure account uniqueness — one account per person — and to link withdrawals exclusively to the account holder's own bank account. Identity documents (the KYC process) are required under Brazilian anti-money laundering legislation before withdrawals are released. This verification protects you against fraudulent use of your account by third parties and ensures that withdrawals always reach the correct account.

You have two options: click the "unsubscribe" link in the footer of any marketing email you receive, or go to your account settings under "Communications" and uncheck the marketing email and SMS options. The preference takes effect immediately and no further marketing emails will be sent. Essential transactional communications — such as deposit confirmations and bet settlements — will continue to be sent regardless of this preference.

Yes, for a defined period. Betting and financial transaction data is retained for 5 years after account closure, as required by Brazilian law. After that period, all data is permanently deleted. Data used for marketing and personalization is deleted immediately upon account closure. You may request confirmation of deletion after the legal retention period by emailing contato@100bet.world.

In the event of a security incident that puts your personal data at risk, the 100bet will follow the protocol established by the LGPD: notification to the National Data Protection Authority (ANPD) within the legal deadline, and direct communication to affected users by email, with details about the nature of the incident, which data was affected, and the measures taken to mitigate the damage. The platform maintains an incident response plan that is regularly updated and tested.

Questions about Privacy?
Contact the 100bet privacy team by email at contato@100bet.world with the subject line "Privacy / LGPD". We respond within 15 business days. For Terms and Conditions full platform details, visit the corresponding page.

Bet safely and with confidence at 100bet

Your privacy is taken seriously here. Create your account, deposit via Pix, and bet on the Brasileirão, CBLOL, and crash games knowing your data is protected under the LGPD and the industry's best security practices.

Responsible Gambling: Sports betting and gambling carry the risk of financial loss. Never wager more than you can afford to lose. 100bet provides self-exclusion tools and voluntary deposit limits, accessible directly from your account. Visit Responsible Gambling to learn more. 18+ only. Full terms at Terms and Conditions.

Português