Br3333 Privacy Policy – LGPD Data Protection

Br3333 takes the protection of your personal data seriously. This document clearly and directly explains what information we collect, how we use it, who we may share it with, and what your rights are as a data subject under Brazil's General Data Protection Law (LGPD — Law No. 13.709/2018).

Last updated: January 2026  ·  Brazilian Portuguese Version

LGPD Compliance

All data collection, storage, and processing at br3333 strictly complies with the General Data Protection Law (Lei nº 13.709/2018), Brazil's primary privacy legislation.

256-bit SSL Encryption

All data transmitted between your device and br3333's servers is secured with 256-bit SSL encryption — the same standard used by Brazilian banks and financial institutions.

Your Guaranteed Rights

You can access, correct, port, or request the deletion of your personal data at any time. br3333 guarantees the exercise of all rights set out in Articles 17 to 22 of the LGPD.

No Data Selling

Br3333 does not sell, rent, or transfer personal data to third parties for commercial purposes. Data is only shared when strictly necessary to deliver the services you have contracted.

This Privacy Policy is part of the agreement between you and br3333, together with the Terms and Conditions and the Responsible Gambling guidelines. By creating an account or using any service on the platform, you confirm that you have read and understood how your data is handled as described here.

1. Introduction

Br3333 is a Sports Betting and online casino entertainment platform serving the Brazilian market. To deliver our services with quality, security, and in compliance with applicable regulations, we need to collect and process certain personal information from our users.

This Privacy Policy transparently and clearly describes:

  • What personal data we collect and when;
  • The purposes and legal bases for processing that information;
  • Who we may share your data with and why;
  • How long we retain your data;
  • The security measures we have in place to protect your data;
  • How you can exercise your rights as a data subject.

This policy applies to all users, registered or not, who access br3333 through a browser on any device — including mobile, tablet, or desktop. If you have questions about any part of this document, please contact our support team before continuing to use the platform.

Legal basis: Data processing by br3333 is grounded in the legal bases set out in Articles 7 and 11 of the LGPD, including contract performance, compliance with a legal obligation, legitimate interest, and, where applicable, the data subject's consent.


2. Data Controller

The controller responsible for processing personal data collected by the br3333 platform is the legal entity that maintains the br3333.best website. To exercise any right set out in this policy, or for any privacy-related inquiries, please use the contact channels listed in section 14 of this document.

Br3333 maintains a Data Protection Officer (DPO) responsible for overseeing LGPD compliance and handling data subject requests. The DPO can be reached by email at privacidade@br3333.best.

Data Protection Officer (DPO): br3333's DPO is the point of contact for all LGPD-related requests, including access, correction, portability, and data deletion. Requests are responded to within 15 business days as required by law.


3. Data We Collect

Br3333 collects personal data in the following situations and categories:

3.1 Data provided directly by you

  • Full name, CPF, and date of birth (required at registration);
  • Email address and mobile number;
  • Full residential address including zip code;
  • Government-issued ID (RG or CNH) for KYC verification;
  • Proof of address for address verification;
  • Bank details and Pix key for withdrawal processing;
  • Credit or debit card information (tokenized — we never store your full card number).

3.2 Data collected automatically during use

  • IP address and approximate location information;
  • Device type, operating system, and browser;
  • Betting history, deposits, and withdrawals made on the platform;
  • Pages visited, session duration, and interactions with the interface;
  • Device identifiers and session cookies;
  • Access logs with date, time, and actions performed.

3.3 Data received from third parties

  • Identity confirmation from credit bureaus and KYC verification services;
  • Transaction confirmations from payment processors (Pix via Banco Central, PicPay, Mercado Pago);
  • Information from politically exposed persons (PEP) lists and national sanctions databases.

Br3333 never stores full credit or debit card numbers. Card payment data is processed directly by our PCI-DSS certified payment gateway, and we receive only a secure token to identify the transaction. This ensures that, even in the event of a security incident, your card details are never exposed.


4. How We Use Your Data

The data collected by br3333 is used for the following specific purposes:

Purpose Data Used Legal Basis (LGPD)
Account creation and management Full name, CPF, email, mobile number, date of birth Contract performance (Art. 7, V)
Identity verification (KYC) ID documents, CPF, photo, proof of address Legal obligation (Art. 7, II)
Processing Deposits and Withdrawals CPF, Pix key, banking details Contract performance (Art. 7, V)
Fraud Prevention and Money Laundering IP address, transaction history, device Legal obligation (Art. 7, II)
Customer support Email, betting history, account data Contract performance (Art. 7, V)
Sending promotions and communications Email, mobile number (with opt-in) Consent (Art. 7º, I)
Platform improvement and usage analytics Logs, cookies, browsing behavior Legitimate interest (Art. 7º, IX)
Responsible gambling and addiction prevention Betting history, frequency, amounts Legal obligation + legitimate interest

Br3333 does not use your data for purposes beyond those listed above without prior notice and, where required, without obtaining fresh consent. If a new processing purpose is introduced in the future, this policy will be updated and users will be notified as described in section 13.


5. Legal Bases for Processing

All data processing carried out by br3333 is grounded in at least one of the legal bases set out in Article 7 of the LGPD. The bases we rely on are:

  • Contract performance (Art. 7, V): when processing is necessary to fulfill the contract entered into with you upon account creation — such as processing deposits, recording bets, and completing withdrawals;
  • Legal or regulatory obligation (Art. 7, II): when we are legally required to collect and process certain data — such as identity verification under anti-money laundering regulations and record retention under legal obligations;
  • Legitimate interest (Art. 7, IX): for purposes such as fraud prevention, service improvement, and platform security, provided these interests do not override your fundamental rights;
  • Consent (Art. 7, I): for receiving marketing communications by email or mobile — you may withdraw this consent at any time without affecting any other services.

How to withdraw consent: To unsubscribe from br3333 marketing communications, go to your account settings under "Communication Preferences" and uncheck the relevant options, or click the unsubscribe link in any email you receive. The opt-out is processed within 48 hours.


6. Data Sharing

Br3333 does not sell or transfer your personal data to third parties for commercial purposes. Sharing only occurs in the situations described below, always limited to the minimum data necessary for the specific purpose:

  • Payment processors: Pix (Banco Central do Brasil), PicPay, Mercado Pago, and credit card gateways receive the transaction data required to process deposits and withdrawals. All operate under data processing agreements aligned with the LGPD;
  • Identity verification providers (KYC): specialized partners who receive documents for identity validation and screening against sanctions lists and PEP registries. Data is used exclusively for this purpose;
  • Game providers: providers such as Evolution Gaming, Pragmatic Play, and NetEnt receive an anonymized user identifier for game session logging. They do not receive your full name, CPF, or banking details;
  • IT Infrastructure: cloud computing providers and security services that host the br3333 platform, always under contracts that guarantee data confidentiality and security;
  • Competent authorities: when required by law, court order, or determination of a Brazilian regulatory authority — such as the Banco Central, the Receita Federal, or COAF (Conselho de Controle de Atividades Financeiras).

Any vendor with access to br3333 users' personal data is contractually required to treat that information confidentially, use it solely for the agreed purpose, and implement security measures consistent with LGPD requirements.


7. Cookies and Tracking Technologies

Br3333 uses cookies and similar technologies to enhance your experience on the platform, secure your sessions, and analyze browsing patterns. The types of cookies we use are:

  • Essential cookies: required for the platform's core functionality, such as keeping your session active during use, remembering language preferences, and ensuring login security. They cannot be disabled without affecting how the platform works;
  • Performance cookies: collect information about how you navigate the br3333 platform — most visited pages, load times, errors encountered — to help us continuously improve the experience;
  • Functional cookies: store your preferences — such as recent game history and betting settings — to personalize your experience on future visits;
  • Analytics cookies: used with traffic analytics tools to understand aggregate usage patterns. Data is anonymized before analysis.

You can manage your cookie preferences via the banner shown on your first visit to the platform, or through your browser settings. Disabling essential cookies may prevent login and betting features from working correctly on the br3333 platform.

On mobile devices, br3333 may also collect your advertising identifier (IDFA on iOS or GAID on Android) when available and with your permission, in order to accurately attribute marketing campaigns and avoid repetitive ad delivery. You can reset or disable this identifier in your device's privacy settings.


8. Data Retention

Br3333 retains personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with the record-keeping obligations set out under Brazilian law:

  • Registration and account data: retained for the full duration of the account and for up to 5 years after closure, in accordance with compliance and fraud prevention requirements;
  • Financial records (deposits, withdrawals, bets): retained for up to 10 years to meet tax and regulatory obligations, including COAF rules on anti-money laundering;
  • KYC verification documents: retained for the minimum period required by applicable regulations, generally 5 years after the last use of the service;
  • Access and security logs: retained for up to 6 months for incident investigation purposes, in accordance with the Brazilian Internet Civil Framework (Lei nº 12.965/2014);
  • Marketing data (with consent): retained until consent is withdrawn or for up to 2 years of inactivity, whichever comes first.

After the applicable retention period, data is securely deleted or anonymized so that the data subject can no longer be identified. Secure deletion includes removing data from all backup systems within the normal backup update cycle.


9. Data Security

Br3333 applies technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or improper destruction. The key measures in place include:

  • Encryption in transit: all communications between your device and our servers use TLS 1.3 protocol with a 256-bit SSL certificate;
  • Encryption at rest: sensitive data such as CPF, ID documents, and banking details are stored with AES-256 encryption at rest;
  • Two-factor authentication (2FA): available and recommended for all br3333 accounts, adding an extra layer of security beyond your password;
  • Internal access controls: br3333 employees only have access to the data required for their specific roles, with full audit logs of all access activity;
  • Continuous monitoring: intrusion detection and anomaly monitoring systems operate 24/7 to identify suspicious activity and respond quickly to potential incidents;
  • Regular penetration testing: the platform is periodically subjected to security testing conducted by independent specialized firms.

In the event of a security incident that may compromise personal data, br3333 will follow the procedures set out in Articles 48 and 49 of the LGPD, notifying the Autoridade Nacional de Proteção de Dados (ANPD) and affected users within the legally required timeframes.

What to do if you suspect unauthorized access: If you notice any unusual activity on your br3333 account — such as bets you didn't place, unrecognized withdrawal attempts, or unexpected password changes — contact us immediately via live chat, available 24h. We will preventively lock your account while we investigate.


10. Your Rights as a Data Subject (LGPD)

The LGPD grants you, as a personal data subject, a set of rights that br3333 is committed to respecting and facilitating. You may exercise any of these rights by contacting us at privacidade@br3333.best or via live chat:

Access (Art. 18, I and II)

Confirm whether we process your data and receive a complete copy of all personal information br3333 holds about you, presented in a clear and organized format.

Correction (Art. 18, III)

Request the correction of incomplete, inaccurate, or outdated data — such as your address, email, or phone number. Many corrections can be made directly in your account settings.

Deletion (Art. 18, IV and VI)

Request the deletion of data that is unnecessary, excessive, or processed without a proper legal basis. Some data must be retained by legal obligation even after a deletion request is submitted.

Portability (Art. 18, V)

Receive your data in a structured, interoperable format for transfer to another data controller, where technically feasible and provided for under applicable regulations.

Withdrawal of Consent (Art. 18, IX)

Withdraw consent given for processing activities based on this legal ground — such as email marketing — at any time, without affecting any other contracted services.

Sharing Information (Art. 18, VII)

Find out which public and private entities br3333 has shared or may share your data with, and for what specific purpose.

Rights requests are responded to within 15 business days. In cases requiring more detailed review, we may extend this period to 30 days, with prior notice to the requester. The process is free of charge and may not result in any disadvantage to you as a platform user.


11. Protection of Minors

Br3333 is a platform intended exclusively for users aged 18 and over. We do not knowingly collect personal data from minors. The registration process requires a valid CPF, which is verified with the Receita Federal to confirm the account holder's age.

If we become aware that data from a person under 18 has been inadvertently collected, we will take the following steps immediately:

  • Closure of the associated account;
  • Deletion of all the minor's personal data from our systems;
  • Refund of any deposits made to the original payment method;
  • Notification to the relevant authorities, where required.

If you suspect that a child or teenager has created an account on br3333, please contact us immediately at privacidade@br3333.best with any details that may help identify the account.


12. International Data Transfers

Some of our infrastructure partners and game providers operate servers outside Brazil. When this occurs, br3333 ensures that international data transfers comply with Articles 33 to 36 of the LGPD, adopting at least one of the safeguards below:

  • Transfer to countries with an adequate level of data protection recognized by the ANPD;
  • Standard contractual clauses requiring the recipient to implement safeguards equivalent to those mandated by the LGPD;
  • Internationally recognized certifications, such as ISO/IEC 27001 and SOC 2 Type II;
  • Specific consent from the data subject, where none of the safeguards above apply.

The main international vendors that may receive br3333 user data — always in anonymized or pseudonymized form wherever possible — include cloud infrastructure providers and certified game suppliers such as Evolution Gaming, Pragmatic Play, and NetEnt, all holding internationally recognized security certifications.


13. Updates to This Policy

Br3333 may update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legislation, or the services we offer. All updates will be communicated in the following ways:

  • Significant changes: email notification to all users with an active account, at least 7 days before changes take effect;
  • Minor or language updates: a highlighted notice on the br3333 platform with the update date shown at the top of this page;
  • Legally required changes: may take effect immediately, with simultaneous notice to users.

The version date of this policy is always shown at the top of this document. Continued use of the br3333 platform after any changes are communicated constitutes acceptance of the updated version. If you do not agree with the changes, you may request account closure before they take effect.


14. Contact & Data Protection Officer (DPO)

To exercise any right under this Privacy Policy, get answers about how your data is handled, or submit a complaint, reach out to br3333 through the channels below:

  • DPO Email: privacidade@br3333.best — for LGPD rights requests (access, correction, deletion, portability);
  • General support email: suporte@br3333.best — for general questions about the platform;
  • Live chat: available 24 hours a day, 7 days a week, within the br3333 platform;
  • Frequently asked questions: visit our FAQ page for quick responses on privacy and data security.

If you believe that br3333's handling of your data violates the LGPD or your rights as a data subject, you may file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD) through its official website. br3333 cooperates fully with all ANPD investigations.

Br3333 handles privacy requests exclusively in Brazilian Portuguese. Requests received in other languages will be addressed after translation, which may extend the response time. To ensure your request is handled within the legally required timeframes, please always contact our DPO in Portuguese.

Current version of this Privacy Policy

This document was last updated in January 2026 and supersedes all previous versions of the br3333 Privacy Policy. For questions about previous versions or specific changes, please contact our DPO at privacidade@br3333.best.

How br3333 Protects Your Data in Practice

Concrete measures that make a real difference for Brazilian players

Pix with Verified CPF

All Pix deposits and withdrawals on br3333 are processed with automatic CPF verification of the account holder. This prevents third parties from accessing your financial account and protects you against identity fraud.

Two-Factor Authentication

Enable 2FA on your br3333 account to add an extra layer of security beyond your password. Each time you log in, a code is sent to your registered mobile number — without it, no one can access your account.

Anonymized Game Data

Br3333's game providers receive only an anonymous session identifier — never your full name, CPF, or banking details. Your real profile stays protected within br3333's internal systems.

Active LGPD Compliance

Br3333 maintains an internal LGPD compliance program that includes periodic process reviews, staff training, and regular audits. Compliance is not a one-time effort — we continuously revisit our practices.

Response Within 15 Business Days

Br3333 responds to all LGPD rights requests within 15 business days — in line with the legal deadline. Requests to access, correct, or delete data are handled as a priority by our privacy team.

Secure Data Deletion

When your data reaches its retention limit or you request deletion, br3333 securely removes it from all active and backup systems, following best practices for the disposal of sensitive data.

Br3333 – A Secure Platform for Brazilian Players

Certifications and practices that keep your data protected

Licensed
256-bit SSL
LGPD Compliant
Active DPO
Secure Pix
Verified KYC

Privacy and Responsible Gambling at br3333

Your gameplay data also helps protect your well-being

Pattern Analysis

Br3333 uses your anonymized betting history to identify patterns that may indicate at-risk behavior. When such patterns are detected, the user receives proactive alerts and access to self-control tools.

Visible Limits

Your configured deposit and betting limits are always visible in your account. Progress against those limits updates in real time — no surprises at the end of the month.

Immediate Self-Exclusion

When you request self-exclusion, br3333 immediately blocks access to your account and removes your data from all marketing lists. No promotional communications will be sent during the exclusion period.

Need Support?

Call 188 (CVV, free and available 24h) or visit the Responsible Gambling page from br3333 for self-exclusion tools and specialist support.

Play at br3333 with peace of mind and confidence

Your data is protected by the LGPD and our security systems. Create your account now, deposit via Pix, and enjoy Sports Betting and Live Casino with complete transparency.

+18 · Play responsibly · Your data protected by the LGPD · br3333

Português