28bet takes your data privacy seriously. This policy clearly explains what we collect, why we collect it, how we protect it, and what your rights are as a data subject — all in compliance with the General Data Protection Law (LGPD).
+18 · Gamble responsibly · Minimum deposit R$ 20.00
Six pillars that ensure the security and privacy of your information
All data transmitted between your device and 28bet's servers is protected with 256-bit SSL encryption — the same standard used by Brazil's largest banks, including Itaú, Bradesco, and Nubank.
28bet operates in full compliance with the General Data Protection Law (Law No. 13.709/2018). All data collection, storage, and processing practices have been designed to uphold the rights of Brazilian data subjects.
28bet never sells, rents, or trades your personal data with third parties for advertising or any other commercial purpose. Your data is yours — full stop.
You can access, correct, export, or request the deletion of your personal data at any time. 28bet responds to data subject requests within up to 15 business days, as required by the LGPD.
Data is stored on servers with strict physical and logical access controls. Only employees with an operational need have access to user information, and that access is monitored.
28bet has a Data Protection Officer (DPO) responsible for overseeing all privacy practices and responding to inquiries about the processing of your personal data.
The LGPD guarantees these rights to every Brazilian user of 28bet
Request a copy of all personal data that 28bet holds about you, including the categories of data processed and with whom it has been shared.
Request the correction of incomplete, inaccurate, or outdated data. You can also update most of your information directly in your account dashboard.
Request the deletion of your personal data processed on the basis of consent. Data retained due to a legal obligation (such as financial records required by the Central Bank) cannot be deleted.
Request your data in a structured, commonly used format to transfer to another service provider, in accordance with ANPD regulations.
Object to the processing of your data in certain situations, particularly when processing is based on legitimate interest and you believe your fundamental rights take precedence.
Request the temporary suspension of processing of data that is unnecessary, excessive, or handled in violation of the LGPD while a correction or deletion request is under review.
Be informed about which public and private entities 28bet has shared your data with, and for what purposes that sharing took place.
Withdraw consent for data processing at any time when processing is based on your consent — without affecting the lawfulness of any processing carried out prior to withdrawal.
The 28bet (operating in 28bet.express) is the controller responsible for processing personal data collected through its sports betting and online casino platform. As the data controller, the 28bet defines the purposes and means by which user data is processed, in accordance with the General Data Protection Law — LGPD (Law No. 13.709/2018).
The 28bet operates exclusively in the Brazilian market and its services are intended for users residing in Brazil. All data collection and processing described in this policy relates to the relationship between the 28bet and registered users or site visitors.
To exercise any rights regarding your data or to clarify questions about this policy, please contact us at privacidade@28bet.express or via live support available 24 hours a day on the platform.
The 28bet collects only the data strictly necessary to operate its services securely and in compliance with the law. The categories of data collected are:
| Category | Data collected | When |
|---|---|---|
| Identification | Full name, CPF, date of birth, address, government-issued ID (RG/CNH/passport) | Registration and identity verification |
| Contact | Email address, mobile number | Registration |
| Financial | Pix key, bank details for TED, deposit and withdrawal history | Financial transactions |
| Platform activity | Betting history, games accessed, bonuses used, gaming sessions | Platform use |
| Technical | IP address, device type and operating system, browser, session cookies | Website and app access |
| Communication | Customer support interaction history, emails, and chats | User support |
The 28bet does not collect sensitive data such as racial or ethnic origin, religious belief, political opinion, health or sexual life, except when required by law for responsible gambling purposes.
The 28bet processes personal data based on the following legal grounds established by the LGPD:
The 28bet does not process your data for any purpose beyond those listed in this policy. If new purposes are identified, you will be notified in advance and may exercise your rights.
The data collected by the 28bet are used exclusively for the following purposes:
The 28bet does not sell, rent, or trade users' personal data. Data sharing occurs only in the strictly necessary situations listed below, and always with contractual guarantees that partners will handle the data with the same level of protection required by the LGPD:
Any sharing not listed above only occurs with your prior explicit consent. The 28bet maintains a record of all data sharing carried out, available for review upon request.
The 28bet uses cookies and similar technologies to ensure the platform functions correctly, enhance the user experience, and — with your consent — personalize content and analyze browsing behavior.
The types of cookies used are:
You can manage or disable cookies in your browser settings. Disabling essential cookies may prevent access to certain features of the 28bet.
The 28bet adopts appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. Key measures in place include:
In the event of a security incident that could pose a significant risk to data subjects, the 28bet will notify the Autoridade Nacional de Proteção de Dados (ANPD) and affected users within the timeframe established by the LGPD.
The 28bet retains personal data for as long as necessary to fulfill the purposes for which it was collected, or for the period required by applicable law — whichever is longer.
Once the retention period has elapsed, data is securely deleted or irreversibly anonymized. Anonymized data may be used for statistical purposes without restriction.
If you request account deletion, any data not required to be retained by law will be removed within 30 days of account closure. You will receive an email confirmation once the process is complete.
Some of the service providers that 28bet may process data on servers located outside Brazil — particularly internationally certified game providers such as Pragmatic Play and Play'n GO, as well as cloud infrastructure.
When personal data of Brazilian users is transferred to other countries, the 28bet applies the following safeguards:
The list of countries and partners involved in international transfers is available upon request to the DPO of 28bet.
The services of 28bet are intended exclusively for users aged 18 and over. The 28bet does not intentionally collect personal data from minors. If, despite existing controls, we identify that data from a minor has been collected, it will be immediately deleted and the account closed.
The 28bet uses the following mechanisms to verify users' age:
If you suspect that an account belongs to a minor, please contact 28bet immediately via live chat or by email at suporte@28bet.express.
To exercise any of the rights guaranteed by the LGPD — access, correction, deletion, portability, objection, blocking, withdrawal of consent, or information about data sharing — follow these steps:
If you believe your rights have not been properly addressed, you may file a complaint with the National Data Protection Authority (ANPD) through the gov.br/anpd portal. The 28bet is committed to cooperating fully with the ANPD in any investigation.
As required by the LGPD, the 28bet has appointed a Data Protection Officer (DPO) responsible for:
The DPO of 28bet can be contacted by email at privacidade@28bet.express. All privacy-related communications are handled with strict confidentiality.
For general operational matters — account issues, deposits, withdrawals, bonuses — please use customer support, available via 24×7 live chat on the platform or by email at suporte@28bet.express.
The 28bet may update this Privacy Policy periodically to reflect changes in legislation, operational practices, or the services offered. The date of the last update is always shown at the top of this page.
Significant changes — those that materially affect your rights or the way we process your data — will be communicated via your registered email and through an in-platform notification at least 7 days before it takes effect.
Continued use of the platform after a new version of this policy takes effect constitutes your acceptance of the changes. If you do not agree with the updates, you may request account closure and withdraw your available balance before the effective date.
Previous versions of this policy are available upon request to the DPO at privacidade@28bet.express.