Data protected with SSL 256-bit across all connections Full compliance with the LGPD – Law 13,709/2018 38bet does not sell data of users to third parties You may request access, correction, or deletion of your data Pix in under 15 minutes · no withdrawal fees Support in Portuguese 24h · 7 days a week VIP program with automatic cashback every Monday 38bet operates with international license and regular audits Data protected with SSL 256-bit across all connections Full compliance with the LGPD – Law 13,709/2018 38bet does not sell data of users to third parties You may request access, correction, or deletion of your data Pix in under 15 minutes · no withdrawal fees Support in Portuguese 24h · 7 days a week VIP program with automatic cashback every Monday 38bet operates with international license and regular audits
Last updated: January 2026

38bet Privacy Policy – Data Protection and LGPD

The 38bet takes its users' privacy seriously. This page explains, clearly and directly, what personal data we collect, why we collect it, how we use it, who we share it with, and what your rights are as a data subject — all in compliance with Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018).

Our approach is one of complete transparency: you have the right to know exactly what happens to your information when you use the 38bet, and we have an obligation to say so plainly.

SSL
256-bit on all connections
LGPD
Full compliance
0
Sale of Data to Third Parties
24h
Support for requests

How 38bet takes care of your data

Six pillars that define our approach to privacy and data protection.

Minimal and necessary data collection

The 38bet only collects data that is strictly necessary to provide its services — registration, identity verification, Pix and boleto processing, and fraud prevention. We do not collect data without a clear, justified purpose.

Encryption across all layers

All connections to the platform are secured by 256-bit SSL — the same standard used by banks and financial institutions. Payment data such as Pix keys and card details are handled by PCI DSS-certified processors.

Full LGPD Compliance

The 38bet operates in compliance with Brazil's General Data Protection Law (Law No. 13,709/2018). We have a Data Protection Officer (DPO) responsible for ensuring that all data processing respects the rights of data subjects.

Your rights as a data subject

You can request access to, correction of, portability of, or deletion of your personal data at any time. Requests are handled within 15 business days through suporte@38bet.life, free of charge.

No data selling

The 38bet does not sell, rent, or transfer users' personal data to third parties for commercial purposes. Data sharing occurs only with operational partners necessary to deliver the service, and is governed by confidentiality agreements.

Cookie transparency

38bet uses cookies for platform operation, performance analytics, and experience personalization. You can manage your cookie preferences at any time in your browser settings.

1. Who we are and who this policy applies to

This Privacy Policy applies to all users of the 38bet, accessible at https://38bet.life. 38bet acts as the controller of personal data collected during use of the platform, responsible for determining the purposes and means of processing such information.

When you create an account, make a deposit via Pix or boleto bancário, place a sports bet, play at the Live Casino, or use any other feature of the 38bet, you agree to the processing of your personal data as described in this policy. If you do not agree with these terms, you should not use the platform's services.

This policy supplements the Terms and Conditions of 38bet and should be read alongside this document for a complete understanding of the relationship between the user and the platform.

The Data Protection Officer (DPO) of 38bet can be contacted by email at suporte@38bet.life with the subject line "Privacy – LGPD". All requests related to personal data are handled as a priority through this channel.

2. Personal Data We Collect

2.1 Data You Provide Directly

When you register or use the 38bet, we collect the following information that you provide directly:

  • Registration data: full name, CPF, date of birth, gender (optional), email address, mobile number;
  • Identity verification data: government-issued ID (RG, CNH, or passport), selfie with ID, proof of address — when requested for account verification;
  • Financial data: Pix key, bank details for wire transfers, credit/debit card information processed by a certified gateway — used exclusively for deposits and withdrawals;
  • Communications: messages sent to support, reviews, and feedback provided voluntarily.

2.2 Automatically Collected Data

When you access the platform, we automatically collect technical information required for the operation and security of the service:

  • Access data: IP address, login date and time, device used (model, operating system, browser version);
  • Browsing data: pages visited, session duration, features used, click sequences;
  • Location data: country of access inferred by IP — used for eligibility verification and fraud prevention;
  • Cookies and identifiers: detailed in section 8 of this policy.

2.3 Betting and Gameplay Activity Data

To provide services and meet regulatory obligations, the 38bet records all bets placed, results, deposits, withdrawals, and platform activity history. These records are used for winnings processing, VIP Program calculations, anti-money laundering compliance, and responsible gambling.

Data Category Examples Primary Purpose
IdentificationFull name, CPF, date of birthRegistration and identity verification
ContactEmail, mobile numberCommunication and authentication
FinancialPix key, bank, cardPayment Processing
TechnicalIP, device, browserSecurity & Anti-Fraud
BehavioralBets, sessions, preferencesPersonalization & VIP
DocumentsID, driver's license, proof of addressKYC Verification

3. How We Use Your Personal Data

The 38bet uses the personal data collected solely for the purposes described below. We never use your data for any purpose that has not been disclosed to you:

  • Service provision: account registration processing, deposits and withdrawals via Pix, boleto bancário, and card, bet settlement, and access to Live Casino, crash games, and blackjack;
  • Identity Verification (KYC): confirmation that the user is who they claim to be, is over 18 years of age, and is eligible to use the platform;
  • Fraud & Money Laundering Prevention: transaction monitoring in compliance with Brazilian anti-money laundering legislation (Law No. 9,613/1998);
  • VIP Program and personalization: VIP points calculation, automatic weekly cashback, and personalization of the platform experience based on activity history;
  • Communication: sending account notifications, active promotions, terms updates, and relevant platform information — only to users who have not opted out of communications;
  • Responsible gambling: identification of behavioral patterns that may indicate problem gambling, in order to offer control tools and support;
  • Customer support: resolution of questions, complaints, and requests submitted to the 38bet support team 38bet;
  • Fulfillment of Legal Obligations: responding to requests from competent authorities as required by applicable law.

4. Legal Bases for Data Processing (LGPD)

The LGPD requires that all processing of personal data have a legal basis to justify it. The 38bet processes your data on the basis of the following legal grounds set out in art. 7 of Law No. 13,709/2018:

  • Contract performance (art. 7, V): processing required to perform the service agreement accepted at registration — includes processing of deposits, withdrawals, bets, and platform access;
  • Compliance with a legal obligation (art. 7, II): processing required by applicable law, such as anti-money laundering legislation and identity verification and registration requirements;
  • Legitimate interest (art. 7, IX): fraud prevention, platform security, risk analysis, and service improvement — always respecting user rights and expectations;
  • Consent (art. 7, I): sending marketing communications and using non-essential cookies — you may withdraw consent at any time without affecting your access to the platform.

Where the legal basis is consent, you have the right to withdraw it at any time. Withdrawal does not affect any data processing carried out prior to the withdrawal, nor does it affect access to the essential services of the 38bet.

5. Sharing Data with Third Parties

5.1 Operating partners

The 38bet may share personal data with partners that assist in service delivery, always under contracts requiring data handling in compliance with the LGPD and the same security standards applied internally. These partners include:

  • Payment processors: certified gateways that process transactions via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago;
  • Identity verification (KYC) providers: specialized document verification and fraud prevention services;
  • Game providers: Live Casino, slots, crash games, and blackjack providers — who receive only the user's anonymous identifier, with no personally identifiable data;
  • IT Infrastructure: server and cloud service providers used to operate the platform, under data processing agreements.

5.2 What we never do

The 38bet does not sell, rent, transfer, or share users' personal data with third parties for marketing purposes, third-party advertising, or any commercial purpose not directly related to the provision of the platform's services. This is an unconditional commitment.

5.3 Legal Obligations

The 38bet may share data with government, judicial, or regulatory authorities when legally required — pursuant to a court order, a request from a competent authority, or fulfillment of an express legal obligation. In all cases, sharing is limited to what is strictly required.

Important: Be wary of any communication claiming to be from 38bet that asks for your personal data, password, or payment details through unofficial channels. 38bet will never ask for your password via email, WhatsApp, or social media.

6. How long we retain your data

The 38bet retains personal data for as long as necessary to fulfill the purposes that justified its collection, in accordance with the minimum retention periods required by Brazilian law:

  • Registration and identity data: retained for the full duration of the active account and for a minimum of 5 years after closure, in accordance with compliance and anti-money laundering requirements;
  • Financial & Transaction Data: records of deposits, withdrawals, and bets are retained for a minimum of 5 years from the transaction date, in accordance with Law No. 9,613/1998;
  • Support data: support history is retained for 2 years after each ticket is closed;
  • Browsing data and cookies: retained for up to 13 months, in line with data protection best practices;
  • Marketing data (with consent): retained until consent is withdrawn by the user.

Once the applicable retention period has passed, data is securely deleted or irreversibly anonymized so that it can no longer be linked to the data subject.

7. Information security

The 38bet implements technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or improper destruction. Key security measures include:

  • SSL/TLS 256-bit encryption: all communications between the user's browser or app and 38bet's servers are end-to-end encrypted;
  • Two-factor authentication (2FA): available to all users as an additional layer of login protection;
  • 24/7 anti-fraud monitoring: automated system that detects suspicious patterns in transactions and access attempts in real time;
  • Data Segregation: financial data and identity documents are stored in systems separate from platform usage data, with restricted access controls;
  • Regular security testing: the platform undergoes regular audits and penetration testing by specialized third-party firms;
  • Staff training: all staff members with access to personal data receive regular training in information security and LGPD compliance.

In the event of a security incident that may affect personal data, the 38bet will notify affected users and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD.

Despite all the security measures in place, no system is 100% invulnerable. We strongly recommend using a strong, unique password for your 38bet account and never sharing your credentials with anyone.

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files stored in your browser that allow the platform to "remember" certain information between sessions — such as language preferences, login status, and items in your bet slip. The 38bet uses cookies responsibly and transparently.

8.2 Types of Cookies Used

  • Essential Cookies: required for the platform's basic operation — login, secure session, account preferences. These cannot be disabled without compromising platform functionality;
  • Analytical cookies: collect aggregated information about how users navigate the platform — most visited pages, session duration, traffic sources. Used to improve the user experience;
  • Personalization cookies: store user preferences to personalize the experience — favorite sports, preferred game types, notification settings;
  • Security cookies: help detect fraudulent activity and protect accounts against unauthorized access.

8.3 How to manage cookies

You can manage or disable non-essential cookies at any time through your browser settings (Chrome, Firefox, Safari, Edge). Please note that disabling essential cookies may prevent the platform from functioning properly. A 38bet does not use third-party tracking cookies for advertising purposes outside the platform.

9. Users Under 18

The 38bet is an adult entertainment platform intended exclusively for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. The registration process requires a CPF and date of birth, and automated systems verify age eligibility.

Should the 38bet identifies that data belonging to a minor under 18 was inadvertently collected, the account will be immediately closed, the data will be deleted, and any deposited funds will be returned to the legally responsible party after a verification process.

Parents and guardians should use parental control tools to prevent minors from accessing betting platforms. If you become aware that a minor is using 38bet, please contact suporte@38bet.life immediately.

Gambling Prohibited for Minors: 38bet strictly prohibits access by users under 18. Identity verification is mandatory, and any violation results in immediate account closure.

10. Your rights as a data subject

The LGPD grants you, as a data subject, the following rights, which may be exercised at any time with the 38bet:

Access

Request confirmation that your data is being processed and obtain a copy of the information 38bet holds about you.

Correction

Request the correction of any incomplete, inaccurate, or outdated data registered on the platform.

Deletion

Request the deletion of data processed on the basis of consent, subject to any legal retention obligations.

Portability

Receive your data in a structured format for transfer to another controller, upon formal request.

Consent Withdrawal

Withdraw consent previously given for marketing purposes or non-essential cookies, without affecting your access to essential services.

Information

Find out about the entities with which 38bet shares your data and the legal bases used for processing it.

To exercise any of these rights, contact our DPO at suporte@38bet.life with the subject line "LGPD Rights – [your full name]". The 38bet will respond within 15 business days, at no charge to you.

11. International data transfers

To provide its services, 38bet may transfer personal data to servers and systems located outside Brazil — particularly to cloud infrastructure providers and partner gaming platforms based in other countries.

All international data transfers carried out by 38bet comply with LGPD requirements for international transfers: they take place only with countries or organizations that provide an adequate level of personal data protection, or under specific contractual clauses that guarantee the same standards of protection applied in Brazil.

Payment data processed via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago complies with the regulations of the Banco Central do Brasil and the applicable payment networks, with primary processing taking place within Brazilian territory.

12. Changes to This Privacy Policy

The 38bet may update this Privacy Policy periodically to reflect changes in services, applicable legislation, or data processing practices. Significant changes will be communicated to you by email at least 7 days before they take effect.

The "Last updated" date at the top of this page indicates when the current version was published. We recommend reviewing this policy periodically to stay informed about how 38bet protects your data.

Continued use of the platform after any changes take effect constitutes acceptance of the updated terms. Previous versions of this policy may be requested from 38bet's DPO at suporte@38bet.life.

13. Contact, DPO & complaints

For questions, requests, or complaints regarding the processing of personal data by 38bet, please reach out through our dedicated privacy channel:

  • DPO email: suporte@38bet.life (subject: "Privacy – LGPD")
  • Live Chat: available 24 hours a day, 7 days a week, directly on the platform — for general privacy inquiries

The 38bet responds to all data subject requests within 15 business days, at no charge. If you believe your rights as a data subject have not been adequately addressed, you have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) at gov.br/anpd.

Privacy channel: suporte@38bet.life · Subject: "Privacy – LGPD" · Response within 15 business days. For urgent account security issues, use the live chat available 24h.

Privacy questions at 38bet

The most common questions about how we handle your data.

No. 38bet does not sell, rent, or transfer users' personal data to third parties for commercial purposes. Full stop. Data sharing occurs only with the operational partners strictly necessary to provide our services — such as Pix payment processors, identity verification providers, and IT infrastructure suppliers — always under contracts that impose the same confidentiality and security obligations that 38bet applies internally.

You may request the deletion of your personal data at any time by emailing suporte@38bet.life with the subject line "LGPD Rights – Data Deletion". 38bet will respond within 15 business days. Please note: data that must be retained by legal obligation — such as financial transaction records required under anti-money laundering legislation — cannot be deleted before the legally mandated retention period, even upon request. In such cases, 38bet will clearly inform you which data cannot be deleted and the legal reason why.

Credit and debit card details are not stored directly on 38bet's servers — processing is handled by PCI DSS-certified payment gateways that meet the most rigorous international security standards for card data. Pix keys are stored in encrypted form solely to enable future withdrawals. You can remove saved Pix keys directly from your account settings panel or by contacting support. Bank details for wire transfers are handled with the same level of protection.

38bet may be legally required to share data with governmental, judicial, or regulatory authorities pursuant to a court order, a formal request from a competent authority, or compliance with an express legal obligation — such as reports of suspicious transactions required under anti-money laundering legislation (Law No. 9,613/1998). In all cases, sharing is strictly limited to what has been legally required, and 38bet does not share data on its own initiative beyond what the law demands.

You have the right to request access to all personal data 38bet holds about you. Send an email to suporte@38bet.life with the subject line "LGPD Rights – Data Access", including your full name and registered CPF. 38bet will provide a complete report of the data on file within 15 business days, at no charge. Your betting and transaction history is also available directly in your account dashboard, under the history section.

Privacy and Responsible Gaming, together

38bet uses activity data responsibly — including to keep you protected.

Pattern Monitoring

Activity data is analyzed to identify patterns that may indicate problem gambling. When such patterns are detected, 38bet proactively offers control tools.

Deposit limits

Financial data is used to enforce the limits you set yourself — daily, weekly, or monthly — ensuring they are respected across all access channels.

Effective Self-Exclusion

CPF, device, and IP data are used to ensure that self-exclusion requests are enforced platform-wide, with no way to circumvent them.

Need support?

CVV: call 188 (free, 24/7). Gamblers Anonymous Brazil: ja.org.br. 38bet support is available via chat for guidance at any time.

38bet's Security & Privacy Commitments

SSL 256-bit
LGPD Compliance
Zero data selling
24/7 Anti-Fraud
Data subject rights
International License

Bet with a platform that respects your privacy

The 38bet takes care of your data with the same care you take of your money. Create your account for free, deposit from R$ 20.00 via Pix and enjoy Brazil's most transparent betting and casino platform.

Português