Data Protection

BB8Bet Privacy Policy – Your Data Protected under the LGPD

No BB8Bet, transparency with player data is not a footnote formality — it is a genuine commitment. Here we explain what we collect, why we use it, how we protect it, and what your rights are as a data subject, in compliance with the General Data Protection Law (LGPD).

Last updated: January 2026
Your Rights Under the LGPD
Access your personal data at any time
Correct inaccurate or outdated information
Request deletion of non-mandatory data
Revoke consent for communications
Portability of your data to another service
Know who your data has been shared with

How BB8Bet Protects Your Data

Six principles that guide the processing of personal data on the platform

End-to-End Encryption

All data in transit is protected by 256-bit SSL — the same standard used by banks such as Nubank, Itaú, and Bradesco. Data stored on BB8Bet servers uses AES-256 encryption, making access impossible without the correct keys.

Minimal and Necessary Collection

BB8Bet collects only what is strictly necessary to create your account, process payments, and meet legal obligations. Nothing beyond the essentials. We do not collect real-time location data or access your phone contacts.

LGPD Compliance

The General Data Protection Law (Law No. 13.709/2018) governs how BB8Bet handles your data. We have a dedicated data protection officer (DPO) and internal processes aligned with the requirements of the ANPD — Autoridade Nacional de Proteção de Dados.

Your Rights, Always Within Reach

You may exercise any right under the LGPD — access, correction, deletion, portability, or withdrawal of consent — by emailing contato@bb8bet.best. Requests are answered within up to 15 business days, as required by law.

No Sale of Data to Third Parties

BB8Bet does not sell, rent, or transfer your personal data to third parties for commercial purposes. We share information only with payment partners and game providers when necessary for the service to operate, and with authorities when required by law.

Incident Notification

In the unlikely event of a security incident that could affect your data, bb8bet will notify affected users and the ANPD within the legally required timeframes, with clear information about what happened and the steps taken to resolve the situation.

The Lifecycle of Your Data at bb8bet

From collection to deletion — see how we handle every step with care

Collection

Only data required for registration and verification

Protection

256-bit SSL encryption in transit and AES-256 at rest

Use

Solely to operate services and fulfill legal obligations

Retention

Retained for the minimum period required by applicable regulations

Deletion

Secure deletion upon expiry of the retention obligation

1

Introduction and Scope

This Privacy Policy describes how BB8Bet, available at bb8bet.best, governs how the personal data of players and platform visitors is collected, used, stored, shared, and protected. It applies to all services offered by bb8bet — Sports Betting, Live Casino, slots, poker, roulette, e-sports, and all other features.

The BB8Bet acts as the controller of personal data processed on this platform, pursuant to the General Data Protection Law (Law No. 13,709/2018 — LGPD). By creating an account or using any feature, you confirm that you have read and understood how we handle your data.

This policy is complementary to the Terms and Conditions of BB8Bet. In the event of any conflict, the provisions of the LGPD and other applicable Brazilian regulations shall prevail.

Questions about this policy can be sent to our data protection officer (DPO) at contato@bb8bet.best, with the subject line "Privacy Policy".

2

Data We Collect

The BB8Bet collects different categories of data depending on how you interact with the platform. The types of data processed are described below:

Registration and identification data

  • Full name, CPF, date of birth, and nationality.
  • Email address and phone number (mobile or landline).
  • Full residential address including zip code.
  • Identity documents submitted for KYC verification (national ID, driver's license, passport).
  • Proof of address with a recent issue date.

Financial and transaction data

  • Pix key registered for deposits and withdrawals.
  • Credit or debit card details (last 4 digits only — full card numbers are never stored by BB8Bet).
  • History of deposits, withdrawals, and bets placed on the platform.
  • Bank account details provided for TED transfers (Nubank, Itaú, Bradesco, Banco do Brasil).

Platform usage and behavioral data

  • IP address, device type, operating system, and browser used.
  • Pages visited, session duration, and browsing patterns within the platform.
  • Bets placed, games accessed, and content preferences.
  • Account access logs including date, time, and device.

BB8Bet does not collect real-time GPS location data, and does not access your phone's contacts, camera, or microphone without your explicit consent. Our app requests only the permissions strictly necessary to operate.

3

Purpose of Processing

The BB8Bet uses your personal data exclusively for the following purposes:

  • Account creation and management — verifying identity, activating registration, and keeping information up to date.
  • Service delivery — to process bets, casino transactions, deposits via Pix, boleto, card, Mercado Pago, and PicPay, and withdrawals.
  • Identity verification (KYC) — to confirm that the player is over 18 and that the information provided is accurate, as required by anti-money laundering regulations.
  • Fraud prevention — identifying suspicious access, multiple account usage, unwarranted chargebacks, and other fraudulent behaviors.
  • Account communications — sending transaction notifications, security updates, and relevant service information.
  • Promotional communications — with your consent, send you offers, promotions, and updates about BB8Bet. You can opt out of these communications at any time.
  • Platform improvement — analysis of usage data in aggregated and anonymized format to improve the player experience.
  • Compliance with legal obligations — to comply with requirements from tax, regulatory, and public security authorities in accordance with Brazilian law.

Your data will never be used for purposes not described in this policy without prior notice to you and, where required, without your explicit consent.

4

Legal Basis for Processing (LGPD)

Each data processing activity carried out by BB8Bet has a specific legal basis under the LGPD. Below are the bases applied to each main purpose:

Purpose Legal Basis (LGPD)
Account creation and provision of betting services Contract performance (Art. 7, V)
Identity verification (KYC) and anti-money laundering Compliance with legal obligation (Art. 7, II)
Fraud prevention and platform security Legitimate interest of the controller (Art. 7, IX)
Account and transaction communications Contract performance (Art. 7, V)
Promotional and marketing communications Data subject's consent (Art. 7, I)
Usage analysis for platform improvement Legitimate interest of the controller (Art. 7, IX)
Compliance with tax and regulatory authorities Compliance with legal obligation (Art. 7, II)

Where the legal basis is consent, you may withdraw it at any time without affecting any processing carried out prior to that withdrawal.

5

Data Sharing with Third Parties

The BB8Bet does not sell or share your personal data with third parties for commercial purposes. Data is only shared in the following situations and with the partner categories listed below:

Operational partners

  • Payment processors — to process deposits via Pix, boleto, credit and debit card, Mercado Pago, and PicPay. These partners only have access to the data required for the specific transaction.
  • Casino game providers — slots, Live Casino, and other game providers receive a unique player identifier, with no full personal identification data.
  • Identity verification services (KYC) — specialized partners in document verification who process documents submitted for account verification.
  • Technology infrastructure — hosting and cloud service providers that store data under data protection and confidentiality agreements.

Authorities and legal obligations

  • Receita Federal and other Brazilian tax authorities, when required by law.
  • Public security authorities in formally initiated investigations in accordance with applicable law.
  • Autoridade Nacional de Proteção de Dados (ANPD) in the event of a security incident or audit.

All partners that process BB8Bet data are contractually required to protect that information to standards equivalent to those applied by the platform itself.

6

Data Security

The security of player information is a non-negotiable priority for BB8Bet. The technical and organizational measures adopted include:

  • 256-bit SSL/TLS encryption across all communications between the player's device and the platform's servers.
  • AES-256 Encryption for data stored at rest on servers.
  • Two-factor authentication (2FA) available to all players in the account settings.
  • Continuous monitoring of access and suspicious activity with real-time alerts to the security team.
  • Penetration testing (pentests) conducted periodically by external specialists.
  • Internal access controls — BB8Bet employees access player data only when strictly necessary for their role and with the reason for access recorded.
  • Encrypted backups stored on geographically separate servers to ensure service continuity.

Despite all the measures in place, no system is 100% immune to breaches. In the event of a security incident that could put your data at risk, the BB8Bet commits to notifying you and the ANPD within the timeframes established by the LGPD.

Players also share responsibility for their own account security: use a strong, unique password for BB8Bet, enable two-factor authentication, and never share your credentials with anyone.

7

Cookies and Tracking Technologies

The BB8Bet uses cookies and similar technologies to enhance the platform experience, keep sessions active, and understand how players interact with the service. The types of cookies used are:

Strictly necessary cookies

Essential for the platform's basic functionality — keeping you logged in during your session, remembering language preferences, and securing transactions. These cannot be disabled without affecting the service.

Analytical cookies

Used to understand how players navigate the platform — which sections are most visited, where drop-offs occur, and how to improve the experience. Data is processed in an aggregated and anonymized form.

Preference cookies

Allow BB8Bet remembers personalized settings — such as favorite sports, preferred odds format (decimal, fractional, or American), and other preferences set in your account.

Cookie management

You can manage cookie preferences in your browser or device settings. On iOS and Android, in-app settings let you control tracking data. Disabling analytical cookies does not affect the platform's core functionality.

BB8Bet does not use third-party behavioral advertising cookies or sell browsing behavior data to ad networks.

8

Data Retention and Deletion

The BB8Bet retains your personal data for as long as necessary for the purposes it was collected, in accordance with the minimum retention periods established by Brazilian law:

  • Registration and identification data — retained for the duration of the account and for 5 years after closure, in accordance with tax and anti-money laundering requirements.
  • Financial transaction records — retained for 5 years in accordance with Law No. 9.613/1998 (anti-money laundering) and tax legislation.
  • Access logs — retained for 6 months in accordance with the Brazilian Internet Civil Framework (Law No. 12,965/2014).
  • Support communications — retained for 2 years from the date the support interaction was closed.
  • Platform behavior data — retained for 2 years or until a deletion request is submitted by the data subject, whichever comes first.

Once retention periods expire, data is securely and irreversibly deleted from the systems of BB8Bet, including backups, within a maximum of 90 days after the retention period expires.

If you request data deletion before the legally required retention period expires, the BB8Bet will specify which data must be retained and for how long, and will immediately delete all other data not subject to a legal retention obligation.

9

Your Rights as a Data Subject

The LGPD grants you, as the data subject whose personal data is processed by the BB8Bet, the following rights, all of which can be exercised free of charge:

Right What it means Response timeframe
Access Know what personal data BB8Bet holds about you and how it is being used 15 business days
Correction Update incomplete, inaccurate, or outdated information in your account 15 business days
Anonymization or deletion Delete unnecessary data not subject to a legal retention obligation 15 business days
Portability Receive your data in a structured format to transfer to another service 15 business days
Withdrawal of consent Cancel marketing communications at any time Immediate
Sharing information Know which entities your data has been shared with 15 business days
Objection Object to processing based on legitimate interest that you consider inappropriate 15 business days

To exercise any of these rights, send an email to contato@bb8bet.best with the subject line "LGPD Request – [type of right]", including your full name and registered CPF. The BB8Bet may request additional identity verification to protect your information from unauthorized access.

If you are not satisfied with bb8bet's response, you can file a complaint with the National Data Protection Authority (ANPD) at gov.br/anpd.

10

Minors

The services of BB8Bet are intended exclusively for individuals aged 18 and over. The platform does not knowingly collect personal data from anyone under 18.

If you are a parent or legal guardian and believe your underage child has created an account or provided personal data to BB8Bet, please contact us immediately at contato@bb8bet.best. BB8Bet will close the account and delete the data as soon as the situation is confirmed.

Age verification is part of the registration process at BB8Bet — the CPF provided is validated against the Federal Revenue database, which includes date of birth confirmation. Accounts registered with false age information are closed upon detection.

If you are under 18, do not create a BB8Bet account. Betting and casino games are prohibited for minors in Brazil.

11

International Data Transfers

Some services used by BB8Bet — such as cloud infrastructure providers and casino game suppliers — may process data on servers located outside Brazil. When this occurs, BB8Bet ensures that the transfer meets all LGPD requirements:

  • Transfers to countries with an adequate level of data protection as recognized by the ANPD.
  • Contracts with specific data protection clauses equivalent to those required under Brazilian law.
  • Contractual safeguards prohibiting the use of data for purposes not authorized by BB8Bet.

In all cases of international data transfer, data is protected to the same security standards applied to processing within Brazil — encryption, access controls, and usage auditing.

12

Contact the Data Protection Officer (DPO)

The BB8Bet has a dedicated Data Protection Officer (DPO), responsible for ensuring that data processing complies with the LGPD and for handling data subject requests.

To get in touch with BB8Bet's DPO:

  • Email: contato@bb8bet.best (subject: "DPO – [request subject]")
  • Response timeframe: up to 15 business days for LGPD rights requests; up to 5 business days for urgent security matters.

The DPO is also the point of contact with the ANPD regarding matters related to the processing of personal data by the BB8Bet.

All communications with the DPO are treated as confidential. No BB8Bet employee will have access to the content of your requests beyond what is necessary to respond to them.

13

Updates to this Policy

The BB8Bet may update this Privacy Policy to reflect changes in data processing practices, regulatory updates, or improvements to our security processes.

When significant changes occur — those affecting your rights or the way your data is processed — you will be notified by email and through a prominent notice on the platform at least 7 days before the changes take effect.

Minor changes — such as text corrections, partner name updates, or language clarifications that do not alter the substance of the content — may be made without prior notice. The date of the last revision is always shown at the top of this page.

Continued use of the platform after the effective date of any changes constitutes acceptance of the updated policy. If you do not agree with the changes, you may request account closure with a refund of your available balance via Pix before the effective date.

We recommend reviewing this policy periodically. The most up-to-date version is always available on this page at bb8bet.best/privacy-policy.

Bb8bet and Data Protection: What This Means for You in Practice

There are plenty of betting platforms out there that slap a generic privacy policy in the footer just to tick a box. The BB8Bet takes a different approach: real transparency about what we do with player data, why we do it, and what your rights are — no unnecessary legal jargon, nothing buried in the fine print.

When you register on the BB8Bet, you will need to provide your full name, CPF, date of birth, email, and phone number. These details are required for two concrete reasons: to verify that you are 18 or older (a legal requirement for any betting platform in Brazil) and to confirm your identity before processing withdrawals — a process known as KYC (Know Your Customer) that protects you just as much as it protects the platform against fraud.

Identity verification before the first withdrawal is a step every player will go through at BB8Bet. The process is straightforward: submit a photo ID (national ID card, driver's license, or passport) and proof of address dated within the last 90 days. Verification is completed within 24 hours and, once approved, remains valid permanently — you won't need to repeat the process for future withdrawals.

Regarding payment data: when you make a deposit by credit card, the BB8Bet does not store your full card number on its servers. This information is processed by our partner payment gateway, which operates under PCI-DSS certification — the specific security standard for card payment data. BB8Bet only stores the last four digits for transaction identification purposes.

For Pix, the process is straightforward: the Pix key used for a deposit is registered to facilitate future withdrawals to the same account. This is a security measure, not a tracking one — it ensures that funds coming in go back to the same source, preventing fraud by third parties attempting to withdraw to other accounts.

A common question is about behavioral data on the platform — betting history, games accessed, session duration. The BB8Bet collects this information for legitimate reasons: detecting problematic gambling patterns (part of our commitment to Responsible Gambling), preventing fraud, and improving the platform based on what players actually use. This data is analyzed internally and is never sold to third parties.

The LGPD came into force in Brazil in 2020 and changed the way companies are required to handle personal data. For players at BB8Bet, this means concrete rights: you can request access to all your data at any time, correct inaccurate information, request deletion of data not required by law, and even request your data in a readable portable format. All requests are answered within up to 15 business days and are free of charge.

Finally, a note on marketing communications: the BB8Bet may send emails and push notifications about promotions, bonuses, and updates — always based on your consent. To stop receiving these communications, simply click "unsubscribe" in any email or adjust your notification preferences in your account settings. Cancellation is immediate and does not affect transactional account communications (deposit confirmations, withdrawals, etc.).

Your Data Protected, Your Bet Secure

BB8Bet combines bank-level data security with the best betting experience for Brazilian players. Sign up and bet with peace of mind.

256-bit SSL LGPD Compliance Instant Pix Bonus up to R$ 500.00 24/7 Support in pt-BR +30 Sports
Privacy and Data Protection Inquiries

This Privacy Policy explains how BB8Bet handles your personal data in accordance with the LGPD. To exercise your rights as a data subject — access, correction, deletion, or data portability — please contact us at contato@bb8bet.best. Also see the Terms and Conditions for complete information on platform usage rules and bonus policies. Learn more about our responsible gambling practices at Responsible Gambling.

Privacy FAQ

Common questions about how BB8Bet handles your personal data

No. bb8bet does not sell, rent, or transfer players' personal data to third parties for commercial purposes. We share information only when strictly necessary to operate the service — with payment processors (to handle your Pix, boleto, or card transactions), game providers (who receive only an anonymous identifier, not your full personal data), and identity verification companies (KYC). In all these cases, partners are contractually prohibited from using your data for any purpose other than the one specified. We never share data with advertising networks or external marketing platforms.

Your CPF is required for three concrete reasons. First, to verify that you are 18 or older — the date of birth linked to your CPF confirms the legal age required to participate in betting. Second, to ensure that each person holds only one account on the platform — your CPF is the unique identifier that prevents duplicate accounts from being created. Third, to comply with anti-money laundering obligations under Law No. 9,613/1998, which requires financial platforms to know their customers (KYC). Your CPF is never shared with commercial partners.

There are two ways to stop receiving promotional communications from BB8Bet. The first is to click the "Unsubscribe" link at the bottom of any marketing email you receive — the opt-out is immediate and you will be removed from the promotional mailing list. The second is to go to the notification settings within your BB8Bet account and turn off marketing emails and push notifications. Please note that even after opting out of promotional communications, you will continue to receive important transactional messages — deposit confirmations, withdrawal notifications, security alerts, and account updates. These operational communications cannot be disabled, as they are essential to the safe management of your account.

Upon account closure, bb8bet will begin deleting data that is not subject to a legal retention obligation — such as communication preferences, platform behavioral data, and marketing information. However, certain data must be retained for specific periods even after closure as required by law: financial transaction records for 5 years (Anti-Money Laundering Law), basic registration data for 5 years for tax purposes, and access logs for 6 months (Marco Civil da Internet). Once those periods expire, the data is securely deleted. You will receive an email confirmation detailing which data was deleted immediately and which will be retained during the legal period, along with the scheduled dates for permanent deletion.

BB8Bet promotes responsible gambling. Bet responsibly and within your limits. Players must be 18 or older. Learn more at Responsible Gambling.

Português