Official Document — bet37

Privacy Policy of bet37 — data protection and LGPD

Bet37 takes your data privacy seriously. Here you'll find a clear, jargon-free explanation of how we collect, use, store, and protect your personal information — all in compliance with the LGPD (Law No. 13.709/2018).

How bet37 handles your personal data

Six commitments that guide every bet37 decision on data collection, use, and protection — even before any legal requirement.

Minimal and necessary data collection

Bet37 collects only the data strictly necessary to operate the platform, process payments via Pix, and meet legal obligations. No data is collected for convenience or without purpose — every field has a declared and documented use.

End-to-end encryption

All personal and financial information exchanged between your phone or computer and bet37's servers is protected with TLS encryption. Sensitive data at rest — such as CPF numbers and banking details — is stored with additional layered encryption.

We never sell your data

Bet37 does not sell, rent, or trade users' personal data with third parties for advertising or commercial purposes. Your data is yours — and the platform exists to serve you, not to monetize your information with external advertisers.

LGPD Compliance

Bet37 operates in full compliance with the General Data Protection Law (Lei nº 13.709/2018). We have a designated Data Protection Officer (DPO), internal privacy impact assessment processes, and documented procedures to handle all data subject requests.

You control your data

Any registered bet37 user may request access, correction, portability, or deletion of their personal data at any time. We process all requests within 15 business days — no red tape, no fees, no explanation required on your part.

Transparency with no fine print

This policy was written to be read and understood by anyone, not just lawyers. Each section clearly explains what happens with your data, why it happens, and for how long. No fine print buried in lengthy paragraphs.

What you can request from bet37 regarding your data

The LGPD guarantees clear rights to every data subject. bet37 is fully prepared to handle any of these requests.

Access

Request a complete copy of all personal data that bet37 holds about you.

Rectification

Request the update or correction of incomplete, outdated, or inaccurate data.

Deletion

Request deletion of data processed on the basis of consent, where applicable.

Portability

Receive your data in a structured format for transfer to another service.

Information

Find out which entities your data has been shared with and for what purpose.

Objection

Object to the processing of data carried out on the basis of the platform's legitimate interest.

Blocking

Request the restriction of data use that is unnecessary, excessive, or processed in non-compliance.

Revocation

Withdraw consent at any time, with immediate effect for future processing.

What data bet37 collects and why

A consolidated overview of the main personal data processed by the platform, its purpose, and whether it is shared with third parties.

Data Purpose Legal Basis (LGPD) Shared?
Full name and CPF Registration, identity verification (KYC), fraud prevention Legal obligation / Contract performance ⚠ Under legal requirement
Date of birth Minimum age verification (18 years) Legal obligation ✖ Not shared
Email and mobile number Operational communications, password recovery, two-factor authentication Contract performance / Legitimate interest ✖ Not shared
Residential address KYC verification, regulatory compliance Legal obligation ⚠ Under legal requirement
Banking details and Pix Processing deposits and withdrawals Contract performance ⚠ Payment operators
Betting history Transaction records, responsible gambling, internal audit Legal obligation / Legitimate interest ✖ Not shared
IP address and device Security, fraud detection, multiple accounts Legitimate interest ✖ Not shared
Navigation cookies Experience personalization, platform usage analytics Consent ⚠ Analytics partners
Identity documents (KYC) Mandatory identity verification for withdrawals above R$ 2,000.00 Legal obligation ⚠ Under legal requirement

This Privacy Policy describes how the bet37 — the operator of the sports betting and online casino platform accessible at bet37.best — collects, processes, stores, and protects the personal data of its users, in accordance with the General Personal Data Protection Law (LGPD — Law No. 13.709/2018) and other applicable Brazilian legislation.

By using any service provided by bet37 — whether creating an account, making a Pix deposit, placing a bet on the Brasileirão Série A, playing slots, or accessing the live casino — you confirm that you have read and understood this Privacy Policy. If you have any questions before proceeding, please contact our Data Protection Officer at privacidade@bet37.best.

This policy applies exclusively to the platform bet37. Third-party services accessible from our site — such as game providers, payment operators, and analytics partners — have their own privacy policies, over which bet37 has no direct control.

1 Who We Are and Scope of This Policy

A bet37 is the controller of the personal data collected and processed under this Policy. The platform operates exclusively in the Brazilian market, offering Sports Betting, online casino, crash games, Live Casino, and related games — all available in Brazilian Portuguese with payments in BRL.

This Policy applies to all users registered on bet37, website visitors who have not created an account, business partners, and any individual whose personal data is processed by the platform in the context of its activities. Data is processed exclusively in Brazil, on servers located within national territory, in compliance with LGPD requirements.

2 Data We Collect

A bet37 collects personal data in two main ways: data provided directly by the user and data collected automatically during use of the platform.

User-provided data:

  • Registration data: full name, CPF, date of birth, full residential address, email address, and mobile number.
  • KYC Verification Data: photo ID (RG, CNH, or passport) and proof of address dated within the last 90 days, required for withdrawals above R$ 2,000.00 and routine verifications.
  • Financial data: registered Pix key for withdrawals, credit or debit card details for deposits, and bank account information for TED transfers (Nubank, Itaú, Bradesco, Banco do Brasil, and others).
  • Support communications: live chat conversation history, emails sent to support, and service records.

Automatically collected data:

  • Browsing data: IP address, browser type and version, operating system, pages visited, session duration, and traffic source.
  • Device data: unique device identifier, mobile or computer model, screen resolution.
  • Platform behavior data: games accessed, bets placed, amounts wagered, access times, and browsing patterns.
  • Cookies and similar technologies: as described in Section 6 of this Policy.
3 How We Use Your Data

A bet37 uses collected personal data exclusively for the following purposes:

  • Account operation: create and manage the user account, authenticate access to the platform, and personalize the user experience.
  • Transaction processing: process deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago; process withdrawals via Pix and bank transfer to accounts held at Brazilian banks.
  • Fraud prevention and security: detect suspicious activity, multiple accounts, bot usage, money laundering attempts, and other behaviors that violate the platform's Terms and Conditions.
  • Regulatory compliance: fulfill legal obligations with COAF, the Receita Federal, the Banco Central, and other Brazilian authorities with jurisdiction over the betting and gaming sector.
  • Responsible gambling: monitor behavioral patterns that may indicate problem gambling and apply available protection tools when necessary.
  • Operational communications: send notifications about transactions, account updates, Terms changes, and relevant service information via email or SMS.
  • Platform improvements: analyze aggregated and anonymized usage patterns to improve the player experience and develop new features.

A bet37 does not use users' personal data to build advertising profiles, sell information to advertisers, or for any purpose not disclosed in this Policy. Marketing communications — when sent — are delivered exclusively based on the user's explicit consent, which may be withdrawn at any time.

4 Legal Basis for Processing (LGPD)

Each data processing activity carried out by bet37 is grounded in at least one of the legal bases set out in Art. 7 of the LGPD. The main bases applied are:

  • Contract performance (Art. 7, V): processing required to create and operate the user account, handle deposits and withdrawals via Pix and other Brazilian payment methods, and deliver the services contracted on the platform.
  • Legal obligation (Art. 7, II): processing required to comply with the requirements of the Banco Central do Brasil, Receita Federal, COAF (Law No. 9.613/1998 — anti-money laundering) and sector-specific betting regulations.
  • Legitimate interest (Art. 7, IX): processed for fraud prevention, platform security, detection of multiple accounts, and protection of other users — always with respect for the rights and expectations of data subjects.
  • Consent (Art. 7, I): processing for non-essential cookies, marketing communications, and optional features — always with the option to withdraw consent at any time without affecting your use of the platform.
5 Data Sharing with Third Parties

A bet37 does not sell users' personal data. Sharing with third parties occurs only in the situations described below, with partners who are contractually bound to handle data with the same level of protection applied by the platform:

  • Payment processors: financial data is shared with Pix operators, card networks (Visa, Mastercard), PicPay, and Mercado Pago solely to process transactions requested by the user.
  • Game providers: username and session information may be transmitted to providers such as Pragmatic Play, Evolution Gaming, and others for proper game functionality. Full identity data is not shared.
  • Technical analytics tools: anonymized browsing data may be processed by analytics tools for platform performance monitoring and security.
  • Competent authorities: data may be disclosed to Brazilian government authorities (Receita Federal, COAF, the Judiciary) when required by law, court order, or legally authorized investigation. In such cases, bet37 will disclose only the minimum necessary.

All third parties with whom the bet37 that data is shared with are contractually required to: use the data only for the specific agreed purpose; apply appropriate technical and organizational security measures; and not retain the data beyond the period necessary for the stated purpose.

6 Cookies and Tracking Technologies

A bet37 uses cookies and similar technologies to ensure the platform functions correctly and to enhance the user experience. There are three categories of cookies in use:

  • Essential cookies: required for the platform's core functionality — such as keeping your session active after login and ensuring transaction security. They cannot be disabled without compromising your use of the service.
  • Functional cookies: store user preferences, such as language and display settings, to personalize the experience on future visits. They can be disabled without blocking access to the platform.
  • Analytics cookies: collect anonymized data on how users navigate the platform, which pages they visit, and how long they stay. This information helps improve the overall experience. Consent is required and these cookies may be declined.

You can manage your cookie preferences at any time through your browser settings — Chrome, Safari, or any other browser you use on your phone or computer. Disabling analytics cookies does not affect how betting, Pix withdrawals, or live casino access work.

7 Data Security

A bet37 implements robust technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The main safeguards currently in place are:

  • TLS encryption in transit: all communication between your device and bet37's servers is encrypted with TLS 1.2 or higher.
  • Encryption at rest: sensitive data — such as CPF, banking details, and identity documents — is stored with additional encryption on our servers.
  • Internal access controls: only staff with a proven operational need are granted access to users' personal data, subject to multi-factor authentication and audit logging.
  • Continuous monitoring: intrusion detection systems and anomalous behavior analysis operate continuously to identify and block unauthorized access attempts.
  • Periodic security testing: the platform undergoes regular security assessments, including penetration testing and infrastructure configuration audits.

In the event of a security incident affecting users' personal data, the bet37 will notify affected data subjects and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD — within 2 business days when there is significant risk to data subjects.

8 Data Retention and Deletion

A bet37 retains users' personal data for only as long as strictly necessary for the purposes for which it was collected, in compliance with the minimum retention periods required under Brazilian law:

  • Registration and financial transaction data: retained for a minimum of 5 years after account closure, as required by the Civil Code, tax legislation, and anti-money laundering regulations (Law No. 9.613/1998).
  • Betting history: retained for a minimum of 5 years for audit, compliance, and dispute resolution purposes.
  • Identity documents (KYC): retained for the duration of the account plus 5 years after closure.
  • Support communications: retained for 2 years after the last interaction is closed.
  • Analytics cookie data: retained for a maximum of 13 months from the date of collection.

Once mandatory retention periods have been fulfilled, data is securely and irreversibly deleted from the systems of bet37, or anonymized for aggregated statistical use that does not allow individual identification. Early deletion requests are assessed taking into account any legal obligations that may prevent immediate erasure.

9 How to Exercise Your LGPD Rights

To exercise any right provided under the LGPD regarding your personal data at bet37, send a request to privacidade@bet37.best with the following information:

  • Full name and CPF linked to the bet37 account.
  • A clear description of the right you wish to exercise (access, rectification, deletion, portability, etc.).
  • Email address registered on the platform for identity verification.

A bet37 will respond to all requests within 15 business days from the date of receipt. In more complex cases — such as requests involving large volumes of portable data — the deadline may be extended to 30 days, with prior notice to the requester. Exercising your rights is free of charge and cannot be made conditional on any payment.

A data deletion request does not necessarily result in the immediate removal of all information. Data that must be retained due to a legal obligation — such as financial transaction records required by the Receita Federal — will be kept for the mandatory minimum period even after a deletion request, and permanently removed once that period expires.

10 Minors

A bet37 is a platform intended exclusively for users aged 18 and over. We do not intentionally collect personal data from minors, and registration by anyone under 18 is expressly prohibited under the platform's Terms and Conditions.

If we identify that a minor's data has been collected — whether due to a false age declaration at registration or by any other means — the account will be immediately closed, the data will be deleted as promptly as possible, and any deposited balance will be refunded to the original payment method. If you are the guardian of a child or teenager and suspect they have created a bet37 account, please contact us immediately at privacidade@bet37.best.

11 Changes to This Privacy Policy

A bet37 may update this Privacy Policy periodically to reflect operational changes, new legal requirements, or improvements to data protection practices. Any material change will be communicated by email to registered users at least 7 days before it takes effect.

The current version of this Policy is always available on this page, with the date of the last revision shown in the index widget at the top of the page. We recommend reviewing this Policy periodically to stay informed about how bet37 protects your data. Continued use of the platform after a new version takes effect constitutes acceptance of the changes.

12 Contact, DPO & Privacy Channel

To exercise your rights under the LGPD, clarify questions about this Policy, or report any concern related to the processing of your personal data by bet37, use the channels below:

  • Privacy channel (DPO): privacidade@bet37.best — exclusively for LGPD rights requests and privacy matters.
  • General support: contato@bet37.best — available 24 hours a day, 7 days a week, in Portuguese.
  • Live chat: available directly on the platform, with an average response time of under 4 minutes.

The Data Protection Officer (DPO) of bet37 is responsible for overseeing LGPD compliance, handling data subject requests, and serving as the point of contact with the National Data Protection Authority (ANPD). All communications addressed to the DPO must be sent exclusively to privacidade@bet37.best, with a clear description of the subject in the message's subject line.

If you believe your rights as a data subject have been violated and have not received a satisfactory response from bet37, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the federal body responsible for enforcing the LGPD in Brazil.

Privacy Questions at bet37

No. bet37 does not sell, rent, or trade users' personal data with advertisers, data brokers, or any company for advertising purposes. Players' data is shared only with strictly necessary operational partners — such as Pix payment processors, game providers, and security tools — and solely for the purposes stated in this Policy.

Send an email to privacidade@bet37.best with your full name, CPF, and registered email address, requesting the deletion of your data. We will respond within 15 business days. Please note that certain data — such as financial transaction records — must be retained for a minimum period required by law (generally 5 years) even after a deletion request, as mandated by the Federal Revenue Service and anti-money laundering regulations. After that period, the data is permanently deleted.

bet37 stores only the minimum information required to process transactions and meet legal obligations. For Pix, the destination key registered for withdrawals is stored in encrypted form. Credit and debit card data is processed directly by the card networks (Visa, Mastercard) and is never stored in plain text on bet37's servers — we use tokenization for recurring transactions where applicable.

Yes, with some limitations. Essential cookies — required for login, session security, and transaction processing — cannot be disabled without making the platform unusable. Functional and analytics cookies are optional and can be declined without blocking access to betting, Pix withdrawals, or the live casino. You can manage your preferences directly in the cookie settings on the platform or through your browser's cookie manager.

After account closure, bet37 retains data for the minimum period required by law — generally 5 years for financial records, in line with tax legislation and anti-money laundering regulations. Data that does not need to be retained under a legal obligation is deleted within 30 days of account closure. Once all retention periods have elapsed, data is securely and irreversibly deleted or anonymized for statistical purposes with no individual identification.

Marketing communications — such as bonus offers, free spins, and casino promotions — are sent only to users who have expressly consented to such communications during registration or in their account preferences. You may withdraw this consent at any time through the notification settings in your bet37 account or by clicking "unsubscribe" in any marketing email you receive. Withdrawing consent does not affect essential operational communications, such as transaction confirmations and security alerts.
Responsible Gambling

Sports Betting and casino games are entertainment — not a source of income. Set your limits before you start. bet37 offers self-exclusion, deposit limits, and account breaks. Available exclusively to users aged 18 and over.

View Responsible Gambling
Terms and Conditions

This Privacy Policy should be read alongside bet37's Terms and Conditions, which govern general use of the platform — including registration, Pix deposits, bonuses, withdrawals, and betting rules.

Terms and Conditions

Play safely at bet37's Casino and sportsbook

Sign up in under 2 minutes, deposit from R$ 50.00 via Pix, and access over 500 games — with the peace of mind of a platform that takes your personal data seriously and operates in full compliance with the LGPD.

Privacy questions? Contact our DPO: privacidade@bet37.best

Português