Privacy

Privacy Policy of 8bet — How We Take Care of Your Data

8bet respects and protects the personal data of all platform users. This Privacy Policy explains, in plain English, what information we collect, how we use it, who we share it with, and what your rights are as a data subject, in accordance with the LGPD (General Data Protection Law — Lei nº 13.709/2018).

Last updated: January 2026 Version 2.0

Your personal and financial data is handled with the highest level of security and in full compliance with Brazilian law.

8bet's Six Privacy Pillars

What you can expect from 8bet when it comes to protecting your personal and financial information.

🔒
256-bit SSL Encryption

All communication between your device — mobile, computer, or tablet — and 8bet's servers is encrypted with 256-bit SSL, the same standard used by Brazil's largest digital banks. No data travels in plain text over the internet.

🇧🇷
Full LGPD Compliance

8bet operates in full compliance with the General Data Protection Law (Lei nº 13.709/2018 — LGPD). We have a designated DPO (Data Protection Officer), maintain records of all processing activities, and conduct regular internal policy audits.

💳
Tokenized Payment Data

No complete credit or debit card data is stored on our servers. We use tokenization through PCI-DSS certified gateways — your financial details are protected within the payment processor's systems, not 8bet's.

🚫
Your Data Is Never Sold

8bet does not sell, rent, or transfer your personal data to third parties for commercial purposes. Sharing with partners occurs only when strictly necessary for service operations and always with the contractual guarantees required by the LGPD.

👤
You Control Your Data

As a data subject, you have rights guaranteed by the LGPD: access, correct, port, or request the deletion of your data at any time. Simply contact our DPO at privacidade@8bet.express and we will respond within 15 business days.

🔔
Incident Notification

In the event of a security incident that may affect your data, 8bet notifies the ANPD (National Data Protection Authority) and impacted users within the timeframes established by the LGPD, along with clear guidance on how to protect yourself.

Why this policy exists. 8bet collects and processes personal data in order to deliver its Sports Betting and online casino service in a secure, personalized way that complies with Brazilian law. This Privacy Policy transparently describes how we do that — what data we collect, for what purpose, how long we retain it, and what your rights as a data subject are. Please read it carefully before creating your account.

1

Data Controller

For the purposes of the LGPD (Law No. 13,709/2018), the personal data controller collected through the 8bet platform is the operating company of https://8bet.express, responsible for decisions regarding the processing of users' personal data.

The Data Protection Officer (DPO) of 8bet can be reached by email at privacidade@8bet.express. The DPO is the official channel for exercising data subject rights, addressing questions about data processing, and reporting privacy incidents.

This Policy applies to all 8bet platform users, regardless of the device used to access it — mobile phone, computer, tablet, or any other means — and whether access is via web browser or another authorized digital channel.

2

What Data We Collect

8bet only collects the data necessary for the purposes described in this Policy. The data collected falls into the following categories:

Category Data Examples When It Is Collected
Registration Data Full name, CPF, date of birth, email address, mobile phone number At the time of registration on the platform
Identity Data (KYC) National ID, driver's license, passport, proof of address, selfie with document During the identity verification process
Financial Data Pix key, bank details for wire transfers, deposit and withdrawal history (amounts and dates) When carrying out financial transactions on the platform
Usage Data Betting history, games accessed, frequency of use, game preferences Automatically during platform use
Technical Data IP address, browser type and version, operating system, device identifier Automatically on every platform visit
Communication Data Support chat history, emails sent, survey responses When interacting with 8bet's support channels

Credit and debit card data. 8bet does not store your full card number, security code (CVV), or expiration date on its servers. This information is processed directly by PCI-DSS certified payment gateways. 8bet receives only a tokenized identifier and the last four digits of the card for display purposes in your account dashboard.

3

How We Use Your Data

The data collected by 8bet is used exclusively for the following purposes:

  • Account creation and management: registration, authentication, password recovery, and personalization of the user experience on the platform;
  • Financial transaction processing: deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED bank transfers; withdrawal processing to the account holder's bank account or Pix key;
  • Identity verification (KYC): identity verification for fraud prevention, anti-money laundering purposes, and to prevent underage use of the platform;
  • Providing the betting and casino service: bet recording, prize calculation and payment, bonus management, and VIP program administration;
  • Customer support: answering questions, resolving disputes, and investigating complaints via live chat or email;
  • Security and fraud prevention: monitoring of suspicious behavior, detection of multiple accounts, and protection against unauthorized access;
  • Service communications: transaction notifications, terms updates, security alerts, and — with your consent — offers and promotions from 8bet;
  • Compliance with legal obligations: reports to the relevant authorities when required under applicable Brazilian law governing the sector;
  • Ongoing product improvement: aggregated and anonymized analysis of usage patterns to improve the platform experience.

8bet does not use your data for third-party advertising, profiling for sale to other companies, or any purpose not described in this Policy.

4

Legal Basis for Data Processing

The LGPD requires that all personal data processing have a specific legal basis. 8bet grounds the processing of your data on the following grounds set out in Article 7 of Law No. 13,709/2018:

  • Contract performance (art. 7, V): processing is necessary to deliver the contracted service — account creation, bet processing, deposits, and withdrawals. Without this data, the platform cannot operate;
  • Legal obligation (art. 7, II): certain processing activities are required by law — such as identity verification (KYC) for anti-money laundering purposes and the retention of financial records for tax and compliance purposes;
  • Legitimate interest (art. 7, IX): security monitoring, fraud prevention, and product improvement are carried out on the basis of 8bet's legitimate interest, provided they do not conflict with your fundamental rights;
  • Consent (art. 7, I): marketing communications and promotions are sent only with your explicit consent, which can be withdrawn at any time through your account dashboard or by emailing privacidade@8bet.express.

Withdrawal of consent. If you consented to receiving marketing communications from 8bet and wish to withdraw that consent, simply go to the notification settings in your dashboard or send an email to privacidade@8bet.express. Withdrawal of consent does not affect the validity of any processing carried out prior to it.

5

Data Sharing with Third Parties

8bet shares users' personal data only in the situations described below, always with the contractual data protection guarantees required by the LGPD:

  • Payment processors: the data required to process deposits via Pix, boleto, credit/debit card, PicPay, Mercado Pago, and TED is shared with the respective payment gateways and financial institutions involved in the transaction;
  • Game providers: minimal session data (user identifier, round balance) is shared with certified providers such as Evolution Gaming, Pragmatic Play, Play'n GO, and others, as required for the operation of live games and slots;
  • Identity verification (KYC) partners: documents and data provided during the KYC process may be handled by third-party providers specializing in identity verification and fraud prevention, with whom 8bet maintains data protection agreements;
  • Brazilian public authorities: 8bet may disclose personal data when required by court order, determination of a competent regulatory authority (such as the Secretaria de Prêmios e Apostas of the Ministry of Finance), or to comply with applicable legal obligations;
  • Technology service providers: cloud infrastructure, hosting, and security providers that process data on behalf of 8bet under strict data processing agreements.

In all sharing scenarios, 8bet requires partners to handle data with at least the same level of protection guaranteed by this Policy and the LGPD. 8bet does not share data with data brokers, advertising networks, or any entity for third-party marketing purposes.

6

Data Storage and Security

8bet applies robust technical and organizational measures to protect your data against unauthorized access, loss, destruction, or improper disclosure:

  • Encryption in transit: all communication between your device and the platform uses 256-bit SSL/TLS;
  • Encryption at rest: sensitive data stored on 8bet's servers is encrypted at rest using AES-256;
  • Access control: user data is accessible only to employees and systems with a legitimate business need — access is logged, audited, and revoked when an employee changes roles or leaves;
  • Payment tokenization: full card details are processed exclusively by PCI-DSS gateways, with no traffic through or storage on 8bet's servers;
  • Two-factor authentication: available for your 8bet account as an extra layer of protection against unauthorized access;
  • Continuous monitoring: intrusion detection systems and anomaly monitoring operate 24 hours a day to identify threats in real time;
  • Incident response plan: 8bet maintains a documented process for identifying, containing, and reporting security incidents, in line with LGPD requirements.

Your responsibility matters too. The security of your account depends equally on your own practices: use a strong, unique password, never share your credentials with anyone, and enable two-factor authentication. If you suspect your account has been accessed without authorization, contact support immediately via live chat.

7

Cookies and Tracking Technologies

8bet uses cookies and similar technologies (pixels, local storage) to ensure the platform functions properly and to improve your experience. The types of cookies used are:

  • Essential cookies: required for core platform functionality — session authentication, login security, and language preferences. Without these cookies, the service cannot function properly. They cannot be disabled;
  • Performance cookies: collect anonymous information about how users navigate the platform (pages visited, session duration, errors encountered) to improve the product. They do not identify users individually;
  • Functionality cookies: remember user preferences such as preferred payment method and notification settings, making the experience smoother in subsequent sessions;
  • Analytical cookies: collected by tools such as Google Analytics to understand aggregate usage patterns. Data is anonymized before processing.

You can manage non-essential cookies through the cookie banner displayed on your first visit to the platform or through your browser settings. Please note that disabling essential cookies may prevent the platform from functioning properly. No 8bet cookie is used for third-party advertising tracking.

8

Data Retention & Deletion

8bet retains your personal data for as long as necessary to fulfill the purposes described in this Policy and to meet applicable legal obligations:

  • Registration data and active account: retained for as long as the account remains active. After account closure, data is kept for the minimum period required by tax and anti-money laundering legislation — typically 5 years;
  • Financial transaction data: retained for 5 years after the transaction, as required by the Receita Federal and financial sector compliance regulations;
  • KYC data (identity documents): retained for the minimum period required by anti-money laundering regulations — generally 5 years after the end of the business relationship;
  • Customer support communication data: retained for up to 2 years after the support interaction is closed, for quality assurance and dispute resolution purposes;
  • Cookies and session data: session data is deleted at the end of each session; persistent cookies follow their configured retention periods (typically 12 months for analytics cookies).

Once retention periods expire, data is securely deleted or irreversibly anonymized. User deletion requests are fulfilled as quickly as possible, subject to cases where applicable law requires data to be retained for a specified period.

9

Your Rights as a Data Subject (LGPD)

The LGPD grants you, as a data subject, a set of rights that 8bet is committed to respecting and making easy to exercise:

Right of Access

Request a complete copy of the personal data 8bet holds about you, including the categories, purposes, and sources of that data.

Right to Rectification

Request the correction of incomplete, inaccurate, or outdated data. Some details can be updated directly from your account dashboard.

Right to Erasure

Request the deletion of your data processed on the basis of consent. Data retained under a legal obligation cannot be deleted before the legally required period expires.

Right to Data Portability

Receive your data in a structured, machine-readable format for transfer to another controller, in accordance with ANPD regulations.

Right to Object

Object to data processing carried out on the basis of legitimate interest when it conflicts with your fundamental rights.

Right to Information

Be informed about which public and private entities 8bet has shared your data with, whenever such sharing occurs.

Revoke Consent

Withdraw consent given for processing based on that legal ground — such as receiving marketing communications — at any time.

ANPD Complaint

Lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) if you believe your rights have been violated by 8bet.

How to exercise your rights. Send your request to privacidade@8bet.express with the subject line "LGPD Rights Request", stating your full name, CPF, and the right you wish to exercise. We respond within 15 business days — this is 8bet's standard response timeframe, shorter than the legal 30-day limit. For complex cases that require more time, we will communicate an estimated timeline within the first 5 business days.

10

Minors

The 8bet platform is intended exclusively for individuals aged 18 years of age or older. 8bet does not intentionally collect personal data from minors.

The registration process requires a valid CPF, which is verified against the Receita Federal database — the date of birth associated with the CPF is automatically checked during sign-up. In addition, the identity verification (KYC) process includes review of the user's physical identity document.

If 8bet identifies that data from a minor was collected by mistake, that data will be deleted immediately and the account will be closed. Parents or guardians who discover that a minor is using the platform should contact us urgently at contato@8bet.express or via live chat so the matter can be handled as a priority.

11

International Data Transfers

Some of 8bet's technology providers and game partners operate servers outside Brazil. When personal data of Brazilian users is transferred abroad, 8bet ensures that such transfers comply with Article 33 of the LGPD by adopting at least one of the following safeguards:

  • Transfer to countries with an adequate level of data protection recognized by the ANPD;
  • Specific data protection clauses included in contracts with international partners;
  • Global corporate data protection policies approved by the ANPD, where applicable.

The main international providers with whom 8bet may share data include casino game processors (such as Evolution Gaming and Pragmatic Play, operating in Europe) and cloud infrastructure providers. All of these partners hold internationally recognized security certifications (ISO 27001, SOC 2, PCI-DSS) and are bound by data processing agreements that comply with the LGPD.

12

Changes to This Privacy Policy

8bet may update this Privacy Policy periodically to reflect changes in Brazilian law, data processing practices, or the services offered. Any significant change — one that affects data subjects' rights or materially alters how data is processed — will be communicated with at least 15 days' notice via:

  • Email sent to the address registered on the user's account;
  • Prominent in-platform notification displayed at login.

The date of the last update to this Policy is always shown at the top of the document. Minor editorial changes or clarifications that do not affect data subjects' rights may be made without prior notice, but will be reflected in the updated date.

Continued use of the 8bet platform after a new version of this Policy takes effect constitutes acceptance of the updated terms. If you do not agree with the changes, you must close your account before the effective date and request a withdrawal of your available balance.

13

Contact, DPO and Privacy Channel

For any questions, requests, or complaints related to how 8bet processes your personal data, you can reach us through the following channels:

  • DPO (Data Protection Officer) email: privacidade@8bet.express — use this channel to exercise your rights as a data subject, request information about data processing, or report a suspected privacy violation;
  • General email: contato@8bet.express — for general questions about the platform or matters that do not directly involve personal data;
  • Live chat: available 24 hours a day, every day, directly on the platform after login — our Portuguese-speaking team can forward your request to the DPO if needed.

8bet is committed to responding to data subject requests within 15 business days. For complaints that are not satisfactorily resolved by 8bet, you have the right to escalate to the National Data Protection Authority (ANPD) at gov.br/anpd.

This Privacy Policy supplements the Terms and Conditions of 8bet and should be read alongside them. Where there is a conflict between the two documents on privacy matters, this Privacy Policy shall prevail. For questions about responsible gambling and account control tools, visit our Responsible Gambling.

What Having Your Data Protected at 8bet Means in Practice

Talking about the LGPD and data protection may sound abstract, but in practice it has a concrete impact on how you use 8bet every day. When you make a deposit via Pix and the balance appears in your account within seconds, 8bet is processing your transaction data — but that data is protected by encryption and never exposed to third parties without need. When you withdraw and the funds land in your Nubank, Itaú, or Bradesco account in under two minutes, there is a secure financial data flow between 8bet and the banking system — and that exchange is protected by the same standards used by the country's largest digital banks.

The identity verification (KYC) process is one of the most common sources of questions among bettors. 8bet requests a government-issued ID, proof of address, and a selfie with your document for a clear reason: to confirm that an account belongs to the person claiming ownership. This protects you in two ways. First, it prevents someone from opening an account in your name without your knowledge and using your information for unlawful purposes. Second, it ensures that withdrawals go exclusively to the legitimate account holder — no third party can claim to be you and withdraw your funds if verification has been completed correctly. Submitted documents are processed with encryption and stored in compliance with the retention periods set out in Brazilian anti-money laundering legislation.

One frequently misunderstood area is advertising. 8bet may send emails about promotions, boosted odds on Brasileirão matches, or special e-sports events like CBLOL and the CS2 Major — but only if you consented at registration or later through your notification settings. That consent can be revoked at any time without affecting your account or your ability to use the platform normally. 8bet does not sell data to external advertising networks or build commercial user profiles for monetization with third parties.

When you use live chat to ask about a withdrawal, clarify a bonus rule, or resolve a discrepancy on a football bet, that conversation is logged in 8bet's systems for up to two years. This record is not there to monitor users — it exists to ensure that, should a dispute arise in the future, there is a reliable account of what was discussed and agreed upon. It protects both you and the platform. In the event of a regulatory audit or judicial investigation, these records may be required by the relevant Brazilian authorities.

Another area worth noting is behavioral data within the platform — which games you access, how often you bet, which sports you prefer, how much time you spend in the Live Casino. 8bet uses this information in two ways: to personalize your experience (making the games you play most often easier to find, and suggesting e-sports matches for titles you follow) and to identify patterns that may indicate responsible gambling concerns. If the system detects a sudden spike in deposit frequency or volume, it can trigger automatic alerts and, in some cases, the responsible gambling team may reach out. This use of data is always in the user's best interest, not against it.

Your rights as a data subject under the LGPD are real and enforceable. 8bet does not put bureaucratic obstacles in the way of anyone who wants to access, correct, or request deletion of their data. The contact channel is direct — privacidade@8bet.express — and the response time is up to 15 business days, which is the standard 8bet has committed to meeting, faster than the 30-day limit set by law. If you want to know exactly what data 8bet holds about you, simply request a copy and it will be sent in a readable format by email.

In the event of a security incident — a hypothetical situation that 8bet actively invests in preventing, but that any digital operator must be prepared to face — affected users will be notified within the timeframes set out in the LGPD, with clear information about what happened, what data may have been compromised, and what steps to take to protect themselves. The ANPD will also be notified as required. Transparency in difficult moments is part of 8bet's commitment to its users.

If you have any questions about how 8bet handles your data that are not answered by this Policy, the fastest option is the 24-hour live chat available directly on the platform. To formally exercise an LGPD right, please use the DPO email address. And if you'd like to review the other documents governing your relationship with 8bet, visit the Terms and Conditions and the Responsible Gambling.

Security You Can Verify

The certifications and technical standards underpinning 8bet's privacy and security practices.

256-bit SSL

End-to-end encryption for all communication on the platform.

PCI-DSS

Card data processed by certified gateways.

LGPD Compliant

Data processing in compliance with Law No. 13,709/2018.

Designated DPO

Data Protection Officer reachable at the official email address.

AES-256 at Rest

Sensitive data stored with advanced encryption.

Periodic Audits

Security and privacy processes reviewed on a regular basis.

Other Important 8bet Policies

Terms and Conditions

8bet's platform rules, bonus policies, withdrawals, Sports Betting, and casino terms.

Read Terms
Responsible Gambling

Self-control tools, deposit and loss limits, and support resources available in your account.

View Resources
Frequently Asked Questions

Answers about registration, Pix withdrawals, bonuses, identity verification, and much more.

View FAQ

Frequently Asked Questions About Privacy at 8bet

No. 8bet never has access to your full credit or debit card number. When you make a card payment, your details are entered directly into the secure environment of our PCI-DSS certified payment gateway partner — 8bet receives only an identification token and the last four digits of your card for display in your dashboard. This approach, known as tokenization, ensures that even in a hypothetical scenario of unauthorized access to 8bet's servers, your full card details would not be there.

Yes, your Pix key is stored by 8bet to facilitate future withdrawals — it is linked to your account and can only be used to send money to you. The key is stored with AES-256 encryption at rest and is only accessed by 8bet's systems when processing a withdrawal request authorized by you. It is never shared with third parties and cannot be changed by anyone other than you, following identity verification. If you want to remove a registered Pix key, simply request it via live chat or through your account dashboard.

Not immediately — and this is a legal requirement, not a choice made by 8bet. Financial transaction data must be retained for 5 years in accordance with Brazilian Federal Revenue regulations and anti-money laundering legislation. Identity (KYC) data is also kept for the same minimum period. Once these legal retention periods expire, data is securely deleted or irreversibly anonymized. Data not subject to a legal retention obligation — such as gaming preferences and support chat history — may be deleted upon the account holder's request after account closure.

With the government: only when required by law or court order. This includes mandatory reporting to agencies such as the Receita Federal for transactions above certain thresholds, or information requested by COAF (the Financial Activities Control Council) in anti-money laundering investigations. With banks and financial institutions: only the minimum data necessary to process your transactions — the bank needs to know who it is sending the Pix to, but does not have access to your betting history on 8bet. In all cases, 8bet shares only the minimum necessary and within the applicable legal requirements.

Send an email to privacidade@8bet.express with the subject line "Data Access Request — LGPD". In the body of the email, include your full name, registered CPF, and the type of data you wish to receive (for example: all personal data, transaction history only, or registration data only). 8bet will verify your identity before sending the copy — typically by asking you to confirm the request from the email address registered to your account. The response containing your data will be sent within 15 business days in structured PDF format.

It depends on how your data is being used. For marketing communications and consent-based personalization (promotional suggestions, offer emails), you can withdraw your consent at any time through your account notification settings or by emailing privacidade@8bet.express — with no impact on your ability to use the platform normally. For uses based on legitimate interest or contractual necessity — such as detecting responsible gambling patterns or personalizing the interface based on the games you access most — 8bet may continue processing if it is necessary to deliver the service, but you can formally object and 8bet will assess each case individually in accordance with Article 20 of the LGPD.

Your Data Protected, Your 8bet Experience Starts Now

Sign up in under two minutes. Fee-free Pix. 256-bit SSL on every transaction. Data handled in compliance with the LGPD. That's 8bet — built for Brazil.

LGPD compliant Data never sold Encrypted Pix 24/7 support in Portuguese
Português