LGPD – Law No. 13,709/2018

Privacy Policy bet166 –
Your Data Protected with Transparency

Bet166 handles your personal data with care, transparency, and full compliance with Brazil's General Data Protection Law (LGPD). On this page you'll find everything about what we collect, how we use it, how long we keep it, and what your rights are as a data subject — no runaround.

Last updated: January 2026 Language: Brazilian Portuguese (pt-BR) Applies to: Brazil
LGPD compliance verified
256-bit SSL on all transactions
Data never sold to third parties

The Six Pillars of Our Privacy Policy

Before reading the full document, learn about bet166's core privacy commitments to every Brazilian bettor on the platform.

Minimal and Necessary Data Collection

Bet166 collects only the data strictly necessary to operate the platform, process payments via Pix and card, verify identity, and meet legal obligations. We do not collect information that lacks a clear, defined purpose for operating the bettor's account.

Data Never Sold

Bet166 users' personal data is never sold, rented, or handed over to third parties for commercial purposes. We share information only with strictly necessary operational partners — such as payment gateways and anti-fraud systems — and always under confidentiality agreements.

End-to-End Encryption

All communication between your device and bet166's servers is protected by 256-bit SSL encryption — the same standard used by banks like Itaú, Bradesco, and Nubank. Payment data via Pix, credit card, and debit card is processed by certified gateways and is never stored in plain text on our systems.

You Control Your Data

As a data subject, you have the right to access, correct, port, restrict the use of, or request the deletion of your information at any time. bet166 responds to LGPD rights requests within up to 15 business days through the platform's support channel.

Retention with a Defined Timeline

Bet166 retains your data only for as long as necessary to fulfill the purpose of collection and to meet applicable legal obligations. Betting and financial transaction data are retained for 5 years in accordance with tax and regulatory requirements. After account closure, data is anonymized or deleted in line with the applicable legal timeframe.

Full LGPD Compliance

Bet166 operates in compliance with the General Data Protection Law (Law No. 13,709/2018) and the guidelines of the National Data Protection Authority (ANPD). We have a designated Data Protection Officer (DPO) responsible for ensuring that all internal processes respect the rights of data subjects.

This Privacy Policy describes how bet166 collects, uses, stores, and protects the personal data of its users in Brazil, in accordance with the General Data Protection Law (LGPD – Law No. 13,709/2018). By creating an account or using any service on the platform, you acknowledge that you are aware of the practices described herein.

01Data Controller

For the purposes of the General Data Protection Law (LGPD – Law No. 13,709/2018), the controller of personal data collected through the platform is bet166, operator of the website https://bet166.best and all its subdomains and associated services.

The controller is responsible for decisions regarding data processing — what to collect, for what purpose, how long to retain it, and with whom to share it. All practices described in this Policy reflect those decisions and are aligned with the applicable legal bases set out in Article 7 of the LGPD.

To exercise any right as a data subject or for questions about this Policy, contact bet166 by email at suporte@bet166.best. The channel is available 24 hours a day, with a guaranteed response within 15 business days for data privacy requests.

02What Data bet166 Collects

Data provided directly by you

Bet166 collects the following data when you create an account, make transactions, or contact support:

  • Identification: full name, CPF, date of birth, nationality
  • Contact: email address, mobile number
  • Address: ZIP code, street address, city, state
  • Documents: ID card, driver's license, or passport images; proof of address (for KYC verification)
  • Financial: Pix key details, TED account number, partial credit or debit card data (stored exclusively by the certified payment gateway)
  • Communications: contact history with support via email or live chat

Automatically collected data

When you access the bet166 platform — whether via browser on your phone, tablet, or computer — we automatically collect certain technical data required for the platform to function and remain secure:

  • IP address and approximate geographic location (country and state)
  • Browser type and version, operating system, and device type
  • Pages visited, session duration, and navigation flow within the platform
  • Information from cookies and similar technologies (detailed in Section 6)
  • Bet records: time, amount, market, event, outcome
  • Transaction data: amount, payment method, time, status
bet166 does not collect health data, biometrics, racial or ethnic origin, religious beliefs, political opinions, or any other category of sensitive data as defined by Article 5, Section II of the LGPD, except where explicitly necessary and with a specific legal basis.

03How bet166 Uses Your Data

Every piece of data collected by bet166 serves a specific purpose. Below are the main ways we use our users' information:

Purpose Data used Legal basis (LGPD)
Create and manage your account Name, CPF, email, mobile number, date of birth Contract performance (Art. 7, V)
Process deposits and withdrawals (Pix, card, TED) Financial data, CPF, KYC documents Contract performance + legal obligation
Identity verification (KYC) Photo ID, proof of address, selfie Legal obligation (art. 7, II)
Fraud prevention and anti-money laundering IP address, betting history, financial data, documents Legitimate interest + legal obligation
Customer service and support Email, mobile number, communications history Contract performance (Art. 7, V)
Personalize your experience and send relevant promotions Betting history, sports preferences Consent (Art. 7, I) or legitimate interest
Meet fiscal and regulatory obligations Account, financial, and transaction data Legal obligation (art. 7, II)
Improve the platform and fix technical issues Browsing data, system logs, support feedback Legitimate interest (Art. 7, IX)

Bet166 does not use your data for purposes incompatible with those listed above without obtaining fresh consent or another applicable legal basis. If the purpose of processing needs to change, you will be notified in advance.

04Legal Bases for Processing (LGPD)

The LGPD requires that every personal data processing activity have a defined legal basis. bet166 processes user data based on the following grounds set out in Article 7 of Law No. 13,709/2018:

  • Consent (Art. 7, I): For sending marketing communications, personalized promotions, and using non-essential cookies. You can withdraw this consent at any time in your account settings or by contacting support.
  • Contract performance (Art. 7, V): To create and maintain your account, process deposits and withdrawals, record bets, and provide the services you signed up for at bet166.
  • Legal obligation (art. 7, II): To meet identification (KYC) requirements, anti-money laundering obligations, tax compliance, and requests from competent Brazilian authorities.
  • Legitimate interest (art. 7, IX): For fraud prevention, continuous platform improvement, and system security — provided this does not override your fundamental rights and freedoms.

Where processing is based on consent, you have the right to withdraw it at any time without affecting your access to bet166 services that do not rely on that consent. Withdrawing consent for marketing, for example, has no impact on your account, your bets, or your withdrawals.

05Data Sharing with Third Parties

Bet166 does not sell, rent, or transfer your personal data to third parties for commercial purposes. We share information only in the situations listed below, always limited to the minimum necessary and under confidentiality agreements or legal obligation:

Operational partners

  • Payment gateways: to process deposits via Pix, boleto, credit and debit card, PicPay, Mercado Pago, and TED transfer. These partners receive only the data required for the transaction and operate under financial security certifications.
  • Anti-fraud systems: to validate suspicious transactions and protect your account against unauthorized access. Data is processed in pseudonymized form wherever possible.
  • Identity verification services (KYC): certified partners that assist with document validation and anti-money laundering compliance, as required by regulation.
  • IT infrastructure providers: servers and cloud services hosting the bet166 platform, all bound by contracts with strict data protection clauses.

Authorities and legal requirements

Bet166 may disclose your data to competent Brazilian authorities — such as the Federal Revenue Service, Ministry of Finance, Federal Police, and betting sector regulators — when required by law, court order, or a substantiated administrative request. In such cases, we disclose only the minimum necessary to comply with the requirement.

All partners with access to bet166 user data sign data processing agreements that prohibit the use of that information for any purpose beyond what was agreed upon, and that establish security standards equivalent to those of the platform.

06Cookies and Tracking Technologies

Bet166 uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and collect browsing data for analytics and security purposes. The types of cookies used are:

  • Essential cookies: Required for the platform's basic operation — keeping your session active after login, processing bets, and ensuring transaction security. These cannot be disabled without affecting your ability to use the services.
  • Performance cookies: Collect anonymous data on how users navigate bet166 — most visited pages, load times, errors encountered. Used to continuously improve the platform. Can be declined with no impact on basic use.
  • Functionality cookies: Remember your platform preferences — favorite sports, language, odds display settings. They enhance your personalized experience. Optional.
  • Marketing cookies: Used only with your explicit consent to personalize promotions and communications. We never share this data with third-party advertising networks for purposes outside bet166.

You can manage your cookie preferences at any time through your browser settings or via the preferences panel available on the platform after logging in. Rejecting non-essential cookies does not affect your ability to place bets, deposit, or withdraw via Pix or card.

07Data Security

Bet166 employs a set of technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure:

  • Encryption in transit: All communication between your device and bet166's servers uses TLS 1.3 protocol with 256-bit encryption — the same standard used by Brazilian banks.
  • Encryption at rest: Sensitive data stored in bet166's systems — such as KYC documents and financial information — is encrypted at rest using current-standard algorithms.
  • Access control: Only employees with a verified operational need have access to user data, under confidentiality agreements and with audited access controls.
  • Two-factor authentication (2FA): Available to all users and mandatory for internal administrative access.
  • Continuous monitoring: Automated systems monitor suspicious access, intrusion attempts, and anomalous behavior in real time.
  • Security audits: bet166 conducts regular penetration testing and security reviews to identify and remediate vulnerabilities before they can be exploited.

In the event of a security incident that may affect your data, bet166 is committed to notifying you at the email address registered on your account within a maximum of 72 hours of becoming aware of the incident, in accordance with ANPD guidelines. We will also report the incident to the National Data Protection Authority where required by applicable regulations.

08Data Retention and Deletion

Bet166 retains your personal data for as long as necessary to fulfill the purpose for which it was collected and to meet applicable legal obligations. Retention periods vary by data type:

  • Registration and account data: Retained for the full duration of the active account and for up to 5 years after closure, for tax audit and regulatory compliance purposes.
  • Betting history and financial transaction records: Retained for 5 years as required by the Brazilian Federal Revenue Service and applicable accounting standards.
  • KYC documents (national ID, driver's license, proof of address): Retained for 5 years after account closure, as required by anti-money laundering regulations (Law No. 9.613/1998).
  • Support communications: Retained for 2 years for quality assurance and dispute resolution.
  • Browsing data and cookies: Non-essential data is anonymized or deleted within 13 months.

Once legal retention periods expire, your data is irreversibly anonymized or securely deleted. Anonymized data may be retained indefinitely for statistical and platform improvement purposes, as it no longer allows identification of the individual.

09Your Rights as a Data Subject (LGPD)

The LGPD grants personal data subjects a set of rights that bet166 is committed to respecting and facilitating. You may exercise any of the rights below by emailing suporte@bet166.best, with a response within up to 15 business days:

Right of Access

Request a copy of all personal data bet166 holds about you, including information on how it is used, how long it will be retained, and with whom it has been shared.

Right to Rectification

Request corrections to incomplete, inaccurate, or outdated data. For basic account details such as address and phone number, you can update them yourself in your account settings.

Right to Erasure

Request the deletion of data processed on the basis of your consent when that consent is withdrawn. Data retained due to legal obligations cannot be deleted early, but you will be clearly informed of this.

Right to Data Portability

Request your data in a structured, machine-readable format (JSON or CSV) to transfer it to another platform. This right applies to data processed on the basis of consent or contract.

Right to Restriction

Request the temporary suspension of the processing of your data while a correction or deletion request is under review, or when you contest the legal basis used by bet166.

Right to Object

Object to the processing of your data when it is based on legitimate interest, particularly for direct marketing purposes or the creation of betting behavior profiles.

If you believe that bet166's handling of your data violates the LGPD, you may file a complaint directly with the National Data Protection Authority (ANPD) through the official Brazilian government website. bet166 cooperates fully with ANPD investigations and is committed to correcting any identified non-compliant practices.

10Protection of Minors

Bet166 is a platform exclusively for users aged 18 and over. We do not intentionally collect personal data from anyone under 18, and we do not allow minors to create accounts or use any of the platform's services.

During registration, we ask for your date of birth and CPF to verify that you are of legal age. Before your first withdrawal, we carry out identity verification using an official document, which includes confirming the account holder's age. Any account identified as belonging to a minor is immediately closed, the data is deleted in accordance with legal retention periods, and any pending withdrawals are held while the investigation is ongoing.

If you are a parent or legal guardian and believe a minor has created a bet166 account using your data or the minor's data, please contact support immediately at suporte@bet166.best. We will handle the case with priority and confidentiality.

11Changes to this Privacy Policy

Bet166 may update this Privacy Policy periodically to reflect changes in data processing practices, regulatory updates, or platform improvements. When significant changes are made, you will be notified at least 15 business days in advance through the following channels:

  • Email sent to the address registered on your bet166 account
  • Prominent notification upon accessing the platform
  • Informational banner on the site's homepage

Continued use of the platform after the effective date of any changes constitutes acceptance of the updated version of this Policy. If you do not agree with the changes, you may request account closure as described in the Terms and Conditions of bet166 before the effective date.

The most recent version of this Policy will always be available at https://bet166.best/privacy-policy, with the date of the last update clearly indicated at the top of the page. We maintain an archive of previous versions available upon request to support.

12Contact, DPO & Privacy Channel

Bet166 has appointed a Data Protection Officer (DPO), as provided for under Article 41 of the LGPD, responsible for ensuring compliance with data processing practices and handling data subject requests.

How to get in touch

  • Privacy email: suporte@bet166.best (subject: "Data Privacy – LGPD")
  • Live chat: available after logging in to the platform, 24 hours a day
  • Response timeframe: up to 15 business days for LGPD rights requests; up to 72 hours for urgent security matters

What to include in your request

To exercise any right as a data subject, please include in your request: your full name, the CPF registered with bet166, a clear description of the right you wish to exercise (access, correction, deletion, portability, restriction, or objection), and, where applicable, the specific data to which the request refers. We may ask you to confirm your identity before processing requests involving sensitive data.

bet166 is committed to responding to all LGPD rights requests clearly, free of charge, and without penalizing users for exercising their rights. Version effective from: January 2026.

Why bet166 Takes Privacy So Seriously

For online bettors, data privacy is anything but abstract — it's very real. When you deposit R$ 50.00 via Pix at bet166, you're sharing a Pix key tied to your bank account. When you complete KYC verification before your first withdrawal, you send a photo of your ID or driver's license. When you register, you provide your CPF, date of birth, and address. All of that data has value — and bet166 understands that the responsibility to protect it is proportional to the trust you place in us when you hand it over.

The LGPD did not create this responsibility — it simply formalized what should always have been standard practice. bet166 adopted data protection practices even before the law came into force, because we believe that a protected bettor is a bettor who trusts the platform. And in the Sports Betting market, trust is everything.

Why we require KYC verification

When bet166 asks for documents to verify your identity before your first withdrawal, it is not red tape for its own sake. Law No. 9.613/1998 — which governs anti-money laundering — and Brazilian financial system regulations require betting platforms to verify user identities before processing financial transactions above certain thresholds. It is the same process that banks like Nubank, Itaú, and Bradesco follow when you open an account.

Beyond the legal requirement, the KYC process protects you. If someone tries to create a fraudulent account using your data to make unauthorized withdrawals, identity verification is the barrier that stops them. The documents you submit are stored in encrypted form, accessed only by authorized staff with a specific operational need, and never shared with third parties beyond certified verification partners.

About Pix and the security of your transactions

Pix has transformed the way Brazilians relate to digital money — and to online betting. At bet166, Pix is the most widely used method for both deposits and withdrawals, which means the platform processes a high volume of Pix keys linked to accounts at Nubank, Itaú, Bradesco, Banco do Brasil, and dozens of other institutions every day.

The Pix key you register for withdrawals on bet166 — whether CPF, email, mobile number, or random key — is used exclusively to process your transactions on the platform. It is not stored in third-party systems, not shared with marketing partners, and not used for any purpose other than processing your withdrawals. This data is treated as sensitive financial data, with encryption and access controls equivalent to those applied to all other financial data on the platform.

Betting data: what we keep and why

Every bet you place at bet166 — whether on the Brasileirão, the Libertadores, a UFC card, or a FURIA CS2 match — generates a record in the system. That record includes the time of the bet, the amount wagered, the market selected, the odds at the time of confirmation, and the outcome. This data is necessary to process payments correctly, resolve any disputes, and meet tax obligations.

Your betting history is also used to personalize your experience on bet166 — if you frequently bet on Flamengo and the Brasileirão, we may show you tips and promotions relevant to those markets. This use is based on legitimate interest and can be opted out of in your account privacy settings, with no impact on your bets or withdrawals.

Your rights in practice: how it works at bet166

The LGPD gave Brazilians a robust set of rights over their personal data, but many platforms make exercising those rights unnecessarily difficult in practice — complicated forms, long turnaround times, generic responses. bet166 chose a different approach: a direct privacy channel via email at suporte@bet166.best, with a maximum response time of 15 business days and no unnecessary red tape.

If you want to know exactly what data we hold about you, you can request a full report. If you want your marketing email removed, one request is all it takes — and it's done within 48 hours. If you want to close your account and ensure your data is deleted after the legal retention period, we handle that without question. We believe bet166 has nothing to lose by being transparent with Brazilian bettors — in fact, that transparency is precisely what builds the long-term trust we want to have with every user on the platform.

Frequently Asked Questions About Data & Privacy at bet166

The most common questions from bettors who want to understand how bet166 handles their personal data.

No. bet166 does not sell, rent, or share your data with other betting platforms, entertainment platforms, or external marketing partners. Data is shared only with strictly necessary operational partners — such as the gateway that processes your Pix or boleto, the anti-fraud system that protects your account, and identity verification services. All of these partners sign contracts that prohibit any use of the data beyond the specific purpose for which it was shared.

When you close your account at bet166, your data is retained for the applicable legal period — typically 5 years for financial and betting data, as required by the Federal Revenue Service and anti-money laundering regulations. After that period, data is either irreversibly anonymized or securely deleted. During the post-closure retention period, your data is not used for marketing or personalization — it is kept solely for audit and legal compliance purposes. You can request details on the specific retention period for each data type through our privacy channel: suporte@bet166.best.

Yes, and it's straightforward. You can withdraw consent to receive marketing emails in two ways: (1) by clicking the unsubscribe link in the footer of any bet166 email; or (2) by adjusting your communication preferences directly in your account settings, under the "Notifications" section. Unsubscribe requests are processed within 48 hours. Please note: transactional emails — such as withdrawal confirmations, account security alerts, and KYC verification notices — will continue to be sent regardless of your marketing preference, as they are essential to the operation of your account.

bet166 does not store your full credit or debit card details on any of its own servers. When you make a deposit by card, the data is processed directly by a certified payment gateway operating under PCI DSS (Payment Card Industry Data Security Standard), the international security standard for card processing. bet166 receives only a transaction confirmation token, with no access to your full card number, CVV, or authentication data. This separation is a fundamental security layer that keeps your financial information protected.

Yes, based on legitimate interest and, where applicable, your consent. Your betting history — such as the sports you follow, the teams you bet on, and the markets you prefer — may be used to personalize promotions and communications relevant to your profile. For example: if you frequently bet on the Brasileirão, we may send you a boosted-odds promotion for a round's marquee match. If you prefer e-sports, communications about FURIA and CS2 will be prioritized. You can turn off this personalization in your account's privacy settings without affecting your ability to bet, deposit, or withdraw normally.

Other Important bet166 Documents

Bet on bet166 Knowing Your Data Is Safe

Free registration, minimum deposit of R$ 20.00 via Pix, and withdrawals in as little as 5 minutes. Your data is protected by 256-bit SSL encryption and handled in accordance with the LGPD — because trust is built on transparency.

Português