🔒 Privacy & LGPD

Privacy Policy of 256bet — Your Data Protected

At 256bet, privacy isn't fine print — it's built into the product. This document clearly explains what data we collect, why we collect it, how we protect it, and what rights you have as a data subject, in full compliance with the LGPD (Law 13.709/2018).

🛡️ Commitments of This Policy
LGPD Compliance — Law 13.709/2018
256-bit SSL encryption on all connections
Your data is never sold to third parties
You can request access, correction, or deletion
Pix payment data with extra protection
Last updated: January 2026
In compliance with the LGPD
256-bit SSL
LGPD Compliant
Protected Data
No Data Sales
Secure Pix
24×7 Support PT-BR

What this Policy guarantees for you

Six principles that guide how 256bet handles your personal data

End-to-end security

All communications between your device and the 256bet platform are protected by 256-bit SSL encryption. Your registration data, betting history, and payment information — including Pix data — are stored with strict access controls and continuous monitoring against unauthorized access.

Your data is never sold

256bet does not sell, rent, or trade users' personal data with any third party for advertising or commercial purposes. The only circumstances in which data is shared are for payment processing, compliance with legal obligations, or orders from judicial authorities — all of which are clearly described in this Policy.

Your rights under the LGPD

As a data subject, you have rights guaranteed by the General Data Protection Law: access what we store about you, correct inaccurate information, request data portability, and ask for the deletion of information that is no longer needed. 256bet responds to all such requests within 15 business days.

Payments 100% in BRL

All financial data at 256bet is processed in Brazilian reais. Payment data handled via Pix, boleto bancário, credit and debit cards, PicPay, and Mercado Pago is processed in accordance with Banco Central do Brasil regulations and is not stored on servers outside Brazilian territory without the appropriate legal safeguards.

Communications under your control

256bet only sends marketing communications — such as football promotions, Live Casino updates, or featured jackpots — to users who have given express consent. You can opt out at any time from your account dashboard or by clicking the unsubscribe link in any email you receive.

Updates always communicated

Any changes to this Privacy Policy will be communicated in advance to your registered email address. The last updated date is always shown at the top of this document. By continuing to use 256bet after the new terms take effect, you confirm that you have read and agreed to the changes.

Last updated: January 2026 — Version 2.4 — In compliance with the LGPD (Lei 13.709/2018)

This Privacy Policy describes how 256bet collects, uses, stores, and protects your personal information. By creating an account or continuing to use our platform, you confirm that you have read and understood this document. Questions? Write to contato@256bet.best — our team responds in Portuguese 24 hours a day.

1 Who we are — Your data controller

The 256bet is the data controller responsible for processing the personal data of all users registered on the platform at 256bet.best. Under the LGPD (General Data Protection Law — Law 13.709/2018), 256bet acts as data controller, meaning it is the entity that decides which information is collected, for what purpose, and how long it is retained.

256bet's entire operation is focused on the Brazilian market. Sports Betting, live casino, crash games, progressive jackpots, and payment services are all built for the Brazilian context, and data processing fully complies with Brazilian law, including the LGPD and the Banco Central do Brasil regulations applicable to Pix transactions.

For privacy and data processing inquiries, you may contact our Data Protection Officer (DPO) directly at contato@256bet.best, with the subject line "Privacy — LGPD".

2 What data we collect about you

The 256bet collects only the information necessary to deliver its services securely, meet legal obligations, and improve your experience on the platform. The categories of data collected are listed below:

Category Data collected When it is collected
Registration Full name, CPF, date of birth, email, mobile number, residential address At the time of registration on the platform
Identity Photo ID (national ID card, driver's license, or passport) and proof of address During identity verification, which is required for withdrawals
Payments Pix key, credit/debit card details (tokenized), deposit and withdrawal history When making deposits and requesting withdrawals
Platform usage Betting history, games accessed, session duration, market preferences During ongoing use of the platform
Technical IP address, browser type and version, operating system, device, session cookies Automatically on every visit
Communications Content of messages sent to support, chat logs, ticket history When contacting 256bet support

256bet does not collect sensitive category data — such as biometric data, health information, sexual orientation, or religious beliefs — unless expressly required by law or a specific court order.

Credit and debit card data is tokenized and never stored directly on 256bet's servers. Processing is handled by payment gateways certified under the PCI-DSS standard.

3 How we use your information

The data collected by 256bet are used exclusively for the purposes described below. No data is processed for purposes inconsistent with what is stated here without the user's renewed express consent:

  • Service provision: Processing of Sports Betting, live casino games, crash games, jackpots, and financial operations (deposits via Pix, boleto, card, PicPay, Mercado Pago, or TED).
  • Identity verification: Confirmation that the account holder is over 18 years of age, a resident of Brazil, and the holder of the registered CPF — a legal and platform security requirement.
  • Fraud prevention: Detection of suspicious usage patterns, identification of multiple accounts, and anti-money laundering measures, in accordance with Brazilian regulatory requirements.
  • Compliance with legal obligations: Compliance with court orders, requests from regulatory authorities, and tax obligations applicable to the operation of betting platforms in Brazil.
  • Platform improvement: Aggregated and anonymized analysis of usage behavior to identify areas for improvement in 256bet's experience, performance, and security.
  • Account communications: Registration confirmations, transaction notifications, security alerts, Terms updates, and support responses.
  • Marketing communications: Information about promotions, new features, featured jackpots, and sporting events — for users who have given express consent only.

256bet adopts the principle of data minimization: we collect only what is strictly necessary for each stated purpose and do not retain information beyond the time needed to fulfill that purpose.

4 Legal basis for data processing (LGPD)

The 256bet processes your personal data based on the legal grounds set out in Article 7 of the LGPD (Law 13.709/2018). Each data processing purpose has a corresponding legal basis:

  • Contract performance (Art. 7, V): Registration, betting, deposits, and withdrawals are required to provide the contracted service. Without this data, it is not possible to offer 256bet's features.
  • Legal obligation compliance (Art. 7º, II): Identity verification, anti-money laundering measures, and reporting to regulatory authorities are obligations imposed by Brazilian law that 256bet must fulfill.
  • Legitimate interest (Art. 7, IX): Fraud prevention, platform security, and usage analysis for service improvement are processed on the basis of 256bet's legitimate interest, in a manner that respects users' rights and reasonable expectations.
  • Consent (Art. 7º, I): Sending marketing communications, personalizing offers, and using non-essential cookies all require the user's explicit consent, which may be withdrawn at any time.

Under no circumstances does 256bet use personal data in a manner incompatible with the legal bases above. If processing any data requires a new legal basis, you will be informed in advance and, where applicable, new consent will be requested.

5 Data sharing with third parties

The 256bet does not sell, rent, or trade its users' personal data. Information is only shared with third parties in the situations listed below, each with a proven legal basis and operational necessity:

  • Payment processors: Financial data is shared with the institutions responsible for processing Pix, boleto bancário, cards, PicPay, and Mercado Pago, solely for the purpose of settling transactions. All payment partners are certified in accordance with the standards of the Banco Central do Brasil.
  • Game providers: Session identifiers are shared with certified providers such as Microgaming, NetEnt, Evolution Gaming, Pragmatic Play, Spribe, and Playtech to enable access to games. These providers do not receive users' full registration data.
  • Identity verification platforms: Documents submitted for identity verification are processed by specialized partners in compliance with the LGPD and the KYC (Know Your Customer) standards applicable in Brazil.
  • Competent authorities: Data may be shared with the Ministry of Finance, Federal Revenue Service, Banco Central, Federal Police, or the Judiciary upon legal or judicial order, without requiring the data subject's consent.
  • Companies within the same group: In the event of a merger, acquisition, or corporate restructuring, your data may be transferred to the successor company, which will be required to comply with this Privacy Policy.

All third parties with access to 256bet user data enter into contractual data processing agreements that require compliance with the LGPD and ensure a level of protection equivalent to that set out in this Policy.

6 Data storage and security

The 256bet stores user data on servers with security controls appropriate to the sensitivity level of the information. The technical and organizational measures in place include:

  • SSL/TLS 256-bit encryption in all communications between the user and the platform.
  • Encryption of data at rest for sensitive information stored on our servers.
  • Role-based access controls: only employees with a proven operational need have access to specific categories of data.
  • Continuous monitoring of access logs and suspicious activity across the systems that store user data.
  • Periodic audits security audits conducted by independent firms specializing in information security.
  • Payment data tokenization — card data is never stored in plain text on 256bet's servers.

In the event of a security incident affecting users' personal data — such as a breach or unauthorized access — 256bet is committed to notifying the National Data Protection Authority (ANPD) and the affected users within the timeframe established by the LGPD, describing the nature of the incident and the corrective measures taken.

7 Cookies and tracking technologies

The platform of the 256bet uses cookies and similar technologies to ensure the site works correctly, improve the user experience, and, with your consent, personalize content and communications. The types of cookies used are:

  • Essential cookies: Required for the platform to function — session authentication, form security, and language preferences. These cannot be disabled without impacting your ability to use the service.
  • Analytical cookies: They collect aggregated and anonymized data on how users navigate the platform — pages visited, session duration, and errors encountered. Used to improve the 256bet experience and performance.
  • Preference cookies: Store your preferences — such as favorite betting markets, odds settings, and notification preferences — to personalize your experience every time you log in.
  • Marketing cookies: Used only with express consent to personalize communications and display relevant 256bet promotional content. Can be revoked at any time from your account dashboard.

You can manage your cookie preferences through the banner shown on your first visit to the platform or through your browser settings. Disabling essential cookies may prevent certain features — such as login, deposits, and betting — from working correctly.

8 How long we retain your data

The 256bet retains personal data for as long as necessary to fulfill the purposes for which it was collected, or to meet legal and regulatory obligations. General retention periods are:

  • Registration and identity data: Retained for the full duration of the account and for up to 5 years after account closure, as required by anti-money laundering regulations and tax obligations.
  • Financial transaction history (Pix deposits, withdrawals, cards): Retained for 5 years from each transaction, in compliance with Brazilian tax legislation and Central Bank regulations.
  • Betting and gaming history: Retained for 3 years for dispute resolution, audits, and compliance with regulatory obligations in the betting sector.
  • Access logs and technical data: Retained for 6 months, pursuant to the Marco Civil da Internet (Law 12.965/2014).
  • Support communications: Retained for 2 years for quality assurance and dispute resolution purposes.

Once the retention periods above have expired, data is securely deleted or anonymized so that the data subject can no longer be identified. Anonymized data may be retained indefinitely for statistical purposes and platform improvement.

9 Your rights as a data subject (LGPD)

The LGPD guarantees you, as the data subject processed by the 256bet, the following rights, which may be exercised at any time by emailing contato@256bet.best with the subject line "Privacy — LGPD":

📋
Access

Request a copy of all personal data that 256bet holds about you.

✏️
Correction

Request the correction of incomplete, inaccurate, or outdated information in your profile.

🗑️
Deletion

Request the deletion of unnecessary data or data processed on the basis of revoked consent.

📦
Portability

Receive your data in a structured, machine-readable format for transfer to another service.

🚫
Objection

Object to data processing carried out on the basis of legitimate interest when you consider it excessive.

📵
Withdrawal

Withdraw consent given for marketing or personalization cookies at any time.

256bet responds to all data subject rights requests within 15 business days from the date of receipt. In cases requiring more complex review, this deadline may be extended by an equal period, with written justification provided to the requestor. Requests may only be refused in cases expressly provided for under the LGPD — for example, when deletion conflicts with a legal data retention obligation.

If you feel your request has not been handled appropriately, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the federal authority responsible for enforcing the LGPD in Brazil.

10 Protection of data for users under 18

The 256bet is a betting and online casino platform intended exclusively for users aged 18 and over. The collection and processing of data from minors is strictly prohibited and contrary to our Terms and Conditions.

During registration, we ask for the user's date of birth and CPF. Identity verification — required for withdrawals — additionally confirms that the account holder is of legal age through an official photo ID. Accounts identified as belonging to users under 18 are closed immediately, and any data collected is permanently deleted.

If you believe that data belonging to a minor under 18 has been inadvertently collected by 256bet, please contact us immediately at contato@256bet.best. We will take all necessary steps to delete that information and close the account on an urgent basis.

11 Changes to This Privacy Policy

The 256bet may update this Privacy Policy periodically to reflect changes in Brazilian legislation — such as new ANPD or Banco Central regulations — updates to the services we offer, or improvements to our data protection practices.

Any significant changes will be communicated to registered users by email with at least 15 days' notice by the effective date of the new terms. The most recent version of this Policy will always be available on this page, with the last updated date shown at the top of the document.

By continuing to use the 256bet platform after the effective date of the updated terms, you confirm that you have read and accepted the changes. If you disagree with any update, you have the right to close your account and request deletion of your data before the new terms take effect, with no penalty.

12 DPO contact and privacy channels

The 256bet has appointed a Data Protection Officer (DPO), as required by the LGPD for controllers that process personal data at scale. The DPO is the official point of contact for privacy-related matters, the exercise of data subject rights, and communication with the ANPD.

To exercise your rights, report incidents, or ask questions about this Policy, please reach out through the channels below:

  • DPO Email: contato@256bet.best — subject: "Privacy — LGPD". Response time: up to 15 business days.
  • Live chat: available in the platform footer after login, for urgent privacy and account security matters. Average response time: under 3 minutes.

All requests received are logged, reviewed, and responded to within the legally required timeframes. The requester's identity is verified before any access, correction, portability, or deletion request is processed, ensuring that only the data subject can exercise these rights over their own data.

Frequently Asked Questions about Privacy at 256bet

Straightforward answers to the most common questions about how we handle your data

No. 256bet does not share users' personal data with other betting platforms, casinos, or any competing companies. The only sharing that takes place is with operational partners required to deliver the service — payment processors such as Pix, PicPay, and Mercado Pago, certified game providers, and identity verification companies — all bound by strict data protection agreements. These partners may not use your information for any purpose other than the one contracted with 256bet.

Yes, this right is guaranteed to you under the LGPD. However, it is important to understand that some data must be retained even after account closure due to legal obligations — such as financial transaction history (for 5 years, as required by tax law) and identity data (for 5 years, under anti-money laundering regulations). Data not subject to these legal obligations — such as usage preferences, browsing history, and cookies — may be deleted upon request. Contact us at contato@256bet.best with the subject line "Privacy — Data Deletion" and our DPO will explain exactly what can and what must be retained in your specific case.

Yes. Pix data used on 256bet is handled to the same security standards required by the Central Bank of Brazil for financial institutions operating with Pix. The Pix key you provide is used exclusively to process the requested withdrawal and is stored in encrypted form. No Pix data is shared with any third party other than the financial institution responsible for settling the transaction. All communication between 256bet and banks takes place through secure channels with multi-layer authentication.

You can opt out of marketing communications from 256bet in three ways: by clicking the "unsubscribe" link in the footer of any email you receive; by accessing your account dashboard and updating your communication preferences in the settings section; or by sending an email to contato@256bet.best with the subject line "Cancel marketing communications". Opt-outs are processed within 48 hours. Please note that transactional emails — such as deposit confirmations, security alerts, and account notifications — will continue to be sent, as they are necessary for service delivery and are not marketing communications.

In the event of a merger, acquisition, or corporate restructuring, your personal data may be transferred to the successor company. In such cases, you will be notified in advance at your registered email address about the change and the applicable privacy terms under the new structure. The successor company will be required to comply with this Privacy Policy and the LGPD. If the new terms differ significantly, you will have the right to close your account and request data deletion before the transfer, with no penalties.

Privacy and Responsible Gambling go hand in hand

Your self-exclusion data and account limits are treated with the utmost confidentiality.

When you use responsible gambling tools on 256bet — such as deposit limits, account pause, or self-exclusion — that information is handled with an additional layer of protection and confidentiality. No data about gambling behavior is used for marketing purposes or shared with third parties. The sole purpose of processing this information is to ensure your own control decisions are honored.

Deposit Limit

Set daily, weekly, or monthly limits directly from your dashboard. Your limits are kept confidential.

Pause or Self-Exclusion

Pause or close your account discreetly. No unnecessary questions, no judgment.

Minor Protection

Minors' data is not collected. Mandatory identity verification is required to confirm legal age.

External Support

CVV: 188 (free, 24h). Anonymous Players: support groups across Brazil, confidential assistance.

🔒

Your data protected, your experience guaranteed

256bet takes care of your data with the same attention it gives to your bets. Sign up safely, play with peace of mind, and claim a welcome bonus of up to R$ 500.00 on your first Pix deposit.

+18 · LGPD compliant · SSL 256-bit · Gamble responsibly

Português